EFTA01342942

MOBILITY 4Iiib AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in •3/4 s AT&T \---s"" e lit OTC. Run Date: 06/17/2020 Run Time: Voice Osage For: a Item Conn. Conn. Seizure ST Originating Terminating MORI INSI CT Feature Date Time Time Number Number CUTC) 1 03/01/20 19:58:27 0:09 0:00 NM 2 03/02/20 16:34:38 0:03 0:00 MO 3 03/02/20 16:35:15 0:10 0:00 MT (1 4 03/02/20 16:35:19 0:24 0:00 MO 5 03/02/20 16:36:05 0:06 0:00 MT (NIORI 6 03/02/20 16:36:05 0:07 0:00 MO 7 03/02/20 16:36:53 0:09 0:47 MO 8 03/02/20 16:43:46 0:09 0:04 MT 9 03/02/20 16:44:06 0:06 2:06 MO 10 03/03/20 21:36:01 0:07 30:41 MO 11 03/04/20 18:52:26 0:08 1:40 MT 12 03/04/20 19:46:37 0:20 0:05 MO 13 03/04/20 22:07:25 0:05 47:57 MO 14 03/04/20 23:04:25 0:03 0:39 MO 15 03/05/20 00:56:24 0:33 0:00 MO AT&T Proprietary Page 1 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00170884 EFTA01342942 MOBILITY S .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in "‘"s° s AT&T \C ite UTC. Run Date: Run Time: 0""n.. Voice Usage For: dildimmo Item Conn. Conn. Seizure Er Originating Terminating SRI INBI Cr Feature Date Time Tine Member Number (UTc) 16 03/05/20 00:58:14 0:07 0:26 MT (Ni-ri:NIOPI 17 03/05/20 13:22:45 0:11 1:13 NO (Ni-ri:MIORI 18 03/05/20 14:04:59 0:20 0:00 MT (NIOPI 19 03/05/20 15:49:47 0:29 0:00 MT (Ni-ri:NIOPI 20 03/05/20 15:49:48 0:30 0:01 MT (MI- ri:NIOP:CFNA:VM] 21 03/05/20 15:50:04 0:08 0:00 MT (MI-fi:NI081 22 03/05/20 17:14:12 0:02 0:34 MO CM/-fi:NIOA1 23 03/05/20 17:15:32 0:07 0:00 MO 24 03/05/20 18:27:34 0:19 0:05 MO 25 03/05/20 18:29:16 0:20 0:04 MO 26 03/05/20 18:42:42 0:20 0:03 MO 27 03/05/20 20:38:46 0:10 9:04 MO (VCORAI 28 03/05/20 20:51:35 0:05 0:00 MO (1 29 03/06/20 15:08:17 0:04 1:07 NO (W1-81:N101:1 AT&T Proprietary Page 2 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00170885 EFTA01342943 MOBILITY `~~ .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Tine: Voice Usage For: NM= Item Conn. Conn. Seizure CT Originating Terminating DC IM8I Cr Feature Date Tim Sum Number number (USC) 30 03/06/20 20:02:56 0:20 0:05 MO [Ni-fil 31 03/06/20 20:51:24 0:03 0:58 MO [Ni-fi:NIOA1 32 03/06/20 21:03:38 0:14 0:00 MT [Ni-fi:NIOPI 33 03/06/20 21:04:01 0:08 0:00 MT [Ni-fi:NIOPI 34 03/06/20 21:04:33 0:03 0:16 MO [Ni-fi:NIOAI 35 03/06/20 21:09:32 0:03 0:51 MO [Ni-fi:NIOAI 36 03/06/20 21:32:36 0:03 1:11 MO [Ni-fi:NIOAI 37 03/07/20 00:02:25 0:13 0:00 MT (1 38 03/07/20 00:02:25 0:24 0:00 ST [HIM 39 03/07/20 00:02:26 0:25 0:05 ST (NIOP:CfNA:VM] 40 03/07/20 16:17:45 0:15 0:00 ST (NIOPI 41 03/07/20 18:21:38 0:05 0:08 MT (MITR:INIORI 42 03/07/20 18:21:40 0:25 0:04 MO -ri:NIORI 43 03/07/20 18:39:48 0:06 0:00 MT -ri:NIOPI 44 03/08/20 00:01:01 0:22 0:00 MT (Mt-ri:NIOPI AT&T Proprietary Page 3 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00170886 EFTA01342944 MOBILITY 4III, .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in C/ 1ea 4 1..... t id AT&T OTC. Run Dato: 08/17/2020 Run Tine: Voice Usage For: Item Conn. Conn. Seizure ET Originating Terminating DMZ INSI CT Feature Dato Tama Time Number number (UMC) 45 03/08/20 18:09:41 0:11 0:00 MT (Ni-Pi:NIOPI 46 03/08/20 18:23:28 0:13 0:00 MT (Ni-Pi:NIOPI 47 03/09/20 00:45:20 0:27 0:00 MT (Ni-Pi:NIOP1 48 03/09/20 00:45:22 0:29 0:01 MT (Ni- ri:NIOP:CPNA:VNI 49 03/09/20 01:30:41 0:17 18:35 MT (NIOA:VCORA1 50 03/09/20 01:30:41 0:18 18:35 NO (Ni-ri:NIOA1 51 03/09/20 14:52:35 0:17 0:00 MT (Ni-ri:NIOPI 52 03/09/20 15:46:24 0:07 0:00 MT (Ni-ri:NIOA1 53 03/09/20 18:49:59 0:04 0:00 NO (Ni-ri:NIOA1 54 03/10/20 17:41:33 0:14 0:00 MT (Ni-ri:NIOPI 55 03/10/20 17:43:58 0:23 0:00 MT (Ni-ri:NIORI 56 03/10/20 17:44:00 0:25 0:58 MT (Ni- ri:NIOA:CPNA:VNI 57 03/10/20 18:36:22 0:13 0:00 MT (Ni-ri:NIOA1 58 03/10/20 23:20:53 0:01 0:00 NO (Ni-ri:NIOA1 59 03/10/20 23:20:57 0:02 0:00 NO (Ni-ri:NIOA1 1PHONE8 AT&T Proprietary Page 4 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GNL00170887 EFTA01342945 MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in / 1 t 4-15 AT&T OTC. Run Dato: Run Time: 0""n.. Voice Osage For: dildimmo Item Conn. Conn. Seizure ET Originating Terminating a@I nMS1 Cr Feature Date Tim Tine Number Member (OTC) 60 03/11/20 20:57:26 0:20 0:04 MO (Ili-ri:MIORI 61 03/11/20 21:36:41 0:20 0:04 MO (Ili-ri:MIORI 62 03/11/20 21:48:29 0:20 0:05 MO (Wi-Pit 63 03/11/20 21:56:49 0:21 0:04 MO (Wi-Pit 64 03/12/20 00:33:30 0:02 0:00 MT (RIM 65 03/12/20 16:00:34 0:08 7:20 MO (Wi-Pit 66 03/12/20 18:12:35 0:20 0:03 MO (Wi-Pit 67 03/12/20 19:34:27 0:06 1:09 MO (Wi-Pit 68 03/12/20 19:39:16 0:12 0:00 MO (Wi-Pit 69 03/12/20 19:49:52 0:20 0:03 MO (Wi-Pit 70 03/13/20 16:33:25 0:21 0:04 MO (Wi-Pit 71 03/13/20 17:59:47 0:20 0:03 MO (Wi-Pit 72 03/14/20 15:39:45 0:28 0:00 MT (Wi-ri:MIOPI 73 03/14/20 15:39:45 0:28 0:00 MT (WI- ri:MIOP:CFNA:VM] AT&T Proprietary Page 5 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00170888 EFTA01342946 MOBILITY 41.. .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ..„`•-_--s /1 4-6 at' s AT&T OTC. Run Date: 06/17/2020 Run Tine: Voice Usage For: dill's' Item Conn. Conn. Seizure ET Originating Terminating =RI INSI CT Feature Date Tina TiaDO Numbor Maher (UTC) 74 03/14/20 20:56:04 0:03 0:02 NO (Mt-ril 75 03/14/20 20:56:10 0:02 0:03 NO (Mt-8/1 76 03/14/20 20:56:19 0:05 0:03 NO (Ni-fil 77 03/14/20 20:56:42 0:02 0:03 NO (Ni-Pil 78 03/14/20 22:49:35 0:19 0:00 MT (NIOP1 79 03/14/20 22:49:36 0:20 0:04 MT (NIOP:CPNR:VN1 80 03/14/20 23:33:17 0:14 0:00 MT (Ni-Pi:NIOP1 81 03/15/20 00:44:05 0:02 0:00 MT (NIOP1 82 03/15/20 00:44:23 0:11 0:00 MT (NIOP1 83 03/15/20 00:44:23 0:11 0:09 MT (NIOP:CPNR:VN1 84 03/15/20 15:46:15 0:18 0:00 MT (Ni-Pi:NIOR1 85 03/16/20 00:36:19 0:14 0:00 MT (1 86 03/16/20 00:36:19 0:25 0:00 ST (NIOR1 87 03/16/20 00:36:21 0:27 0:07 ST (NIOR:CFNA:VN1 88 03/19/20 16:30:35 0:39 0:00 NO -Pi1 AT&T Proprietary Page 6 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GNL001708.89 EFTA01342947 MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Voice Usage For: dildimmo Item Conn. Conn. Seizure ET Originating Terminating DISI CT Feature Date Time Time Number Number (UTC) 89 03/19/20 19:26:50 0:18 0:00 NO (Ni-Fil 90 03/23/20 03:56:33 0:14 0:00 NT (1 91 03/23/20 03:56:33 0:25 0:00 ST (NIOP1 92 03/23/20 03:56:35 0:27 0:03 ST (NIOS:CVNA:VM] 93 03/23/20 04:01:36 0:26 0:00 NT (Ni-ri:NI081 94 03/24/20 00:20:32 0:24 0:00 NT -Pi:NIOP1 95 03/24/20 00:20:32 0:24 0:00 NT -Pi:NIOP1 96 03/24/20 00:20:38 0:30 0:05 NT (Ni- Pi:NIOP:CFNA:VNI 97 03/24/20 00:20:38 0:30 0:05 NO (Ni-Fil 98 03/24/20 23:44:26 0:06 0:06 NO (Ni-Fil 99 03/24/20 23:45:05 0:22 0:00 NT (Ni-Pi:NIOP1 100 03/24/20 23:45:05 0:22 0:00 NT (NIOP:CNN1 101 03/24/20 23:45:12 0:29 0:04 NT (NIOP:CPNA:CbM:VM1 102 03/24/20 23:45:12 0:29 0:04 NO (Ni-Fil 103 03/26/20 23:55:56 0:20 0:00 NT (Xi—Pi:NIOP1 104 03/27/20 02:21:32 0:13 0:00 NT —Pi:NIOP1 105 03/27/20 14:05:36 0:06 0:00 NT (NIOP1 106 03/27/20 14:05:42 0:13 0:00 ST (NIOP1 107 03/27/20 14:05:42 0:14 0:00 NO (Ni-Fil 1PHONE8 AT&T Proprietary Page 7 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00170890 EFTA01342948 MOBILITY P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Voice Osage For: Item Conn. Conn. Seizure CT Originating Terminating LNSI CT Feature Date Time Time Number Number (DMC) 108 03/27/20 20:17:37 0:05 0:00 MT (Ni-Ti:NIOPI 109 03/27/20 20:52:41 0:11 0:00 MT (Ni-ri:NIOPI 110 03/30/20 23:55:43 0:21 0:00 MT (Ni-ri:NIOPI 111 03/31/20 17:28:06 0:01 0:00 NO (Ni-ril 112 03/31/20 17:28:18 0:07 4:39 NO (Ni-ril 113 04/01/20 16:49:44 0:12 0:00 MT (Ni-ri:NIOPI 114 04/01/20 16:49:44 0:12 0:00 MT (Ni-ri:NIOPI 115 04/01/20 16:49:48 0:16 0:03 MT (Ni-ri:NIOP:CPB:VM] 116 04/01/20 16:49:48 0:16 0:03 NO (Ni-ril 117 04/01/20 16:50:01 0:04 44:44 MT (Ni-ri:NIOPI 118 04/01/20 16:50:01 0:04 14:01 NO (Ni-ril 119 04/01/20 17:04:02 0:00 0:12 NO (1 120 04/01/20 17:04:14 0:00 12:58 NO (Ni-fil 121 04/01/20 17:17:12 0:00 0:12 NO (1 122 04/01/20 17:17:24 0:00 0:15 NO (Ni-fil 123 04/01/20 17:17:39 0:00 0:11 NO (1 124 04/01/20 17:17:50 0:00 3:32 NO (Ni-fil 125 04/01/20 17:21:22 0:00 0:12 NO (1 126 04/01/20 17:21:34 0:00 5:33 NO (Ni-fil 127 04/01/20 17:27:07 0:00 0:11 NO (1 128 04/01/20 17:27:18 0:00 2:26 NO (Ni-fil 129 04/01/20 17:29:44 0:00 0:11 NO (1 130 04/01/20 17:29:55 0:00 0:21 NO (Ni-fil 131 04/01/20 17:30:16 0:00 0:11 NO (1 132 04/01/20 17:30:27 0:00 4:18 NO (Ni-fil AT&T Proprietary Page 8 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_001708.91 EFTA01342949 MOBILITY "-a. P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in t--_„•-•° AT&T OTC. Run Date: Run Time: 0""n.. Voice Usage For: dildimmo Item Conn. Conn. Seizure LT Originating Terminating flax DWI CT Feature Date Tine Time Number Number (uTc) 133 04/01/20 21:54:18 0:21 0:00 MT (Ni-Fi:NIOPI 134 04/01/20 21:54:18 0:21 0:00 MT (Ni-Fi:NIOPI 135 04/01/20 21:54:22 0:25 0:02 MT Fi:NIOP:CFNA:VM] 136 04/01/20 21:54:22 0:25 0:02 MO (Ni-Fil 137 04/01/20 22:49:44 0:10 4:27 MO (Ni-Fil 138 04/01/20 22:49:44 0:10 61:40 MT (Ni-Fi:NIOPI 139 04/01/20 22:54:11 0:00 0:11 MO (1 140 04/01/20 22:54:22 0:00 13:02 MO (Ni-ril 141 04/01/20 23:07:24 0:00 0:09 MO (1 142 04/01/20 23:07:33 0:00 13:50 MO (Ni-ril 143 04/01/20 23:21:23 0:00 0:10 MO (1 144 04/01/20 23:21:33 0:00 2:28 MO (Ni-811 145 04/01/20 23:24:01 0:00 0:12 MO (1 146 04/01/20 23:24:13 0:00 13:03 MO (Ni-ril 147 04/01/20 23:37:16 0:00 0:21 MO (1 148 04/01/20 23:37:37 0:00 6:17 MO ($11-811 149 04/01/20 23:43:54 0:00 0:12 MO (1 150 04/01/20 23:44:06 0:00 0:53 MO (Ni-ril 151 04/01/20 23:44:59 0:00 6:25 MO (VCORR1 152 04/03/20 14:24:29 0:15 0:00 MT (Ni-Fi:NIOPI 153 04/03/20 20:07:32 0:03 0:27 MO -Fil 154 04/03/20 20:08:13 0:04 0:57 MO -Fil 155 04/06/20 21:07:53 0:02 0:00 MT (Ni-Fi:NIOPI 156 04/06/20 21:08:13 0:22 0:00 MT (Ni-Fi:NIOPI 157 04/06/20 21:08:17 0:26 0:01 MT Fi:NIOP:CFNA:VM] 158 04/06/20 21:08:17 0:26 0:01 MO (Ni-Fil AT&T Proprietary Page 9 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GNL00170892 EFTA01342950 MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in `ca ""-s ase•AT&T UTC. Run Dato: 06/17/2020 Run Tine: Voice Osage For: dildimmo Item Conn. Conn. Seizure ET Originating Terminating L@I IMSI Cr Feature Date Tim Time Number Weber MMC) 159 04/06/20 21:08:54 0:09 5:49 MO (Ili-Pit 160 04/06/20 21:08:54 0:09 5:49 MT (Ili-Pi:NIOP1 161 04/06/20 21:15:03 0:03 12:03 NO (Mi-Pit 162 04/06/20 21:15:03 0:03 12:03 NT (NIOP1 163 04/06/20 22:56:05 0:01 0:00 NO (Mi-Pit 164 04/06/20 22:57:06 0:21 0:00 MT (Mi-Pi:NIOP1 165 04/06/20 22:57:06 0:21 0:00 MT (Mi-Pi:NIOP1 166 04/06/20 22:57:10 0:25 0:02 NT (Ili- ri:NIOP:CPNA:VM1 167 04/06/20 22:57:10 0:26 0:02 NO (Mi-Pit 168 04/06/20 22:58:08 0:39 0:00 NO (Mi-Pit 169 04/06/20 23:18:27 0:23 0:00 MT (Mi-Pi:NIOP1 170 04/06/20 23:18:27 0:23 0:00 MT (Mi-Pi:NIOP1 171 04/06/20 23:18:31 0:27 0:04 MT (Ili- ri:NIOP:CPNA:VM1 172 04/06/20 23:18:31 0:28 0:04 MO (Mi-Pit 173 04/06/20 23:28:26 0:22 0:00 MT (Mi-Pi:NIOP1 174 04/06/20 23:28:26 0:22 0:00 MT (Mi-Pi:NIOP1 175 04/06/20 23:28:29 0:25 0:01 MT (Ili- ri:NIOP:CPNA:VM1 176 04/06/20 23:28:29 0:25 0:01 MO (Mi-Pit 177 04/07/20 00:15:42 0:23 0:00 MT (Mi-Pi:NIOP) 178 04/07/20 00:15:44 0:25 0:07 MT (Mt- ri:NIOP:CPNA:VM1 179 04/07/20 00:15:44 0:26 0:07 MO (Mi-Pit AT&T Proprietary Page 10 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GN1_00170893 EFTA01342951 MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ...."-_ `' 1s1,/ AT&T VTC. Run Date: 06/17/2020 Run Tine: Voice Usage For: dildimmo Item Conn. Conn. Seizure ET Originating Terminating flax DWI CT Feature Date Tine Sum Number Number (DSc) 180 04/07/20 00:31:15 0:14 0:00 MT (Ni-Fi:NIOPI 181 04/07/20 00:31:15 0:14 18:52 MT (Ni-Fi:NIOPI 182 04/07/20 00:31:15 0:14 18:52 NO (Ni-Fil 183 04/07/20 14:35:18 0:07 48:52 NO (1 184 04/07/20 17:03:18 0:22 0:00 MT (Ni-ri:NIOPI 185 04/07/20 17:03:18 0:22 0:00 MT (Ni-fi:NIOP1 186 04/07/20 17:03:23 0:27 0:02 MT (Wi- fi:NIOP:CZNA:VM] 187 04/07/20 17:03:23 0:28 0:02 MO (Ni-fil 188 04/07/20 21:49:43 0:04 0:00 MT (NIOP1 189 04/07/20 22:24:55 0:22 0:00 MT (Ni-fi:NIOP1 190 04/07/20 22:24:55 0:22 0:00 MT (Ni-fi:NIOP1 191 04/07/20 22:25:00 0:27 0:06 MT (Wi- fi:NIOP:CZNA:VM] 192 04/07/20 22:25:00 0:27 0:06 NO (Ni-fil 193 04/08/20 19:59:50 0:03 18:27 NO (Ni-fil 194 04/09/20 14:31:59 0:19 7:35 NO CI 195 04/09/20 19:29:43 0:16 0:00 MT (Ni-Pi:NIOP1 196 04/09/20 19:29:43 0:16 0:00 MT (Ni-Pi:NIOP1 197 04/09/20 19:29:43 0:16 0:00 NO (1 198 04/09/20 19:30:14 0:22 0:00 MT (NIOP1 199 04/09/20 19:30:16 0:24 0:10 NO (Ni-fil AT&T Proprietary Page 11 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00170894 EFTA01342952 MOBILITY a P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Dato: Run Time: 0""n0.0 Voice Osage For: dildimmo Item Conn. Conn. Seizure ST Originating Terminating !MIT DO3I CT Feature Date T10.0 Sum Number Number (DTC) 200 04/09/20 19:30:16 0:24 0:10 MT (NIOP:CrNA:VM1 201 04/09/20 19:37:50 0:23 0:00 MT (Ni-ri:NIOPI 202 04/09/20 19:37:50 0:23 0:00 MT (Ni-ri:NIOPI 203 04/09/20 19:37:51 0:24 0:02 MT (Wi- ri:NIOP:ClNA:VM1 204 04/09/20 19:37:51 0:25 0:02 NO (1 205 04/09/20 19:48:23 0:01 0:00 MT (Ni-ri:NIOP1 206 04/09/20 19:48:23 0:01 0:00 MT (NIOP1 207 04/09/20 19:48:23 0:02 0:00 NO (1 208 04/09/20 20:39:36 0:22 0:00 MT (NIOP1 209 04/09/20 20:39:38 0:24 0:02 NO (1 210 04/09/20 20:39:38 0:24 0:02 MT (NIOP:CrNA:VM1 211 04/09/20 21:03:46 0:10 22:09 MT (NIOP:VCORR1 212 04/09/20 21:03:46 0:11 22:09 NO (1 213 04/09/20 21:29:49 0:05 27:57 NO (1 214 04/09/20 22:33:59 0:06 13:20 NO (NIOR1 215 04/09/20 22:49:27 0:04 4:06 NO (1 216 04/09/20 23:32:11 0:05 0:29 MT (NIOP:VCORR1 217 04/09/20 23:32:11 0:06 0:05 NO (Ni-ril 218 04/09/20 23:32:16 0:00 0:13 NO (1 219 04/09/20 23:32:29 0:00 0:11 NO (Ni-ril 220 04/09/20 23:33:32 0:04 0:00 MT (Ni-ri:NIOP1 AT&T Proprietary Page 12 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GN1_00170895 EFTA01342953 MOBILITY dn. .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in / ..., 1 44* =s) AT&T -6 OTC. Run Date: 06/17/2020 Run Time: Voice Usage For: Item Conn. Conn. Seizure CT Originating Terminating flat INSI CT Feature Date Time Time Number Maher (OTC) 221 04/09/20 23:33:32 0:04 0:21 MT (Ni-Pi:NIOPI 222 04/09/20 23:33:32 0:04 0:21 NO (VCORAI 223 04/09/20 23:33:53 0:00 0:00 MT (NIOP:VCORR1 224 04/10/20 00:24:44 0:13 1:54 MO (Mi-Fil 225 04/10/20 00:24:44 0:13 1:54 MT (NIOP1 226 04/10/20 18:26:36 0:27 0:00 MT (Mi-Pi:NIOP1 227 04/10/20 18:26:38 0:29 0:14 MT (NI- ri:NIOP:CPNA:VN1 228 04/13/20 15:24:09 0:12 0:00 MT (Ni-Pi:NIOP1 229 04/15/20 21:58:10 0:08 0:00 (NIOP1 230 04/15/20 22:54:21 0:21 0:00 MT (Ni-Pi:NIOP1 231 04/15/20 22:54:21 0:21 0:00 MT (NIOP:CNN1 232 04/15/20 22:54:25 0:25 0:03 MT (NIOP:CFNA:CbM:VN1 233 04/15/20 22:54:25 0:25 0:03 MO —Fil 234 04/15/20 23:06:43 0:10 25:16 (Ni—Pi:NIOP1 235 04/15/20 23:06:43 0:10 3:54 ND (1 236 04/15/20 23:10:37 0:00 13:18 MO (Ni-fil 237 04/15/20 23:23:55 0:00 1:52 NO (1 238 04/15/20 23:25:47 0:00 6:12 NO (Ni-fil 239 04/16/20 22:15:29 0:22 0:00 MT (NIOP1 240 04/16/20 22:15:30 0:23 1:02 (NIOP:CFNA:VN1 AT&T Proprietary Page 13 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00170896 EFTA01342954 MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in 1/..44:4 AT&T UTC. Run Date: 06/17/2020 Run Time: Voice Usage For: Item Conn. Conn. Seizure UT Originating Terminating SRI INBI CT Feature Date Time Time Number Number (OTC) 241 04/16/20 22:30:40 0:01 0:00 MT 242 04/17/20 00:28:51 0:07 0:04 NO (Ni-fil 243 04/17/20 01:54:30 0:14 41:46 MT (NIOP:VCORR1 244 04/17/20 01:54:30 0:15 41:46 NO (Ni-fil 245 04/17/20 15:23:40 0:06 0:00 MT 246 04/17/20 21:16:10 0:07 0:00 MT (Ni-ri:NIOPI 247 04/21/20 00:50:15 0:15 0:00 MT (MIOP:00,1 248 04/21/20 00:50:15 0:16 0:00 NO (Ni-fil 249 04/21/20 00:50:39 0:21 0:00 MT (MIOP:00,1 250 04/21/20 00:50:42 0:24 0:32 MT (NIOP:CFNA:001:VM1 251 04/21/20 00:50:42 0:24 0:32 NO (1 252 04/21/20 00:53:30 0:11 0:00 MT 253 04/21/20 00:53:31 0:12 0:09 NO (VCORR1 254 04/21/20 00:53:31 0:12 0:09 MT (NIOP:CtUR:VM1 255 04/21/20 03:11:37 0:11 0:00 MT (NIOP1 256 04/21/20 03:11:38 0:12 0:30 MT (NIOP:CtUR:VM1 257 04/22/20 20:59:27 0:17 0:00 MT (NIOP1 AT&T Proprietary Page 14 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00170897 EFTA01342955 MOBILITY P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in \/ 1 4 "-a .77:00 11 AT&T UTC. Run Dato: 06/17/2020 Run Time: Voice Osage For: dildimmo Item Conn. Conn. Seizure CT Originating Terminating EMI IMSI CT Feature Date Time Time Number Number (OTC) 258 04/22/20 21:49:51 0:28 0:02 NO (VCORR1 259 04/22/20 21:51:33 0:06 0:05 NO (VCORR1 260 04/25/20 14:13:47 0:00 0:00 NO (1 261 04/25/20 14:14:08 0:01 0:14 NO (NIOR:VM1 262 04/28/20 19:16:39 0:21 0:00 NT -Fi:NIOR1 263 04/28/20 19:16:39 0:21 0:00 NT -Fi:NIOR1 264 04/28/20 19:16:43 0:25 0:02 NT (MI- ri:NIOR:CFNA:Vbil 265 04/28/20 19:16:43 0:25 0:02 NO (MI—Fi:NIOR1 266 04/28/20 19:44:14 0:03 45:03 MO (Ni-ri:NIOR1 267 04/28/20 21:03:10 0:17 36:49 MO (Ni-ri:NIOR1 268 04/28/20 23:39:52 0:24 0:00 MT (NIOR1 269 04/28/20 23:40:00 0:32 0:35 MT (NIOR:CFNA:VM1 270 04/28/20 23:40:00 0:32 0:35 MO (MI-Fi:NIOR1 271 04/28/20 23:45:33 0:22 0:00 MT (MI-Fi:NIOR1 272 04/28/20 23:45:33 0:22 0:00 NT (MI-Fi:NIOR1 273 04/28/20 23:45:37 0:26 0:03 NT (MI- ri:NIOR:CFNA:Vbil 274 04/28/20 23:45:38 0:27 0:02 MO (MI—Fi:NIOR1 275 04/29/20 00:07:11 0:22 0:00 NT (MI-Fi:NIOR1 276 04/29/20 00:07:11 0:22 0:00 MT (MI-Fi:NIOR1 277 04/29/20 00:07:15 0:26 0:02 MT (MI- Fi:NIOR:CFNA:VM1 Page 15 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00170898 EFTA01342956 MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Dato: Run Time: 0""n.. Voice Osage For: dildimmo Item Conn. Conn. Seizure ET Originating Terminating LORI CT Feature Date Tim Sum Number number (VC) 278 04/29/20 00:07:15 0:26 0:02 NO (Ni-Pi:NIOR1 279 04/29/20 16:53:22 0:05 0:00 MT (Ni-Pi:NIOR1 280 04/29/20 16:53:22 0:05 0:00 MT (Ni-Pi:NIOR1 281 04/29/20 16:53:22 0:05 0:00 NO (Ni-Pi:NIOR1 282 04/29/20 16:54:04 0:21 0:00 MT (Ni-ri:NIOPI 283 04/29/20 16:54:04 0:21 0:00 MT (Ni-ri:NIOPI 284 04/29/20 16:54:08 0:25 0:02 MT (WI- ri:NIOP:ClNA:VN1 285 04/29/20 16:54:08 0:25 0:02 NO (Ni-Pil 286 04/29/20 19:29:51 0:03 1:01 NO (Ni-Pil 287 04/29/20 20:52:10 0:07 0:00 MT (Ni-ri:NIOPI 288 04/29/20 20:52:10 0:07 19:48 NO 289 04/29/20 20:52:10 0:07 4:08 MT (Wi-Pi:NIOP1 290 04/29/20 20:56:18 0:00 15:40 MT (NIOP:VCORR1 291 04/30/20 20:14:09 0:22 0:01 MT (Wi-Pi:NIOP1 292 04/30/20 20:14:09 0:22 0:01 MT (NIOP1 293 04/30/20 20:14:13 0:26 0:05 MT (NIOP:CPNA:VN1 294 04/30/20 20:14:13 0:26 0:05 NO (Ni-Pil 295 04/30/20 21:11:42 0:22 0:00 MT (Wi-Pi:NIOP1 296 04/30/20 21:11:42 0:22 0:00 MT (NIOP1 297 04/30/20 21:11:47 0:27 0:02 MT (NIOP:ClNA:VN1 298 04/30/20 21:11:47 0:28 0:01 NO (Wi-Pi1 299 04/30/20 21:26:48 0:07 28:07 NO (Wi-Pi1 AT&T Proprietary Page 16 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GPV1_00170899 EFTA01342957 MOBILITY P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run pato: 06/17/2020 Run Time: Voice Doane For: Item Conn. Conn. Seizure ZT Originating Terminating flax LO)r CT Feature Date Time Sum Member Number (urc) 300 04/30/20 23:47:42 0:08 5:05 NO (Ni-Pit 301 05/01/20 00:19:46 0:22 0:00 MT (Ni-Pi:NIOP1 302 05/01/20 00:19:46 0:22 0:00 MT (NIOP1 303 05/01/20 00:19:50 0:26 0:01 MT (NIOP:CPNA:VN1 304 05/01/20 00:19:50 0:26 0:01 NO (Ni-Pit 305 05/01/20 01:27:25 0:04 22:24 NO (Ni-Pit 306 05/01/20 01:27:25 0:04 22:24 MT (NIOP:VCORAI 307 05/01/20 20:59:25 0:21 0:00 MT (Wi-fi:NIOP1 308 05/01/20 20:59:25 0:21 0:00 MT (Wi-fi:NIOP1 309 05/01/20 20:59:30 0:26 0:01 MT (Wi- fi:NIOP:CZNA:VM] 310 05/01/20 20:59:30 0:26 0:01 NO (Ni-Pit 311 05/04/20 22:10:28 0:14 17:33 MT (NIOP:VCORR1 312 05/04/20 22:10:28 0:15 17:33 NO (Ni-Pit 313 05/04/20 22:49:00 0:22 0:00 MT (Ni-fi:NIOP1 314 05/04/20 22:49:00 0:22 0:00 MT (Ni-fi:NIOPI 315 05/04/20 22:49:04 0:26 0:02 MT (Wi- fi:NIOP:CZNA:VM] 316 05/04/20 22:49:04 0:26 0:02 MO (Ni-Pit 317 05/04/20 23:22:53 0:21 0:00 MT (Wi-fi:NIOP1 318 05/04/20 23:22:53 0:21 0:00 MT (Wi-fi:NIOPI 319 05/04/20 23:22:58 0:26 0:02 MT (Wi- fi:NIOP:CZNA:VM] 320 05/04/20 23:22:58 0:27 0:02 MO (Ni-fit 321 05/05/20 20:49:17 0:21 0:00 MT (Ni-fi:NI08) 322 05/05/20 20:49:17 0:21 0:00 MT (Ni-fi:NI08) AT&T Proprietary Page 17 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GNL00170900 EFTA01342958 MOBILITY illir `41 .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm •3 ""s /4 --s t AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in Ctoleli 4 OTC. Run Date: 06/17/2020 Run Time: Voice Usage For: Ma= Item Conn. Conn. Seizure ET Originating Terminating flax DO3I CT Feature Date Tim Time Number Number (urc) 323 05/05/20 20:49:21 0:25 0:02 MT (Ni- Fi:NIOP:CFNA:VN( 324 05/05/20 20:49:21 0:25 0:02 MO -fil 325 05/05/20 21:25:15 0:22 0:00 MT (Ni-ri:NIOPI 326 05/05/20 21:25:15 0:22 0:00 MT 327 05/05/20 21:25:19 0:26 0:05 MT ri:NIOP:ClNA:VM] 328 05/05/20 21:25:19 0:27 0:05 MO (Ni-fil 329 05/05/20 21:37:14 0:38 0:03 MO -ril 330 05/06/20 00:41:07 0:23 0:00 MT (Ni-ri:NIOP) 331 05/06/20 00:41:07 0:23 0:00 MT (Ni-ri:NIOPI 332 05/06/20 00:41:11 0:27 0:02 MT ri:NIOP:CfNA:VM] 333 05/06/20 00:41:11 0:28 0:02 MO (Ni-fil 334 05/06/20 00:41:32 0:00 0:00 MO (Ni-ril 335 05/06/20 00:41:43 0:08 0:00 MO (Ni-ril 336 05/06/20 00:41:53 0:06 0:03 MO (Ni-ril 337 05/07/20 14:49:32 0:23 0:00 MT (Ni-ri:NIOPI 338 05/07/20 14:49:39 0:30 0:02 MT ri:NIOP:CINA:VM] 339 05/07/20 14:49:39 0:31 0:02 MO (Ni-fil 340 05/07/20 17:03:16 0:23 0:00 MT (Ni-ri:NIOPI 341 05/07/20 17:03:27 0:34 0:01 MT ri:NIOP:CINA:VM] AT&T Proprietary Page 18 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GNL00170901 EFTA01342959 MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: Run Time: 0""n.. Voice Usage For: dildimmo Item Conn. Conn. Seizure ZT Originating Terminating EMU DWI CT Feature Date Time Sum Mmber Number (OTC) 342 05/07/20 17:03:27 0:34 0:01 NO (Ni-ril 343 05/07/20 17:48:17 0:24 0:00 NT (Ni-Fi:NIOP( 344 05/07/20 17:48:23 0:30 0:02 NT (Ni- Pi:NIOP:CPNA:VN( 345 05/07/20 17:48:23 0:31 0:02 NO -ril 346 05/07/20 19:12:18 0:22 0:00 NT (Ni-Fi:NIOP( 347 05/07/20 19:12:24 0:28 0:02 NT (Ni- Pi:NIOP:CFNA:VN( 348 05/07/20 19:12:24 0:28 0:02 NO -ril 349 05/07/20 19:16:22 0:07 0:00 NO (Mi 350 05/07/20 23:33:08 0:21 0:00 NT (Ni-ri:NIOP) 351 05/07/20 23:33:08 0:21 0:00 NT (Ni-ri:NIOPI 352 05/07/20 23:33:13 0:26 0:02 NT ri:NIOP:ClNA:VM] 353 05/07/20 23:33:13 0:26 0:02 NO (Ni-ril 354 05/07/20 23:33:46 0:01 0:00 NT (Ni-ri:NIOPI 355 05/07/20 23:33:46 0:01 0:00 NT (Ni-ri:NIOP1 356 05/07/20 23:33:46 0:01 0:00 NO (Ni-ril 357 05/07/20 23:34:32 0:39 0:03 NO (Mi 358 05/08/20 00:19:18 0:21 0:00 MT (Ni-ri:NIOPI 359 05/08/20 00:19:18 0:21 0:00 ST (NIOP:CHNI 360 05/08/20 00:19:22 0:25 0:03 ST (NIOP:ClNA:CHN:VM] 361 05/08/20 00:19:23 0:27 0:02 NO (Mi AT&T Proprietary Page 19 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GNL00170902 EFTA01342960 MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ....`t-e /1 4"" ad .° AT&T UTC. Run Date: 06/17/2020 Run Time: voice Osage For: Ma= Item Conn. Conn. Seizure ET Originating Terminating L@I nut CT Feature Date Time Time Number Number (OTC) 362 05/08/20 14:29:29 0:05 74:10 NO (Ni-PSI 363 05/08/20 17:49:44 0:32 0:02 NO (Ni-PSI 364 05/08/20 17:58:22 0:21 0:23 NO (Ni-PSI 365 05/09/20 17:19:42 0:27 0:00 NT (Ni-ri:MIOP) 366 05/09/20 17:19:44 0:29 1:16 NT ri:NIOP:CfNA:VM] 367 05/11/20 13:49:51 0:16 0:55 NO (Ni-PSI 368 05/11/20 13:52:24 0:12 3:10 NO (Ni-PSI 369 05/11/20 13:55:47 0:08 15:51 NO (Ni-PSI 370 05/11/20 17:48:07 0:16 0:00 NO (Ni-PSI 371 05/11/20 20:27:52 0:09 0:29 NT -ri:MIOPI 372 05/11/20 21:18:16 0:11 0:30 NT -ri:MIOPI 373 05/11/20 21:39:04 0:12 1:11 NO (Ni-PSI 374 05/11/20 21:51:53 0:07 0:28 NT -ri:MIOPI 375 05/11/20 23:14:44 0:01 0:00 NO (Ni-PSI 376 05/11/20 23:15:02 0:07 33:55 NT (NIOP:VCORR1 AT&T Proprietary Page 20 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GNL00170903 EFTA01342961 MOBILITY 4MIN0 020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Voice Usage For: SS= Item Conn. Conn. Seizure Cr Originating Terminating ENE' 1NSI CT Feature Date Time Time Number Number (UTC) 377 05/11/20 23:15:02 0:07 33:55 19785258484 13038983895 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE9 378 05/12/20 13:53:18 0:00 0:00 19785258484 14158666097 NT (NIOP) 379 05/12/20 13:53:19 0:01 0:11 19785258484 14158666097 NT (NIOP:CFNI:VNI 12096078210(t) 380 05/12/20 13:53:21 0:09 0:07 19785258484 442032862047 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE9 381 05/12/20 15:01:44 0:08 30:55 19785258484 19177695374 NT (NIOP:VCORR) 382 05/12/20 15:01:44 0:09 30:55 19785258484 19177695374 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE8 383 05/12/20 15:33:00 0:10 19:49 19785258484 13036196231 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE8 384 05/12/20 16:50:53 0:27 0:00 19785258484 19786751300 MT (Ni-Pi:NIOP) 385 05/12/20 16:50:58 0:32 0:07 19785258484 19786751300 MT (Ni- 14013693201(t) ri:NIOP:CINA:VNI 386 05/12/20 16:50:58 0:33 0:07 19785258484 19786751300 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE9 387 05/12/20 18:18:51 0:08 8:56 19785258484 12128217058 3587080982063726 310410214827503 NO (Ni-Pi:NIOR) APPLE IPHONE8 388 05/12/20 19:13:25 0:05 7:33 19785258484 15165822707 3587080982063726 310410214827503 NO (Ni-Pi:NIOR) APPLE IPHONE8 389 05/12/20 19:29:15 0:23 0:00 19785258484 19786751300 MT (NIOR) 390 05/12/20 19:29:20 0:28 0:06 19785258484 19786751300 MT (NIOR:CPNA:VNI 14013693201(P) 391 05/12/20 19:29:20 0:29 0:06 19785258484 19786751300 3587080982063726 310410214827503 NO (Ni-Pi:NIOR) APPLE IPHONE8 392 05/12/20 22:00:31 0:05 28:33 19785258484 19177695374 3587080982063726 310410214827503 NO (Ni-Pi:NIOR) APPLE IPHONE9 393 05/12/20 22:00:31 0:05 28:33 19785258484 19177695374 MT (NIOR:VCORR) 394 05/13/20 18:07:12 0:39 0:03 19785258484 13036196231 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE8 395 05/13/20 18:08:35 0:24 0:00 19785258484 19177695374 MT (NIOP) AT&T Proprietary Page 21 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GNL00170904 EFTA01342962 MOBILITY `~~ .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Dato: 04/17/2020 Run Time: Voice Usage For: dildimmo Item Conn. Conn. Seizure LT Originating Terminating IMMI INS1 R Feature Date r10.0 Time Member Number (OTC) 396 05/13/20 18:08:41 0:30 0:02 MO (Ni-Pit 397 05/13/20 18:08:41 0:30 0:02 MT (NIOP:CZNA:VMI 398 05/13/20 19:00:16 0:09 15:49 MO (Ni-Pit 399 05/13/20 19:00:16 0:09 15:49 MT (NIOP:VCORAI 400 05/13/20 19:52:36 0:22 0:00 MT (Mi-fi:NIOPI 401 05/13/20 19:52:46 0:32 0:02 MT (Mi- fi:NIOP:CZNA:VM] 402 05/13/20 19:52:46 0:33 0:02 NO (Ni-Pit 403 05/13/20 19:53:03 0:06 1:39 MT -Pi:NIOP1 404 05/13/20 19:54:59 0:06 4:35 NO (Ni-Pit 405 05/13/20 21:05:54 0:11 0:00 MT (NIOP1 406 05/13/20 21:05:55 0:12 0:07 MT (NIOP:CPNR:VM] 407 05/13/20 21:35:50 0:07 13:47 MO (Ni-Pit 408 05/13/20 22:14:50 0:23 0:00 MT (NIOP1 409 05/13/20 22:14:56 0:29 0:01 MT (NIOP:CfNA:Vbil 410 05/13/20 22:14:56 0:30 0:01 MO (Ni—Pit 411 05/13/20 23:54:11 0:26 0:00 MT (Mt—ri:MIOP) 412 05/13/20 23:54:12 0:27 0:05 MT - ri:NIOP:CFNA:VM] 413 05/13/20 23:54:12 0:27 0:05 MO (VCORR1 AT&T Proprietary Page 22 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GNL00170905 EFTA01342963 MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm S" it' AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Dato: 08/17/2020 Run Time: Voice Usage For: dila= Item Conn. Conn. Seizure ET Originating Terminating EMBI IIISI CT Feature Date Tillie Sum Number Number (UTC) 414 05/13/20 23:54:27 0:02 17:46 NO (Ni-Pil 415 05/13/20 23:54:27 0:02 17:46 NT (NIOP:VCORR1 416 05/14/20 14:39:29 0:22 0:00 NT -Pi:NIOP1 417 05/14/20 14:39:37 0:30 0:01 NT (MI- ri:NIOP:CIPNA:VM1 418 05/14/20 14:39:37 0:31 0:01 NO (Mt-Pil 419 05/14/20 14:39:48 0:10 0:00 NT (Ili-Pi:NIOP:0611 420 05/14/20 15:52:43 0:08 1:09 NO -Pil 421 05/14/20 16:15:14 0:16 0:54 NT -Pi:NIOP1 422 05/14/20 17:11:25 0:13 0:00 NT (1 423 05/14/20 17:11:25 0:24 0:00 ST (NIOP1 424 05/14/20 17:11:26 0:25 0:11 ST (NI08:CfNA:VM] 425 05/14/20 17:20:45 0:06 0:00 NT (NIOP1 426 05/14/20 17:20:45 0:06 8:46 NT (NIOP:VCORR1 427 05/14/20 17:20:45 0:06 8:46 NO -Pil 428 05/14/20 17:42:04 0:10 0:01 NT (NIOP1 429 05/14/20 17:42:05 0:11 0:03 NT (NIOP:CENR:VM1 430 05/14/20 18:14:46 0:04 0:00 NT -Pi:NIOP1 431 05/14/20 18:14:46 0:04 1:31 NT (NIOP1 432 05/14/20 18:14:46 0:05 1:31 NO -Pil AT&T Proprietary Page 23 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00170906 EFTA01342964 MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ...„,,,,,o •ftaid %"""° AT&T UTC. Run Date: Run Tame: 0""n.. Voice Usage For: Skim Item Conn. Conn. Seizure ET Originating Terminating IMMI IN= CT Feature Date Time Time Member Member (UTC) 433 05/14/20 19:41:13 0:28 0:00 MT (ML-Pi:NIOP1 434 05/14/20 19:41:16 0:31 0:04 MT (MI- ri:NIOP:CPNA:VM1 435 05/17/20 21:54:23 0:06 3:05 MO (MI-Pi:NIOR1 436 05/19/20 01:55:50 0:00 0:00 MO (MI-Pi:NIOR1 437 05/19/20 20:41:12 0:09 8:05 MO (MI-Pi:NIOR1 438 05/19/20 20:49:29 0:05 2:33 MO (MI-Pi:NIOR1 439 05/19/20 21:14:58 0:23 0:00 NT (NIOR1 440 05/19/20 21:15:04 0:29 0:03 NO (MI-Pi:NIOR1 441 05/19/20 21:15:04 0:29 0:03 NT (NIOR:CFNA:VM1 442 05/19/20 22:29:37 0:22 0:00 NT (NIOR1 443 05/19/20 22:29:44 0:29 0:02 MT (NIOR:CFNA:VM1 444 05/19/20 22:29:44 0:30 0:02 MO (MI-Pi:NIOR1 445 05/19/20 23:03:59 0:22 0:00 MT (NIOR1 446 05/19/20 23:03:59 0:22 0:00 NO (Ni-ri:NIOnl 447 05/19/20 23:04:28 0:06 2:13 MT (NIOP:VCORR1 448 05/19/20 23:04:28 0:06 2:13 MO (MI-Pil 449 05/20/20 18:53:54 0:10 0:52 MT (MI-Pi:NIOPI 450 05/20/20 21:41:19 0:23 0:00 MT (NIOP1 AT&T Proprietary Page 24 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00170907 EFTA01342965 MOBILITY 4 .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in / ... 1 4 ""7s 7i# AT&T UTC. Run Date: 06/17/2020 Run Time: Voice Usage For: Item Conn. Conn. Seizure ET Originating Terminating MEI INSI CT Feature Data Time Sum Number number (DSC) 451 05/20/20 21:41:26 0:30 0:03 MT (NIOP:CFNA:VN1 452 05/20/20 21:41:26 0:30 0:03 NO (Ni-Fi) 453 05/20/20 21:58:25 0:23 0:00 NT (NIOP) 454 05/20/20 21:58:31 0:29 0:02 NT (NIOP:CFNA:VN1 455 05/20/20 21:58:31 0:30 0:02 NO (Ni-Fi) 456 05/20/20 21:59:01 0:01 0:00 NO (Ni-Fi) 457 05/20/20 21:59:40 0:37 0:04 NO (Ni-Fi) 458 05/20/20 22:00:20 0:22 0:00 NT (NIOP) 459 05/20/20 22:00:28 0:30 0:02 NT (NIOP:CFNA:VN1 460 05/20/20 22:00:28 0:31 0:02 NO (Ni-Fi) 461 05/21/20 00:31:09 0:03 35:29 NO (Ni-Fi) 462 05/21/20 00:31:09 0:03 54:04 MT (NIOP:VCORR) 463 05/21/20 01:06:38 0:00 0:21 NO (VCORR) 464 05/21/20 01:06:59 0:00 18:14 NO (Ni-Fi) 465 05/21/20 15:07:09 0:07 0:05 NO (Ni-Fi) 466 05/21/20 20:31:30 0:07 0:04 NO (Ni-Fi) 467 05/21/20 21:23:59 0:19 0:00 NT (Ni-Pi:NIOP) AT&T Proprietary Page 25 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GNL00170908 EFTA01342966 MOBILITY P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ....,• ••••-•a"" AT&T OTC. Run Dato: Run Time: 0""n.. Voice Usage For: dildimmo Item Conn. Conn. Seizure LT Originating Terminating LORI nNSI CT Feature Date Tine Time Number Number (UTC) 468 05/21/20 21:31:01 0:15 26:49 MO (Mi-fil 469 05/22/20 00:18:09 0:24 0:01 MT (Mi-Pi:NIOP1 470 05/22/20 00:18:11 0:26 0:32 MT (Ili- ri:NIOP:CPNA:VM1 471 05/22/20 00:20:52 0:28 0:00 MT (Mi-Pi:NIOP1 472 05/22/20 00:20:53 0:29 0:04 MT ri:NIOP:CPNA:VM1 473 05/22/20 16:23:16 0:14 0:00 MT (1 474 05/22/20 16:23:16 0:25 0:00 ST (NIOP1 475 05/22/20 16:23:17 0:26 0:15 ST (NIOP:CPNA:VM1 476 05/22/20 17:37:15 0:06 22:47 MT (Mi-Pi:NIOP1 477 05/22/20 18:00:20 0:05 7:06 MO (Mi-Pil 478 05/22/20 18:33:59 0:23 0:00 MT (NIOP:044141 479 05/22/20 18:34:08 0:32 0:02 MO (Mi-Pil 480 05/22/20 18:34:08 0:32 0:02 MT (NIOP:CPNA:CMN:VM1 481 05/22/20 21:26:30 0:25 0:00 MT -Pi:NIOP1 482 05/22/20 21:26:31 0:26 0:05 MT (Mi- ri:NIOP:CPNA:VM1 483 05/22/20 21:26:31 0:26 0:05 MO (VCOAR1 AT&T Proprietary Page 26 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00170909 EFTA01342967 MOBILITY illir P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in / ...77 1 4L# -6 i1 AT&T UTC. Run Date: 06/17/2020 Run Time: Voice Usage For: dildimmo Item Conn. Conn. Seizure ET Originating Terminating LORI INS1 CT Feature Date Time Time Number Member (UTC) 484 05/22/20 21:43:41 0:13 0:40 NO (Ni-fil 485 05/22/20 21:43:41 0:13 0:40 NT (NIOP:VCORR1 486 05/22/20 21:45:43 0:06 30:22 NO -ril 487 05/22/20 22:26:24 0:21 0:00 NT -ri:NIOPI 488 05/22/20 22:26:24 0:21 0:00 NT -ri:NIOPI 489 05/22/20 22:26:29 0:26 0:01 NT - ri:NIOP:CfNA:VM1 490 05/22/20 22:26:29 0:27 0:01 NO -fil 491 05/22/20 22:26:36 0:07 0:45 NT (Ni-ri:NIOP:0611 492 05/22/20 22:26:36 0:08 0:35 NO (Ni-fil 493 05/22/20 22:27:11 0:00 0:12 NO (1 494 05/22/20 22:27:21 0:00 6:09 NT (NIOP:CMN:VCORR1 495 05/22/20 22:27:23 0:00 6:07 NO -fil 496 05/22/20 22:46:06 0:18 0:00 NT -ri:NIOPI 497 05/22/20 22:46:06 0:18 3:09 NO -fil 498 05/22/20 22:46:06 0:18 0:38 NT -ri:NIOPI 499 05/22/20 22:46:44 0:00 0:29 NT (NIOP1 500 05/22/20 22:47:13 0:00 2:01 NT -ri:NIOPI 501 05/22/20 22:49:14 0:00 0:32 NT (NIOP1 502 05/22/20 22:49:15 0:00 0:54 NO (VCORRI 503 05/22/20 22:49:46 0:00 3:10 NT -ri:NIOPI 504 05/22/20 22:50:09 0:00 2:52 NO -fil 505 05/22/20 22:52:56 0:00 2:53 NT (NIOP1 AT&T Proprietary Page 27 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00170910 EFTA01342968 MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ‘•-• 40 " .". AT&T OTC. Run Dato: 06/17/2020 Run Time: Voice Usage For: dildimmo Item Conn. Conn. Seizure ET Originating Terminating L@I INSI CT Feature Dato Tame Time Number Number (OTC) 506 05/22/20 22:53:01 0:00 17:28 MO (VCOAN 507 05/22/20 22:55:49 0:00 14:40 MT (Mi-Pi:NIOP1 508 05/23/20 22:54:43 0:08 30:48 MT (NIOP:VCOAN 509 05/23/20 22:54:43 0:08 30:48 MO (Mi-Pi( 510 05/23/20 23:25:49 0:07 11:42 MT (NIOP:VCOAN 511 05/23/20 23:25:49 0:07 11:42 MO (Mi-Pi( 512 05/26/20 14:10:35 0:09 0:00 MT (Mi-Pi:NIOP1 513 05/26/20 18:03:44 0:24 0:00 MT (NIOP1 514 05/26/20 18:03:52 0:32 0:05 MT (NIOP:CPNA:VM1 515 05/26/20 18:03:52 0:32 0:05 MO (Mi-Pi( 516 05/26/20 19:02:46 0:23 0:00 MT (NIOP1 517 05/26/20 19:02:52 0:29 0:00 MT (NIOP:CPNA:VM1 518 05/26/20 19:02:52 0:29 0:00 MO (Mi-Pi( 519 05/26/20 19:13:13 0:25 0:00 MT (Mi-Pi:NIOP1 520 05/26/20 19:13:14 0:26 0:15 MT (Mi- ri:NIOP:CFNA:VM] 521 05/26/20 19:19:54 0:06 0:42 MO (Mi-Pi( 522 05/26/20 19:20:51 0:05 0:00 MO (Mi-Pi( 523 05/26/20 19:21:17 0:01 0:00 MT (NIOP:04M1 AT&T Proprietary Page 28 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00170IM1 EFTA01342969 MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Dato: 04/17/2020 Run Time: Voice Usage For: Item Conn. Conn. Seizure LT Originating Terminating flax CT Feature Date Time Time Number Number Curc) 524 05/26/20 19:21:17 0:01 0:04 MT (NIOP:CMCNN:VN1 525 05/26/20 19:21:18 0:22 0:00 MT (Ni-Pi:NIOP1 526 05/26/20 19:21:25 0:29 0:03 MT (Ni- ri:NIOP:CPNA:VN1 527 05/26/20 19:21:25 0:30 0:03 MO (Ni-Pil 528 05/26/20 19:21:36 0:06 6:58 MT (Ni-Pi:NIOP1 529 05/26/20 20:00:30 0:02 5:29 MO (Ni-Pil 530 05/26/20 20:06:12 0:02 0:42 MO (Ni-Pil 531 05/26/20 22:47:03 0:37 0:05 MO (Ni-Pil 532 05/27/20 19:58:08 0:23 0:00 MT (Ni-Pi:NIOP1 533 05/27/20 19:58:12 0:27 0:02 MT (Ni- ri:NIOP:CPNA:VN1 534 05/27/20 19:58:13 0:28 0:01 MO (Ni-Pil 535 05/27/20 20:19:38 0:10 2:16 MT (Ni-Pi:NIOP1 536 05/27/20 20:19:38 0:11 0:09 MO (Ni-Pil 537 05/27/20 20:19:47 0:00 0:15 MO (1 538 05/27/20 20:20:02 0:00 1:45 MO (Ni-PSI 539 05/27/20 20:21:47 0:00 0:09 MO (VCORR1 540 05/27/20 20:21:54 0:00 0:02 MT (NIOP:VCORR1 541 05/27/20 20:22:21 0:00 0:08 MO (Ni-Pil AT&T Proprietary Page 29 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GNL00170912 EFTA01342970 MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm t —IsS e s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/17/2020 Run Time: Voice Osage For: dildimmo Item Conn. Conn. Seizure tt Originating Terminating nez =SI CT Feature Date Time Sum Number Member (UTC) 542 05/27/20 20:22:21 0:08 0:00 NO (1 543 05/27/20 20:22:48 0:02 0:00 MT (NIOP1 544 05/27/20 20:22:49 0:18 0:00 ST (NIOP1 545 05/27/20 20:22:49 0:18 0:00 NO (Ni-ril 546 05/27/20 20:27:06 0:08 0:06 NO (Ni-ril 547 05/27/20 20:27:17 0:02 0:09 MT (Ni-ri:NIOPI 548 05/27/20 20:27:17 0:03 0:13 NO (Ni-ril 549 05/27/20 20:27:26 0:00 1:25 MT (NIOP1 550 05/27/20 20:27:30 0:00 2:23 NO (1 551 05/27/20 20:28:51 0:00 0:59 MT (Ni-ri:NIOPI 552 05/27/20 20:29:50 0:00 0:03 MT (NIOP:VCORR1 553 05/27/20 20:31:27 0:02 0:00 MT (NIOP:CMW] 554 05/27/20 20:31:27 0:03 0:00 NO (Ni-ril 555 05/27/20 20:34:42 0:21 8:33 MT (Ni-ri:NIOP1 556 05/27/20 20:43:15 0:00 7:44 MT (NIOP:VCORR1 557 05/27/20 20:51:20 0:10 38:47 MT (NIOP:CMN:VCORR1 558 05/27/20 20:51:20 0:10 0:02 NO (1 559 05/27/20 20:51:22 0:00 38:45 NO (Ni-ril 560 05/27/20 21:37:25 0:22 0:00 MT (Ni-ri:NIOP1 561 05/27/20 21:37:34 0:31 0:01 MT (Wi- ri:NIOP:CYNA:VM] AT&T Proprietary Page 30 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GN1_00170913 EFTA01342971 MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Tine: Voice Usage For: Skim Item Conn. Conn. Seizure IT Originating Terminating IMMI INSI CT Feature Date Tillie Time Number Humber (OTC) 562 05/27/20 21:37:34 0:31 0:01 MO (Mi-Pil 563 05/28/20 16:49:41 0:24 0:00 NT (NIOP1 564 05/28/20 16:49:50 0:33 0:02 NT (NIOP:CPNA:VM1 565 05/28/20 16:49:50 0:33 0:02 MO (Mi-Pil 566 05/28/20 16:50:02 0:00 0:00 MT (NIOP:0041 567 05/28/20 16:50:05 0:03 0:01 MT (NIOP:CPB:CMN:VM1 568 05/28/20 16:50:05 0:04 0:01 MO (Mi-Pil 569 05/28/20 16:50:38 0:20 0:03 MO (Mi-Pil 570 05/28/20 16:50:53 0:08 0:00 MT (NIOP1 571 05/28/20 16:50:53 0:08 0:00 MO (Mi-Pil 572 05/28/20 17:10:11 0:10 3:58 MT (Mi-Pi:NIOP1 573 05/28/20 17:14:19 0:05 22:33 MT (Mi-Pi:NIOP1 574 05/28/20 17:14:19 0:06 22:33 MO (VCORR1 575 05/29/20 18:23:50 0:12 8:19 MO (Mi-Pil 576 05/29/20 18:32:09 0:00 6:19 MO (VCORR1 577 05/29/20 18:52:27 0:08 24:52 MO (Mi-Pil 578 05/29/20 18:52:27 0:08 27:53 MT (NIOP:VCORR1 579 05/29/20 19:17:19 0:00 3:01 MO (VCORR1 AT&T Proprietary Page 31 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00170914 EFTA01342972 MOBILITY illk, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Tine: Voice Usage For: dildimmo Item Conn. Conn. Seizure ET Originating Terminating nez INS1 CT Feature Date Tame Time Number Number (VC) 580 05/30/20 15:17:28 0:21 0:00 MT (Ni-ri:NIOPI 581 05/30/20 15:17:29 0:22 0:14 MT (WI- ri:NIOP:CtRA:VM1 582 05/30/20 15:23:39 0:05 36:20 NO (Ni-fil 583 06/02/20 14:44:00 0:10 17:35 MT (NIOP:VCORR1 584 06/02/20 14:44:00 0:11 10:35 NO (Ni-ril 585 06/02/20 14:54:35 0:00 0:19 NO (VCORRI 586 06/02/20 14:54:54 0:00 6:41 NO (Ni-fil 587 06/02/20 17:04:25 0:03 10:19 MT (NIOP:VCORR1 588 06/02/20 17:04:25 0:04 10:19 NO (Ni-fil 589 06/02/20 17:33:58 0:10 0:54 MT (Ni-ri:NIOPI 590 06/03/20 00:07:18 0:16 6:39 MT (NIOP:VCORR1 591 06/03/20 00:07:18 0:16 6:39 NO (Ni-ril 592 06/03/20 19:09:20 0:23 0:00 MT (NIOP:04141 593 06/03/20 19:09:26 0:29 0:02 NO (Ni-fil 594 06/03/20 19:09:26 0:29 0:02 MT (NIOP:CrNA:CMN:VM1 595 06/03/20 20:31:08 0:07 17:32 MO (Ni-ri1 596 06/03/20 20:31:08 0:07 60:39 MT (NIOP:VCORR1 597 06/03/20 20:48:40 0:00 21:03 MO (1 AT&T Proprietary Page 32 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GNL00170915 EFTA01342973 MOBILITY e .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .....0 ‘•--00 AT&T UTC. Run Date: 08/17/2020 Run Fine: Voice Usage For: dildimmo Item Conn. Conn. Seizure ET Originating Terminating flax ntsI CT Feature Date 1.10.0 Time Number Number (UMC) 598 06/03/20 21:09:43 0:00 22:05 NO (Ai-Vi) 599 06/04/20 14:30:08 0:11 1:42 NT (Ai-Vi:NIOV) 600 06/05/20 19:34:05 0:26 0:00 NT (Ai-Vi:NIOV) 601 06/05/20 19:34:06 0:27 0:02 NO (VCORR) 602 06/05/20 19:34:06 0:27 0:02 NT (MI- Vi:NADV:CVNA:VM1 603 06/05/20 19:34:36 0:25 0:00 NT (Ai-Vi:NIOV) 604 06/05/20 19:34:38 0:27 0:02 NO (VCORR) 605 06/05/20 19:34:38 0:27 0:02 NT (NI- Fi:NIOP:CFNA:VN( 606 06/05/20 20:45:34 0:24 0:00 NT (NIOP) 607 06/05/20 20:45:41 0:31 0:02 NT (NIOV:CVNA:VM1 608 06/05/20 20:45:41 0:31 0:02 NO (Ai-Pi) 609 06/05/20 20:46:31 0:24 0:00 NT (NIOP) 610 06/05/20 20:46:37 0:30 0:02 NT (NIOV:CVNA:VM1 611 06/05/20 20:46:37 0:30 0:02 NO (Ai-Pi) 612 06/06/20 22:41:11 0:23 0:00 NT (NIOP) 613 06/06/20 22:41:16 0:28 1:04 NT (NIOV:CVNA:VM1 614 06/06/20 22:41:16 0:28 0:06 NO (Ai-Pi) 615 06/06/20 22:41:22 0:00 0:58 NO (VCORR) 616 06/06/20 22:43:40 0:04 3:36 NO (VCORR) AT&T Proprietary Page 33 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GNL00170916 EFTA01342974 MOBILITY e P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Dato: 06/17/2020 Run Time: Voice 'imago For: MI= Item Conn. Conn. Seizure Er Originating Terminating INS' CT Feature Date Tim Time Meter amber Co2c) 617 06/06/20 22:43:40 0:04 1:01 MT (NIOP:VCORR1 618 06/06/20 22:44:41 0:00 2:35 MT -22:NIOPI 619 06/09/20 20:00:48 0:01 2:22 MO -ril 620 06/09/20 20:59:57 0:10 40:05 MT (NIOP:VCORR1 621 06/09/20 20:59:57 0:11 40:05 MO (Ni-Pil 622 06/09/20 21:46:06 0:39 0:03 MO (Ni-Pil 623 06/09/20 21:46:34 0:11 0:00 MT (Ni-Pi:NIOP1 624 06/09/20 21:46:34 0:11 0:00 MT (NIOP1 625 06/09/20 21:46:39 0:16 0:01 MT (NIOP:CPS:VM1 626 06/09/20 21:46:39 0:17 0:01 MO (Ni-Pil 627 06/09/20 23:19:32 0:10 0:03 MO (Ni-Pil 628 06/09/20 23:19:41 0:03 0:00 MT (Ni-Pi:NIOP1 629 06/09/20 23:19:41 0:03 0:00 MT (Ni-Pi:NIOP1 630 06/09/20 23:19:46 0:08 0:02 MT (Ni-ri:NIOP:CPB:VM1 631 06/09/20 23:19:46 0:09 0:02 MO (Ni-Pil 632 06/09/20 23:58:57 0:02 0:00 MT (Ni-Pi:NIOP1 633 06/09/20 23:58:57 0:02 0:00 MT (Ni-Pi:NIOP1 634 06/09/20 23:59:00 0:05 0:02 MT (Ni-ri:NIOP:CPS:VM1 635 06/09/20 23:59:00 0:06 0:02 MO (Ni-Pil 636 06/10/20 14:55:12 0:23 0:00 MT (NIOP1 637 06/10/20 14:55:12 0:23 0:00 MT (Ni-Pi:NIOP1 AT&T Proprietary Page 34 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00170917 EFTA01342975 MOBILITY 4III, .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in •3/4"--6 \ --s 'AT&T .tor lYSI OTC. Run Date: 08/17/2020 Run Time: Voice Usage For: dildimmo Item Conn. Conn. Seizure Er Originating Terminating n@I INSI CT Feature Date 1.10.0 Time Number 'lumber (OTC) 638 06/10/20 14:55:16 0:27 0:02 MT (Wi- fi:NIOV:CZNA:VM1 639 06/10/20 14:55:16 0:27 0:02 MO (Ni-PSI 640 06/10/20 14:55:36 0:10 0:05 MO (Ni-PSI 641 06/10/20 18:51:20 0:23 0:00 MT (NI001 642 06/10/20 18:51:27 0:30 0:02 MT (NIOV:CZNA:VMI 643 06/10/20 18:51:27 0:31 0:02 MO (Ni-PSI 644 06/10/20 19:11:49 0:21 0:00 MT (NIOVI 645 06/10/20 19:11:53 0:25 0:02 MO (Ni-PSI 646 06/10/20 19:11:53 0:25 0:02 MT (NIOV:CZNA:VMI 647 06/10/20 22:21:12 0:23 0:00 MT (NIOVI 648 06/10/20 22:21:17 0:28 0:02 MO (Ni-PSI 649 06/10/20 22:21:17 0:28 0:02 MT (NIOV:CZNA:VMI 650 06/11/20 00:50:40 0:22 0:00 MT (MI001 651 06/11/20 00:50:40 0:22 0:00 MT (NS-fi:NIOVI 652 06/11/20 00:50:45 0:27 0:01 MT - fi:NIOV:CZNA:VMI 653 06/11/20 00:50:45 0:27 0:01 MO (Ni-PSI 654 06/11/20 01:00:17 0:06 44:39 MT (NIOV:VCOARI 655 06/11/20 01:00:17 0:07 44:39 MO (Ni-PSI 656 06/11/20 14:12:28 0:38 0:03 MO (Ni-PSI 657 06/11/20 23:57:41 0:00 0:00 MT (NI00:0011 AT&T Proprietary Page 35 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00170918 EFTA01342976 MOBILITY 411. .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Dato: 06/17/2020 Run Tine: Voice Osage For: dildimmo Item Conn. Conn. Soisurn ZS Originating Terminating DMZ INBI CT Feature Dato Till* Time Mager Maims (VMC) 658 06/11/20 23:57:47 0:06 0:04 MT (NIOP:CPS:CMN:VM1 659 06/11/20 23:57:47 0:07 0:04 NO (Ni-Pil 660 06/12/20 00:35:53 0:39 0:04 NO (Ni-Pil 661 06/12/20 00:36:33 0:24 0:00 MT (NIOP1 662 06/12/20 00:36:39 0:30 0:02 MT (NIOP:CPNA:VM1 663 06/12/20 00:36:39 0:31 0:02 NO (Ni-Pil 664 06/12/20 13:40:56 0:17 0:38 MT (Ni-Pi:NIOP1 665 06/12/20 13:41:49 0:02 0:00 NO (Ni-Pil 666 06/12/20 16:43:56 0:25 0:00 MT (Ni-Pi:NIOP1 667 06/12/20 16:43:57 0:26 0:05 MT (Ili- ri:NIOP:CPNA:VM1 668 06/12/20 16:44:48 0:06 0:00 MT (Ni-Pi:NIOP1 669 06/12/20 16:47:03 0:36 0:03 NO (Ni-Pil 670 06/12/20 16:47:08 0:00 0:00 NO (Ni-Pil 671 06/12/20 16:47:56 0:35 0:05 NO (Ni-Pil 672 06/12/20 16:48:26 0:18 0:00 NO (Ni-Pil AT&T Proprietary Page 36 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00170919 EFTA01342977 MOBILITY 4Illo .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tr `' ae ss AT&T UTC. Run Date: Run Time: 0""n.. Voice Usage For: Item Conn. Conn. Seizure LT Originating Terminating flax INSI CT Feature Date Time Time (UTC) 673 06/12/20 16:49:51 0:13 0:43 NO (Mt-ril AT&T Proprietary Page 37 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00170920 EFTA01342978 MOBILITY cre pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. .‘•- ia AT&T Run Date: 06/17/2020 Run Tine: Data Usage For: NM= Item Conn. Conn. Originating ET Bytos Bytes Apn EBBE IMBI MAKE MODEL Date Tama Up Dn (OTC/ 1 03/01/20 05:38:22 1:22 0 0 ims APPLE 'PHONES 2 03/01/20 05:41:28 60:00 11858 8720 ims APPLE 'PHONES 3 03/01/20 05:55:39 60:00 924 840 nxtgenpho APPLE 'PHONES ne 4 03/01/20 06:41:28 41:54 2580 1324 ims APPLE 'PHONES 5 03/01/20 06:55:39 60:00 865 525 nxtgenpho APPLE 'PHONES ne 6 03/01/20 07:23:22 60:00 11920 4220 ims APPLE 'PHONES 7 03/01/20 07:55:39 60:00 919 1036 nxtgenpho APPLE 'PHONES ne 8 03/01/20 08:23:22 60:00 6956 2648 ims APPLE 'PHONES 9 03/01/20 08:55:39 60:00 692 420 nxtgenpho APPLE 'PHONES ne 10 03/01/20 09:23:22 17:52 3424 1324 ims APPLE 'PHONES 11 03/01/20 09:44:39 60:00 11862 8772 ims APPLE 'PHONES 12 03/01/20 09:55:39 60:00 872 735 nxtgenpho APPLE 'PHONES ne 13 03/01/20 10:44:39 60:00 5192 2664 ims APPLE 'PHONES 14 03/01/20 10:55:39 60:00 635 525 nxtgenpho APPLE 'PHONES ne 15 03/01/20 11:44:39 60:00 5192 2648 ims APPLE 'PHONES 16 03/01/20 11:55:39 60:00 1038 630 nxtgenpho APPLE 'PHONES ne 17 03/01/20 12:44:39 27:07 2580 1324 ims APPLE 'PHONES 18 03/01/20 12:55:39 60:00 3838 5118 nxtgenpho APPLE 'PHONES ne 19 03/01/20 13:11:46 10:55 3424 1340 ims APPLE 'PHONES 20 03/01/20 13:25:26 18:05 7402 6102 ims APPLE 'PHONES 21 03/01/20 13:43:31 39:19 10252 4128 ims APPLE 'PHONES 22 03/01/20 13:55:39 60:00 7138 6900 nxtgenpho APPLE 'PHONES ne 23 03/01/20 14:24:05 0:19 9754 7358 ims APPLE 'PHONES 24 03/01/20 14:24:24 8:29 5180 1696 ims APPLE 'PHONES 25 03/01/20 14:38:56 60:00 13027 7566 ims 26 03/01/20 14:55:39 9:59 173 105 nxtgenpho APPLE 'PHONES ne 27 03/01/20 15:05:38 3:44 6742 4956 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 1 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170921 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342979 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:30:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: "MI= Item Conn. Conn. Originating ET Bytes Bytes Apn IN/LI IMSI MAKS MODEL Date Time Number Up Dn (OTC/ 28 03/01/20 15:09:22 0:12 0 0 nxtgonpho APPLE 'PROMS no 29 03/01/20 15:09:55 2:27 5220 5991 nxtgonpho APPLE 'PEONES no 30 03/01/20 15:09:56 2:27 5991 4932 nxtgenpho APPLE 'PEONES no 31 03/01/20 15:12:23 19:15 8268 7175 nxtgonphe APPLE 'PEONES ne 32 03/01/20 15:31:38 4:48 8406 5288 nxtgonpho APPLE 'PHONES no 33 03/01/20 15:36:25 1:43 6726 6727 nxtgonpho APPLE 'PHONES no 34 03/01/20 15:36:26 1:43 6727 6438 nxtgenpho APPLE 'PHONES ne 35 03/01/20 15:38:09 1:35 7450 5003 nxtgonphe APPLE 'PHONES ne 36 03/01/20 15:38:56 60:00 3532 1324 ims 37 03/01/20 15:39:44 0:22 5221 5991 nxtgonpho APPLE 'PHONES no 38 03/01/20 15:39:45 0:22 5991 4933 nxtgonphe APPLE 'PHONES no 39 03/01/20 15:40:07 31:31 21318 19563 nxtgenphe APPLE 'PHONES ne 40 03/01/20 16:02:35 17:49 9902 6262 ims 41 03/01/20 16:11:37 2:55 4504 5759 nxtgenpho APPLE 'PHONES ne 42 03/01/20 16:11:38 2:55 5759 4216 nxtgonphe APPLE 'PHONES no 43 03/01/20 16:14:33 0:05 0 0 nxtgonphe APPLE 'PHONES no 44 03/01/20 16:27:22 21:33 8365 6084 ims 45 03/01/20 16:29:19 1:40 7396 4952 nxtgonpho APPLE 'PHONES no 46 03/01/20 16:30:58 1:31 5220 5991 nxtgonpho APPLE 'PHONES no 47 03/01/20 16:30:59 1:31 5991 4932 nxtgonpho APPLE 'PHONES no 48 03/01/20 16:32:30 6:30 6040 4939 nxtgonpho APPLE 'PHONES no 49 03/01/20 16:38:56 60:00 0 0 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 2 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170922 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342980 MOBILITY casso r pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. .‘•- 0° AT&T Run Date: 06/17/2020 Run Tine: Data Usage For: Item Conn. Conn. Originating ET Bytos Bytes Apn MEI INSI MAKE MODEL Date Time Number Up Dn (uzz) 50 03/01/20 16:38:59 4:59 6299 7586 nxtgonpho APPLE !PHONES no 51 03/01/20 16:39:00 4:59 7586 5915 nxtgonpho APPLE !PHONES no 52 03/01/20 16:43:59 6:39 7933 19165 nxtgonpho APPLE !PHONES no 53 03/01/20 16:50:30 60:00 24775 18430 ims 54 03/01/20 16:50:37 0:21 288 48 nxtgonpho APPLE !PHONES no 55 03/01/20 16:50:38 0:22 48 0 nxtgonpho APPLE !PHONES no 56 03/01/20 16:51:00 17:39 19037 30448 nxtgonpho APPLE !PHONES no 57 03/01/20 17:08:38 1:08 5117 6043 nxtgonpho APPLE !PHONES no 58 03/01/20 17:08:39 1:08 6043 4829 nxtgonpho APPLE !PHONES no 59 03/01/20 17:09:47 41:45 65228 67623 nxtgonpho APPLE !PHONES no 60 03/01/20 17:38:56 12:29 0 0 ims 61 03/01/20 17:50:30 60:00 0 0 ims 62 03/01/20 17:51:25 6:34 8423 6138 ims 63 03/01/20 17:51:32 45:02 14269 13073 nxtgonpho APPLE !PHONES no 64 03/01/20 17:51:33 45:02 13073 17918 nxtgonpho APPLE !PHONES ne 65 03/01/20 18:01:09 2:30 8313 6090 ims 66 03/01/20 18:06:21 5:55 11275 10058 ims 67 03/01/20 18:13:49 8:59 8187 6296 ims 68 03/01/20 18:25:49 5:48 8263 7472 ims 69 03/01/20 18:35:07 26:02 8371 6016 ims 70 03/01/20 18:36:35 8:04 43532 18469 nxtgonpho APPLE !PHONES no 71 03/01/20 18:44:38 6:14 10852 13435 nxtgonpho APPLE !PHONES no 72 03/01/20 18:44:39 6:14 13435 21886 nxtgonpho APPLE !PHONES no 73 03/01/20 18:50:30 60:00 0 0 ims 74 03/01/20 18:50:53 2:02 9758 6565extgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 3 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170923 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342981 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn MBE! IMSI MARE MODEL Date Time Dunbar Up Dn (UTC) 75 03/01/20 18:50:54 2:02 6565 9470 nxtgonpho APPLE 'PHONES ne 76 03/01/20 18:52:56 60:00 19262 29639 nxtgonpho APPLE 'PHONES ne 77 03/01/20 19:02:56 60:00 22413 16301 ims 78 03/01/20 19:50:30 60:00 0 0 ims 79 03/01/20 19:52:56 9:07 173 105 nxtgonpho APPLE 'PHONES no 80 03/01/20 19:58:23 0:05 0 3613 ims 81 03/01/20 20:02:02 2:03 5218 5973 nxtgonpho APPLE 'PHONES no 82 03/01/20 20:02:03 2:03 5973 4930 nxtgenpho APPLE 'PHONES ne 83 03/01/20 20:02:56 60:00 6956 2864 ims 84 03/01/20 20:04:06 60:00 32943 15861 nxtgonpho APPLE 'PHONES ne 85 03/01/20 20:50:30 58:40 0 0 ims 86 03/01/20 21:02:56 32:46 8480 3004 ims 87 03/01/20 21:04:06 3:13 0 0 nxtgonpho APPLE 'PHONES ne 88 03/01/20 21:07:19 40:44 7436 11745 nxtgonpho APPLE 'PHONES no 89 03/01/20 21:43:30 0:16 48 0 ims APPLE 'PHONES 90 03/01/20 21:43:46 51:58 11627 7387 ims APPLE 'PHONES 91 03/01/20 21:48:02 2:57 5221 6043 nxtgonpho APPLE 'PHONES no 92 03/01/20 21:48:03 2:57 6043 4933 nxtgonpho APPLE 'PHONES no 93 03/01/20 21:51:00 2:13 6040 4892 nxtgonpho APPLE 'PHONES no 94 03/01/20 21:53:12 2:03 5221 5991 nxtgonpho APPLE 'PHONES no 95 03/01/20 21:53:13 2:03 5991 4933 nxtgonpho APPLE 'PHONES ne 96 03/01/20 21:55:16 15:41 9091 5311 nxtgonpho APPLE 'PHONES no 97 03/01/20 22:10:56 2:03 5177 6103 nxtgonpho APPLE 'PHONES no 98 03/01/20 22:10:57 2:03 6103 4889 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 4 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170924 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342982 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Tine: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn LBSI IMSI MAKE MODEL Date Timm Number Up Dn (OTC) 99 03/01/20 22:13:00 60:00 6976 5733 nxtgonpho APPLE 'PEONES ne 100 03/01/20 22:42:34 13:34 6778 6105 ims APPLE IPEOME8 101 03/01/20 22:56:08 40:20 7172 3696 ims APPLE 'PEONES 102 03/01/20 23:13:00 60:00 1471 4996 nxtgonpho APPLE 'PHONED no 103 03/01/20 23:38:48 0:05 0 0 ims APPLE 'PHONED 104 03/01/20 23:53:31 42:44 17191 8099 ims 105 03/02/20 00:13:00 60:00 4177 4210 nxtgonpho APPLE 'PHONED no 106 03/02/20 00:47:05 36:22 8553 7960 ims 107 03/02/20 01:13:00 58:51 4775 11416 nxtgonpho APPLE 'PHONES ne 108 03/02/20 01:28:01 19:50 8228 7855 ims APPLE 'PHONES 109 03/02/20 01:47:51 2:30 3532 1340 ims APPLE 'PHONES 110 03/02/20 01:58:42 60:00 13603 7860 ims 111 03/02/20 02:11:50 2:11 5221 6043 nxtgonpho APPLE 'PHONES no 112 03/02/20 02:11:51 2:11 6043 4933 nxtgonpho APPLE 'PHONES no 113 03/02/20 02:14:02 60:00 7529 5854 nxtgonpho APPLE 'PHONES no 114 03/02/20 02:58:42 59:06 13444 4516 ims 115 03/02/20 03:14:02 60:00 1746 1500 nxtgonpho APPLE 'PHONES no 116 03/02/20 03:58:49 60:00 12186 9034 ims APPLE 'PHONES 117 03/02/20 04:14:02 60:00 1320 1250 nxtgonpho APPLE 'PHONES no 118 03/02/20 04:58:49 60:00 5192 2664 ims APPLE 'PHONES 119 03/02/20 05:14:02 60:00 1095 1341 nxtgonpho APPLE !PHONES ne 120 03/02/20 05:58:49 60:00 5192 2664 ims APPLE !PHONES 121 03/02/20 06:14:02 60:00 639 375 nxtgonpho APPLE !PHONES no 122 03/02/20 06:58:49 41:03 2596 1324 ims APPLE !PHONES 123 03/02/20 07:14:02 25:50 369 375 nxtgonpho APPLE !PHONES no 124 03/02/20 07:39:52 0:15 495 293 nxtgonpho APPLE !PHONES no 125 03/02/20 07:39:52 0:07 0 0 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 5 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170925 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342983 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:56:66pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Timm: Data Usage For: WM= Item Conn. Conn. Originating ET Bytes Bytes Apn neer IMSI MAKE MODEL Data Time Numbor Up Dn (UTC) 126 03/02/20 07:39:59 22:50 4840 1572 Las APPLE !PHONES 127 03/02/20 07:40:07 60:00 582 572 nxtgonpho APPLE !PHONES no 128 03/02/20 08:07:09 29:52 9262 7340 Las APPLE !PHONES 129 03/02/20 08:37:01 6:04 8728 7072 Las APPLE !PHONES 130 03/02/20 08:40:07 2:56 252 269 nxtgonpho APPLE !PHONES no 131 03/02/20 12:01:08 29:41 103877 370807 nxtgonpho APPLE !PHONES no 132 03/02/20 12:01:11 29:38 14032 12064 Las APPLE !PHONES 133 03/02/20 16:16:03 30:50 152117 587017 nxtgonpho APPLE !PHONES no 134 03/02/20 16:16:05 1:10 8816 6194 Las APPLE !PHONES 135 03/02/20 16:17:15 60:00 79112 44236 Las APPLE !PHONES 136 03/02/20 16:34:35 0:04 0 2210 Las APPLE !PHONES 137 03/02/20 16:34:56 0:23 7149 31933 ims APPLE !PHONES 138 03/02/20 16:35:59 0:06 5581 12969 ims APPLE !PHONES 139 03/02/20 16:36:44 0:56 117835 139892 ims APPLE !PHONES 140 03/02/20 16:43:41 0:09 11001 4562 ims APPLE !PHONES 141 03/02/20 16:44:01 2:12 235412 454074 ims APPLE !PHONES 142 03/02/20 16:46:52 2:07 5464 7722 nxtgonpho APPLE !PHONES no 143 03/02/20 16:46:53 2:07 7722 5176 nxtgonpho APPLE !PHONES no 144 03/02/20 16:48:59 21:34 10832 12811 nxtgonpho APPLE !PHONES no 145 03/02/20 17:10:33 44:52 11500 13087 nxtgonpho APPLE !PHONES no 146 03/02/20 17:10:34 44:52 13087 13674 nxtgonpho APPLE !PHONES no 147 03/02/20 17:17:15 8:46 0 0 ims APPLE !PHONES 148 03/02/20 17:28:07 14:50 8207 7090 ims 149 03/02/20 17:48:50 11:14 8225 6088 ims 150 03/02/20 17:55:26 3:03 7794 5274 nxtgonpho APPLE !PHONES ne 151 03/02/20 17:58:28 18:22 321797 68055 nxtgonpho APPLE !PHONES ne 152 03/02/20 17:58:29 18:22 68055 350874 nxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 6 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170926 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342984 MOBILITY e s, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating CT Bytes Bytes Apn DOLT INS! MANE Merl. Date Time Number Up Dn (UTC) 153 03/02/20 18:04:26 12:24 6316 6778 ims APPLE 'PHONED 154 03/02/20 18:04:27 12:24 6670 5964 ims APPLE 'PHONED 155 03/02/20 18:15:35 17:29 10178 6494 ims 156 03/02/20 18:16:51 8:26 5439 6387 nxtgenpho APPLE 'PHONED ne 157 03/02/20 18:16:52 8:26 6387 5151 nxtgenpho APPLE 'PHONED ne 158 03/02/20 18:25:18 15:26 8963 10970 nxtgenpho APPLE 'PHONED ne 159 03/02/20 18:36:22 13:47 8199 5999 ims APPLE IPHONEO 160 03/02/20 18:40:43 2:07 13092 7135 nxtgenpho APPLE 'PHONES ne 161 03/02/20 18:40:44 2:07 7135 12804 nxtgenpho APPLE 'PHONES ne 162 03/02/20 18:42:51 60:00 11769 17044 nxtgenpho APPLE 'PHONES ne 163 03/02/20 18:50:09 2:18 2984 1340 ims APPLE 'PHONES 164 03/02/20 18:50:09 2:18 2812 1340 ims APPLE 'PHONES 165 03/02/20 18:52:27 4:13 3424 1448 ims APPLE 'PHONES 166 03/02/20 18:58:32 4:46 0 0 ims 167 03/02/20 19:14:25 15:41 9323 6918 ims 168 03/02/20 19:32:47 17:39 8477 6283 ims 169 03/02/20 19:42:51 54:20 10545 9322 nxtgenpho APPLE 'PHONES ne 170 03/02/20 19:56:40 10:31 0 0 ims 171 03/02/20 20:09:27 60:00 16978 9252 ims 172 03/02/20 20:37:10 2:07 5578 6598 nxtgenpho APPLE !PHONES ne 173 03/02/20 20:37:11 2:07 6457 5290 nxtgenpho APPLE !PHONES ne 174 03/02/20 20:39:18 27:09 8245 11360 nxtgenpho APPLE !PHONES ne 175 03/02/20 21:06:26 2:18 6296 8106 nxtgenpho APPLE !PHONES ne 176 03/02/20 21:06:27 2:19 8106 6008 nxtgenpho APPLE !PHONES ne 177 03/02/20 21:08:46 38:39 8309 6108 nxtgenpho APPLE !PHONES ne 178 03/02/20 21:09:27 15:00 0 0 ims 179 03/02/20 21:32:03 20:42 8203 5998 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 7 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170927 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342985 MOBILITY e s, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating CT Bytes Bytes Apn DMZ IBS! ISAN2L MOMS Date Time Number Up Dn (UTC) 180 03/02/20 21:47:24 12:15 17860 39013 nxtgonpho APPLE 'PHONES no 181 03/02/20 21:47:25 12:16 39013 17476 nxtgenpho APPLE IPHONE8 no 182 03/02/20 21:58:20 30:21 0 0 isms 183 03/02/20 21:59:40 34:23 32299 48475 nxtgonpho APPLE 'PHONES no 184 03/02/20 21:59:41 34:23 48475 32752 nxtgonpho APPLE !PHONES no 185 03/02/20 22:06:58 22:20 10591 8188 ims 186 03/02/20 22:28:40 5:23 6305 6732 isms APPLE !PHONES 187 03/02/20 22:28:41 5:23 6732 6041 isms APPLE !PHONES 188 03/02/20 22:31:33 6:26 10063 8268 isms 189 03/02/20 22:34:03 7:05 8089 10976 nxtgonpho APPLE !PHONES no 190 03/02/20 22:34:05 7:04 10976 7801 nxtgonpho APPLE !PHONES no 191 03/02/20 22:40:32 32:40 19107 12870 isms 192 03/02/20 22:41:09 1:04 8543 5515 nxtgonpho APPLE !PHONES no 193 03/02/20 22:42:12 2:10 5792 7397 nxtgonpho APPLE !PHONES no 194 03/02/20 22:42:13 2:10 7397 5504 nxtgonpho APPLE !PHONES no 195 03/02/20 22:44:23 12:58 8379 5971 nxtgonpho APPLE !PHONES no 196 03/02/20 22:57:20 10:17 9677 19783 nxtgenpho APPLE !PHONES no 197 03/02/20 22:57:21 10:17 19783 9389 nxtgenpho APPLE !PHONES no 198 03/02/20 23:07:38 0:51 7248 5395 nxtgenpho APPLE !PHONES no 199 03/02/20 23:08:29 99:47 12346 13625 nxtgenpho APPLE !PHONES no 200 03/02/20 23:08:30 60:00 6907 8351 nxtgonpho APPLE !PHONES no 201 03/02/20 23:13:34 94:42 9570 9722 isms APPLE !PHONES 202 03/02/20 23:13:35 60:00 9614 9414 isms APPLE !PHONES 203 03/02/20 23:14:47 0:01 0 0 isms 204 03/02/20 23:17:19 34:17 11811 7693 isms AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 8 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170928 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342986 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:30:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Tine: Data Usage For: Ma= Item Conn. Conn. Originating B2 Bytes Bytes Apn EMU IMSI MAKE MODEL Date TIM* up 0n (OTC/ 205 03/02/20 23:56:48 60:00 14766 7840 ims 206 03/03/20 00:08:30 39:48 6718 6727 nxtgenpho APPLE 'PEONES ne 207 03/03/20 00:13:35 34:43 0 0 ims APPLE 'PEONES 208 03/03/20 00:48:17 4:13 7806 5708 nxtgenpho APPLE 'PEONES ne 209 03/03/20 00:52:30 14:10 64691 46658 nxtgenpho APPLE 'PEONES ne 210 03/03/20 00:52:35 56:22 20187 11190 ims 211 03/03/20 00:56:48 60:00 0 0 ims 212 03/03/20 01:06:40 2:06 5584 6435 nxtgenpho APPLE 'PHONES ne 213 03/03/20 01:06:41 2:06 6435 5296 nxtgenpho APPLE 'PHONES ne 214 03/03/20 01:08:47 2:21 7926 5519 nxtgenpho APPLE 'PHONES ne 215 03/03/20 01:11:07 1:20 5584 6507 nxtgenpho APPLE 'PHONES ne 216 03/03/20 01:11:08 1:19 6507 5296 nxtgenpho APPLE 'PHONES ne 217 03/03/20 01:12:28 30:56 17894 13813 nxtgenpho APPLE 'PHONES ne 218 03/03/20 01:43:23 14:47 6083 6888 nxtgenpho APPLE 'PHONES ne 219 03/03/20 01:43:24 14:47 6888 5795 nxtgenpho APPLE 'PHONES ne 220 03/03/20 01:53:38 32:27 16630 8649 ims 221 03/03/20 01:56:48 60:00 0 0 ims 222 03/03/20 01:58:11 60:00 8925 7567 nxtgenpho APPLE 'PHONES ne 223 03/03/20 02:35:26 60:00 13553 7876 ims 224 03/03/20 02:56:48 60:00 0 0 ims 225 03/03/20 02:58:11 60:00 852 500 nxtgenpho APPLE 'PHONES ne 226 03/03/20 03:35:26 60:00 13444 4360 ims 227 03/03/20 03:56:48 45:12 0 0 ims 228 03/03/20 03:58:11 60:00 6285 9286 nxtgenpho APPLE 'PHONES ne 229 03/03/20 04:35:26 11:25 0 0 ims 230 03/03/20 04:54:33 26:00 11002 6192 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 9 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170929 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342987 MOBILITY 45, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Tine: Data Usage For: Item Conn. Conn. Originating BT Bytos Bytes Apn IMAI IIS! MAKE MODEL Date TIM* Up Dn (07C) 231 03/03/20 04:58:11 60:00 1008 750 nxtgenpho APPLE 'PEONES ne 232 03/03/20 05:28:33 5:32 0 0 ims 233 03/03/20 05:42:12 11:36 8451 6230 ims 234 03/03/20 05:58:11 30:15 426 250 nxtgenpho APPLE 'PEONES ne 235 03/03/20 06:05:52 0:25 9552 7198 ims APPLE 'PEONES 236 03/03/20 06:06:17 60:00 12012 4560 ims APPLE 'PEONES 237 03/03/20 06:28:26 2:10 5221 6055 nxtgenpho APPLE 'PEONES ne 238 03/03/20 06:28:27 2:10 6055 4933 nxtgonpho APPLE !PHONES no 239 03/03/20 06:30:37 12:02 6265 5017 nxtgonpho APPLE !PHONES no 240 03/03/20 06:42:39 61:49 6703 7688 nxtgonpho APPLE !PHONES no 241 03/03/20 06:42:40 60:00 7515 6310 nxtgenpho APPLE 'PHONES ne 242 03/03/20 07:06:17 7:58 0 0 ims APPLE !PHONES 243 03/03/20 07:23:35 20:53 7325 6792 ims APPLE !PHONES 244 03/03/20 07:23:36 20:53 6792 7061 ims APPLE !PHONES 245 03/03/20 07:23:52 10:34 11234 6390 ims 246 03/03/20 07:42:38 38:41 13368 7571 ims 247 03/03/20 07:42:40 1:49 173 105 nxtgenpho APPLE !PHONES ne 248 03/03/20 07:44:29 15:24 7635 5218 nxtgenpho APPLE !PHONES ne 249 03/03/20 07:59:52 8:49 7621 7231 nxtgenpho APPLE !PHONES ne 250 03/03/20 07:59:53 8:49 7231 7237 nxtgenpho APPLE !PHONES ne 251 03/03/20 08:08:42 0:48 6870 4955 nxtgenpho APPLE !PHONES no 252 03/03/20 08:09:29 0:48 5116 6055 nxtgenpho APPLE !PHONES ne 253 03/03/20 08:09:30 0:48 6055 4828 nxtgenpho APPLE !PHONES ne 254 03/03/20 08:10:18 0:40 6112 4952 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 10 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170930 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342988 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn LBSS IMSI MAKE MODEL Date Time Number Up Dn (OTC) 255 03/03/20 08:10:57 2:36 5117 6055 nxtgonpho APPLE 'PEONES no 256 03/03/20 08:10:58 2:36 6055 4829 nxtgonpho APPLE 'PEONES no 257 03/03/20 08:13:33 8:22 5113 6105 nxtgonpho APPLE 'PEONES no 258 03/03/20 08:13:35 8:21 6105 4825 nxtgonpho APPLE 'PEONES ne 259 03/03/20 08:21:56 60:00 7213 5837 nxtgenpho APPLE 'PEONES ne 260 03/03/20 08:31:42 16:37 9802 6142 ims 261 03/03/20 08:49:57 41:51 14587 7694 ims 262 03/03/20 09:21:56 5:17 173 105 nxtgenpho APPLE 'PEONES ne 263 03/03/20 09:27:12 2:06 5116 6055 nxtgenpho APPLE 'PEONES ne 264 03/03/20 09:27:13 2:06 6055 4828 nxtgenpho APPLE 'PEONES ne 265 03/03/20 09:29:19 60:00 8500 5638 nxtgenpho APPLE 'PEONES ne 266 03/03/20 09:43:56 4:50 0 0 ims 267 03/03/20 09:58:18 3:50 11004 6250 ims 268 03/03/20 10:07:18 25:12 9679 6398 ims 269 03/03/20 10:29:19 60:00 8133 2343 nxtgenpho APPLE 'PHONES ne 270 03/03/20 10:47:22 0:14 48 0 ims APPLE 'PHONES 271 03/03/20 10:47:36 34:54 13747 8456 ism APPLE 'PHONES 272 03/03/20 11:29:05 33:39 13398 7586 ims 273 03/03/20 11:29:19 37:34 9542 6573 nxtgonpho APPLE 'PHONES no 274 03/03/20 12:06:52 8:49 5221 6055 nxtgenpho APPLE 'PHONES ne 275 03/03/20 12:06:54 8:48 6055 4933 nxtgenpho APPLE 'PHONES ne 276 03/03/20 12:07:05 60:00 18679 8370 ims 277 03/03/20 12:15:42 2:09 5216 6053 nxtgenpho APPLE 'PHONES ne 278 03/03/20 12:15:43 2:09 6053 4928 nxtgenpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 11 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170931 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342989 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn TAINT MANZ MODEL. Date Time Number Up Dn (UTC) 279 03/03/20 12:17:52 19:55 7630 6275 nxtgenpho APPLE 'PEONES ne 280 03/03/20 12:37:46 2:06 5532 9011 nxtgenpho APPLE 'PEONES no 281 03/03/20 12:37:47 2:06 9011 5244 nxtgenpho APPLE 'PEONES no 282 03/03/20 12:39:53 31:03 7586 5843 nxtgenpho APPLE 'PEONES no 283 03/03/20 13:07:05 22:45 4964 1572 ims 284 03/03/20 13:10:55 0:40 5325 6280 nxtgenpho APPLE 'PHONES ne 285 03/03/20 13:10:56 0:40 6280 5037 nxtgonpho APPLE 'PHONES no 286 03/03/20 13:11:36 7:06 9026 5966 nxtgenpho APPLE 'PHONES no 287 03/03/20 13:18:41 8:16 5217 6105 nxtgenpho APPLE 'PHONES no 288 03/03/20 13:18:42 8:16 6105 4929 nxtgenpho APPLE 'PHONES no 289 03/03/20 13:26:58 0:46 6870 4956 nxtgenpho APPLE 'PHONES ne 290 03/03/20 13:27:43 2:06 10413 7087 nxtgenpho APPLE 'PHONES ne 291 03/03/20 13:27:44 2:06 7087 10125 nxtgenpho APPLE 'PHONES ne 292 03/03/20 13:29:50 38:38 13586 8797 nxtgenpho APPLE 'PHONES ne 293 03/03/20 13:33:07 0:25 16290 13240 ims APPLE 'PHONES 294 03/03/20 13:33:32 33:21 10840 10928 ims APPLE 'PHONES 295 03/03/20 14:08:27 6:02 5221 6055 nxtgenpho APPLE 'PHONES no 296 03/03/20 14:08:28 6:02 6055 4933 nxtgenpho APPLE 'PHONES no 297 03/03/20 14:14:30 46:03 26448 21682 nxtgenpho APPLE 'PHONES no 298 03/03/20 14:14:32 10:03 8808 6173 ims APPLE 'PHONES 299 03/03/20 14:24:35 29:19 8248 3004 ims APPLE 'PHONES 300 03/03/20 14:54:30 0:29 8098 7128 ims APPLE 'PHONES 301 03/03/20 14:54:59 39:09 9804 3052 ims APPLE 'PHONES 302 03/03/20 15:00:32 13:07 24019 14458 nxtgenpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 12 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170932 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342990 MOBILITY ce. PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating BT Bytes Bytes Apn DIRT IM9I NAM MODEL Date Time Number Up Dn (OTC/ 303 03/03/20 15:00:33 13:07 14458 23635 nxtgonpho APPLE !PHONES no 304 03/03/20 15:13:40 58:17 7179 6785 nxtgenpho APPLE !PHONES no 305 03/03/20 15:35:15 0:06 0 0 ims 306 03/03/20 15:43:23 5:03 18043 11424 ims 307 03/03/20 15:48:44 55:52 13475 8142 ims 308 03/03/20 16:20:12 2:10 7680 8328 nxtgonpho APPLE !PHONES no 309 03/03/20 16:20:13 2:10 8328 7392 nxtgonpho APPLE !PHONES no 310 03/03/20 16:22:23 52:40 60305 22538 nxtgonpho APPLE !PHONES no 311 03/03/20 16:45:35 60:00 12603 7786 ims 312 03/03/20 17:15:02 2:07 13534 92096 nxtgonpho APPLE !PHONES no 313 03/03/20 17:15:03 2:07 92096 13246 nxtgonpho APPLE !PHONES no 314 03/03/20 17:17:10 40:59 10564 6373 nxtgonpho APPLE !PHONES no 315 03/03/20 17:45:35 29:47 5088 1572 ims 316 03/03/20 17:58:08 11:42 11259 12573 nxtgenpho APPLE !PHONES no 317 03/03/20 17:58:09 11:42 12573 24067 nxtgonpho APPLE !PHONES no 318 03/03/20 18:09:51 35:52 6810 5733 nxtgonpho APPLE !PHONES no 319 03/03/20 18:17:26 18:56 6670 5963 ims APPLE !PHONES 320 03/03/20 18:36:22 60:00 11996 4328 ims APPLE !PHONES 321 03/03/20 18:45:42 2:07 5218 6105 nxtgonpho APPLE !PHONES ne 322 03/03/20 18:45:43 2:07 6105 4930 nxtgonpho APPLE !PHONES no 323 03/03/20 18:47:50 2:26 9442 11383 nxtgonpho APPLE !PHONES no 324 03/03/20 18:50:15 2:15 5535 9029 nxtgonpho APPLE !PHONES ne 325 03/03/20 18:50:16 2:15 9029 5247 nxtgonpho APPLE !PHONES ne 326 03/03/20 18:52:31 21:26 15301 35155 nxtgenpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 13 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170933 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342991 MOBILITY / 1 44e. ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn LEI TM! MANZ MOBIL Date Time Number Up Dn (OTC) 327 03/03/20 19:13:. 2:25 5768 7851 nxtgonpho APPLE 'PEONES ne 328 03/03/20 19:13: 2:24 7851 5480 nxtgonpho APPLE 'PEONES ne 329 03/03/20 19:16: 52:45 731753 3170468 nxtgonpho APPLE 'PEONES ne 330 03/03/20 19:16: 52:45 3170468 731465 nxtgonpho APPLE 'PEONES ne 331 03/03/20 19:36: 60:00 6956 2880 ims APPLE 'PHONES 332 03/03/20 20:09: 1:12 7245 5092 nxtgonpho APPLE 'PHONES ne 333 03/03/20 20:10: 12:53 8802 7894 nxtgonpho APPLE 'PHONES no 334 03/03/20 20:10: 12:53 7894 8514 nxtgonpho APPLE 'PHONES no 335 03/03/20 20:23: 2:10 7526 5166 nxtgonpho APPLE 'PHONES no 336 03/03/20 20:25: 2:09 5345 7525 nxtgonpho APPLE 'PHONES no 337 03/03/20 20:25: 2:09 7525 5057 nxtgonpho APPLE 'PHONES no 338 03/03/20 20:27: 3:08 6340 5292 nxtgonpho APPLE 'PHONES no 339 03/03/20 20:30: 14:54 5752 7585 nxtgonpho APPLE 'PHONES no 340 03/03/20 20:30: 14:54 7585 5464 nxtgonpho APPLE 'PHONES no 341 03/03/20 20:36: 16:16 3532 1324 ims APPLE 'PHONES 342 03/03/20 20:45: 0:06 0 48 nxtgonpho APPLE 'PHONES ne 343 03/03/20 20:45: 0:05 48 0 nxtgonpho APPLE 'PHONES ne 344 03/03/20 20:45: 1:55 5221 6055 nxtgonpho APPLE 'PHONES no 345 03/03/20 20:45: 1:56 6055 4933 nxtgonpho APPLE 'PHONES no 346 03/03/20 20:47: 13:12 9776 11284 nxtgonpho APPLE 'PHONES no 347 03/03/20 20:53: 0:34 19114 16639 ims APPLE 'PHONES 348 03/03/20 20:54: 28:56 8836 3160 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 14 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170934 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342992 MOBILITY cro PRIO2O AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .‘•- 00 AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating KT Bytes Bytes Apn 1:1012 INSI MAKE MODEL Date Time %Itweilwr Up Dn (OTC) 349 03/03/20 21:00:55 2:06 5117 6055 nxtgenpho APPLE 'PHONES ne 350 03/03/20 21:00:56 2:06 6055 4829 nxtgenpho APPLE 'PHONES ne 351 03/03/20 21:03:02 4:40 7630 5224 nxtgenpho APPLE 'PHONES ne 352 03/03/20 21:07:41 2:07 5281 6115 nxtgenpho APPLE 'PHONES ne 353 03/03/20 21:07:42 2:07 6115 4993 nxtgenpho APPLE 'PHONES ne 354 03/03/20 21:09:49 0:05 0 Onxtgonpho APPLE 'PHONES ne 355 03/03/20 21:09:58 25:19 7879 5848 nxtgenpho APPLE 'PHONES ne 356 03/03/20 21:24:20 8:46 0 0 ims 357 03/03/20 21:35:17 113:52 6856 11128 nxtgenpho APPLE 'PHONES ne 358 03/03/20 21:35:18 60:00 192 Onxtgonpho APPLE 'PHONES ne 359 03/03/20 21:35:20 112:43 7134 6744 ims APPLE 'PHONES 360 03/03/20 21:35:21 60:00 6744 6978 ims APPLE 'PHONES 361 03/03/20 21:35:37 60:00 32623 20498 ims 362 03/03/20 21:35:54 30:49 5373088 4436025 ims 363 03/03/20 22:35:18 53:52 10936 6280 nxtgenpho APPLE 'PHONES ne 364 03/03/20 22:35:21 52:43 0 0 ims APPLE 'PHONES 365 03/03/20 22:35:37 37:55 3532 1340 ims 366 03/03/20 23:15:41 8:11 0 0 ims 367 03/03/20 23:27:35 0:59 6262 6666 ims APPLE 'PHONES 368 03/03/20 23:27:36 0:59 6666 5998 ims APPLE 'PHONES 369 03/03/20 23:28:02 0:03 0 0 ims 370 03/03/20 23:28:09 1:00 7266 6862 ims APPLE 'PHONES 371 03/03/20 23:28:10 1:00 6798 7002 ims APPLE 'PHONES 372 03/03/20 23:28:33 58:37 18422 9574 ims 373 03/03/20 23:29:10 0:36 7462 5052 nxtgenpho APPLE 'PHONES ne 374 03/03/20 23:29:45 24:20 30213 52870 nxtgenpho APPLE 'PHONES ne 375 03/03/20 23:29:46 24:20 52870 29925 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 15 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170935 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342993 MOBILITY / 1 4 4% PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn nom IISI WA= MOD= Data Time Numbor Up Dn (OTC) 376 03/03/20 23:54:06 15:46 17645 20423 nxtgonpho APPLE 'PROM ne 377 03/03/20 23:54:07 15:47 20423 17069 nxtgonpho APPLE 'PROM ne 378 03/04/20 00:09:54 0:46 11507 6439 nxtgonpho APPLE 'PROM no 379 03/04/20 00:10:39 52:20 56711 52938 nxtgonpho APPLE 'PICNICS no 380 03/04/20 00:10:40 52:20 52938 68486 nxtgonpho APPLE 'PHONES ne 381 03/04/20 00:32:25 2:30 0 0 ims 382 03/04/20 00:45:06 17:53 6510 8370 ims APPLE 'PHONES 383 03/04/20 00:45:07 17:53 8302 6354 ims APPLE 'PHONES 384 03/04/20 00:45:49 0:03 0 0 ims 385 03/04/20 00:46:19 60:00 15323 9894 ims 386 03/04/20 01:03:00 0:59 48 Onxtgonpho APPLE 'PHONES no 387 03/04/20 01:03:58 30:52 55514 57373 nxtgonpho APPLE 'PHONES no 388 03/04/20 01:03:59 30:52 57373 56180 nxtgonpho APPLE 'PHONES no 389 03/04/20 01:34:51 0:06 0 0 nxtgonpho APPLE !PHONES no 390 03/04/20 01:37:32 21:01 25916 28070 nxtgonpho APPLE !PHONES no 391 03/04/20 01:37:33 21:01 28070 25517 nxtgonpho APPLE !PHONES ne 392 03/04/20 01:46:19 55:23 8620 2928 ims 393 03/04/20 01:58:34 63:59 105999 112162 nxtgonpho APPLE !PHONES ne 394 03/04/20 01:58:35 60:00 111873 105108 nxtgonpho APPLE !PHONES ne 395 03/04/20 02:49:16 12:28 264 112 ims APPLE 'PHONES 396 03/04/20 02:49:17 12:28 48 0 ims APPLE 'PHONES 397 03/04/20 02:50:28 6:33 0 0 ims 398 03/04/20 02:58:35 3:59 289 315 nxtgonpho APPLE !PHONES ne 399 03/04/20 03:01:22 0:25 7234 6788 ims APPLE 'PHONES 400 03/04/20 03:01:23 0:26 6788 6970 ims APPLE 'PHONES 401 03/04/20 03:01:44 0:05 2567 1210 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 16 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170936 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342994 MOBILITY 41110 ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ""s ::-_„,•-•° AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INKS INSI MAKE MODEL Date Time Number Up Dn lu7C1 402 03/04/20 03:01:47 0:46 6360 6670 ism APPLE !PHONES 403 03/04/20 03:01:48 0:46 6670 6096 ism APPLE !PHONES 404 03/04/20 03:02:11 39:31 14275 8051 ism 405 03/04/20 03:02:34 0:39 0 Onstgonpho APPLE !PHONES no 406 03/04/20 03:03:12 73:18 28513 15701 nxtgonpho APPLE !PHONES no 407 03/04/20 03:03:13 60:00 7682 13726 nxtgonpho APPLE !PHONES no 408 03/04/20 03:53:13 23:17 7231 6796 Las APPLE !PHONES 409 03/04/20 03:53:14 23:17 6796 7075 iota APPLE !PHONES 410 03/04/20 03:54:40 14:02 9119 6273 iota 411 03/04/20 04:03:13 13:18 8019 14307 nxtgonpho APPLE !PHONES no 412 03/04/20 04:13:39 36:38 13443 7848 iota 413 03/04/20 04:16:31 6:11 6032 5599 nxtgonpho APPLE !PHONES no 414 03/04/20 04:22:41 20:00 11994 13097 nxtgonpho APPLE !PHONES no 415 03/04/20 04:22:42 60:00 65817 44943 nxtgonpho APPLE !PHONES no 416 03/04/20 04:42:41 62:23 34539 53298 nxtgonpho APPLE !PHONES no 417 03/04/20 04:48:51 56:13 7374 39842 Las APPLE !PHONES 418 03/04/20 04:48:52 56:13 6794 7110 iota APPLE !PHONES 419 03/04/20 05:05:48 60:00 15313 8908 iota 420 03/04/20 05:22:42 22:23 578 630 nxtgonpho APPLE !PHONES no 421 03/04/20 05:45:05 2:17 5221 6023 nxtgonpho APPLE !PHONES no 422 03/04/20 05:45:06 2:17 6023 4933 nxtgonpho APPLE !PHONES no 423 03/04/20 05:47:23 37:45 27157 37423 nxtgonpho APPLE !PHONES no 424 03/04/20 05:47:24 37:45 37423 26773 nxtgonpho APPLE !PHONES no 425 03/04/20 06:05:48 16:56 0 0 iota 426 03/04/20 06:25:10 48:24 9251 11190 nxtgonpho APPLE !PHONES no 427 03/04/20 06:26:41 13:02 8491 6410 ism AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 17 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170937 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342995 MOBILITY / 1 445, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .a# AT&T ‘•- UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DOM INSI MAKE MODEL Date Tame Numbor Up Dn (DTC) 428 03/04/20 06:46:22 60:00 13338 7746 ims 1 429 03/04/20 07:13:33 2:05 5222 6075nxtgonphe APPLE !PHONES ne 430 03/04/20 07:13:34 2:05 6075 4934 nxtgenpho APPLE !PHONES ne 431 03/04/20 07:15:39 60:00 8970 6813 nxtgenpho APPLE !PHONES ne 432 03/04/20 07:46:22 0:17 0 0 ims 433 03/04/20 07:51:19 6:15 48 0 ims APPLE !PHONES 434 03/04/20 07:57:34 60:00 15137 8951 ims APPLE !PHONES 435 03/04/20 08:15:39 60:00 58544 77226nxtgonphe APPLE !PHONES ne 436 03/04/20 08:57:34 9:27 0 0 ims APPLE !PHONES 437 03/04/20 09:11:30 8:59 0 0 ims 438 03/04/20 09:15:39 60:00 1723 3095nxtgonphe APPLE !PHONES ne 439 03/04/20 09:25:04 60:00 16490 8950 ims 440 03/04/20 10:15:39 60:00 1384 968 nxtgenpho APPLE !PHONES ne 441 03/04/20 10:25:04 49:47 8388 3036 ims 442 03/04/20 11:15:39 60:00 22590 24929 nxtgenpho APPLE !PHONES ne 443 03/04/20 11:18:22 46:42 14778 8892 ims 444 03/04/20 12:09:39 15:38 8367 6072 ims 445 03/04/20 12:15:39 19:26 21920 25058 nxtgenpho APPLE !PHONES ne 446 03/04/20 12:32:29 15:21 14115 12665 ims 447 03/04/20 12:35:04 2:56 5221 6023 nxtgenpho APPLE !PHONES ne 448 03/04/20 12:35:05 2:56 6023 4933 nxtgenpho APPLE !PHONES ne 449 03/04/20 12:38:01 11:43 7596 6216 nxtgenpho APPLE !PHONES ne 450 03/04/20 12:49:44 34:12 15878 18653 nxtgenpho APPLE !PHONES ne 451 03/04/20 12:49:45 34:12 18653 16658 nxtgenpho APPLE !PHONES ne 452 03/04/20 12:49:49 2:11 8453 6430 Las 453 03/04/20 12:51:43 0:05 0 0 Las APPLE !PHONES 454 03/04/20 12:52:18 26:35 6262 6670 Las APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 18 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170938 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342996 MOBILITY c r. ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn IMRE INSI BANS MODEL Date Time Number Up Dn (OTC) 455 03/04/20 12:52:19 26:35 6670 6106 isms APPLE 'PEONES 456 03/04/20 12:52:35 16:07 8313 5982 isms 457 03/04/20 13:13:15 1:38 0 0 isms 458 03/04/20 13:17:35 6:21 6248 6666 isms APPLE 'PEONES 459 03/04/20 13:17:36 6:21 6666 6092 isms APPLE 'PEONES 460 03/04/20 13:18:53 60:00 16575 9018 isms 461 03/04/20 13:23:57 2:15 14505 5862 nxtgenpho APPLE 'PEONES ne 462 03/04/20 13:26:12 1:08 5112 6021 nxtgenpho APPLE 'PEONES ne 463 03/04/20 13:26:13 1:08 6021 4824 nxtgenpho APPLE 'PHONES ne 464 03/04/20 13:27:21 2:26 6020 4893 nxtgenpho APPLE 'PHONES ne 465 03/04/20 13:29:46 2:07 5222 6196 nxtgenpho APPLE 'PHONES ne 466 03/04/20 13:29:47 2:07 6196 4934 nxtgenpho APPLE 'PHONES ne 467 03/04/20 13:31:54 60:00 25665 13703 nxtgenpho APPLE 'PHONES ne 468 03/04/20 14:18:53 46:08 8496 2820 isms 469 03/04/20 14:31:54 60:00 341 1155 nxtgenpho APPLE 'PHONES ne 470 03/04/20 15:04:19 60:00 0 0 isms 471 03/04/20 15:05:01 26:14 11655 7628 isms 472 03/04/20 15:31:54 9:53 0 0 nxtgenpho APPLE 'PHONES ne 473 03/04/20 15:42:35 60:00 16282 9102 Les 474 03/04/20 16:04:19 11:00 0 0 Les 475 03/04/20 16:08:38 60:00 16925 11000 nxtgenpho APPLE 'PHONES ne 476 03/04/20 16:15:18 0:07 0 0 Les 477 03/04/20 16:17:32 19:08 9817 6348 Les 478 03/04/20 16:40:18 1:19 7364 6104 isms APPLE 'PHONES 479 03/04/20 16:41:37 60:00 12028 4220 isms APPLE 'PHONES 480 03/04/20 16:42:35 60:00 0 0 isms 481 03/04/20 17:08:38 11:35 237 210 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 19 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170939 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342997 MOBILITY cro pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: MS= Item Conn. Conn. Originating ET Bytes Bytes Apn DOLT INSI MAKE MODEL Date Tame Ntivnl-sar Up Dn (OTC/ 482 03/04/20 17:20:1 2:07 5222 6023 nxtgenpho APPLE 'PHONES ne 483 03/04/20 17:20:1 2:07 6023 4934 nxtgenpho APPLE 'PHONES ne 484 03/04/20 17:22:2 17:42 15481 6441 nxtgenpho APPLE 'PHONES ne 485 03/04/20 17:40:0 21:24 22364 19777 nxtgenpho APPLE 'PHONES ne 486 03/04/20 17:40:0 21:24 19777 21884 nxtgenpho APPLE 'PHONES ne 487 03/04/20 17:41:3 60:00 6956 2756 ims APPLE 'PHONES 488 03/04/20 17:42:3 60:00 0 0 ims 489 03/04/20 18:01:2 34:35 31417 25433 nxtgenpho APPLE 'PHONES ne 490 03/04/20 18:36:0 10:11 123900 267707 nxtgenpho APPLE 'PHONES ne 491 03/04/20 18:41:3 44:17 18788 8828 ims APPLE 'PHONES 492 03/04/20 18:42:3 41:54 0 0 ims 493 03/04/20 18:46:1 14:32 2738331 1371751 nxtgenpho APPLE 'PHONES ne 494 03/04/20 18:46:1 14:32 1371751 2737947 nxtgenpho APPLE 'PHONES ne 495 03/04/20 18:52:2 1:45 146201 318486 ims APPLE 'PHONES 496 03/04/20 19:00:4 16:05 54281 30349 nxtgenpho APPLE 'PHONES ne 497 03/04/20 19:16:4 4:26 8112 8235 nxtgenpho APPLE 'PHONES ne 498 03/04/20 19:16:4 4:26 8235 7824 nxtgenpho APPLE 'PHONES ne 499 03/04/20 19:21:1 5:10 12167 13427 nxtgenpho APPLE 'PHONES ne 500 03/04/20 19:21:1 5:10 13427 11783 nxtgenpho APPLE 'PHONES ne 501 03/04/20 19:24:2 1:57 7266 6862 ims APPLE 'PHONES 502 03/04/20 19:24:2 1:57 6794 7002 ims APPLE 'PHONES 503 03/04/20 19:26:2 4:02 11620 6086 nxtgenpho APPLE 'PHONES ne 504 03/04/20 19:26:2 60:00 29067 17646 ims 505 03/04/20 19:30:2 8:16 5707 6616 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 20 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170940 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342998 MOBILITY e t. ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn max IMBI MIME MODEL Date Time Number Up Dn (OTC) 506 03/04/20 19:30:29 8:16 6616 5419 nxtgonpho APPLE IPECIJQB no 507 03/04/20 19:38:45 42:09 22349 17236 nxtgenpho APPLE 'PEONES no 508 03/04/20 19:46:18 0:24 27681 51638 ims 509 03/04/20 20:20:53 7:50 7092 7276 nxtgonpho APPLE 'PHONES no 510 03/04/20 20:20:54 7:50 7276 6708 nxtgonpho APPLE !PHONES no 511 03/04/20 20:26:28 55:05 8604 3036 ims 512 03/04/20 20:28:44 0:05 0 0 nxtgenpho APPLE !PHONES no 513 03/04/20 20:30:50 93:46 76696 88972 nxtgonpho APPLE !PHONES no 514 03/04/20 20:30:51 60:00 52778 46425 nxtgenpho APPLE !PHONES no 515 03/04/20 21:25:15 39:21 8517 8866 ims APPLE !PHONES 516 03/04/20 21:25:16 39:21 8758 8253 ims APPLE !PHONES 517 03/04/20 21:29:51 60:00 25598 14171 ims 518 03/04/20 21:30:51 33:46 36194 29351 nxtgenpho APPLE !PHONES ne 519 03/04/20 22:04:37 4:46 6080 4929 nxtgenpho APPLE IPHONE8 ne 520 03/04/20 22:07:20 48:02 5023984 9542836 ims 521 03/04/20 22:09:22 1:51 5584 6403 nxtgonpho APPLE IPHONE8 no 522 03/04/20 22:09:23 1:51 6403 5296 nxtgenpho APPLE IPEONE8 ne 523 03/04/20 22:11:14 4:08 7260 6155 nxtgenpho APPLE IPEONE8 ne 524 03/04/20 22:15:21 2:11 5436 6473 nxtgonpho APPLE IPEONE8 no 525 03/04/20 22:15:22 2:11 6473 5148 nxtgonpho APPLE IPEONE8 ne 526 03/04/20 22:17:32 15:05 14750 26225 nxtgonpho APPLE IPEONE8 no 527 03/04/20 22:17:33 15:05 26225 15206 nxtgonpho APPLE IPEONE8 no 528 03/04/20 22:29:51 60:00 20512 12964 ims 529 03/04/20 22:32:38 18:11 11974 14957 nxtgonpho APPLE IPEONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 21 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170941 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342999 MOBILITY e s, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Ma= Item Conn. Conn. Originating BT Bytes Bytes Apn MOLT IBIS! Ise Mori. Date Time mink.: Up Dn (OTC/ 530 03/04/20 22:32:39 18:11 14957 11590 nxtgenpho APPLE 'PEONES no 531 03/04/20 22:50:50 3:38 9791 5778 nxtgenpho APPLE 'PEONES no 532 03/04/20 22:54:27 1:02 5221 6023 nxtgenpho APPLE 'PEONES no 533 03/04/20 22:54:28 1:02 6023 4933 nxtgenpho APPLE 'PEONES no 534 03/04/20 22:55:30 4:48 136342 110705 nxtgenpho APPLE 'PHONES ne 535 03/04/20 23:00:17 9:59 16815 14603 nxtgenpho APPLE 'PHONES ne 536 03/04/20 23:00:19 9:58 14603 16431 nxtgenpho APPLE 'PHONES ne 537 03/04/20 23:04:22 0:43 92872 57448 ims 538 03/04/20 23:10:17 4:26 8747 5322 nxtgenpho APPLE 'PHONES ne 539 03/04/20 23:14:42 8:28 5220 6075 nxtgenpho APPLE 'PHONES no 540 03/04/20 23:14:43 8:28 6075 4932 nxtgenpho APPLE 'PHONES no 541 03/04/20 23:23:11 5:52 6866 5015 nxtgenpho APPLE 'PHONES no 542 03/04/20 23:29:02 8:29 5282 6135 nxtgenpho APPLE 'PHONES ne 543 03/04/20 23:29:04 8:28 6135 4994 nxtgenpho APPLE 'PHONES ne 544 03/04/20 23:29:51 22:47 4980 1588 ims 545 03/04/20 23:37:32 4:06 6018 4936 nxtgenpho APPLE 'PHONES no 546 03/04/20 23:41:37 8:28 6755 6847 nxtgenpho APPLE 'PHONES no 547 03/04/20 23:41:38 8:28 6847 6467 nxtgenpho APPLE 'PHONES no 548 03/04/20 23:50:06 35:32 11569 7003 nxtgenpho APPLE 'PHONES no 549 03/04/20 23:54:57 24:22 9623 6213 ims 550 03/05/20 00:22:15 0:19 96 0 ims APPLE 'PHONES 551 03/05/20 00:23:33 25:46 20534 11770 ims 552 03/05/20 00:25:37 3:04 5117 6023 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 22 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170942 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343000 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: alai= Item Conn. Conn. Originating KT Bytes Bytes Apn max INS! ISAPZZ Mori. Date Time Up Dn (UTC) 553 03/05/20 00:25:38 3:04 6023 4829 nxtgenpho APPLE 'PEONES ne 554 03/05/20 00:28:41 6:06 6068 6035 nxtgenpho APPLE 'PEONES ne 555 03/05/20 00:28:42 6:06 6035 5780 nxtgenpho APPLE 'PEONES ne 556 03/05/20 00:34:48 7:20 7430 4957 nxtgenpho APPLE 'PEONES ne 557 03/05/20 00:42:07 0:52 5221 6075 nxtgenpho APPLE 'PEONES ne 558 03/05/20 00:42:08 0:52 6075 4933 nxtgenpho APPLE 'PEONES no 559 03/05/20 00:43:00 2:32 6193 5009 nxtgonpho APPLE IPEOII68 no 560 03/05/20 00:45:31 2:07 5118 6023 nxtgenpho APPLE !PHONES ne 561 03/05/20 00:45:33 2:06 6023 4830 nxtgenpho APPLE 'PHONES ne 562 03/05/20 00:47:40 5:43 16247 12433 nxtgenpho APPLE 'PHONES no 563 03/05/20 00:51:15 0:00 0 0 ims APPLE 'PHONES 564 03/05/20 00:51:24 11:26 31254 20844 ims 565 03/05/20 00:53:22 6:04 7012 10966 nxtgenpho APPLE 'PHONES no 566 03/05/20 00:53:23 6:04 10966 6724 nxtgenpho APPLE 'PHONES no 567 03/05/20 00:55:51 0:33 1723 0 ims 568 03/05/20 00:58:09 0:32 74020 62275 isms 569 03/05/20 00:59:27 8:23 6804 4951 nxtgenpho APPLE 'PHONES ne 570 03/05/20 01:07:12 22:51 10774 6954 isms 571 03/05/20 01:07:49 8:29 5113 6021 nxtgenpho APPLE 'PHONES ne 572 03/05/20 01:07:50 8:29 6021 4825 nxtgenpho APPLE 'PHONES ne 573 03/05/20 01:16:19 15:28 7603 5208 nxtgenpho APPLE 'PHONES ne 574 03/05/20 01:31:46 2:06 5784 6614 nxtgenpho APPLE 'PHONES no 575 03/05/20 01:31:47 2:06 6614 5496 nxtgenpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 23 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170943 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343001 MOBILITY cre ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTZ. Run Dato: 06/17/2020 Run Time: Data Usage For: "IS= Item Conn. Conn. Originating ET Bytes Bytes Apn IMMIX INSI MAKE MODEL Date Time Number Up Dn (OTC) 576 03/05/20 01:32:07 1:45 6262 6666 ims APPLE 'PHONES 577 03/05/20 01:32:08 1:45 6666 5998 ims APPLE 'PHONES 578 03/05/20 01:33:54 35:09 33154 14141 nxtgonpho APPLE 'PHONES ne 579 03/05/20 01:33:59 49:38 15602 8058 ims 580 03/05/20 02:09:03 27:21 708 1490 nxtgonpho APPLE 'PHONES ne 581 03/05/20 02:24:41 6:43 8962 7128 ims APPLE 'PHONES 582 03/05/20 02:31:24 60:00 12336 4468 ims APPLE 'PHONES 583 03/05/20 02:36:23 2:33 5583 6387 nxtgonpho APPLE 'PHONES ne 584 03/05/20 02:36:24 2:33 6387 5295 nxtgonpho APPLE 'PHONES ne 585 03/05/20 02:38:56 12:47 5709 6616 nxtgonpho APPLE 'PHONES no 586 03/05/20 02:38:57 12:47 6616 5421 nxtgonpho APPLE 'PHONES no 587 03/05/20 02:51:44 2:18 0 0 nxtgonpho APPLE 'PHONES no 588 03/05/20 02:54:01 3:01 5535 6475 nxtgonpho APPLE 'PHONES ne 589 03/05/20 02:54:02 3:01 6475 5247 nxtgonpho APPLE 'PHONES ne 590 03/05/20 02:57:03 2:04 5435 6401 nxtgonpho APPLE 'PHONES no 591 03/05/20 02:57:04 2:04 6401 5147 nxtgonpho APPLE 'PHONES no 592 03/05/20 02:59:08 13:23 6613 5266 nxtgonpho APPLE 'PHONES ne 593 03/05/20 03:12:30 8:47 5499 6678 nxtgonpho APPLE 'PHONES ne 594 03/05/20 03:12:31 8:47 6678 5211 nxtgonpho APPLE 'PHONES ne 595 03/05/20 03:21:18 10:02 8179 5715 nxtgonpho APPLE 'PHONES ne 596 03/05/20 03:31:20 26:07 8414 6032 nxtgonpho APPLE 'PHONES ne 597 03/05/20 03:31:24 2:30 0 0 ims APPLE 'PHONES 598 03/05/20 03:41:55 22:09 10019 6550 ims 599 03/05/20 03:57:28 4:01 7810 5394 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 24 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170944 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343002 MOBILITY cm% ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in / 1 4-.0 AT&T OTC. Run Date,: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn fl at ItC3I MAKE MODEL Date Time Number Up Dn (OTC) 600 03/05/20 04:01:29 16:23 7079 6004 nxtgenpho APPLE 'PHONES ne 601 03/05/20 04:09:31 1:17 48 0 ims APPLE 'PHONES 602 03/05/20 04:10:48 43:41 13523 7927 ims APPLE 'PHONES 603 03/05/20 04:17:53 0:58 6388 5102 nxtgenpho APPLE 'PHONES ne 604 03/05/20 04:18:50 8:54 5584 6475 nxtgenpho APPLE 'PHONES ne 605 03/05/20 04:18:51 8:54 6475 5296 nxtgenpho APPLE 'PHONES ne 606 03/05/20 04:27:44 10:33 5438 6475 nxtgenpho APPLE 'PHONES ne 607 03/05/20 04:27:45 10:33 6475 6150 nxtgenpho APPLE 'PHONES ne 608 03/05/20 04:38:18 16:10 6658 5674 nxtgenpho APPLE 'PHONES ne 609 03/05/20 04:54:28 5:33 6030 5595 nxtgenpho APPLE 'PHONES ne 610 03/05/20 04:59:22 60:00 16731 9110 ims 611 03/05/20 05:00:01 2:05 5221 6075nmtgonphe APPLE 'PHONES ne 612 03/05/20 05:00:02 2:06 6075 4933 nxtgenpho APPLE 'PHONES ne 613 03/05/20 05:02:07 7:01 7430 4955 nxtgenpho APPLE 'PHONES ne 614 03/05/20 05:09:08 3:15 6866 5015 nxtgenpho APPLE 'PHONES ne 615 03/05/20 05:12:23 6:13 6080 4953 nxtgenpho APPLE 'PHONES ne 616 03/05/20 05:18:36 2:04 5281 6083 nxtgenpho APPLE 'PHONES ne 617 03/05/20 05:18:37 2:04 6083 4993 nxtgenpho APPLE 'PHONES ne 618 03/05/20 05:20:41 13:47 7603 5112 nxtgenpho APPLE 'PHONES ne 619 03/05/20 05:34:29 0:29 6231 5060 nxtgenpho APPLE 'PHONES ne 620 03/05/20 05:34:58 4:52 6806 4955 nxtgenpho APPLE 'PHONES ne 621 03/05/20 05:39:49 2:06 288 48 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 25 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. S0NY_GM_00170945 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343003 MOBILITY „so w PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: "MI= Item Conn. Conn. originating BT Bytes Bytes Apn THE IMSI IOR MODEL Date Time Number Up Dn (OTC) 622 03/05/20 05:39:51 2:05 48 0 nxtgenphe 3587080982063725 310410214827503 APPLE IPROME8 ne 623 03/05/20 05:41:56 23:40 6364 5098 nxtgenphe APPLE IPROME8 ne 624 03/05/20 05:59:22 15:46 0 0 ims 625 03/05/20 06:05:35 2:05 5221 6075 nxtgenphe APPLE IPHONE8 ne 626 03/05/20 06:05:36 2:05 6075 4933 nxtgenphe APPLE 'PHONES ne 627 03/05/20 06:07:41 13:59 7847 5533 nxtgenphe APPLE 'PHONES ne 628 03/05/20 06:16:28 8:43 0 0 ims 629 03/05/20 06:21:40 4:18 6866 5017 nxtgenphe APPLE 'PHONES ne 630 03/05/20 06:25:58 14:03 7847 5582 nxtgenphe APPLE 'PHONES ne 631 03/05/20 06:30:52 47:56 23127 9750 ims 632 03/05/20 06:40:01 0:54 7546 5108 nxtgenphe APPLE 'PHONES ne 633 03/05/20 06:40:55 0:44 48 0 nxtgenphe APPLE 'PHONES ne 634 03/05/20 06:41:38 2:06 288 48 nxtgenphe APPLE 'PHONES ne 635 03/05/20 06:41:40 2:05 48 0 nxtgenphe APPLE 'PHONES ne 636 03/05/20 06:43:45 12:14 6193 5044 nxtgenphe APPLE !PHONES ne 637 03/05/20 06:55:58 2:17 5281 6135 nxtgenphe APPLE 'PHONES ne 638 03/05/20 06:56:00 2:16 6135 4993 nxtgenphe APPLE 'PHONES ne 639 03/05/20 06:58:16 22:26 7546 6684 nxtgenphe APPLE 'PHONES ne 640 03/05/20 07:08:46 1:37 0 0 ims 641 03/05/20 07:18:49 60:00 20702 10498 ims 642 03/05/20 07:34:11 10:14 8655 5731 nxtgenphe APPLE 'PHONES ne 643 03/05/20 08:18:49 3:30 0 0 ims 644 03/05/20 08:29:56 16:06 8407 6169 ims 645 03/05/20 08:49:39 9:48 8187 5998 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 26 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170946 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343004 MOBILITY c .o ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: "IS= Item Conn. Conn. Originating ET Bytes Bytes Apn WANE MODEM Date Time Number Up Dn (OTC) 646 03/05/20 09:06:19 60:00 16685 9202 ims 647 03/05/20 10:06:19 16:47 0 0 ims 648 03/05/20 10:09:57 19:22 6191 5041 nxtgonpho APPLE IPEOEW68 no 649 03/05/20 10:28:37 60:00 15269 8862 ims 650 03/05/20 10:29:19 14:38 5326 6248 nxtgonpho APPLE 'PHONES no 651 03/05/20 10:29:20 14:38 6248 5038 nxtgonpho APPLE !PHONES no 652 03/05/20 10:43:58 55:27 7625 8243 nxtgonpho APPLE !PHONES no 653 03/05/20 11:28:37 18:22 0 0 ims 654 03/05/20 11:39:26 60:00 12056 9665 nxtgonpho APPLE !PHONES no 655 03/05/20 11:48:45 4:26 0 0 ins APPLE !PHONES 656 03/05/20 11:53:11 0:00 0 0 ims APPLE !PHONES 657 03/05/20 11:53:11 0:00 0 0 ims APPLE !PHONES 658 03/05/20 12:00:53 60:00 19677 10140 ims 659 03/05/20 12:39:26 53:45 36378 21287 nxtgonpho APPLE !PHONES no 660 03/05/20 13:00:53 54:06 19612 10568 ims 661 03/05/20 13:22:35 1:24 123162 257851 ims 662 03/05/20 13:33:11 0:21 5381 6256 nxtgonpho APPLE !PEONES no 663 03/05/20 13:33:12 0:21 6256 5093 nxtgonpho APPLE !PEONES no 664 03/05/20 13:33:33 32:14 9598 8370 nxtgonpho APPLE !PEONES no 665 03/05/20 13:57:56 7:15 17920 16272 ims APPLE !PEONES 666 03/05/20 14:04:43 0:17 0 24131 ims APPLE !PEONES 667 03/05/20 14:05:11 60:00 15448 4980 ims APPLE !PEONES 668 03/05/20 14:05:46 2:07 5554 9296 nxtgonpho APPLE !PEONES no 669 03/05/20 14:05:48 2:06 9296 5266 nxtgonpho APPLE !PEONES no 670 03/05/20 14:07:54 35:19 26806 16478 nxtgonpho APPLE IPEONE8 no 671 03/05/20 14:43:12 2:07 5222 6075 nxtgonpho APPLE IPEONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 27 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SONY_GM_00170947 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343005 MOBILITY dro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTZ. Run Date: 06/17/2020 Run Time: Data Usage For: NM= Item Conn. Conn. Originating ET Bytes Bytes Apn EMU IMSI MAKS MODEL Date Time up Dn (OTC) 672 03/05/20 14:43:13 2:07 6075 4934 nxtgenpho APPLE 'PEONES ne 673 03/05/20 14:45:20 9:32 6659 6136 nxtgenpho APPLE 'PROMS ne 674 03/05/20 14:54:52 2:02 12120 10092 nxtgenpho APPLE 'PROMS ne 675 03/05/20 14:56:54 2:09 5221 6023 nxtgenpho APPLE IPE06E6 ne 676 03/05/20 14:56:55 2:09 6023 4933 nxtgenpho APPLE 'PHONES ne 677 03/05/20 14:59:05 13:21 7223 5581 nxtgenpho APPLE 'PHONES ne 678 03/05/20 15:05:11 56:38 38340 20760 ims APPLE !PHONES 679 03/05/20 15:12:25 2:07 5116 6023 nxtgenpho APPLE !PHONES ne 680 03/05/20 15:12:27 2:06 6023 4828 nxtgenpho APPLE !PHONES ne 681 03/05/20 15:14:33 15:06 33334 21642 nxtgenpho APPLE !PHONES ne 682 03/05/20 15:29:38 2:07 5117 6023 nxtgenpho APPLE !PHONES ne 683 03/05/20 15:29:39 2:07 6023 4829 nxtgenpho APPLE !PHONES ne 684 03/05/20 15:31:46 13:19 7667 5217 nxtgenpho APPLE !PHONES ne 685 03/05/20 15:45:05 8:11 5220 6023 nxtgenpho APPLE !PHONES ne 686 03/05/20 15:45:06 8:11 6023 4932 nxtgenpho APPLE !PHONES ne 687 03/05/20 15:49:25 0:22 0 1254 ims APPLE !PHONES 688 03/05/20 15:49:58 0:07 0 1548 ims APPLE !PHONES 689 03/05/20 15:53:17 15:34 12631 10152 nxtgenpho APPLE !PHONES ne 690 03/05/20 16:02:35 60:00 11799 7322 ims 691 03/05/20 16:08:50 2:18 5221 6023 nxtgenpho APPLE !PHONES ne 692 03/05/20 16:08:51 2:18 6023 4933 nxtgenpho APPLE !PHONES ne 693 03/05/20 16:11:08 1:25 5221 6075 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 28 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170948 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343006 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Dato: 06/17/2020 Run Time: Data Usage For: NM= Item Conn. Conn. Originating ET Bytes Bytes Apn MOM II I MAKE MODEL Date Time Dunbar Up Dn (OTC) 694 03/05/20 16:11:09 1:25 6075 4933 nxtgonpho APPLE 'PHONES no 695 03/05/20 16:12:34 0:49 12388 5896 nxtgenpho APPLE 'PHONES no 696 03/05/20 16:13:22 14:41 5839 6939 nxtgonpho APPLE 'PHONES no 697 03/05/20 16:13:23 14:41 6939 5551 nxtgonpho APPLE 'PHONES no 698 03/05/20 16:28:04 1:36 0 0 nxtgenpho APPLE 'PHONES no 699 03/05/20 16:29:39 1:14 5218 6073 nxtgonpho APPLE 'PHONES no 700 03/05/20 16:29:40 1:14 6073 4930 nxtgonpho APPLE 'PHONES no 701 03/05/20 16:30:54 10:00 9273 7536 nxtgonpho APPLE 'PHONES no 702 03/05/20 16:40:53 8:56 12853 8449 nxtgonpho APPLE 'PHONES no 703 03/05/20 16:40:54 8:56 8449 12565 nxtgonpho APPLE 'PHONES no 704 03/05/20 16:49:50 0:05 0 Onxtgonpho APPLE 'PHONES ne 705 03/05/20 16:50:18 23:43 11746 8806 nxtgonpho APPLE 'PHONES no 706 03/05/20 17:02:35 60:00 30884 17448 imo 707 03/05/20 17:14:00 0:51 5118 6023 nxtgonpho APPLE 'PHONES no 708 03/05/20 17:14:02 0:50 6023 4830 nxtgonpho APPLE 'PHONES no 709 03/05/20 17:14:10 0:37 24028 73435 imo 710 03/05/20 17:14:52 9:12 39449 28212 nxtgonpho APPLE 'PHONES no 711 03/05/20 17:15:25 0:08 3465 13132 imo 712 03/05/20 17:24:04 6:01 14748 12013 nxtgonpho APPLE 'PHONES no 713 03/05/20 17:30:04 2:10 8275 9000 nxtgonpho APPLE 'PHONES no 714 03/05/20 17:30:06 2:09 9000 7891 nxtgonpho APPLE 'PHONES no 715 03/05/20 17:32:15 48:36 34297 24332 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 29 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170949 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343007 MOBILITY ct, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .4 AT&T `-- UTC. Run Data: 06/17/2020 Run Timm: Data usage For: Item Conn. Conn. Originating BT Bytes Bytes Apn DMZ I16I MANZ MODEL Data Tame Number Up Dn (OTC: 716 03/05/20 18:02:35 52:23 43408 28432 ims 717 03/05/20 18:20:51 1:46 5318 6071 nxtgenpho APPLE 'PEONES ne 718 03/05/20 18:20:52 1:46 6071 4934 nxtgenpho APPLE 'PEONES ne 719 03/05/20 18:22:38 27:23 63753 41374 nxtgenpho APPLE 'PEONES ne 720 03/05/20 18:27:15 0:24 12736 49564 ims 721 03/05/20 18:28:56 0:24 15889 46520 ims 722 03/05/20 18:42:22 0:24 16574 44337 ims 723 03/05/20 18:50:00 2:09 5113 6073 nxtgenpho APPLE 'PHONES ne 724 03/05/20 18:50:01 2:09 6073 4825 nxtgenpho APPLE IPHONE8 ne 725 03/05/20 18:52:10 1:34 6020 4941 nxtgenpho APPLE IPHONE8 ne 726 03/05/20 18:53:43 15:50 377833 92026 nxtgenpho APPLE IPHONE8 ne 727 03/05/20 18:53:44 15:50 91974 379105 nxtgenpho APPLE IPHONE8 ne 728 03/05/20 18:54:57 10:21 7160 6814 ims APPLE IPHONE8 729 03/05/20 18:54:58 10:21 6746 7004 ims APPLE IPHONE8 730 03/05/20 19:02:11 10:31 11538 6746 ims 731 03/05/20 19:05:18 4:15 6316 6646 ims APPLE IPHONE8 732 03/05/20 19:05:19 4:15 6646 5964 ims APPLE IPHONE8 733 03/05/20 19:09:34 16:58 56922 89719 nxtgenpho APPLE IPHONE8 ne 734 03/05/20 19:09:37 16:55 8904 7985 ims APPLE IPHONE8 735 03/05/20 19:26:32 0:41 2654 4560 nxtgenpho APPLE IPHONE8 ne 736 03/05/20 19:26:32 0:41 0 0 ims APPLE IPHONE8 737 03/05/20 19:27:13 0:42 3250 7682 nxtgenpho APPLE IPHONE8 ne 738 03/05/20 19:27:13 0:42 0 0 ims APPLE IPHONE8 739 03/05/20 19:27:55 0:30 0 Onstgenpho APPLE IPHONE8 ne 740 03/05/20 19:27:55 0:30 0 0 ims APPLE IPHONE8 741 03/05/20 19:28:25 21:30 1429910 18614505 nxtgenpho APPLE IPHONE8 ne 742 03/05/20 19:28:25 60:00 7788 4128 ims APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 30 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00170950 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343008 MOBILITY e s, pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET sytos Bytes Apn IN/LI IMSI MESE MODEL Data Time Number Up Dn (UTC) 743 03/05/20 19:49:55 32:08 1214122 3567455 nxtgonphe APPLE 'PEONES no 744 03/05/20 20:22:03 5:52 351921 19649061 nxtgonphe APPLE 'PEONES no 745 03/05/20 20:27:55 35:39 1936311 18204765 nxtgonphe APPLE 'PEONES no 746 03/05/20 20:28:25 60:00 23956 16172 ims APPLE IPEONE8 747 03/05/20 20:38:36 9:14 1550472 1193028 ims APPLE IPHONE8 748 03/05/20 20:51:31 0:04 2449 10497 ims APPLE IPHONE8 749 03/05/20 21:03:34 20:51 824545 926983 nxtgonphe APPLE !PHONES no 750 03/05/20 21:24:25 9:16 676408 792894 nxtgonphe APPLE !PHONES no 751 03/05/20 21:28:25 5:16 0 0 ims APPLE !PHONES 752 03/05/20 21:33:41 0:50 0 Onxtgonphe APPLE !PHONES no 753 03/05/20 21:33:41 0:50 0 0 ims APPLE !PHONES 754 03/05/20 21:34:31 1:02 0 Onmtgonphe APPLE !PHONES no 755 03/05/20 21:34:31 1:02 0 0 ims APPLE !PHONES 756 03/05/20 21:35:33 1:43 0 Onmtgonphe APPLE !PHONES no 757 03/05/20 21:35:33 1:43 0 0 ims APPLE !PHONES 758 03/05/20 21:37:16 8:54 22653 43544 nxtgonphe APPLE !PHONES no 759 03/05/20 21:37:16 8:54 0 0 ims APPLE !PHONES 760 03/05/20 21:46:09 3:53 21998 14343 nxtgonphe APPLE !PHONES no 761 03/05/20 21:46:10 3:52 6246 6668 ims APPLE !PHONES 762 03/05/20 21:46:10 3:53 14343 21710 nxtgonphe APPLE !PHONES no 763 03/05/20 21:46:11 3:52 6668 5982 ims APPLE !PHONES 764 03/05/20 21:50:03 1:12 13504 14911 nxtgonphe APPLE !PHONES no 765 03/05/20 21:50:05 1:10 6666 5964 ims APPLE !PHONES 766 03/05/20 21:51:14 8:20 913741 108412 nxtgonphe APPLE !PHONES no 767 03/05/20 21:51:16 8:18 6226 6774 ims APPLE !PHONES 768 03/05/20 21:51:16 8:19 108412 927006 nxtgonphe APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 31 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170951 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343009 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. .s.AT&T ‘•- Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ INSI MAKE MODEL Date Time Number Up Dn (OTC) 769 03/05/20 21:51:17 8:18 6666 5962 isms APPLE 'PHONES 770 03/05/20 21:59:34 1:24 15373 13467 nxtgenpho APPLE 'PHONES ne 771 03/05/20 21:59:35 1:23 6316 6778 isms APPLE 'PHONES 772 03/05/20 21:59:35 1:24 13467 20245 nxtgenpho APPLE 'PHONES ne 773 03/05/20 21:59:37 1:22 6670 5964 isms APPLE 'PHONES 774 03/05/20 22:00:58 5:42 5220 6023 nxtgenpho APPLE 'PHONES ne 775 03/05/20 22:00:59 5:42 6023 4932 nxtgenpho APPLE 'PHONES ne 776 03/05/20 22:01:03 10:56 8523 6446 isms 777 03/05/20 22:04:31 2:09 7114 6846 isms APPLE 'PHONES 778 03/05/20 22:04:32 2:09 6738 6850 isms APPLE 'PHONES 779 03/05/20 22:06:41 0:06 0 0nxtgonpho APPLE 'PHONES ne 780 03/05/20 22:08:13 16:17 20308 20681 nxtgenpho APPLE 'PHONES ne 781 03/05/20 22:08:14 14:56 6262 6782 isms APPLE 'PHONES 782 03/05/20 22:08:14 16:16 20681 39271 nxtgenpho APPLE 'PHONES ne 783 03/05/20 22:08:15 14:56 6674 5998 isms APPLE 'PHONES 784 03/05/20 22:23:11 0:00 0 0 isms APPLE 'PHONES 785 03/05/20 22:23:12 1:18 6263 6674 isms APPLE 'PHONES 786 03/05/20 22:23:13 1:19 6674 5999 isms APPLE 'PHONES 787 03/05/20 22:24:32 5:58 9126 5538 nxtgenpho APPLE 'PHONES ne 788 03/05/20 22:24:34 4:29 8898 8820 isms APPLE 'PHONES 789 03/05/20 22:29:07 1:23 7958 6082 isms APPLE 'PHONES 790 03/05/20 22:30:29 3:34 7691 8133 nxtgenpho APPLE 'PHONES ne 791 03/05/20 22:30:31 3:32 7136 6852 isms APPLE 'PHONES 792 03/05/20 22:30:31 3:33 8133 9592 nxtgenpho APPLE 'PHONES ne 793 03/05/20 22:30:32 3:32 6744 6872 isms APPLE 'PHONES 794 03/05/20 22:33:37 0:33 144 144 isms APPLE 'PHONES 795 03/05/20 22:34:04 15:16 19427 29128 nxtgenpho APPLE 'PHONES ne 796 03/05/20 22:34:10 1:36 8070 6138 isms APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 32 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170952 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343010 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTZ. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytos Bytes Apn L@I INSI MAKE MODEL Date Time Number Up Dn (OTC) 797 03/05/20 22:34: 1:36 8006 6138 ism APPLE 'PHONES 798 03/05/20 22:35: 6:23 3408 1340 ism APPLE 'PHONES 799 03/05/20 22:42:1 7:11 3344 1464 ism APPLE 'PHONES 800 03/05/20 22:42:1 7:11 3280 1464 ism APPLE 'PHONES 801 03/05/20 22:49: 17:10 7929 6401 nxtgenpho APPLE 'PHONES ne 802 03/05/20 22:49: 17:09 6458 7404 ism APPLE 'PHONES 803 03/05/20 22:49: 17:10 6401 8586 nxtgenpho APPLE 'PHONES ne 804 03/05/20 22:49: 17:09 7404 6214 ism APPLE 'PHONES 805 03/05/20 22:54: 7:36 16014 11770 ism 806 03/05/20 23:06: 42:29 1120699 1146855 nxtgenpho APPLE 'PHONES ne 807 03/05/20 23:06: 42:26 10802 10151 ism APPLE 'PHONES 808 03/05/20 23:48: 12:42 13580 47470 nxtgenpho APPLE 'PHONES ne 809 03/05/20 23:49: 12:42 46210 16744 nxtgenpho APPLE 'PHONES ne 810 03/05/20 23:49: 12:40 6248 31006 ism APPLE 'PHONES 811 03/05/20 23:49: 12:40 6670 6092 ism APPLE 'PHONES 812 03/05/20 23:56: 60:00 18177 10135 ism 813 03/06/20 00:01: 39:39 13061 11748 nxtgenpho APPLE 'PHONES ne 814 03/06/20 00:41: 60:00 14747 12058 nxtgenpho APPLE 'PHONES ne 815 03/06/20 00:56: 48:52 7032 2772 ims 816 03/06/20 01:41: 60:00 11245 7612 nxtgenpho APPLE 'PHONES ne 817 03/06/20 01:47: 20:33 10047 6550 ism APPLE 'PHONES 818 03/06/20 02:08: 0:01 0 0 ism APPLE 'PHONES 819 03/06/20 02:08: 0:01 0 0 ims APPLE 'PHONES 820 03/06/20 02:08: 4:01 8573 6344 ism 821 03/06/20 02:14: 21:21 8307 6048 isms 822 03/06/20 02:38: 41:02 16240 8162 isms 823 03/06/20 02:41: 60:00 1322 1155 nxtgenpho APPLE 'PHONES ne 824 03/06/20 03:25: 7:24 0 0 isms 825 03/06/20 03:37: 60:00 16650 9085 isms AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 33 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170953 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343011 MOBILITY cm% P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in :•-es AT&T OTC. Run Date: 06/17/2020 Run Tine: Data Usage For: Item Conn. Conn. Originating 22 Bytes Bytes Apn IB@I IMSI MAKE MODEL Date Time Number up 0n (OTC/ 826 03/06/20 03:41:22 60:00 49981 10993 nxtgenpho APPIZ 'PROMS ne 827 03/06/20 04:37:25 22:28 4964 1588 ims 828 03/06/20 04:41:22 60:00 1433 1513 nxtgenpho APPIZ 'PROMS ne 829 03/06/20 05:06:31 30:16 8371 6046 ims 830 03/06/20 05:41:22 60:00 1270 1050 nxtgenpho APPIZ 'PROMS ne 831 03/06/20 05:45:39 34:57 8373 6162 ims 832 03/06/20 06:24:30 5:56 0 0 ims 833 03/06/20 06:37:01 60:00 16695 9034 ims 834 03/06/20 06:41:22 60:00 1211 735 nxtgenpho APPLE 'PHONES ne 835 03/06/20 07:37:01 13:53 0 0 ims 836 03/06/20 07:41:22 60:00 1270 1050 nxtgenpho APPLE 'PHONES ne 837 03/06/20 07:52:58 11:23 8199 5962 ims 838 03/06/20 08:07:51 60:00 11735 7554 ims 839 03/06/20 08:41:22 60:00 865 525 nxtgenpho APPLE 'PHONES ne 840 03/06/20 09:07:51 13:42 3424 1340 ims 841 03/06/20 09:25:04 26:28 8311 6214 ims 842 03/06/20 09:41:22 60:00 1038 630 nxtgenpho APPLE 'PHONES ne 843 03/06/20 09:58:33 60:00 11769 7519 ims 844 03/06/20 10:41:22 60:00 986 589 nxtgenpho APPLE 'PHONES ne 845 03/06/20 10:58:33 13:38 3532 1324 ims 846 03/06/20 11:14:49 60:00 11623 7556 ims 847 03/06/20 11:41:22 5:25 510 3082 nxtgenpho APPLE 'PHONES ne 848 03/06/20 11:46:46 1:46 5440 6475 nxtgenpho APPLE 'PHONES ne 849 03/06/20 11:46:47 1:46 6475 5152 nxtgenpho APPLE 'PHONES ne 850 03/06/20 11:48:33 14:26 7666 5214 nxtgenpho APPLE 'PHONES ne 851 03/06/20 12:02:58 12:46 28108 29261 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 34 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170954 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343012 MOBILITY 4111. PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in •/4 " 3-a. -s AT&T 41citsot il° OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn ZIOLI INSI NAAS MODEL Date Tame Number Up Dn (OTC) 852 03/06/20 12:02:59 12:46 29261 27532 nxtgonphe 3587080982063725 310410214827503 APPLE 'PHONES ne 853 03/06/20 12:14:49 17:54 5072 1572 ims 854 03/06/20 12:15:45 18:55 8345 5919nmtgonphe 3 APPLE !PHONES ne 855 03/06/20 12:34:17 60:00 15887 8782 ims 856 03/06/20 12:34:40 2:06 5931 10717 nxtgonphe 3 APPLE !PHONES ne 857 03/06/20 12:34:41 2:06 10717 5643 nxtgonphe 3 APPLE !PHONES ne 858 03/06/20 12:36:47 60:00 8424 7148 nxtgonphe 3 APPLE !PHONES ne 859 03/06/20 13:34:17 33:45 3424 1324 ims 860 03/06/20 13:36:47 60:00 2159 5574 nxtgonphe 3 APPLE !PHONES ne 861 03/06/20 14:11:36 33:17 11410 7501 ims 3 APPLE !PHONES 862 03/06/20 14:36:47 31:10 11189 6538 nxtgonphe 3 APPLE !PHONES ne 863 03/06/20 14:44:53 28:56 20364 11140 ims 3 APPLE !PHONES 864 03/06/20 15:07:56 1:30 5668 7321 nxtgonphe 3 APPLE !PHONES ne 865 03/06/20 15:07:57 1:30 7321 5380 nxtgonphe 3 APPLE !PHONES ne 866 03/06/20 15:08:13 1:12 183147 212153 ims 3 APPLE !PHONES 867 03/06/20 15:09:27 4:49 7244 5221 nxtgonphe 3 APPLE !PHONES ne 868 03/06/20 15:14:15 8:18 5583 6403nmtgonphe 3 APPLE !PHONES ne 869 03/06/20 15:14:16 8:18 6403 5295 nxtgonphe 3 APPLE !PHONES ne 870 03/06/20 15:15:16 4:51 8435 6304 ims 871 03/06/20 15:22:34 3:06 7244 5269nmtgonphe 3 APPLE !PHONES ne 872 03/06/20 15:22:49 10:49 8203 5938 ims 873 03/06/20 15:25:40 4:52 5644 6401 nxtgonphe 3 APPLE !PHONES ne 874 03/06/20 15:25:41 4:52 6401 5356 nxtgonphe 3 APPLE !PHONES ne 875 03/06/20 15:30:33 28:38 19589 13840 nxtgonphe 3 APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 35 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170955 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343013 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in / 1 4-00 AT&T UTZ. Run Date: 06/17/2020 Run Time: Data Usage For: UM= Item Conn. Conn. Originating ET Bytes Bytes Alm IUME MOD= Date Time Up Dn (OTC) 876 03/06/20 15:40:47 4:29 7400 6103 ims APPLE !PEONES 877 03/06/20 15:45:16 12:01 5072 1572 ims APPLE !PEONES 878 03/06/20 15:58:22 0:24 8256 7072 ims APPLE !PEONES 879 03/06/20 15:58:46 60:00 10688 4144 ims APPLE !PEONES 880 03/06/20 15:59:10 2:07 5236 6256nmtgonphe APPLE !PEONES no 881 03/06/20 15:59:11 2:07 6256 4948 nxtgonphe APPLE !PEONES ne 882 03/06/20 16:01:18 44:18 16273 12620 nxtgonphe APPLE !PEONES ne 883 03/06/20 16:45:35 2:10 10586 7639 nxtgonphe APPLE 'PHONES ne 884 03/06/20 16:45:36 2:10 7639 10298 nxtgonphe APPLE !PHONES no 885 03/06/20 16:47:46 60:00 12772 15399 nxtgonphe APPLE !PHONES no 886 03/06/20 16:58:46 2:08 0 0 ims APPLE !PHONES 887 03/06/20 17:47:46 24:54 369 1125 nxtgonphe APPLE !PHONES no 888 03/06/20 18:01:13 3:34 11022 6113 ims 889 03/06/20 18:12:39 30:26 36081 41844 nxtgonphe APPLE !PHONES no 890 03/06/20 18:12:40 30:26 41844 39403 nxtgonphe APPLE !PHONES no 891 03/06/20 18:12:47 11:23 0 0 ism 892 03/06/20 18:23:51 19:14 6426 8082 ism APPLE !PHONES 893 03/06/20 18:23:52 19:14 8082 6162 ism APPLE !PHONES 894 03/06/20 18:24:10 60:00 16795 9035 ism 895 03/06/20 18:43:06 6:32 9119 5813 nxtgenpho APPLE !PHONES no 896 03/06/20 18:49:37 4:09 7995 10045 nxtgonphe APPLE !PHONES ne 897 03/06/20 18:49:38 4:10 10045 7611 nxtgonphe APPLE !PHONES ne 898 03/06/20 18:53:48 3:51 15430 12196 nxtgonphe APPLE !PHONES ne 899 03/06/20 18:57:38 8:24 7732 18371 nxtgonphe APPLE !PHONES ne 900 03/06/20 18:57:40 8:23 18371 7444 nxtgonphe APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 36 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170956 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343014 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in / 1 4-is AT&T OTC. Run Date: 06/17/2020 Run Tine: Data Usage For: Item Conn. Conn. Originating ST Bytes Bytes Apn DELI IMSI IUME MODEL Date Tine Number Up Dn (UTC) 901 03/06/20 19:06:03 7:13 8502 6668 nxtgenpho APPLE 'PEONES ne 902 03/06/20 19:13:16 1:04 6478 5616 nxtgonpho APPLE 'PEONES no 903 03/06/20 19:14:19 2:09 5117 6075 nxtgonpho APPLE IPECME8 no 904 03/06/20 19:14:20 2:09 6075 4829 nxtgonpho APPLE 'PHONED no 905 03/06/20 19:16:29 35:51 7480 6950 nxtgenpho APPLE 'PHONED ne 906 03/06/20 19:24:10 21:10 3424 1340 ims 907 03/06/20 19:48:01 31:02 23529 15801 ims APPLE 'PHONES 908 03/06/20 19:52:19 1:11 7184 7637 nxtgenpho APPLE 'PHONES ne 909 03/06/20 19:52:20 1:11 7637 6896 nxtgenpho APPLE 'PHONES ne 910 03/06/20 19:53:31 4:27 9262 7982 nxtgenpho APPLE 'PHONES ne 911 03/06/20 19:57:58 8:17 10717 21377 nxtgenpho APPLE 'PHONES ne 912 03/06/20 19:57:59 8:17 21377 10429 nxtgenpho APPLE 'PHONES ne 913 03/06/20 20:02:36 0:25 13104 53930 ims 914 03/06/20 20:06:16 16:56 14116 29041 nxtgenpho APPLE 'PHONES ne 915 03/06/20 20:19:03 0:15 6520 1432 ims APPLE 'PHONES 916 03/06/20 20:19:03 0:15 2920 1432 ims APPLE 'PHONES 917 03/06/20 20:19:18 12:10 3424 1324 ims APPLE 'PHONES 918 03/06/20 20:23:11 24:11 394055 54947 nxtgenpho APPLE 'PHONES ne 919 03/06/20 20:23:12 24:11 54947 400921 nxtgenpho APPLE 'PHONES ne 920 03/06/20 20:43:57 3:25 6245 6668 ims APPLE 'PHONES 921 03/06/20 20:43:58 3:25 6668 5981 ims APPLE 'PHONES 922 03/06/20 20:47:23 1:05 0 Onstgonpho APPLE 'PHONES no 923 03/06/20 20:47:28 1:00 11916 9299 ims APPLE 'PHONES 924 03/06/20 20:48:27 5:26 192 Onstgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 37 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170957 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343015 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage Tor: SS= Item Conn. Conn. Originating ET Bytes Bytes Apn MBAI INBI BOAR Belt Date Time number Up Dn (OTC) 925 03/06/20 20:48:28 5:25 6572 6657 nxtgonpho APPLE IPHONE8 ne 926 03/06/20 20:48:28 5:26 0 0 nxtgonpho APPLE 'PHONES ne 927 03/06/20 20:48:29 5:25 6657 6284 nxtgonpho APPLE 'PHONES no 928 03/06/20 20:48:35 60:00 95655 55560 ims 929 03/06/20 20:51:21 1:02 137665 211390 ims 930 03/06/20 20:53:54 10:42 6979 5113 nxtgonpho APPLE 'PHONES no 931 03/06/20 21:03:26 0:13 0 22616 ims 932 03/06/20 21:03:56 0:05 0 14202 ims 933 03/06/20 21:04:30 0:19 18001 51945 ims 934 03/06/20 21:04:35 3:32 5374 9015 nxtgonpho APPLE 'PHONES ne 935 03/06/20 21:04:36 3:32 9015 5086 nxtgonpho APPLE 'PHONES ne 936 03/06/20 21:08:08 1:34 7428 4951 nxtgonpho APPLE 'PHONES ne 937 03/06/20 21:09:30 0:53 98149 136719 ims 938 03/06/20 21:09:41 2:20 5116 6023 nxtgonpho APPLE 'PHONES ne 939 03/06/20 21:09:42 2:20 6023 4828 nxtgonpho APPLE 'PHONES ne 940 03/06/20 21:12:01 2:32 192 0 nxtgonpho APPLE 'PHONES no 941 03/06/20 21:12:02 2:31 5222 6075 nxtgonpho APPLE 'PHONES no 942 03/06/20 21:12:03 2:32 0 0 nxtgonpho APPLE 'PHONES no 943 03/06/20 21:12:03 2:32 6075 4934 nxtgonpho APPLE 'PHONES no 944 03/06/20 21:14:34 1:26 6212 6824 nxtgonpho APPLE 'PHONES ne 945 03/06/20 21:14:35 1:26 6824 5924 nxtgonpho APPLE 'PHONES no 946 03/06/20 21:16:01 1:08 6400 5239 nxtgonpho APPLE 'PHONES no 947 03/06/20 21:17:09 20:41 16484 135032 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 38 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170958 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343016 MOBILITY ce. pm. AT&T has queried AT&T has queried UTC. for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm for records using Eastern Time Zone. AT&T's records are stored and provided in .‘•- 00 AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn ENE! INSI NAAS MODEL Date Time Up Dn (OTC) 948 03/06/20 21:17:10 20:41 135032 16196 nxtgenpho APPLE !PHONES ne 949 03/06/20 21:32:33 1:15 142654 181807 ims 950 03/06/20 21:37:51 13:04 0 Onmtgonpho APPLE !PHONES ne 951 03/06/20 21:48:35 20:48 0 108 ims 952 03/06/20 21:50:54 7:15 192 0 nottgonpho APPLE !PHONES ne 953 03/06/20 21:50:55 7:15 0 Onmtgonpho APPLE !PHONES ne 954 03/06/20 21:58:10 60:00 0 0 nxtgenpho APPLE !PHONES ne 955 03/06/20 22:10:04 0:00 0 0 ims APPLE !PHONES 956 03/06/20 22:13:03 60:00 15339 9716 ims 957 03/06/20 22:58:10 60:00 0 0 nxtgenpho APPLE !PHONES ne 958 03/06/20 23:13:03 23:49 3532 1448 ims 959 03/06/20 23:37:22 0:00 0 0 ims APPLE !PHONES 960 03/06/20 23:37:36 12:30 10990 7899 ims 961 03/06/20 23:56:38 3:34 12230 6730 ims 962 03/06/20 23:58:10 8:40 0 Onactgonpho APPLE !PHONES ne 963 03/07/20 00:03:08 0:16 8078 6944 ims APPLE !PHONES 964 03/07/20 00:03:24 60:00 12120 4328 ims APPLE !PHONES 965 03/07/20 00:06:49 8:17 192 Onactgonpho APPLE !PHONES ne 966 03/07/20 00:06:50 8:17 0 0 nxtgenphe APPLE !PHONES ne 967 03/07/20 00:15:07 16:29 0 0 nxtgenphe APPLE !PHONES ne 968 03/07/20 00:31:35 20:57 192 0 nxtgenphe APPLE !PHONES ne 969 03/07/20 00:31:36 20:57 0 0 nxtgenphe APPLE !PHONES ne 970 03/07/20 00:52:34 3:34 0 0 nxtgenphe APPLE !PHONES ne 971 03/07/20 00:56:07 2:06 192 0 nxtgenphe APPLE !PHONES ne 972 03/07/20 00:56:08 2:06 0 0 nxtgenphe APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 39 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170959 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343017 MOBILITY illir pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ...r2 /144' ss AT&T Run Data: 06/17/2020 Run Tim: Data usage For: Item Conn. Conn. originating Er Bytes Bytes Apn 7:11B2 INSI MAKE MODEL Data Ti.. number up Dn (OTC) 973 03/07/20 00:58:14 39:51 0 0nxtgenpho APPLE 'PHONES ne 974 03/07/20 01:03:24 0:24 0 0 ims APPLE 'PHONES 975 03/07/20 01:19:41 4:34 8150 6944 ims APPLE 'PHONES 976 03/07/20 01:24:15 8:15 12056 6904 ims APPLE 'PHONES 977 03/07/20 01:33:01 0:45 17026 8556 ims 978 03/07/20 01:34:01 16:43 9644 6054 ims 979 03/07/20 01:38:05 3:37 0 0nxtgenpho APPLE 'PHONES ne 980 03/07/20 01:41:41 3:20 192 0nxtgenpho APPLE 'PHONES ne 981 03/07/20 01:41:42 3:20 0 0nxtgenpho APPLE 'PHONES ne 982 03/07/20 01:45:02 60:00 0 0nxtgenpho APPLE 'PHONES ne 983 03/07/20 01:56:42 0:00 0 0 ims APPLE 'PHONES 984 03/07/20 01:56:50 34:11 11647 9620 ims 985 03/07/20 02:34:49 0:00 0 0 ims APPLE 'PHONES 986 03/07/20 02:35:17 2:31 9694 6126 ims 987 03/07/20 02:42:07 60:00 18887 9464 ims 988 03/07/20 02:45:02 60:00 0 0nxtgenpho APPLE 'PHONES ne 989 03/07/20 03:42:07 1:22 0 0 ims 990 03/07/20 03:45:02 60:00 0 0nxtgenpho APPLE 'PHONES ne 991 03/07/20 03:47:37 3:47 9867 6478 ims 992 03/07/20 03:55:04 16:39 8367 6072 ims 993 03/07/20 04:13:11 60:00 15051 8988 ims 994 03/07/20 04:45:02 60:00 0 0nxtgenpho APPLE 'PHONES ne 995 03/07/20 05:13:11 59:03 6848 2664 ims 996 03/07/20 05:45:02 0:02 0 0nxtgenpho APPLE 'PHONES ne 997 03/07/20 05:45:06 60:00 0 0nxtgenpho APPLE 'PHONES ne 998 03/07/20 06:16:12 6:17 8203 6000 ims 999 03/07/20 06:31:28 60:00 15055 8878 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 40 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170960 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343018 MOBILITY cito ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn IMEI IASI ISMS MODEL Date Time Number Up Dn (OTC/ 1000 03/07/20 06:45:0 60:00 0 Onmtgonpho 3587080982063725 APPLE 'PEONES ne 1001 03/07/20 07:31:2 24:58 3408 1448 ims -1 1002 03/07/20 07:45:0 60:00 0 Onmtgonpho 3587080982063725 APPLE 'PEONES ne 1003 03/07/20 08:02:5 3:28 8315 6122 ims -1 1004 03/07/20 08:11:0, 60:00 16811 9252 ims -1 1005 03/07/20 08:45:0 60:01 0 Onmtgonpho 3587080982063725 APPLE 'PEONES ne 1006 03/07/20 09:11:0, 5:47 0 0 ims -1 1007 03/07/20 09:20:1! 60:00 18679 10125 ims -1 1008 03/07/20 09:45:0 60:00 0 Onmtgonpho 3587080982063725 APPLE 'PEONES ne 1009 03/07/20 10:20:1! 37:07 3424 1324 ims -1 1010 03/07/20 10:45:0 60:00 0 Onmtgonpho 3587080982063725 APPLE !PHONES ne 1011 03/07/20 11:05:2 22:12 8311 6104 ims -1 1012 03/07/20 11:32:5 0:00 0 0 ims 3587080982063725 APPLE !PHONES 1013 03/07/20 11:35:3 12:17 8455 6338 ims -1 1014 03/07/20 11:45:0 60:00 0 Onmtgonpho 3587080982063725 APPLE !PHONES ne 1015 03/07/20 11:51:5! 56:14 21443 9826 ims -1 1016 03/07/20 12:45:0 60:00 0 Onmtgonpho 3587080982063725 APPLE !PHONES no 1017 03/07/20 12:48:0' 6:31 8453 6214 ims -1 1018 03/07/20 12:57:2: 47:41 13399 7751 ims -1 1019 03/07/20 13:45:0 0:01 0 Onxtgonpho 3587080982063725 APPLE !PHONES ne 1020 03/07/20 13:45:1 14:28 0 0 nxtgonpho 3587080982063725 APPLE !PHONES no 1021 03/07/20 13:47:3 60:00 17165 9495 ims -1 1022 03/07/20 13:59:4 60:00 0 0 nxtgonpho 3587080982063725 APPLE !PHONES no 1023 03/07/20 14:47:3 38:17 5072 1572 ims -1 1024 03/07/20 14:59:4 12:27 0 0 nxtgonpho 3587080982063725 APPLE 'PHONES ne 1025 03/07/20 15:12:0 8:21 192 Onxtgonpho 3587080982063725 APPLE 'PHONES ne 1026 03/07/20 15:12:0 8:20 0 Onxtgonpho 3587080982063725 APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 41 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170961 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343019 MOBILITY / 1 44.T. pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn TAINT TItOT MAKE MODEL Date Tine Number Up Dn (UTC) 1027 03/07/20 15:20:28 57:46 0 0 nactgonpho APPLE 'PHONES ne 1028 03/07/20 15:32:55 0:00 0 0 Less APPLE 'PHONES 1029 03/07/20 15:33:04 16:06 9491 6883 Las 1030 03/07/20 15:59:08 16:46 11990 6446 Las 1031 03/07/20 16:18:14 0:52 0 0nactgonpho APPLE 'PHONES ne 1032 03/07/20 16:18:18 14:21 8203 5996 Las 1033 03/07/20 16:19:05 1:52 192 0 nactgonpho APPLE 'PHONES ne 1034 03/07/20 16:19:06 1:52 0 0 nactgonpho APPLE 'PHONES ne 1035 03/07/20 16:20:58 2:59 0 0 nactgonpho APPLE 'PHONES ne 1036 03/07/20 16:23:56 2:09 192 0 nactgonpho APPLE 'PHONES ne 1037 03/07/20 16:23:57 2:09 0 0 nactgonpho APPLE 'PHONES ne 1038 03/07/20 16:26:06 23:35 0 0 nactgonpho APPLE 'PHONES ne 1039 03/07/20 16:36:56 0:15 7488 5572 Las APPLE 'PHONES 1040 03/07/20 16:37:11 59:00 14696 8116 Las APPLE 'PHONES 1041 03/07/20 16:49:40 8:18 192 0 nactgonpho APPLE 'PHONES ne 1042 03/07/20 16:49:42 8:17 0 0 nactgonpho APPLE 'PHONES ne 1043 03/07/20 16:57:59 1:02 0 0 nactgonpho APPLE 'PHONES no 1044 03/07/20 16:59:00 2:18 192 0 nactgonpho APPLE 'PHONES no 1045 03/07/20 16:59:01 2:18 0 0 nmtgonpho APPLE 'PHONES ne 1046 03/07/20 17:01:18 6:06 192 0 nmtgonpho APPLE 'PHONES ne 1047 03/07/20 17:01:19 6:06 0 0 nmtgonpho APPLE 'PHONES ne 1048 03/07/20 17:07:25 3:58 0 0 nmtgonpho APPLE 'PHONES ne 1049 03/07/20 17:11:22 8:26 192 0 nmtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 42 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170962 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343020 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:38:58pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTZ. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn ENKE IM9I MAKE MODEL Date Time ?lumbar Up Dn (OTC) 1050 03/07/20 17:11:23 8:26 0 0 'mtg.:mph* APPLE 'PHONES no 1051 03/07/20 17:19:49 11:27 0 0 nstgempho APPLE 'PHONES no 1052 03/07/20 17:31:15 0:50 192 0 nstgempho APPLE 'PHONES no 1053 03/07/20 17:31:17 0:49 0 0 nstgempho APPLE 'PHONES no 1054 03/07/20 17:32:06 3:19 0 0 nxtgonpho APPLE !PHONES no 1055 03/07/20 17:35:24 2:06 192 0 nstgempho APPLE 'PHONES no 1056 03/07/20 17:35:25 2:06 0 0 nstgempho APPLE !PHONES no 1057 03/07/20 17:35:52 1:38 7318 8814 ims APPLE 'PHONES 1058 03/07/20 17:35:54 1:37 8814 7054 ims APPLE !PHONES 1059 03/07/20 17:36:11 60:00 45387 23034 ims 1060 03/07/20 17:37:31 34:49 0 Onstgonpho APPLE !PHONES no 1061 03/07/20 18:12:19 2:41 192 0 nstgempho APPLE 'PHONES no 1062 03/07/20 18:12:20 2:41 0 0 nstgempho APPLE 'PHONES no 1063 03/07/20 18:15:01 4:44 192 0 nstgempho APPLE 'PHONES no 1064 03/07/20 18:15:02 4:44 0 °asty:mph* APPLE 'PHONES no 1065 03/07/20 18:19:46 7:15 0 0 astgonpho APPLE !PHONES no 1066 03/07/20 18:21:16 0:34 61632 26652 ims 1067 03/07/20 18:27:00 1:05 192 0 nstgonpho APPLE 'PHONES no 1068 03/07/20 18:27:02 1:04 0 0 nxtgenpho APPLE 'PHONES no 1069 03/07/20 18:28:06 13:15 0 0 astympho APPLE 'PHONES no 1070 03/07/20 18:36:11 30:45 13316 7812 ims 1071 03/07/20 18:39:44 0:05 0 2318 ims 1072 03/07/20 18:41:19 2:07 192 Onstympho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 43 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170963 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343021 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:30:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in / 1 4-writ AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ IMSI MAKE MODEL Date Time Number Up Dn (UTC) 1073 03/07/20 18:41:21 2:06 0 0 nxtgonpho APPLE 'PHONES ne 1074 03/07/20 18:43:27 26:50 0 0 nxtgonpho APPLE 'PHONES ne 1075 03/07/20 19:10:16 2:07 192 0nxtgonpho APPLE 'PHONES ne 1076 03/07/20 19:10:17 2:07 0 0 nxtgonpho APPLE 'PHONES ne 1077 03/07/20 19:10:35 1:48 7213 6790 imp APPLE 'PHONES 1078 03/07/20 19:10:36 1:48 6790 6949 imp APPLE 'PHONES 1079 03/07/20 19:11:08 15:58 8311 6213 imp 1080 03/07/20 19:12:24 4:40 0 0 nxtgonpho APPLE 'PHONES ne 1081 03/07/20 19:17:03 8:47 192 0 nxtgonpho APPLE 'PHONES ne 1082 03/07/20 19:17:05 8:46 0 0 nxtgonpho APPLE 'PHONES ne 1083 03/07/20 19:25:50 2:22 192 0 nxtgonpho APPLE 'PHONES ne 1084 03/07/20 19:25:52 2:21 0 0 nxtgonpho APPLE 'PHONES ne 1085 03/07/20 19:28:12 6:09 192 0 nxtgonpho APPLE 'PHONES ne 1086 03/07/20 19:28:13 6:09 0 0 nxtgonpho APPLE 'PHONES ne 1087 03/07/20 19:34:23 0:37 0 0 nxtgonpho APPLE 'PHONES ne 1088 03/07/20 19:34:29 60:00 19394 10386 ims 1089 03/07/20 19:35:00 21:20 192 0nxtgonpho APPLE 'PHONES ne 1090 03/07/20 19:35:01 21:20 0 0 nxtgonpho APPLE 'PHONES ne 1091 03/07/20 19:56:20 2:09 192 0nxtgonpho APPLE 'PHONES ne 1092 03/07/20 19:56:21 2:09 0 0 nxtgonpho APPLE 'PHONES ne 1093 03/07/20 19:58:30 1:27 0 0 nxtgonpho APPLE 'PHONES ne 1094 03/07/20 19:59:57 21:10 192 0 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 44 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170964 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343022 MOBILITY c .o pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating BT Bytes Bytes Apn ZRE2 IMSI MARE MOM Date Time Number Up Dn (OTC) 1095 03/07/20 19:59:58 21:10 0 Onstgenpho APPLE IPECISB ne 1096 03/07/20 20:21:07 2:24 192 0 nxtgonpho APPLE IPECISB ne 1097 03/07/20 20:21:08 2:24 0 0 nxtgonpho APPLE IPECISB ne 1098 03/07/20 20:23:31 6:07 192 0 nxtgonpho APPLE IPECISB ne 1099 03/07/20 20:23:33 6:06 0 0 nxtgonpho APPLE IPHONE8 ne 1100 03/07/20 20:29:39 4:48 0 0 nxtgonpho APPLE 'PHONES ne 1101 03/07/20 20:34:26 71:33 192 0 nxtgonpho APPLE 'PHONES ne 1102 03/07/20 20:34:27 60:00 0 0 nxtgenpho APPLE 'PHONES ne 1103 03/07/20 20:34:29 3:10 0 0 ims 1104 03/07/20 20:43:44 52:50 6354 6668 ims APPLE 'PHONES 1105 03/07/20 20:43:45 52:50 6668 6090 ims APPLE 'PHONES 1106 03/07/20 20:47:45 30:08 14287 8338 ims 1107 03/07/20 21:32:01 13:58 7228 6718 ims APPLE 'PHONES 1108 03/07/20 21:32:02 13:58 6718 6964 ims APPLE 'PHONES 1109 03/07/20 21:34:27 11:33 0 Onxtgonpho APPLE 'PHONES ne 1110 03/07/20 21:36:33 4:51 11664 7557 ims 1111 03/07/20 21:46:00 3:06 0 0 nxtgonpho APPLE 'PHONES ne 1112 03/07/20 21:49:05 2:10 192 0 nxtgonpho APPLE 'PHONES no 1113 03/07/20 21:49:07 2:09 0 0 nxtgonpho APPLE !PHONES no 1114 03/07/20 21:49:18 1:57 7112 6720 ims APPLE !PHONES 1115 03/07/20 21:49:19 1:57 6720 6848 ims APPLE !PHONES 1116 03/07/20 21:51:16 0:39 0 Onxtgonpho APPLE !PHONES ne 1117 03/07/20 21:51:18 0:00 0 0 ims APPLE !PHONES 1118 03/07/20 21:51:54 27:15 192 Onxtgonpho APPLE !PHONES ne 1119 03/07/20 21:51:55 27:15 0 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 45 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170965 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343023 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:30:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .‘•- 00 AT&T UTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn MAKE MODEL Date Time Number Up Dn (UTC) 1120 03/07/20 21:52:20 26:49 7262 6854 ims APPLE 'PHONES 1121 03/07/20 21:52:21 26:49 6746 6998 ims APPLE 'PHONES 1122 03/07/20 21:53:58 14:15 10099 6418 ims 1123 03/07/20 22:19:10 2:09 192 Onmtgonpho APPLE 'PHONES ne 1124 03/07/20 22:19:11 2:08 6246 6672 ims APPLE 'PHONES 1125 03/07/20 22:19:11 2:09 0 0 nmtgonpho APPLE 'PHONES ne 1126 03/07/20 22:19:12 2:08 6672 5982 ims APPLE 'PHONES 1127 03/07/20 22:21:20 0:37 0 0 nmtgonpho APPLE 'PHONES ne 1128 03/07/20 22:21:21 0:01 0 0 ims APPLE 'PHONES 1129 03/07/20 22:21:29 10:12 11698 6686 ims 1130 03/07/20 22:21:57 21:16 192 Onmtgonpho APPLE 'PHONES ne 1131 03/07/20 22:21:58 21:16 0 0 ructgonpho APPLE 'PHONES ne 1132 03/07/20 22:37:29 5:44 6316 6778 ims APPLE 'PHONES 1133 03/07/20 22:37:30 5:44 6670 5964 ims APPLE 'PHONES 1134 03/07/20 22:41:47 33:34 15774 8758 ims 1135 03/07/20 22:43:14 0:36 0 0 nmtgonpho APPLE 'PHONES no 1136 03/07/20 22:43:49 15:04 192 Onmtgonpho APPLE 'PHONES ne 1137 03/07/20 22:43:50 15:04 0 0 nmtgonpho APPLE 'PHONES ne 1138 03/07/20 22:58:54 27:38 192 0 nmtgonpho APPLE 'PHONES ne 1139 03/07/20 22:58:55 27:38 0 0 nmtgonpho APPLE 'PHONES ne 1140 03/07/20 23:26:32 34:00 192 0 nmtgonpho APPLE 'PHONES ne 1141 03/07/20 23:26:33 34:00 0 0 nmtgonpho APPLE 'PHONES ne 1142 03/07/20 23:26:37 33:55 6370 6674 ims APPLE 'PHONES 1143 03/07/20 23:26:38 33:55 6674 6106 ims APPLE 'PHONES 1144 03/07/20 23:27:04 39:15 42891 24018 ims 1145 03/08/20 00:00:33 5:46 0 0 nmtgonpho APPLE 'PHONES no 1146 03/08/20 00:00:45 0:16 0 55513 ims AT&T Proprietary The AT&T network constantly communicates with Internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 46 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170966 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343024 MOBILITY 4,15. • ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytos Bytes Apn LBSI IMSI MOSE MODEL Date Timo Number Up Dn (OTC) 1147 03/08/20 15:41:04 _1_02SL.._250,112,1_ 60:00 0 Onstgenphe APPLE 'PHONES ne 1148 03/08/20 15:41:06 0:17 8148 6924 ims APPLE 'PHONES 1149 03/08/20 15:41:23 60:00 14740 4576 ims APPLE 'PHONES 1150 03/08/20 16:41:04 60:00 0 Onstgenpho APPLE 'PHONES ne 1151 03/08/20 16:41:23 60:00 10020 3144 ims APPLE 'PHONES 1152 03/08/20 17:41:04 43:30 0 Onstgenpho APPLE 'PHONES ne 1153 03/08/20 17:41:23 60:00 42980 20732 ims APPLE 'PHONES 1154 03/08/20 18:09:35 0:06 0 6927 ims APPLE 'PHONES 1155 03/08/20 18:23:21 0:07 0 7700 ims APPLE 'PHONES 1156 03/08/20 18:24:33 2:09 192 Onstgenpho APPLE 'PHONES ne 1157 03/08/20 18:24:34 2:09 0 0 nxtgenpho APPLE 'PHONES ne 1158 03/08/20 18:26:43 14:23 0 0 nxtgenpho APPLE 'PHONES ne 1159 03/08/20 18:41:06 3:35 0 0 nxtgenpho APPLE 'PHONES ne 1160 03/08/20 18:41:23 60:00 3408 1432 ims APPLE 'PHONES 1161 03/08/20 18:44:41 16:06 0 0 nxtgenpho APPLE 'PHONES ne 1162 03/08/20 18:55:40 0:00 0 0 ims APPLE 'PHONES 1163 03/08/20 18:55:48 60:00 16793 8983 ims 1164 03/08/20 19:00:46 7:34 192 Onstgenpho APPLE !PHONES ne 1165 03/08/20 19:00:47 7:34 0 0 nxtgenpho APPLE !PHONES ne 1166 03/08/20 19:08:21 0:32 0 0 nxtgenpho APPLE !PHONES ne 1167 03/08/20 19:08:51 5:10 192 0 nxtgenpho APPLE !PHONES ne 1168 03/08/20 19:08:53 5:09 0 0 nxtgenpho APPLE !PHONES ne 1169 03/08/20 19:14:02 0:06 0 0 nxtgenpho APPLE !PHONES ne 1170 03/08/20 19:14:24 3:41 192 0 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 47 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170967 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343025 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. el.AT&T ‘s Run Data: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating BT Bytes Bytes Apn INKS INSI MAKE MODEL Date Time Number Up Dn (OTC) 1171 03/08/20 19:14:25 3:42 0 Onxtgenpho APPLE 'PHONES ne 1172 03/08/20 19:18:06 5:01 192 0 nxtgenpho APPLE 'PHONES ne 1173 03/08/20 19:18:07 5:01 0 0 nxtgenpho APPLE 'PHONES ne 1174 03/08/20 19:23:08 13:33 192 0 nxtgenpho APPLE 'PHONES ne 1175 03/08/20 19:23:09 13:34 0 0 nxtgenpho APPLE 'PHONES ne 1176 03/08/20 19:36:43 1:33 0 0 nxtgenpho APPLE 'PHONES ne 1177 03/08/20 19:38:15 2:10 192 0 nxtgenpho APPLE 'PHONES ne 1178 03/08/20 19:38:17 2:09 0 0 nxtgenpho APPLE 'PHONES ne 1179 03/08/20 19:40:26 3:26 0 0 nxtgenpho APPLE 'PHONES ne 1180 03/08/20 19:41:23 60:00 0 0 ims APPLE 'PHONES 1181 03/08/20 19:43:52 16:56 192 0 nxtgenpho APPLE 'PHONES ne 1182 03/08/20 19:43:53 16:56 0 0 nxtgenpho APPLE 'PHONES ne 1183 03/08/20 19:55:48 60:00 12652 3408 ims 1184 03/08/20 20:00:49 16:17 0 0 nxtgenpho APPLE 'PHONES ne 1185 03/08/20 20:17:06 4:04 192 0 nxtgenpho APPLE 'PHONES ne 1186 03/08/20 20:17:07 4:04 0 0 nxtgenpho APPLE 'PHONES ne 1187 03/08/20 20:21:11 0:56 0 0 nxtgenpho APPLE 'PHONES ne 1188 03/08/20 20:22:06 2:36 192 0 nxtgenpho APPLE 'PHONES ne 1189 03/08/20 20:22:07 2:36 0 0 nxtgenpho APPLE 'PHONES ne 1190 03/08/20 20:24:44 6:10 192 0 nxtgenpho APPLE 'PHONES ne 1191 03/08/20 20:24:46 6:09 0 0 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 48 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170968 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343026 MOBILITY e s. ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .a° AT&T ‘•- UTC. Run Data: 06/17/2020 Run Time: Data Usage For: Ma= Item Conn. Conn. Originating BT Bytes Bytes Apn 73IZI IM9I MAKE MODEL Date Time Nflmhaw Up Dn (UTC) 1192 03/08/20 20:30:55 4:54 0 Onmtgenpho APPLE !PHONES ne 1193 03/08/20 20:35:48 14:11 192 0 nmtgenpho APPLE !PHONES ne 1194 03/08/20 20:35:49 14:11 0 0 nmtgenpho APPLE !PHONES ne 1195 03/08/20 20:41:23 60:00 0 0 ims APPLE !PHONES 1196 03/08/20 20:50:00 12:34 192 0 nmtgonpho APPLE !PHONES ne 1197 03/08/20 20:50:01 12:34 0 0 nmtgonpho APPLE !PHONES ne 1198 03/08/20 20:55:48 60:00 10580 4096 ims 1199 03/08/20 21:02:34 6:10 192 0 nmtgenpho APPLE !PHONES no 1200 03/08/20 21:02:35 6:10 0 0 nmtgenpho APPLE !PHONES no 1201 03/08/20 21:08:45 60:00 0 0 nmtgenpho APPLE !PHONES no 1202 03/08/20 21:41:23 60:00 0 0 ims APPLE !PHONES 1203 03/08/20 21:55:48 60:00 6924 2772 ims 1204 03/08/20 22:08:45 0:58 0 0 nmtgenpho APPLE !PHONES no 1205 03/08/20 22:09:43 1:38 0 0 nmtgenpho APPLE !PHONES ne 1206 03/08/20 22:11:22 22:21 0 0 nmtgenpho APPLE !PHONES ne 1207 03/08/20 22:33:42 2:10 192 0 nmtgenpho APPLE !PHONES no 1208 03/08/20 22:33:43 2:10 0 0 nmtgenpho APPLE !PHONES no 1209 03/08/20 22:35:53 6:31 0 0 nmtgenpho APPLE !PHONES no 1210 03/08/20 22:41:23 18:00 0 0 ims APPLE !PHONES 1211 03/08/20 22:42:23 2:10 192 0 nmtgenpho APPLE !PHONES ne 1212 03/08/20 22:42:25 2:09 0 0 nmtgenpho APPLE !PHONES no 1213 03/08/20 22:44:34 4:14 0 0 nmtgenpho APPLE !PHONES no 1214 03/08/20 22:48:47 2:27 192 0 nmtgenpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 49 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170969 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343027 MOBILITY cro PRI020 AT&T has queried AT&T has queried for records for records from 03/01/2020 12:00:00am using Eastern Time Zone. to 06/15/2020 11:59:59pm AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage For: Sidi= Item Conn. Conn. Originating ET Bytes Bytes Apn DOLT INSI MAKE MODEL Date Tame Number Up Dn MC/ 1215 03/08/20 22:48:48 2:27 0 Onmtgonphe APPLE !PHONES ne 1216 03/08/20 22:51:14 12:30 192 0 nmtgonphe APPLE !PHONES ne 1217 03/08/20 22:51:15 12:30 0 0 nmtgonphe APPLE !PHONES ne 1218 03/08/20 22:55:48 60:00 10160 3144 ism 1219 03/08/20 23:03:45 2:05 0 Onmtgonphe APPLE !PHONES ne 1220 03/08/20 23:05:49 8:43 192 0 nactgonphe APPLE !PHONES ne 1221 03/08/20 23:05:50 8:43 0 0 nactgonphe APPLE !PHONES ne 1222 03/08/20 23:14:33 60:00 0 0 nmtgonphe APPLE !PHONES ne 1223 03/08/20 23:55:48 55:14 51404 17880 Lam 1224 03/09/20 00:14:33 36:44 0 Onmtgonphe APPLE !PHONES ne 1225 03/09/20 00:44:58 0:23 0 43856 Lam 1226 03/09/20 00:51:16 22:51 192 0 nmtgonphe APPLE !PHONES ne 1227 03/09/20 00:51:17 22:51 0 0 nmtgonphe APPLE !PHONES ne 1228 03/09/20 00:51:17 4:16 7160 6810 ism APPLE !PHONES 1229 03/09/20 00:51:18 4:16 6742 6896 ism APPLE !PHONES 1230 03/09/20 00:55:02 0:31 756 0 ism 1231 03/09/20 00:55:32 18:35 7376 6794 Las APPLE !PHONES 1232 03/09/20 00:55:33 18:35 6794 7112 Las APPLE !PHONES 1233 03/09/20 00:56:28 60:00 24207 16162 Las 1234 03/09/20 01:14:08 2:02 0 Onmtgonphe APPLE !PHONES ne 1235 03/09/20 01:16:09 14:18 192 0 nmtgonphe APPLE !PHONES ne 1236 03/09/20 01:16:10 14:18 0 0 nmtgonphe APPLE !PHONES ne 1237 03/09/20 01:30:23 18:53 3007685 3052551 ism 1238 03/09/20 01:30:29 10:30 0 Onmtgonphe APPLE !PHONES ne 1239 03/09/20 01:40:58 18:18 192 0 nmtgonphe APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 50 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170970 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343028 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in e# AT&T ‘s UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn ENE! INSI MAKE MODEL Date TIM* Number Up Dn (07C) 1240 03/09/20 01:40:59 18:18 0 0nxtgonpho APPLE !PHONES no 1241 03/09/20 01:56:28 60:00 6940 2896 ism 1242 03/09/20 01:59:17 0:54 0 0 nxtgenpho APPLE 'PHONES ne 1243 03/09/20 02:00:10 5:09 192 0 nxtgonpho APPLE 'PHONES no 1244 03/09/20 02:00:11 5:09 0 0 nxtgonpho APPLE 'PHONES no 1245 03/09/20 02:05:19 8:38 192 0 nxtgonpho APPLE !PHONES no 1246 03/09/20 02:05:20 8:38 0 0 nxtgonpho APPLE !PHONES no 1247 03/09/20 02:13:58 5:51 192 0 nxtgonpho APPLE !PHONES no 1248 03/09/20 02:13:59 5:51 0 0 nxtgonpho APPLE !PHONES no 1249 03/09/20 02:19:50 55:27 0 0 nxtgOnphe APPLE !PHONES ne 1250 03/09/20 02:56:28 60:00 6848 2788 ism 1251 03/09/20 03:15:16 20:00 192 0 nxtgonpho APPLE !PHONES ne 1252 03/09/20 03:15:17 59:01 0 0 nxtgonpho APPLE !PHONES no 1253 03/09/20 03:56:28 60:00 8496 2928 ism 1254 03/09/20 04:14:18 60:00 0 0 nxtgenpho APPLE !PHONES ne 1255 03/09/20 04:56:28 60:00 16884 6232 ism 1256 03/09/20 05:14:18 60:00 0 0 nxtgenpho APPLE !PHONES ne 1257 03/09/20 05:56:28 60:00 8496 2928 ism 1258 03/09/20 06:14:18 60:00 0 0 nxtgenpho APPLE !PHONES ne 1259 03/09/20 06:56:28 60:00 8496 3160 ism 1260 03/09/20 07:14:18 60:00 0 0 nxtgenpho APPLE !PHONES ne 1261 03/09/20 07:56:28 60:00 8496 2928 ism 1262 03/09/20 08:14:18 0:01 0 0 nxtgonpho APPLE !PHONES ne 1263 03/09/20 08:47:44 2:23 192 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 51 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170971 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343029 MOBILITY 4111. P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in •/43 ""a. --s AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytos Bytes Apn ENE! INSI MAKE MODEL Date Tame Number Up Dn (OTC) 1264 03/09/20 08:47:46 2:22 0 0 nxtgonpho APPLE !PHONES no 1265 03/09/20 08:50:07 6:02 192 0 nxtgonpho APPLE !PHONES no 1266 03/09/20 08:50:08 6:03 0 0 nxtgonpho APPLE !PHONES no 1267 03/09/20 08:56:10 3:22 192 0 nxtgonpho APPLE !PHONES no 1268 03/09/20 08:56:11 3:22 0 0 nxtgonpho APPLE !PHONES no 1269 03/09/20 08:56:28 60:00 11812 4484 ism 1270 03/09/20 08:59:33 60:00 0 0 nxtgonpho APPLE !PHONES no 1271 03/09/20 09:56:28 60:00 12044 4552 ism 1272 03/09/20 09:59:33 51:11 0 0 nxtgonpho APPLE !PHONES no 1273 03/09/20 10:50:44 10:15 192 0 nxtgonpho APPLE !PHONES no 1274 03/09/20 10:50:45 10:15 0 0 nxtgonpho APPLE !PHONES no 1275 03/09/20 10:56:28 60:00 6832 2680 ism 1276 03/09/20 11:01:00 56:23 0 0 nxtgonpho APPLE !PHONES no 1277 03/09/20 11:56:28 60:00 13352 4732 ism 1278 03/09/20 11:57:22 2:59 192 0 nxtgonpho APPLE !PHONES no 1279 03/09/20 11:57:23 2:59 0 0 nxtgonpho APPLE !PHONES no 1280 03/09/20 12:00:21 20:57 192 0 nxtgonpho APPLE !PHONES no 1281 03/09/20 12:00:22 20:57 0 0 nxtgonpho APPLE !PHONES no 1282 03/09/20 12:21:18 7:42 192 0 nxtgonpho APPLE !PHONES no 1283 03/09/20 12:21:20 7:41 0 0 nxtgonpho APPLE !PHONES no 1284 03/09/20 12:29:01 13:08 192 0 nxtgonpho APPLE !PHONES no 1285 03/09/20 12:29:02 13:08 0 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 52 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170972 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343030 MOBILITY 4,12. • ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run pato: 06/17/2020 Run Time: Data usage For: Item Conn. Coma. Originating BT Bytes Bytes Apn DMZ IMSI WARR MOD= Data Time number Up 0n (OTC) 1286 03/09/20 12:42:11 4 23:32 0 Onstgenpho APPLE 'PROMO ne 1287 03/09/20 12:56:28 4 60:00 7064 2804 ims 1288 03/09/20 13:05:42 4 8:24 192 Onstgenpho APPLE 'PROMO ne 1289 03/09/20 13:05:43 4 8:24 0 Onstgenpho APPLE 'PROMO ne 1290 03/09/20 13:14:07 4 13:42 0 Onstgenpho APPLE 'PROMO ne 1291 03/09/20 13:27:48 4 2:10 192 Onstgenpho APPLE 'PROMO ne 1292 03/09/20 13:27:50 4 2:09 0 Onstgenpho APPLE IPHONE8 ne 1293 03/09/20 13:29:59 4 14:10 0 Onstgenpho APPLE 'PHONES ne 1294 03/09/20 13:44:08 4 5:25 192 Onstgenpho APPLE 'PHONES ne 1295 03/09/20 13:44:09 4 5:25 0 Onstgenpho APPLE 'PHONES ne 1296 03/09/20 13:49:34 4 5:02 0 Onstgenpho APPLE 'PHONES ne 1297 03/09/20 13:54:35 4 9:50 192 Onstgenpho APPLE 'PHONES ne 1298 03/09/20 13:54:36 4 9:50 0 Onstgenpho APPLE 'PHONES ne 1299 03/09/20 13:56:28 4 60:00 23568 10996 ims 1300 03/09/20 14:04:25 4 5:32 192 Onstgenpho APPLE 'PHONES ne 1301 03/09/20 14:04:27 4 5:31 0 Onstgenpho APPLE 'PHONES ne 1302 03/09/20 14:09:58 4 9:08 0 Onstgenpho APPLE 'PHONES ne 1303 03/09/20 14:19:05 4 0:44 192 Onstgenpho APPLE 'PHONES ne 1304 03/09/20 14:19:06 4 0:44 0 Onstgenpho APPLE 'PHONES ne 1305 03/09/20 14:19:50 4 60:00 0 Onstgenpho APPLE 'PHONES ne 1306 03/09/20 14:52:26 4 0:10 0 6685 ims 1307 03/09/20 14:56:28 4 60:00 29368 14756 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 53 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170973 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343031 MOBILITY ce. pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Si= Item Conn. Conn. Originating ET Bytes Bytes Apn IN= IISI MA= MODEL Date Tine Up Dn (OTC) 1308 03/09/20 15:19:50 52:16 0 0 nxtgenpho APPLE 'PEONES ne 1309 03/09/20 15:46:20 0:04 0 8568 ims 1310 03/09/20 15:56:28 50:29 8820 3468 ims 1311 03/09/20 16:37:57 2:26 192 0 nxtgenpho APPLE 'PEONES ne 1312 03/09/20 16:37:58 2:26 0 0 nxtgenpho APPLE 'PEONES ne 1313 03/09/20 16:40:24 6:23 0 0 nxtgenpho APPLE 'PEONES ne 1314 03/09/20 16:46:46 18:32 192 0 nxtgenpho APPLE SPRAWLS ne 1315 03/09/20 16:46:47 18:32 0 0 nxtgenpho APPLE 'PHONES ne 1316 03/09/20 16:46:56 18:22 7240 7554 ims APPLE 'PHONES 1317 03/09/20 16:46:57 18:22 7486 6976 ims APPLE 'PHONES 1318 03/09/20 17:05:19 14:42 0 0 nxtgenpho APPLE 'PHONES ne 1319 03/09/20 17:05:21 7:10 7406 6121 ims APPLE 'PHONES 1320 03/09/20 17:12:31 10:30 5180 1696 ims APPLE 'PHONES 1321 03/09/20 17:14:37 60:00 16620 9004 ims 1322 03/09/20 17:20:00 9:52 288 0 nxtgenpho APPLE 'PHONES ne 1323 03/09/20 17:20:01 9:52 0 0 nxtgenpho APPLE 'PHONES ne 1324 03/09/20 17:29:53 5:29 192 0 nxtgenpho APPLE IPHONE8 ne 1325 03/09/20 17:29:54 5:29 0 0 nxtgenpho APPLE IPHONE8 ne 1326 03/09/20 17:35:23 3:53 0 0 nxtgenpho APPLE IPHONE8 ne 1327 03/09/20 17:39:15 2:16 192 0 nxtgenpho APPLE IPHONE8 ne 1328 03/09/20 17:39:16 2:16 0 0 nxtgenpho APPLE IPHONE8 ne 1329 03/09/20 17:41:32 15:20 192 0 nxtgenpho APPLE IPHONE8 ne 1330 03/09/20 17:41:33 15:20 0 0 nxtgenpho APPLE IPHONE8 ne 1331 03/09/20 17:56:53 60:00 0 0 nxtgenpho APPLE IPHONE8 ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 54 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170974 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343032 MOBILITY "a. pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. tre s AT&T ‘‘.......sizse Run Date: 06/17/2020 Run Time: Data Usage For: it= Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ IMSI MAKE MODEL Date Time Number Up Dn (UTC) 1332 03/09/20 18:14:37 60:00 14340 6952 ims 1333 03/09/20 18:49:56 0:04 0 104 ims 1334 03/09/20 18:56:53 29:12 0 Onstgenphe APPLE !PHONES ne 1335 03/09/20 19:14:37 60:00 9960 3144 ims 1336 03/09/20 19:26:04 2:09 192 Onxtgenpho APPLE !PHONES ne 1337 03/09/20 19:26:05 2:09 0 0 nxtgenpho APPLE !PHONES ne 1338 03/09/20 19:28:14 37:51 0 0 nxtgenpho APPLE !PHONES ne 1339 03/09/20 20:06:04 2:10 192 0 nxtgenpho APPLE !PHONES ne 1340 03/09/20 20:06:06 2:09 0 0 nxtgenpho APPLE !PHONES ne 1341 03/09/20 20:08:15 0:47 0 0 nxtgenpho APPLE !PHONES ne 1342 03/09/20 20:09:01 8:34 192 0 nxtgenpho APPLE !PHONES ne 1343 03/09/20 20:09:02 8:34 0 0 nxtgenpho APPLE !PHONES ne 1344 03/09/20 20:14:37 60:00 8604 3020 ims 1345 03/09/20 20:17:36 0:59 0 Onxtgenpho APPLE !PHONES ne 1346 03/09/20 20:18:35 15:42 192 0 nxtgenpho APPLE !PHONES ne 1347 03/09/20 20:18:36 15:42 0 0 nxtgenpho APPLE !PHONES ne 1348 03/09/20 20:34:18 5:53 0 0 nxtgenpho APPLE !PHONES ne 1349 03/09/20 20:40:11 3:12 192 0 nxtgenpho APPLE !PHONES ne 1350 03/09/20 20:40:12 3:12 0 0 nxtgenpho APPLE !PHONES ne 1351 03/09/20 20:43:24 6:12 0 0 nxtgenpho APPLE !PHONES ne 1352 03/09/20 20:49:35 8:31 192 0 nxtgenpho APPLE !PHONES ne 1353 03/09/20 20:49:36 8:31 0 0 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 55 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170975 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343033 MOBILITY illOb ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in / ... 1 4`' 7,:s ssi AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating KT Bytes Bytes Apn II I MAKE MODEL Date Tine Number Up Dn (UTC) 1354 03/09/20 20:58:07 9:29 0 Onmtgonpho APPLE 'PHONES ne 1355 03/09/20 21:07:35 1:02 192 Onmtgonpho APPLE 'PHONES ne 1356 03/09/20 21:07:36 1:02 0 Onmtgonpho APPLE 'PHONES ne 1357 03/09/20 21:08:38 3:54 0 Onmtgonpho APPLE 'PHONES ne 1358 03/09/20 21:12:31 2:56 192 Onmtgonpho APPLE 'PHONES ne 1359 03/09/20 21:12:32 2:56 0 Onmtgonpho APPLE 'PHONES ne 1360 03/09/20 21:14:37 18:28 3408 1324 ims 1361 03/09/20 21:15:28 1:22 0 Onmtgonpho APPLE 'PHONES ne 1362 03/09/20 21:16:49 2:09 192 Onmtgonpho APPLE 'PHONES ne 1363 03/09/20 21:16:50 2:09 0 Onmtgonpho APPLE 'PHONES ne 1364 03/09/20 21:18:59 10:53 0 Onmtgonpho APPLE 'PHONES ne 1365 03/09/20 21:29:52 20:16 192 Onmtgonpho APPLE 'PHONES ne 1366 03/09/20 21:29:53 20:15 6244 6740 ims APPLE 'PHONES 1367 03/09/20 21:29:53 20:16 0 Onmtgonpho APPLE 'PHONES ne 1368 03/09/20 21:29:54 20:15 6672 5980 ims APPLE 'PHONES 1369 03/09/20 21:46:37 60:00 18655 9854 ims 1370 03/09/20 21:50:09 2:03 0 Onmtgonpho APPLE 'PHONES ne 1371 03/09/20 21:52:11 9:24 192 Onmtgonpho APPLE 'PHONES ne 1372 03/09/20 21:52:12 9:25 0 Onmtgonpho APPLE 'PHONES ne 1373 03/09/20 22:01:37 30:59 0 Onmtgonpho APPLE 'PHONES ne 1374 03/09/20 22:32:36 17:41 192 Onmtgonpho APPLE 'PHONES ne 1375 03/09/20 22:32:36 17:42 0 Onmtgonpho APPLE 'PHONES ne 1376 03/09/20 22:46:37 46:07 10160 6456 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 56 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170976 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343034 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .ai. AT&T ••- UTC. Run Dato: 06/17/2020 Run Tine: Data Usage For: Sid= Item Conn. Conn. Originating ET Bytes Bytes Apn MAKE MODEL Date Time Number Up cm (UTC) 1377 03/09/20 22:50:17 1:16 192 0nxtgonpho APPLE 'PHONES ne 1378 03/09/20 22:50:18 1:16 0 0 nxtgonpho APPLE 'PHONES ne 1379 03/09/20 22:51:34 5:52 0 0 nxtgonpho APPLE 'PHONES ne 1380 03/09/20 22:57:25 3:56 192 0 nxtgonpho APPLE 'PHONES ne 1381 03/09/20 22:57:27 3:57 0 0 nxtgonpho APPLE 'PHONES ne 1382 03/09/20 23:01:24 4:13 0 0 nxtgonpho APPLE 'PHONES ne 1383 03/09/20 23:05:36 3:35 192 0 nxtgonpho APPLE 'PHONES ne 1384 03/09/20 23:05:37 3:35 0 0 nxtgonpho APPLE 'PHONES ne 1385 03/09/20 23:09:12 11:34 0 0 nxtgonpho APPLE 'PHONES ne 1386 03/09/20 23:20:45 2:21 192 0 nxtgonpho APPLE 'PHONES ne 1387 03/09/20 23:20:46 2:21 0 0 nxtgonpho APPLE 'PHONES ne 1388 03/09/20 23:23:07 11:56 0 0 nxtgonpho APPLE 'PHONES ne 1389 03/09/20 23:33:05 0:34 840 72 isms APPLE 'PHONES 1390 03/09/20 23:33:39 0:00 0 0 isms APPLE 'PHONES 1391 03/09/20 23:33:39 0:01 0 0 isms APPLE 'PHONES 1392 03/09/20 23:33:43 60:00 18363 9389 isms 1393 03/09/20 23:35:02 7:16 192 0nxtgonpho APPLE 'PHONES ne 1394 03/09/20 23:35:03 7:16 0 0 nxtgonpho APPLE 'PHONES ne 1395 03/09/20 23:42:19 5:00 0 0 nxtgonpho APPLE 'PHONES ne 1396 03/09/20 23:47:18 1:15 192 0 nxtgonpho APPLE 'PHONES ne 1397 03/09/20 23:47:20 1:14 0 0 nxtgonpho APPLE 'PHONES ne 1398 03/09/20 23:48:34 3:06 0 0 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 57 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170977 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343035 MOBILITY e s, pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/17/2020 Run Timm: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn TERI TEST MAR MODEL Date Time Number Up Dn (OTC) 1399 03/09/20 23:51:40 5:17 192 Onxtgonpho APPLE 'PROEMS no 1400 03/09/20 23:51:41 5:17 0 0 nxtgonpho APPLE 'PEONES no 1401 03/09/20 23:56:58 8:46 192 0 nxtgonpho APPLE 'PEONES no 1402 03/09/20 23:56:59 8:46 0 0 nxtgonpho APPLE 'PEONES no 1403 03/10/20 00:05:45 12:31 192 0 nxtgonpho APPLE 'PHONES no 1404 03/10/20 00:05:46 12:31 0 0 nxtgonpho APPLE 'PHONES ne 1405 03/10/20 00:18:17 23:13 0 0 nxtgonpho APPLE 'PHONES ne 1406 03/10/20 00:33:43 60:00 8604 3052 ims 1407 03/10/20 00:41:29 8:25 192 °asty:mph* APPLE 'PHONES no 1408 03/10/20 00:41:31 8:24 0 0 nxtgonpho APPLE 'PHONES no 1409 03/10/20 00:49:55 17:25 0 0 nxtgonpho APPLE 'PHONES no 1410 03/10/20 01:07:20 58:34 192 0 nxtgonpho APPLE 'PHONES no 1411 03/10/20 01:07:21 58:34 0 0 nxtgonpho APPLE 'PHONES no 1412 03/10/20 01:33:43 60:00 9928 3176 ims 1413 03/10/20 02:05:55 60:00 0 0 nxtgonpho APPLE 'PHONES no 1414 03/10/20 02:33:43 60:00 8496 3160 ims 1415 03/10/20 03:05:55 50:07 0 0 nxtgonpho APPLE 'PHONES no 1416 03/10/20 03:33:43 60:00 8012 2804 ims 1417 03/10/20 03:56:02 16:34 192 0 nxtgonpho APPLE 'PHONES no 1418 03/10/20 03:56:03 16:34 0 0 nxtgonpho APPLE 'PHONES no 1419 03/10/20 04:12:37 41:56 192 0 nxtgonpho APPLE 'PHONES no 1420 03/10/20 04:12:38 41:56 0 0 nxtgonpho APPLE 'PHONES no 1421 03/10/20 04:33:43 60:00 16636 6232 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 58 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170978 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343036 MOBILITY 45, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data usage For: Si= Item conn. Conn. Originating Ez Bytes Bytes Apn INEZ IMSI MAKE MODEL Data Time up on (OTC/ 1422 03/10/20 04:54:34 60:00 0 Onmtgenpho APPLE 'PROMS ne 1423 03/10/20 05:33:43 60:00 8604 3252 ims 1424 03/10/20 05:54:34 50:23 0 0 nxtgenpho APPLE 'PROMS ne 1425 03/10/20 06:33:43 60:00 6848 2680 ims 1426 03/10/20 06:44:57 28:57 192 Onmtgenpho APPLE 'PROMS ne 1427 03/10/20 06:44:58 28:57 0 0 nxtgenpho APPLE 'PHONES ne 1428 03/10/20 07:13:55 60:00 0 0 nxtgenpho APPLE IPHONE8 ne 1429 03/10/20 07:33:43 60:00 8496 3052 ims 1430 03/10/20 08:13:55 49:45 0 0 nxtgenpho APPLE 'PHONES ne 1431 03/10/20 08:33:43 60:00 11596 4160 ism 1432 03/10/20 09:03:39 2:23 192 Onstgenpho APPLE 'PHONES ne 1433 03/10/20 09:03:40 2:23 0 0 nxtgenpho APPLE 'PHONES ne 1434 03/10/20 09:06:03 9:09 192 0 nxtgenpho APPLE 'PHONES ne 1435 03/10/20 09:06:04 9:09 0 0 nxtgenpho APPLE 'PHONES ne 1436 03/10/20 09:15:12 9:23 192 0 nxtgenpho APPLE IPHONE8 ne 1437 03/10/20 09:15:13 9:23 0 0 nxtgenpho APPLE IPHONE8 ne 1438 03/10/20 09:24:36 6:46 192 0 nxtgenpho APPLE IPHONE8 ne 1439 03/10/20 09:24:37 6:46 0 0 nxtgenpho APPLE IPHONE8 ne 1440 03/10/20 09:31:23 56:05 0 0 nxtgenpho APPLE IPHONE8 ne 1441 03/10/20 09:33:43 60:00 15092 4908 ims 1442 03/10/20 10:27:27 14:56 192 Onstgenpho APPLE IPHONE8 ne 1443 03/10/20 10:27:28 14:56 0 0 nxtgenpho APPLE IPHONE8 ne 1444 03/10/20 10:33:43 60:00 9928 3176 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 59 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170979 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343037 MOBILITY e s, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage For: Siam Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ IMBI MDME MODEL Date Time Numbor Up Dn (OTC) 1445 03/10/20 10:42:2 2:10 0 0 nxtgonpho APPLE IPROME8 no 1446 03/10/20 10:44:3 60:00 0 0 nxtgonpho APPLE 'PEONES no 1447 03/10/20 10:44:3 84:53 192 0 nxtgonpho APPLE 'PEONES no 1448 03/10/20 11:33:43 60:00 6956 2680 ims 1449 03/10/20 11:44:3 24:54 0 0 nxtgenpho APPLE IPEONE8 no 1450 03/10/20 12:09:2 34:27 0 0 nxtgonpho APPLE !PHONES no 1451 03/10/20 12:33:43 60:00 9928 3176 ims 1452 03/10/20 12:43:5 2:10 192 0 nxtgonpho APPLE !PHONES no 1453 03/10/20 12:43:5 2:10 0 0 nxtgonpho APPLE !PHONES no 1454 03/10/20 12:46:05 60:00 0 0 nxtgenpho APPLE !PHONES ne 1455 03/10/20 13:33:43 60:00 8604 3052 ims 1456 03/10/20 13:46:0 19:47 0 0 nxtgonpho APPLE !PHONES ne 1457 03/10/20 14:05:5 0:40 192 0 nxtgonpho APPLE !PHONES ne 1458 03/10/20 14:05:5 0:40 0 0 nxtgonpho APPLE !PHONES ne 1459 03/10/20 14:06:3 1:23 0 Onxtgonpho APPLE !PHONES ne 1460 03/10/20 14:07:5 8:25 192 0 nxtgonpho APPLE !PHONES ne 1461 03/10/20 14:07:5 8:24 0 0 nxtgonpho APPLE !PHONES no 1462 03/10/20 14:16:2 58:09 0 0 nxtgonpho APPLE !PHONES no 1463 03/10/20 14:33:43 60:00 13912 6092 ims 1464 03/10/20 15:14:2 1:16 192 0 nxtgonpho APPLE !PHONES no 1465 03/10/20 15:14:3 1:16 0 0 nxtgonpho APPLE !PHONES no 1466 03/10/20 15:15:46 2:14 0 0 nxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 60 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00170480 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343038 MOBILITY cro pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn MMEI IMSI MAKE MODEL Date Time Numbor Up Dn (OTC) 1467 03/10/20 15:17:59 0:57 192 Onstgonpho APPLE 'PEONES ne 1468 03/10/20 15:18:00 0:57 0 0 nxtgenpho APPLE 'PEONES ne 1469 03/10/20 15:18:57 4:52 0 0 nxtgenpho APPLE 'PEONES ne 1470 03/10/20 15:23:48 20:00 192 0 nxtgenpho APPLE 'PEONES ne 1471 03/10/20 15:23:49 27:14 0 0 nxtgenpho APPLE 'PEONES ne 1472 03/10/20 15:33:43 53:28 16092 5276 ims 1473 03/10/20 15:51:03 36:17 0 Onstgonpho APPLE 'PEONES ne 1474 03/10/20 16:27:20 1:23 192 0 nxtgenpho APPLE 'PEONES ne 1475 03/10/20 16:27:21 1:22 7232 6864 ims APPLE IPEOME8 1476 03/10/20 16:27:21 1:23 0 0 nxtgenpho APPLE 'PHONES ne 1477 03/10/20 16:27:22 1:22 6796 6968 ims APPLE 'PHONES 1478 03/10/20 16:28:35 60:00 18395 12138 ims 1479 03/10/20 16:28:44 0:05 0 Onstgonpho APPLE 'PHONES no 1480 03/10/20 16:29:06 1:09 192 0 nxtgonpho APPLE 'PHONES no 1481 03/10/20 16:29:07 1:09 0 0 nxtgenpho APPLE 'PHONES ne 1482 03/10/20 16:30:16 7:18 0 0 nxtgenpho APPLE 'PHONES ne 1483 03/10/20 16:37:33 2:30 192 0 nxtgenpho APPLE 'PHONES ne 1484 03/10/20 16:37:34 2:31 0 0 nxtgenpho APPLE 'PHONES ne 1485 03/10/20 16:40:04 24:25 192 0 nxtgenpho APPLE !PHONES ne 1486 03/10/20 16:40:05 24:25 0 0 nxtgonpho APPLE !PHONES no 1487 03/10/20 17:04:31 0:36 0 0 nxtgonpho APPLE !PHONES no 1488 03/10/20 17:05:06 2:10 192 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 61 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170981 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343039 MOBILITY 411B. pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. / ... 1 4`""s 77,„• AT&T Run Date: 06/17/2020 Run Time: Data Usage For: lad= Item Conn. Conn. Originating ET Bytes Bytes AP^ DOLT INSI MAKE MODEL Date Time Number Up Dn (OTC/ 1489 03/10/20 17:05:07 2:10 0 0 nstgonphe APPLE 'PHONES ne 1490 03/10/20 17:07:17 6:45 0 0 nstgonphe APPLE 'PHONES ne 1491 03/10/20 17:14:01 2:09 192 0 nstgonpho APPLE 'PHONES ne 1492 03/10/20 17:14:02 2:09 0 0 nstgonpho APPLE 'PHONES ne 1493 03/10/20 17:16:11 1:26 0 0 nstgonpho APPLE 'PHONES ne 1494 03/10/20 17:17:36 4:47 192 0 nstgonpho APPLE 'PHONES ne 1495 03/10/20 17:17:37 4:47 0 0 nstgonpho APPLE 'PHONES ne 1496 03/10/20 17:22:25 2:41 0 0 nstgonpho APPLE 'PHONES ne 1497 03/10/20 17:25:06 18:51 0 0 nstgonpho APPLE 'PHONES ne 1498 03/10/20 17:28:35 60:00 25256 17492 ims 1499 03/10/20 17:41:29 0:04 0 4743 ims 1500 03/10/20 17:43:37 0:21 0 40524 ims 1501 03/10/20 17:43:57 38:21 192 Onstgonpho APPLE 'PHONES ne 1502 03/10/20 17:43:58 38:21 0 0 nstgonpho APPLE 'PHONES ne 1503 03/10/20 18:22:19 2:30 0 0 nstgonpho APPLE 'PHONES ne 1504 03/10/20 18:24:49 0:40 192 0 nstgonpho APPLE 'PHONES ne 1505 03/10/20 18:24:50 0:40 0 0 nstgonpho APPLE 'PHONES ne 1506 03/10/20 18:25:30 4:37 0 0 nstgonpho APPLE 'PHONES ne 1507 03/10/20 18:28:35 60:00 16008 10668 ims 1508 03/10/20 18:30:06 2:10 192 0 nstgonpho APPLE 'PHONES ne 1509 03/10/20 18:30:07 2:10 0 0 nstgonpho APPLE 'PHONES ne 1510 03/10/20 18:32:17 5:41 0 0 nstgonpho APPLE 'PHONES ne 1511 03/10/20 18:36:19 0:03 0 4743 ims AT&T Proprietary The AT&T network constantly communicates with Internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 62 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170982 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343040 MOBILITY ci sme ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTZ. Run Date: 06/17/2020 Run Time: Data Usage For: "MI= Item Conn. Conn. Originating ET Bytes Bytes Apn EMBI IMSI MAKE MODEL Date Time Number Up Dn (OTC) 1512 03/10/20 18:37:58 52:57 192 0 'mtg.:mph* APPLE 'PROMO no 1513 03/10/20 18:37:59 52:57 0 0 nxtgenphe APPLE 'PROMO no 1514 03/10/20 19:28:35 60:00 13460 4500 ims 1515 03/10/20 19:30:56 54:37 0 0 nxtgenphe APPLE 'PROMO no 1516 03/10/20 20:25:32 2:14 192 0 nxtgonpho APPLE 'PROMO no 1517 03/10/20 20:25:33 2:14 0 0 nxtgonpho APPLE 'PROMO no 1518 03/10/20 20:27:47 19:12 0 0 nxtgenphe APPLE IPNONE8 ne 1519 03/10/20 20:28:35 60:00 6924 2788 ims 1520 03/10/20 20:46:58 15:19 192 0 nxtgonpho APPLE !PHONES ne 1521 03/10/20 20:46:59 15:19 0 0 nxtgenphe APPLE 'PHONES ne 1522 03/10/20 21:02:18 21:25 0 0 nxtgenphe APPLE 'PHONES ne 1523 03/10/20 21:23:42 3:11 192 0 nxtgonpho APPLE !PHONES ne 1524 03/10/20 21:23:43 3:11 0 0 nxtgonpho APPLE !PHONES ne 1525 03/10/20 21:26:53 8:23 192 0 nxtgenphe APPLE 'PHONES no 1526 03/10/20 21:26:54 8:23 0 0 nxtgenphe APPLE 'PHONES no 1527 03/10/20 21:28:35 60:00 10656 4288 ims 1528 03/10/20 21:35:17 1:15 0 0 nxtgenphe APPLE 'PHONES no 1529 03/10/20 21:36:32 7:33 0 0 nxtgonpho APPLE !PHONES no 1530 03/10/20 21:44:05 10:19 192 0 nxtgonphe APPLE 'PHONES ne 1531 03/10/20 21:44:06 10:19 0 0 nxtgenphe APPLE 'PHONES ne 1532 03/10/20 21:54:25 2:09 192 0 nxtgenphe APPLE 'PHONES ne 1533 03/10/20 21:54:26 2:09 0 0 nxtgenphe APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 63 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170983 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343041 MOBILITY „lee PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Dato: 06/17/2020 Run Time: Data usage For: Si= Item conn. Conn. Originating ET Bytes Bytes Apn IMEI IMSI MIME MODEL Date Time Number up Dn (OTC/ 1534 03/10/20 21:56:35 27:45 0 Onstgenpho APPLE 'PEONES ne 1535 03/10/20 22:24:20 64:28 192 0 nxtgenpho APPLE 'PEONES ne 1536 03/10/20 22:24:21 60:00 0 0 nxtgenpho APPLE 'PEONES ne 1537 03/10/20 22:28:35 60:00 24512 11828 ims 1538 03/10/20 23:20:52 0:01 0 0 ims 1539 03/10/20 23:20:55 0:03 0 1356 ims 1540 03/10/20 23:24:21 4:28 0 0 nxtgenpho APPLE 'PEONES ne 1541 03/10/20 23:28:35 60:00 11796 4376 ims 1542 03/10/20 23:28:49 47:34 0 0 nxtgenpho APPLE 'PHONES ne 1543 03/11/20 00:16:23 0:54 0 0 nxtgenpho APPLE 'PHONES ne 1544 03/11/20 00:17:16 2:09 192 0 nxtgenpho APPLE 'PHONES ne 1545 03/11/20 00:17:17 2:10 0 0 nxtgenpho APPLE 'PHONES ne 1546 03/11/20 00:19:26 5:58 0 0 nxtgenpho APPLE 'PHONES ne 1547 03/11/20 00:25:23 5:22 192 0 nxtgenpho APPLE !PHONES ne 1548 03/11/20 00:25:24 5:22 0 0 nxtgenpho APPLE !PHONES ne 1549 03/11/20 00:28:35 60:00 7048 2912 ims 1550 03/11/20 00:30:46 60:00 0 0 nxtgenpho APPLE !PHONES ne 1551 03/11/20 01:28:35 59:42 8604 3160 ims 1552 03/11/20 01:30:46 52:17 0 0 nxtgenpho APPLE !PHONES ne 1553 03/11/20 02:24:15 2:47 0 0 nxtgenpho APPLE !PHONES ne 1554 03/11/20 02:27:01 70:00 192 0 nxtgenpho APPLE !PHONES ne 1555 03/11/20 02:27:02 60:00 0 0 nxtgenpho APPLE !PHONES ne 1556 03/11/20 02:27:28 15:13 6353 33200 ims APPLE !PHONES 1557 03/11/20 02:27:29 15:13 6672 6089 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 64 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170984 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343042 MOBILITY P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in / ... 1 4 ""7s ,e,# AT&T ‘‘.......tzse OTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn IMMIX IMEI MAKE MODEL Date Time Numbor Up Dn (OTC) 1558 03/11/20 02:28:17 60:00 8371 6178 ims 1559 03/11/20 02:42:36 60:00 15069 8676 ims 1560 03/11/20 03:27:02 60:00 0 0 nxtgonpho 31 APPLE 'PHONES no 1561 03/11/20 03:28:17 60:00 0 0 ims 1562 03/11/20 03:42:36 56:47 13320 5856 ims 1563 03/11/20 04:27:02 4:24 0 0 nxtgonpho 31 APPLE 'PHONES no 1564 03/11/20 04:28:17 3:12 0 0 ims 1565 03/11/20 04:31:26 3:35 0 0 nxtgonpho 31 APPLE 'PHONES no 1566 03/11/20 04:31:29 0:00 0 0 ims 31 APPLE 'PHONES 1567 03/11/20 04:35:00 7:56 192 0 nxtgonpho 31 APPLE 'PHONES no 1568 03/11/20 04:35:01 7:56 0 0 nxtgonpho 31 APPLE 'PHONES no 1569 03/11/20 04:39:23 60:00 16467 9128 ims 1570 03/11/20 04:42:57 21:02 0 0 nxtgonpho 31 APPLE 'PHONES no 1571 03/11/20 05:03:58 8:20 192 0 nxtgonpho 31 APPLE 'PHONES no 1572 03/11/20 05:03:59 8:20 0 0 nxtgonpho 31 APPLE 'PHONES no 1573 03/11/20 05:12:19 8:19 0 0 nxtgonpho 3! APPLE 'PHONES no 1574 03/11/20 05:20:37 21:06 192 0 nxtgonpho 3 APPLE 'PHONES no 1575 03/11/20 05:20:38 21:06 0 0 nxtgonpho 3 APPLE 'PHONES no 1576 03/11/20 05:39:23 60:00 7032 2756 ims 1577 03/11/20 05:41:44 29:04 0 0 nxtgonpho 3 APPLE 'PHONES no 1578 03/11/20 06:10:47 2:09 192 0 nxtgonpho 3 APPLE 'PHONES no 1579 03/11/20 06:10:49 2:08 0 0 nxtgonpho 3 APPLE 'PHONES no 1580 03/11/20 06:12:58 60:00 0 0 nxtgonpho 3 APPLE 'PHONES no 1581 03/11/20 06:39:23 60:00 6816 2540 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 65 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170985 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343043 MOBILITY cre pm. AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. AT&T Run Dato: 06/17/2020 Run Time: Data Usage For: Siam Item Conn. Conn. Originating ET Bytes Bytes Apn LBSI IMSI MAKE MODEL Date Time Number Up Dn (OTC) 1582 03/11/20 07:12:58 60:00 0 0 nxtgonpho APPLE 'PHONES no 1583 03/11/20 07:39:23 60:00 8388 3144 ims 1584 03/11/20 08:12:58 33:16 0 0 nxtgonpho APPLE 'PHONES ne 1585 03/11/20 08:39:23 60:00 6816 2896 ims 1586 03/11/20 08:46:13 2:09 192 0 nxtgonpho APPLE 'PHONES ne 1587 03/11/20 08:46:14 2:09 0 0 nxtgonpho APPLE 'PHONES ne 1588 03/11/20 08:48:23 55:08 0 0 nxtgonpho APPLE 'PHONES ne 1589 03/11/20 09:39:23 60:00 13524 5520 ims 1590 03/11/20 09:43:30 2:09 192 0 nxtgonpho APPLE 'PHONES ne 1591 03/11/20 09:43:31 2:09 0 0 nxtgonpho APPLE 'PHONES ne 1592 03/11/20 09:45:40 60:00 0 0 nxtgonpho APPLE 'PHONES ne 1593 03/11/20 10:39:23 60:00 7140 2788 ims 1594 03/11/20 10:45:40 60:00 0 0 nxtgonpho APPLE 'PHONES no 1595 03/11/20 11:39:23 44:33 3516 1340 ims 1596 03/11/20 11:45:40 36:54 0 0 nxtgonpho APPLE 'PHONES ne 1597 03/11/20 12:22:33 2:10 192 0 nxtgonpho APPLE 'PHONES ne 1598 03/11/20 12:22:34 2:10 0 0 nxtgonpho APPLE 'PHONES ne 1599 03/11/20 12:22:38 2:05 6439 8606 ims APPLE 'PHONES 1600 03/11/20 12:22:39 2:05 8462 6175 ims APPLE 'PHONES 1601 03/11/20 12:23:56 60:00 16789 9202 ims 1602 03/11/20 12:24:44 22:13 0 Onactgonpho APPLE 'PHONES ne 1603 03/11/20 12:46:56 8:20 192 0 nxtgonpho APPLE 'PHONES ne 1604 03/11/20 12:46:57 8:20 0 0 nxtgonpho APPLE 'PHONES ne 1605 03/11/20 12:55:17 60:00 0 0 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 66 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00170486 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343044 MOBILITY c to PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:50:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytos Bytes Apn ENE! INSI MAKE MODEL Date Time Number Up Dn (UTC) 1606 03/11/20 13:23:56 60:00 6956 2988 ims 1607 03/11/20 13:55:17 60:00 0 Onmtgenpho APPLE !PHONES ne 1608 03/11/20 14:23:56 60:00 6940 2756 ims 1609 03/11/20 14:55:17 19:02 0 0 nmtgenpho APPLE !PHONES ne 1610 03/11/20 15:14:18 2:01 192 0 nxtgenpho APPLE !PHONES ne 1611 03/11/20 15:14:19 2:01 0 0 nxtgenpho APPLE !PHONES ne 1612 03/11/20 15:16:20 0:32 0 0 nxtgenpho APPLE !PHONES ne 1613 03/11/20 15:16:51 2:10 192 0 nxtgenpho APPLE !PHONES ne 1614 03/11/20 15:16:52 2:10 0 0 nxtgenpho APPLE !PHONES ne 1615 03/11/20 15:19:02 32:43 0 0 nxtgenpho APPLE !PHONES ne 1616 03/11/20 15:23:56 16:09 3532 1324 ims APPLE !PHONES 1617 03/11/20 15:40:05 0:24 2768 1324 ims APPLE !PHONES 1618 03/11/20 15:40:05 0:24 2704 1324 ims APPLE !PHONES 1619 03/11/20 15:40:29 11:44 4964 1680 ims APPLE !PHONES 1620 03/11/20 15:51:45 2:09 192 Onmtgenpho APPLE !PHONES ne 1621 03/11/20 15:51:46 2:09 0 0 nxtgenpho APPLE !PHONES ne 1622 03/11/20 15:52:12 1:05 6370 7972 ims APPLE !PHONES 1623 03/11/20 15:52:13 1:05 7972 6106 ims APPLE !PHONES 1624 03/11/20 15:52:58 0:21 11358 6562 ims 1625 03/11/20 15:53:16 0:38 6244 6668 ims APPLE !PHONES 1626 03/11/20 15:53:17 0:38 6668 5980 ims APPLE !PHONES 1627 03/11/20 15:53:46 0:56 8511 6170 ims 1628 03/11/20 15:53:55 0:42 0 Onmtgenpho APPLE !PHONES ne 1629 03/11/20 15:54:36 2:10 192 0 nxtgenpho APPLE !PHONES ne 1630 03/11/20 15:54:37 2:10 0 0 nxtgenpho APPLE !PHONES ne 1631 03/11/20 15:54:40 2:06 6262 6666 ims APPLE !PHONES 1632 03/11/20 15:54:42 2:05 6666 5998 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 67 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170987 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343045 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating CT Bytes Bytes Apn Ian SAES MOM Date Tame Number Up Dn MC/ 1633 03/11/20 15:55:34 60:00 18402 10186 ims 1634 03/11/20 15:56:47 23:07 0 0 nxtgenpho APPLE 'PEONES ne 1635 03/11/20 16:19:54 2:19 192 0 nxtgonphe APPLE 'PEONES ne 1636 03/11/20 16:19:55 2:20 0 0 nxtgonphe APPLE 'PEONES ne 1637 03/11/20 16:22:15 31:18 0 0 nxtgonphe APPLE 'PEONES ne 1638 03/11/20 16:53:32 8:20 192 0 nxtgonphe APPLE 'PEONES ne 1639 03/11/20 16:53:33 8:21 0 0 nxtgonphe APPLE IPHOME8 ne 1640 03/11/20 16:55:34 60:00 8496 3144 ims 1641 03/11/20 17:01:53 7:53 0 0 nxtgonphe APPLE !PHONES ne 1642 03/11/20 17:09:46 0:47 0 0 nxtgonphe APPLE !PHONES ne 1643 03/11/20 17:10:32 2:09 192 0 nxtgonphe APPLE !PHONES ne 1644 03/11/20 17:10:33 2:09 0 0 nxtgonphe APPLE !PHONES ne 1645 03/11/20 17:12:42 30:27 0 0 nxtgonphe APPLE !PHONES ne 1646 03/11/20 17:43:08 2:10 192 0 nxtgonphe APPLE !PHONES ne 1647 03/11/20 17:43:10 2:09 0 0 nxtgonphe APPLE !PHONES ne 1648 03/11/20 17:45:19 11:39 0 0 nxtgonphe APPLE !PHONES ne 1649 03/11/20 17:55:34 60:00 8496 3036 ims 1650 03/11/20 17:56:58 61:35 192 0 nxtgonphe APPLE !PHONES ne 1651 03/11/20 17:56:59 60:00 0 0 nxtgonphe APPLE !PHONES ne 1652 03/11/20 18:55:34 60:00 8588 3052 ims 1653 03/11/20 18:56:59 1:35 0 0 nxtgonphe APPLE !PHONES ne 1654 03/11/20 18:58:34 6:44 0 0 nxtgonphe APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 68 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00170488 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343046 MOBILITY PRI020 AT&T has queried AT&T has queried for records for records from 03/01/2020 12:00:00am using Eastern Time Zone. to 06/15/2020 11:59:59pm AT&T's records are stored and provided in k..70 . AT&T UTE. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn MBE! INSI MAKE MODEL Date Time Number Up Dn (OTC) 1655 03/11/20 19:05:17 21:01 192 Onactgonpho APPLE !PHONES ne 1656 03/11/20 19:05:18 21:01 0 0 nxtgenpho APPLE !PHONES ne 1657 03/11/20 19:26:19 14:15 0 0 nxtgenpho APPLE !PHONES ne 1658 03/11/20 19:40:33 2:09 192 0 nxtgenpho APPLE !PHONES ne 1659 03/11/20 19:40:34 2:09 0 0 nxtgenpho APPLE !PHONES ne 1660 03/11/20 19:42:43 10:04 0 0 nxtgenpho APPLE !PHONES ne 1661 03/11/20 19:52:46 2:10 192 Onactgonpho APPLE !PHONES ne 1662 03/11/20 19:52:48 2:09 0 0 nxtgenpho APPLE !PHONES ne 1663 03/11/20 19:54:57 27:31 0 0 nxtgenpho APPLE !PHONES ne 1664 03/11/20 19:55:34 60:00 7188 2804 ims 1665 03/11/20 20:22:27 4:17 192 0 nxtgenpho APPLE !PHONES ne 1666 03/11/20 20:22:28 4:17 0 Onactgonpho APPLE !PHONES ne 1667 03/11/20 20:26:45 31:09 0 0 nxtgenpho APPLE !PHONES ne 1668 03/11/20 20:55:34 60:00 41608 20964 ims 1669 03/11/20 20:57:06 0:24 19460 45298 ims 1670 03/11/20 20:57:54 5:20 192 Onactgonpho APPLE !PHONES ne 1671 03/11/20 20:57:55 5:20 0 0 nxtgenpho APPLE !PHONES ne 1672 03/11/20 21:03:16 24:05 0 0 nxtgenpho APPLE !PHONES ne 1673 03/11/20 21:27:20 2:10 192 Onactgonpho APPLE !PHONES ne 1674 03/11/20 21:27:21 2:10 0 Onactgonpho APPLE !PHONES ne 1675 03/11/20 21:29:31 5:23 0 0 nxtgenpho APPLE !PHONES ne 1676 03/11/20 21:34:53 2:45 192 0 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 69 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170589 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343047 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn EBBS IMSI MAKE MODEL Date Time Number Up Dn (OTC) 1677 03/11/20 21:34:54 2:45 0 Onxtgonpho APPLE !PHONES ne 1678 03/11/20 21:36:21 0:24 16926 44638 ims 1679 03/11/20 21:37:38 8:33 192 Onxtgonpho APPLE !PHONES no 1680 03/11/20 21:37:39 8:33 0 0 nxtgonpho APPLE !PHONES no 1681 03/11/20 21:46:12 2:53 0 0 nxtgonpho APPLE 'PHONES no 1682 03/11/20 21:48:10 0:24 36612 45576 ims 1683 03/11/20 21:49:04 1:41 192 0 nxtgonpho APPLE 'PHONES no 1684 03/11/20 21:49:05 1:41 0 0 nxtgonpho APPLE 'PHONES no 1685 03/11/20 21:50:45 2:09 192 0 nxtgenpho APPLE 'PHONES no 1686 03/11/20 21:50:46 2:09 0 0 nxtgenpho APPLE 'PHONES no 1687 03/11/20 21:52:55 4:37 0 0 nxtgenpho APPLE 'PHONES no 1688 03/11/20 21:55:34 60:00 23372 11084 ims 1689 03/11/20 21:56:29 0:24 15044 47925 ims 1690 03/11/20 21:57:31 2:32 192 0 nxtgonpho APPLE 'PHONES ne 1691 03/11/20 21:57:32 2:32 0 0 nxtgenpho APPLE !PHONES ne 1692 03/11/20 22:00:04 16:53 0 0 nxtgonpho APPLE 'PHONES no 1693 03/11/20 22:16:57 2:09 192 0 nxtgonpho APPLE 'PHONES no 1694 03/11/20 22:16:58 2:09 0 0 nxtgonpho APPLE 'PHONES ne 1695 03/11/20 22:19:08 33:25 0 0 nxtgonpho APPLE 'PHONES no 1696 03/11/20 22:52:32 8:24 192 0 nxtgonpho APPLE 'PHONES no 1697 03/11/20 22:52:33 8:24 0 0 nxtgenpho APPLE 'PHONES no 1698 03/11/20 22:55:34 11:56 0 0 ims 1699 03/11/20 23:00:57 1:54 0 0 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 70 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00170990 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343048 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .ai. AT&T ‘•- UTC. Run Date: 06/17/2020 Run Time: Data Usage For: INA= Item Conn. Conn. Originating BT Bytes Bytes Apn INKS INSI BARB MODEL Date Time Number Up Dn (07C) 1700 03/11/20 23:02:51 14:31 192 Onxtgonpho APPLE 'PHONES ne 1701 03/11/20 23:02:52 14:32 0 0 nxtgenpho APPLE 'PHONES ne 1702 03/11/20 23:03:05 14:17 6204 6742 ims APPLE 'PHONES 1703 03/11/20 23:03:06 14:18 6674 5940 ims APPLE 'PHONES 1704 03/11/20 23:17:24 10:02 0 Onxtgonpho APPLE 'PHONES ne 1705 03/11/20 23:17:29 60:00 16825 9216 ims 1706 03/11/20 23:27:25 8:34 192 0 nxtgenpho APPLE 'PHONES ne 1707 03/11/20 23:27:26 8:34 0 0 nxtgenpho APPLE 'PHONES ne 1708 03/11/20 23:36:00 40:21 0 0 nxtgenpho APPLE 'PHONES ne 1709 03/12/20 00:16:20 6:06 192 0 nxtgenpho APPLE 'PHONES ne 1710 03/12/20 00:16:21 6:06 0 0 nxtgonpho APPLE 'PHONES no 1711 03/12/20 00:17:29 9:41 0 0 ims 1712 03/12/20 00:22:27 39:48 0 0 nxtgenpho APPLE 'PHONES no 1713 03/12/20 00:32:04 0:00 0 0 ims APPLE 'PHONES 1714 03/12/20 00:32:10 0:16 6670 5998 ims APPLE 'PHONES 1715 03/12/20 00:32:26 3:19 13976 7532 ims APPLE 'PHONES 1716 03/12/20 00:35:45 0:32 4276 1696 ims APPLE 'PHONES 1717 03/12/20 00:36:17 60:00 12136 4376 ims APPLE 'PHONES 1718 03/12/20 01:02:14 14:09 192 Onxtgonpho APPLE 'PHONES ne 1719 03/12/20 01:02:15 14:10 0 0 nxtgenpho APPLE 'PHONES ne 1720 03/12/20 01:16:25 20:21 0 0 nxtgenpho APPLE 'PHONES ne 1721 03/12/20 01:36:17 54:55 8388 3020 ims APPLE 'PHONES 1722 03/12/20 01:36:46 14:19 0 0 nxtgenpho APPLE 'PHONES ne 1723 03/12/20 01:51:04 2:35 192 0 nxtgenpho APPLE 'PHONES ne 1724 03/12/20 01:51:05 2:35 0 0 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 71 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170991 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343049 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Data: 06/17/2020 Run Tina: Data Usage Tor: INA= Item Conn. Conn. Originating ET Bytes Bytes Apn LBSS IMSI MAKE MOD= Data Time Number Up Dn (OTC) 1725 03/12/20 01:53:40 8:44 192 Onxtgonpho APPLE 'PEONES ne 1726 03/12/20 01:53:41 8:44 0 0 nxtgonpho APPLE 'PEONES ne 1727 03/12/20 02:02:25 4:58 0 0 nxtgonpho APPLE 'PEONES ne 1728 03/12/20 02:07:22 90:00 192 0 nxtgonpho APPLE 'PEONES ne 1729 03/12/20 02:07:23 60:00 0 0 nxtgonpho APPLE 'PEONES ne 1730 03/12/20 02:31:11 70:00 6226 6646 ims APPLE 'PEONES 1731 03/12/20 02:31:12 60:00 6646 6070 ims APPLE 'PEONES 1732 03/12/20 02:33:14 60:00 16043 9169 ims 1733 03/12/20 03:07:23 60:00 0 0 nxtgonpho APPLE IPH0t1E8 no 1734 03/12/20 03:31:12 55:35 0 0 ims APPLE !PHONES 1735 03/12/20 03:33:14 60:00 6816 2648 ims 1736 03/12/20 04:07:23 19:24 0 Onxtgonpho APPLE !PHONES ne 1737 03/12/20 04:26:46 240:03 192 0 nxtgonpho APPLE !PHONES ne 1738 03/12/20 04:26:47 60:00 0 0 nxtgonpho APPLE !PHONES ne 1739 03/12/20 04:33:14 60:00 6816 2788 ims 1740 03/12/20 05:26:47 60:00 0 0 nxtgonpho APPLE !PHONES no 1741 03/12/20 05:33:14 60:00 8836 3144 ims 1742 03/12/20 06:26:47 60:00 0 0 nxtgonpho APPLE !PHONES ne 1743 03/12/20 06:33:14 60:00 6816 2680 ims 1744 03/12/20 07:26:47 60:00 0 0 nxtgonpho APPLE !PHONES ne 1745 03/12/20 07:33:14 60:00 15312 6108 ims 1746 03/12/20 08:26:47 0:03 0 0 nxtgonpho APPLE !PHONES ne 1747 03/12/20 08:33:14 60:00 6924 2680 ims 1748 03/12/20 08:48:31 114:46 192 0 nxtgonpho APPLE !PHONES ne 1749 03/12/20 08:48:32 60:00 0 0 nxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 72 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170992 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343050 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in t,; s ioAT&T OTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Si= Item Conn. Conn. Originating ET Bytes Bytes Apn fl at IMSI MAKE MODEL Date Time Number Up Dn (OTC/ 1750 03/12/20 09:33:14 60:00 6816 2680 ims 1751 03/12/20 09:48:32 54:46 0 Onmtgonpho APPLE 'PHONES no 1752 03/12/20 10:33:14 60:00 13352 4716 ims 1753 03/12/20 10:43:18 55:17 192 0 nmtgonpho APPLE 'PHONES ne 1754 03/12/20 10:43:19 55:17 0 0 nmtgonpho APPLE 'PHONES ne 1755 03/12/20 11:33:14 60:00 7048 2696 ims 1756 03/12/20 11:38:36 60:00 0 0 nmtgonpho APPLE 'PHONES no 1757 03/12/20 12:33:14 46:01 23828 16392 ims 1758 03/12/20 12:38:36 10:29 0 0 nmtgonpho APPLE 'PHONES ne 1759 03/12/20 12:49:04 1:58 192 0 nmtgonpho APPLE 'PHONES ne 1760 03/12/20 12:49:06 1:57 0 0 nmtgonpho APPLE 'PHONES ne 1761 03/12/20 12:51:03 4:18 0 0 nmtgonpho APPLE 'PHONES no 1762 03/12/20 12:55:20 2:13 192 0 nmtgonpho APPLE 'PHONES no 1763 03/12/20 12:55:21 2:13 0 0 nmtgonpho APPLE 'PHONES ne 1764 03/12/20 12:57:34 5:28 0 0 nmtgonpho APPLE 'PHONES ne 1765 03/12/20 13:03:01 3:17 192 0 nmtgonpho APPLE 'PHONES no 1766 03/12/20 13:03:02 3:17 0 0 nmtgonpho APPLE 'PHONES no 1767 03/12/20 13:06:19 0:37 0 0 nmtgonpho APPLE 'PHONES ne 1768 03/12/20 13:06:55 8:47 192 0 nmtgonpho APPLE 'PHONES ne 1769 03/12/20 13:06:56 8:48 0 0 nmtgonpho APPLE 'PHONES ne 1770 03/12/20 13:15:43 2:19 192 0 nmtgonpho APPLE 'PHONES ne 1771 03/12/20 13:15:44 2:19 0 0 nmtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 73 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170993 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343051 MOBILITY „two PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Tim: Data Usage For: alai= Item Conn. Conn. Originating Bytes Bytes Apn DMZ IIalI MDME MODEL Date Tine up on (OTC) 1772 03/12/20 13:18:03 2:44 0 0 nxtgenpho APPLE 'PHONED ne 1773 03/12/20 13:20:16 1:19 19792 12737 isms 1774 03/12/20 13:20:46 1:39 192 0 nxtgenpho APPLE 'PEONES ne 1775 03/12/20 13:20:48 1:38 0 0 nxtgenpho APPLE IP90NB8 ne 1776 03/12/20 13:22:26 2:48 0 0 nxtgenpho APPLE IP90N18 ne 1777 03/12/20 13:22:28 2:46 8904 7088 isms APPLE IPHOME8 1778 03/12/20 13:25:14 2:09 192 0 nxtgenpho APPLE IP90N18 ne 1779 03/12/20 13:25:15 2:08 7096 6742 isms APPLE 'PHONES 1780 03/12/20 13:25:15 2:09 0 0 nxtgenpho APPLE IP90N18 ne 1781 03/12/20 13:25:16 2:08 6742 6832 isms APPLE IP90N18 1782 03/12/20 13:26:04 60:00 16699 9051 isms 1783 03/12/20 13:27:24 60:00 0 0 nxtgenpho APPLE IP90N18 ne 1784 03/12/20 14:26:04 60:00 7188 2896 isms 1785 03/12/20 14:27:24 60:00 0 0 nxtgenpho APPLE 'PHONES ne 1786 03/12/20 15:26:04 60:00 24520 13060 isms 1787 03/12/20 15:27:24 60:00 0 0 nxtgenpho APPLE 2990918 ne 1788 03/12/20 16:00:27 7:27 1180538 1151123 isms 1789 03/12/20 16:26:04 60:00 7064 2896 isms 1790 03/12/20 16:27:24 60:01 0 Onxtgonpho APPLE 'PHONES ne 1791 03/12/20 17:26:04 60:00 12044 4672 isms 1792 03/12/20 17:27:26 45:17 0 0 nxtgenpho APPLE 'PHONES ne 1793 03/12/20 18:08:59 0:00 0 0 isms APPLE 'PHONES 1794 03/12/20 18:09:58 60:00 25799 15893 isms 1795 03/12/20 18:12:16 0:23 30532 40404 isms 1796 03/12/20 18:12:42 8:26 192 Onstgonpho APPLE 'PHONES ne 1797 03/12/20 18:12:43 8:26 0 Onxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 74 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170994 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343052 MOBILITY dre PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn L@2 INSI MAKE MODEL Date Time Number Up Dn (OTC) 1798 03/12/20 18:21:09 55:07 0 0 nxtgenpho APPLE !PHONES ne 1799 03/12/20 18:26:04 55:32 0 0 ism 1800 03/12/20 19:09:58 9:30 4856 2712 ism 1801 03/12/20 19:16:15 2:10 192 Onxtgonpho APPLE !PHONES ne 1802 03/12/20 19:16:16 2:10 0 Onxtgonpho APPLE !PHONES ne 1803 03/12/20 19:18:26 1:37 0 0 nxtgenpho APPLE !PHONES ne 1804 03/12/20 19:20:02 6:01 192 0 nxtgonpho APPLE !PHONES ne 1805 03/12/20 19:20:03 6:00 6352 6648 ism APPLE !PHONES 1806 03/12/20 19:20:03 6:01 0 Onxtgonpho APPLE !PHONES ne 1807 03/12/20 19:20:04 6:00 6648 6088 ism APPLE !PHONES 1808 03/12/20 19:21:36 0:56 15122 11060 ism 1809 03/12/20 19:22:44 0:30 13547 10699 ism 1810 03/12/20 19:23:30 60:00 44687 29586 ism 1811 03/12/20 19:26:04 7:32 0 0 nxtgonpho APPLE !PHONES no 1812 03/12/20 19:33:35 2:10 192 0 nxtgonpho APPLE !PHONES ne 1813 03/12/20 19:33:36 2:10 0 0 nxtgenpho APPLE !PROMS ne 1814 03/12/20 19:34:21 1:15 167363 118968 ism 1815 03/12/20 19:35:46 5:54 0 0 nxtgenpho APPLE !PHONES ne 1816 03/12/20 19:39:03 0:14 0 0 ism 1817 03/12/20 19:41:40 2:09 192 0 nxtgenpho APPLE !PHONES ne 1818 03/12/20 19:41:41 2:09 0 0 nxtgenpho APPLE !PHONES no 1819 03/12/20 19:43:50 1:07 0 0 nxtgonpho APPLE !PHONES no 1820 03/12/20 19:44:56 2:12 192 0 nxtgonpho APPLE !PHONES no 1821 03/12/20 19:44:57 2:12 0 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 75 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170995 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343053 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: M.= Item Conn. Conn. Originating ET Bytes Bytes Apn 17@I II 8f MAPS MODEL Date Time Number Up Dn (UTC) 1822 03/12/20 19:47:09 2:44 0 0 nactgonpho APPLE IPACETA ne 1823 03/12/20 19:49:32 0:24 51463 45228 ims 1824 03/12/20 19:49:52 0:43 192 0 nactgonpho APPLE IPACETA ne 1825 03/12/20 19:49:53 0:43 0 0 nactgonpho APPLE IPACETA ne 1826 03/12/20 19:50:36 30:57 0 0 nactgonpho APPLE IPACETA ne 1827 03/12/20 20:21:32 2:09 192 0 nactgonpho APPLE IPACETA ne 1828 03/12/20 20:21:33 2:09 0 0 nactgonpho APPLE IPNONE8 ne 1829 03/12/20 20:23:30 60:00 7048 3004 ims 1830 03/12/20 20:23:42 42:51 0 0 nactgonpho APPLE 'PHONES ne 1831 03/12/20 21:06:32 14:44 192 0 nactgonpho APPLE 'PHONES ne 1832 03/12/20 21:06:33 14:44 0 0 nactgonpho APPLE 'PHONES ne 1833 03/12/20 21:21:17 8:01 0 0 nactgonpho APPLE 'PHONES ne 1834 03/12/20 21:23:30 60:00 6924 2788 ims 1835 03/12/20 21:29:18 60:00 0 0 nactgonpho APPLE 'PHONES ne 1836 03/12/20 22:23:30 60:00 13476 4500 ims 1837 03/12/20 22:29:18 45:03 0 0 nactgonpho APPLE 'PHONES ne 1838 03/12/20 23:14:22 60:00 0 0 nactgonpho APPLE 'PHONES ne 1839 03/12/20 23:23:30 60:00 10300 3408 ims 1840 03/13/20 00:14:22 51:33 0 0 nactgonpho APPLE 'PHONES ne 1841 03/13/20 00:23:30 60:00 14864 4872 ims 1842 03/13/20 01:05:54 92:25 192 0 nottgonpho APPLE !PHONES ne 1843 03/13/20 01:05:55 60:00 0 0 nactgonpho APPLE !PHONES ne 1844 03/13/20 01:23:30 60:00 14600 4656 ims 1845 03/13/20 02:05:55 32:25 0 0 nactgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 76 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170996 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343054 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Tine: Data Usage For: Item Conn. Conn. Originating Br Bytes Bytes Apn L@I IMSI MAKE MODEL Date Time Number Up Dn (uzC) 1846 03/13/20 02:23:30 60:00 8820 3252 ins 1847 03/13/20 02:38:20 60:00 192 Onstgonpho APPLE 'PEONES no 1848 03/13/20 02:38:21 60:00 0 0 nxtgonpho APPLE 'PEONES no 1849 03/13/20 03:23:30 40:50 12092 6752 ins 1850 03/13/20 03:38:21 12:11 0 0 nxtgonpho APPLE 'PEONES ne 1851 03/13/20 03:50:31 2:55 192 0 nxtgonpho APPLE 'PHONES ne 1852 03/13/20 03:50:32 2:55 0 0 nxtgonpho APPLE 'PHONES ne 1853 03/13/20 03:53:27 10:51 192 0 nxtgonpho APPLE 'PHONES no 1854 03/13/20 03:53:28 10:51 0 0 nxtgonpho APPLE 'PHONES no 1855 03/13/20 04:08:13 34:26 192 0 nxtgonpho APPLE 'PHONES no 1856 03/13/20 04:08:14 34:26 0 0 nxtgonpho APPLE 'PHONES no 1857 03/13/20 04:08:52 0:44 7459 8824 ins APPLE !PHONES 1858 03/13/20 04:08:53 0:44 8824 7107 ins APPLE !PHONES 1859 03/13/20 04:09:08 0:01 0 0 ins 1860 03/13/20 04:09:21 0:19 6244 6754 isms APPLE !PHONES 1861 03/13/20 04:09:22 0:19 6690 5980 isms APPLE 'PHONES 1862 03/13/20 04:09:37 0:03 2565 1210 isms 1863 03/13/20 04:09:39 0:20 6344 6674 isms APPLE !PHONES 1864 03/13/20 04:09:40 0:20 6674 6080 isms APPLE !PHONES 1865 03/13/20 04:09:56 0:04 2565 1212 isms 1866 03/13/20 04:09:59 0:36 8342 8629 isms APPLE 'PHONES 1867 03/13/20 04:10:00 0:36 8629 8078 isms APPLE 'PHONES 1868 03/13/20 04:10:14 0:01 0 0 isms 1869 03/13/20 04:10:19 32:22 7376 6864 isms APPLE 'PHONES 1870 03/13/20 04:10:20 32:22 6800 7112 isms APPLE !PHONES 1871 03/13/20 04:10:35 60:00 15405 9050 isms 1872 03/13/20 04:42:08 0:35 3412 9535 nxtgenpho ne 1873 03/13/20 04:42:42 62:11 192 0 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 77 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170997 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343055 MOBILITY gre pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. .a# AT&T ‘•- Run pato: 06/17/2020 Run Time: Data Usage Tor: M.= Item Conn. Conn. Originating BT Bytes Bytes AP^ 7:KEI IMSI HAKE MODEL Dato Tim Number Op Dn (OTC) 1874 03/13/20 04:42:43 60:00 0 0 nactgonpho APPLE !PHONES ne 1875 03/13/20 05:10:35 60:00 6848 2664 ims 1876 03/13/20 05:42:43 22:11 0 0 nactgonpho APPLE !PHONES ne 1877 03/13/20 06:04:53 2:22 192 0 nactgonpho APPLE !PHONES no 1878 03/13/20 06:04:54 2:22 0 0 nactgonpho APPLE !PHONES ne 1879 03/13/20 06:07:15 6:06 192 0 nactgonpho APPLE !PHONES ne 1880 03/13/20 06:07:17 6:05 0 0 nactgonpho APPLE !PHONES ne 1881 03/13/20 06:10:35 60:00 8372 2912 ism 1882 03/13/20 06:13:22 0:47 0 0 nactgonpho APPLE !PHONES ne 1883 03/13/20 06:14:09 18:41 192 0 nactgonpho APPLE !PHONES ne 1884 03/13/20 06:14:10 18:41 0 0 nactgonpho APPLE !PHONES ne 1885 03/13/20 06:32:51 58:16 0 0 nactgonpho APPLE !PHONES ne 1886 03/13/20 07:10:35 60:00 6956 2788 igloo 1887 03/13/20 08:10:35 60:00 17084 7312 igloo 1888 03/13/20 09:10:35 60:00 8496 3036 igloo 1889 03/13/20 10:10:35 60:00 9912 3176 igloo 1890 03/13/20 11:10:35 60:00 10052 3284 ism 1891 03/13/20 12:10:35 60:00 11920 4268 ism 1892 03/13/20 12:38:02 9:35 192 Onxtgonpho APPLE !PHONES ne 1893 03/13/20 12:38:03 9:35 0 0 nactgonpho APPLE !PHONES ne 1894 03/13/20 12:47:37 25:08 192 0 nactgonpho APPLE !PHONES ne 1895 03/13/20 12:47:38 25:08 0 0 nactgonpho APPLE !PHONES ne 1896 03/13/20 13:10:35 10:57 0 0 ism 1897 03/13/20 13:12:46 2:03 192 0 nactgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 78 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00170998 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343056 MOBILITY e t, pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:58:68pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. *• 0 AT&T Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ 1848z MAKE MODEL Date Time Number Up Dn (OTC/ 1898 03/13/20 13:12:47 2:03 0 0 nxtgonpho APPLE 'PHONES no 1899 03/13/20 13:14:50 21:25 0 0 nxtgonpho APPLE 'PHONES no 1900 03/13/20 13:21:33 60:00 15267 8752 ims 1901 03/13/20 13:36:15 4:11 0 0 nxtgonpho APPLE 'PHONES no 1902 03/13/20 13:40:25 120:00 192 0 nxtgonpho APPLE 'PHONES no 1903 03/13/20 13:40:26 60:00 0 0 nxtgonpho APPLE 'PHONES no 1904 03/13/20 14:21:33 60:00 8372 3112 ims 1905 03/13/20 14:40:26 60:00 0 0 nxtgenpho APPLE 'PHONES no 1906 03/13/20 15:21:33 60:00 8512 3912 ims 1907 03/13/20 15:40:26 55:16 0 0 nxtgonpho APPLE 'PHONES no 1908 03/13/20 16:21:33 59:35 18408 11284 ims 1909 03/13/20 16:33:05 0:25 42857 50460 ims 1910 03/13/20 16:35:42 1:50 0 0 nxtgonpho APPLE 'PHONES no 1911 03/13/20 16:37:31 2:17 192 0 nxtgonpho APPLE 'PHONES no 1912 03/13/20 16:37:32 2:17 0 0 nxtgonpho APPLE 'PHONES no 1913 03/13/20 16:39:49 22:25 0 0 nxtgonpho APPLE 'PHONES no 1914 03/13/20 16:54:03 22:47 15237 10960 ims 1915 03/13/20 17:02:13 5:32 192 0 nxtgonpho APPLE 'PHONES no 1916 03/13/20 17:02:14 5:32 0 0 nxtgonpho APPLE 'PHONES no 1917 03/13/20 17:07:46 13:19 192 0 nxtgonpho APPLE 'PHONES no 1918 03/13/20 17:07:47 13:19 0 0 nxtgonpho APPLE 'PHONES no 1919 03/13/20 17:17:55 8:43 8193 6048 ims 1920 03/13/20 17:21:06 39:09 192 0 nxtgonpho APPLE 'PHONES no 1921 03/13/20 17:21:07 39:09 0 0 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 79 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00170999 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343057 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in / ... "--6 1 4 ri AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: M.= Item Conn. Conn. Originating CT Bytes Bytes Apn DOLT INSI MAKE MODEL Date Time Number Up Dn (OTC) 1922 03/13/20 17:21:08 0:00 0 0 ims APPLE 'PHONES 1923 03/13/20 17:21:15 39:00 6372 6676 ims APPLE 'PHONES 1924 03/13/20 17:21:16 39:00 6676 6108 ims APPLE 'PHONES 1925 03/13/20 17:29:41 60:00 25131 14008 ims 1926 03/13/20 17:59:27 0:23 14717 40025 ims 1927 03/13/20 18:00:17 10:30 0 0 nmtgenpho APPLE 'PHONES ne 1928 03/13/20 18:10:46 79:05 192 0nmtgenpho APPLE 'PHONES ne 1929 03/13/20 18:10:47 60:00 0 0 nmtgenpho APPLE 'PHONES ne 1930 03/13/20 18:29:41 60:00 7156 2988 ims 1931 03/13/20 19:10:47 19:05 0 0 nmtgenpho APPLE 'PHONES ne 1932 03/13/20 19:29:41 60:00 6816 2756 ims 1933 03/13/20 19:29:51 53:02 192 0nmtgenpho APPLE 'PHONES ne 1934 03/13/20 19:29:52 53:02 0 0 nmtgenpho APPLE 'PHONES ne 1935 03/13/20 20:22:54 8:56 0 0 nmtgenpho APPLE 'PHONES ne 1936 03/13/20 20:29:41 30:16 3640 1448 ims 1937 03/13/20 20:31:49 2:04 192 0nmtgenpho APPLE 'PHONES ne 1938 03/13/20 20:31:50 2:04 0 0 nmtgenpho APPLE 'PHONES ne 1939 03/13/20 20:33:54 3:23 0 0 nmtgenpho APPLE 'PHONES ne 1940 03/13/20 20:37:16 2:03 192 0 nmtgenpho APPLE 'PHONES ne 1941 03/13/20 20:37:17 2:03 0 0 nxtgenpho APPLE 'PHONES ne 1942 03/13/20 20:39:20 5:40 0 0 nmtgenpho APPLE 'PHONES ne 1943 03/13/20 20:44:59 2:04 192 0nmtgenpho APPLE 'PHONES ne 1944 03/13/20 20:45:00 2:04 0 0 nmtgenpho APPLE 'PHONES ne 1945 03/13/20 20:47:04 0:37 0 0 nmtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 80 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171000 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343058 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: M.= Item Conn. Conn. Originating ET Bytes Bytes Apn =IT IMSI MARE MODEL Date Time Number Up Dn (OTC) 1946 03/13/20 20:47:40 2:04 192 0 nxtgenpho APPLE 'PHONES ne 1947 03/13/20 20:47:41 2:04 0 0 nxtgenpho APPLE 'PHONES ne 1948 03/13/20 20:49:45 1:18 0 0 nxtgenpho APPLE 'PHONES ne 1949 03/13/20 20:51:02 8:51 192 0 nxtgenpho APPLE 'PHONES ne 1950 03/13/20 20:51:03 8:51 0 0 nxtgenpho APPLE 'PHONES ne 1951 03/13/20 20:51:10 13:44 8373 6106 ims 1952 03/13/20 20:59:54 2:10 192 Onxtgonpho APPLE 'PHONES ne 1953 03/13/20 20:59:55 2:11 0 0 nxtgenpho APPLE 'PHONES ne 1954 03/13/20 20:59:56 2:08 7136 6746 ims APPLE 'PHONES 1955 03/13/20 20:59:57 2:09 6746 6872 ims APPLE 'PHONES 1956 03/13/20 21:02:06 3:47 0 Onxtgonpho APPLE 'PHONES ne 1957 03/13/20 21:05:53 5:41 192 0 nxtgenpho APPLE 'PHONES ne 1958 03/13/20 21:05:54 5:42 0 0 nxtgenpho APPLE 'PHONES ne 1959 03/13/20 21:07:53 2:08 5700 4896 ims 1960 03/13/20 21:09:59 1:35 8160 6868 ims APPLE 'PHONES 1961 03/13/20 21:10:00 1:36 6868 7896 ims APPLE 'PHONES 1962 03/13/20 21:11:36 0:34 0 0 nxtgenpho APPLE 'PHONES ne 1963 03/13/20 21:12:09 26:51 192 0 nxtgenpho APPLE 'PHONES ne 1964 03/13/20 21:12:10 26:51 0 0 nxtgenpho APPLE 'PHONES ne 1965 03/13/20 21:17:20 10:53 8073 10078 ims 1966 03/13/20 21:24:14 6:02 0 0 ims 1967 03/13/20 21:28:12 3:25 14031 10764 ims 1968 03/13/20 21:32:41 2:10 7138 6754 ims APPLE 'PHONES 1969 03/13/20 21:32:42 2:10 6754 6874 ims APPLE 'PHONES 1970 03/13/20 21:34:37 1:31 84 288 ims 1971 03/13/20 21:34:50 2:14 7116 6744 ims APPLE 'PHONES 1972 03/13/20 21:34:51 2:14 6744 6852 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 81 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171001 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343059 MOBILITY cro AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .4 1/4-4 AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn IRRI IRMI MAKZ MODEL Date Time m”..0-0.,- Up Dn (OTC) 1973 03/13/20 21:36:09 0:56 6601 5083 ims 1974 03/13/20 21:37:04 1:56 7234 6798 isms APPLE 'PEONES 1975 03/13/20 21:37:05 1:56 6798 6970 ims APPLE 'PROEM 1976 03/13/20 21:39:01 1:17 0 Onmtgonpho APPLE 'PROEM ne 1977 03/13/20 21:39:06 1:12 8122 6924 ims APPLE 'PHONES 1978 03/13/20 21:40:17 2:04 192 Onmtgonpho APPLE 'PHONES ne 1979 03/13/20 21:40:18 2:03 6056 6330 ims APPLE 'PHONES 1980 03/13/20 21:40:18 2:04 0 Onmtgonpho APPLE 'PHONES ne 1981 03/13/20 21:40:19 2:03 6330 5792 ims APPLE 'PHONES 1982 03/13/20 21:42:22 0:06 0 Onmtgonpho APPLE 'PHONES ne 1983 03/13/20 21:42:39 0:45 0 Onmtgonpho APPLE 'PHONES ne 1984 03/13/20 21:42:41 0:43 7940 7712 ims APPLE 'PHONES 1985 03/13/20 21:43:23 8:15 192 Onmtgonpho APPLE 'PHONES ne 1986 03/13/20 21:43:24 8:14 6202 6676 ims APPLE 'PHONES 1987 03/13/20 21:43:24 8:15 0 Onmtgonpho APPLE 'PHONES ne 1988 03/13/20 21:43:25 8:14 6676 5938 ims APPLE !PHONES 1989 03/13/20 21:51:39 12:14 0 Onmtgonpho APPLE IPHOME8 ne 1990 03/13/20 21:51:43 12:10 19770 12004 ims APPLE 'PHONES 1991 03/13/20 22:03:52 2:10 192 Onmtgonpho APPLE !PHONES ne 1992 03/13/20 22:03:53 2:09 6225 6776 ims APPLE !PHONES 1993 03/13/20 22:03:53 2:10 0 Onmtgonpho APPLE !PHONES ne 1994 03/13/20 22:03:54 2:09 6668 5961 ims APPLE !PHONES 1995 03/13/20 22:06:03 6:11 0 Onmtgonpho APPLE !PHONES ne 1996 03/13/20 22:06:06 6:08 12060 9324 ims APPLE !PHONES 1997 03/13/20 22:12:13 2:16 192 Onmtgonpho APPLE !PHONES ne 1998 03/13/20 22:12:14 2:15 6228 6774 ims APPLE !PHONES 1999 03/13/20 22:12:14 2:16 0 Onmtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 82 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171002 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343060 MOBILITY ce. pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:58:58pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Ma= Item Conn. Conn. Originating BT Bytes Bytes Apn INEX IMES MAKE MODEL Date Time Mtivehn Up Dn (OTC) 2000 03/13/20 22:12:16 2:14 6666 5964 ims APPLE 'PEONES 2001 03/13/20 22:14:30 2:24 0 Onmtgonpho APPLE 'PEONES ne 2002 03/13/20 22:14:34 2:20 18586 10968 ims APPLE 'PEONES 2003 03/13/20 22:16:53 2:04 192 Onmtgonpho APPLE 'PEONES no 2004 03/13/20 22:16:55 2:02 7268 6904 ims APPLE 'PEONES 2005 03/13/20 22:16:55 2:03 0 Onmtgonpho APPLE 'PEONES no 2006 03/13/20 22:16:56 2:02 6796 7004 ims APPLE !PEONES 2007 03/13/20 22:18:58 1:09 0 Onmtgonpho APPLE IPEOI88 no 2008 03/13/20 22:19:00 1:07 8992 6178 ims APPLE 'PHONES 2009 03/13/20 22:20:06 5:12 192 Onmtgonpho APPLE 'PHONES no 2010 03/13/20 22:20:07 3:30 7136 6846 ims APPLE 'PHONES 2011 03/13/20 22:20:07 5:12 0 Onmtgonpho APPLE 'PHONES no 2012 03/13/20 22:20:08 3:30 6738 6872 ims APPLE 'PHONES 2013 03/13/20 22:23:40 1:38 6242 6670 ims APPLE 'PHONES 2014 03/13/20 22:23:42 1:37 6670 5978 ims APPLE 'PHONES 2015 03/13/20 22:25:19 2:37 0 Onmtgonpho APPLE 'PHONES ne 2016 03/13/20 22:25:21 2:35 6676 5999 ims APPLE 'PHONES 2017 03/13/20 22:27:55 2:07 192 Onmtgonpho APPLE 'PHONES ne 2018 03/13/20 22:27:56 2:06 6386 7516 ims APPLE 'PHONES 2019 03/13/20 22:27:56 2:07 0 Onmtgonpho APPLE 'PHONES ne 2020 03/13/20 22:27:58 2:05 7408 6122 ims APPLE 'PHONES 2021 03/13/20 22:30:03 0:05 0 Onmtgonpho APPLE 'PHONES ne 2022 03/13/20 22:30:19 16:13 0 0 nxtgonpho APPLE !PHONES ne 2023 03/13/20 22:30:22 12:57 7408 6122 ims APPLE !PHONES 2024 03/13/20 22:43:19 0:12 640 372 ims APPLE !PHONES 2025 03/13/20 22:46:31 24:52 192 Onxtgonpho APPLE !PHONES ne 2026 03/13/20 22:46:32 24:52 0 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 83 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171003 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343061 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Sim Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ ISIS! MANS Date Time Number Up Dn (OTC) 2027 03/13/20 22:46:32 1:30 6244 6670 ims APPLE IPECNEB 2028 03/13/20 22:46:33 1:30 6670 5980 ims APPLE !PEONES 2029 03/13/20 22:46:52 11:25 9869 7850 ims 2030 03/13/20 22:48:02 23:21 7320 6790 ims APPLE !PEONES 2031 03/13/20 22:48:03 23:21 6790 7056 ims APPLE !PEONES 2032 03/13/20 22:58:17 20:53 12027 6926 ims 2033 03/13/20 23:11:24 1:05 0 Onmtgonpho APPLE !PHONES ne 2034 03/13/20 23:12:28 3:14 192 Onmtgonpho APPLE !PHONES ne 2035 03/13/20 23:12:29 3:14 0 Onmtgonpho APPLE !PHONES ne 2036 03/13/20 23:14:33 0:07 0 0 ims 2037 03/13/20 23:15:43 12:51 0 Onmtgonpho APPLE !PHONES ne 2038 03/13/20 23:15:47 5:59 9909 6354 ims 2039 03/13/20 23:19:10 60:00 0 0 ims 2040 03/13/20 23:21:46 60:00 15283 8910 ims 2041 03/13/20 23:28:33 1:36 192 Onmtgonpho APPLE !PHONES no 2042 03/13/20 23:28:35 1:35 0 Onmtgonpho APPLE !PHONES no 2043 03/13/20 23:30:10 1:48 0 Onmtgonpho APPLE !PHONES no 2044 03/13/20 23:31:58 31:47 192 Onmtgonpho APPLE !PHONES no 2045 03/13/20 23:31:59 31:47 0 Onmtgonpho APPLE !PHONES no 2046 03/14/20 00:03:45 8:26 192 Onmtgonpho APPLE !PHONES no 2047 03/14/20 00:03:46 8:26 0 Onmtgonpho APPLE !PHONES no 2048 03/14/20 00:12:12 3:18 192 Onmtgonpho APPLE !PHONES ne 2049 03/14/20 00:12:13 3:18 0 Onmtgonpho APPLE !PHONES ne 2050 03/14/20 00:15:31 0:59 0 Onmtgonpho APPLE !PHONES ne 2051 03/14/20 00:16:29 4:05 192 Onmtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 84 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00171004 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343062 MOBILITY de. PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn L62 IMSI MAKE MODEL Date Time Number Up Dn (UTC) 2052 03/14/20 00:16:30 4:05 0 0 nxtgonpho APPLE !PEONES no 2053 03/14/20 00:19:10 60:00 0 0 ims 2054 03/14/20 00:20:35 0:40 0 0 nxtgonpho APPLE !PEONES no 2055 03/14/20 00:21:14 15:25 192 0 nxtgonpho APPLE !PEONES no 2056 03/14/20 00:21:15 15:25 0 0 nxtgonpho APPLE !PEONES no 2057 03/14/20 00:21:46 60:00 6816 2648 ims 2058 03/14/20 00:36:39 12:26 192 0 nxtgonpho APPLE !PEONES no 2059 03/14/20 00:36:40 12:26 0 0 nxtgonpho APPLE !PEONES no 2060 03/14/20 00:49:06 1:08 0 0 nxtgonpho APPLE !PEONES no 2061 03/14/20 00:50:14 12:34 192 0 nxtgonpho APPLE !PEONES no 2062 03/14/20 00:50:14 12:35 0 0 nxtgonpho APPLE !PEONES no 2063 03/14/20 01:02:48 1:18 192 0 nxtgonpho APPLE !PEONES no 2064 03/14/20 01:02:50 1:17 0 0 nxtgonpho APPLE 'PHONES no 2065 03/14/20 01:04:06 36:37 192 0 nxtgonpho APPLE 'PHONES no 2066 03/14/20 01:04:07 36:37 0 0 nxtgenpho APPLE 'PHONES ne 2067 03/14/20 01:19:10 60:00 0 0 ims 2068 03/14/20 01:21:46 60:00 7156 2880 ims 2069 03/14/20 01:40:44 34:01 0 0 nxtgonpho APPLE 'PHONES ne 2070 03/14/20 02:14:44 2:09 192 0 nxtgonpho APPLE 'PHONES ne 2071 03/14/20 02:14:46 2:08 0 0 nxtgonpho APPLE !PHONES ne 2072 03/14/20 02:16:54 15:31 0 0 nxtgonpho APPLE !PHONES ne 2073 03/14/20 02:19:10 60:00 0 0 ims 2074 03/14/20 02:21:46 60:00 16096 4716 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 85 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171005 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343063 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn MMEI IM9I MAKE MODEL Date Time Number Up Dn (OTC) 2075 03/14/20 02:32:24 2:32 192 Onmtgonpho APPLE !PHONES ne 2076 03/14/20 02:32:25 2:32 0 0 nxtgonpho APPLE !PHONES ne 2077 03/14/20 02:34:56 6:04 192 0 nxtgonpho APPLE !PHONES ne 2078 03/14/20 02:34:57 6:04 0 0 nxtgonpho APPLE !PHONES ne 2079 03/14/20 02:41:01 11:31 0 0 nxtgonpho APPLE !PHONES ne 2080 03/14/20 02:52:32 2:14 192 Onmtgonpho APPLE !PHONES ne 2081 03/14/20 02:52:33 2:14 0 Onmtgonpho APPLE !PHONES ne 2082 03/14/20 02:54:47 28:35 0 0 nxtgonpho APPLE !PHONES ne 2083 03/14/20 03:19:10 0:01 0 0 ims 2084 03/14/20 03:21:46 60:00 6940 3740 ims 2085 03/14/20 03:23:21 8:26 192 Onmtgonpho APPLE !PHONES no 2086 03/14/20 03:23:22 8:27 0 0 nxtgonpho APPLE !PHONES no 2087 03/14/20 03:31:49 1:43 0 0 nxtgonpho APPLE !PHONES ne 2088 03/14/20 03:33:31 2:10 192 Onmtgonpho APPLE !PHONES ne 2089 03/14/20 03:33:32 2:10 0 Onmtgonpho APPLE !PHONES ne 2090 03/14/20 03:35:42 60:00 0 0 nxtgonpho APPLE !PHONES ne 2091 03/14/20 04:21:46 60:00 11904 4612 ims 2092 03/14/20 04:35:42 60:00 0 0 nxtgenpho APPLE !PHONES no 2093 03/14/20 05:21:46 60:00 6924 2648 ims 2094 03/14/20 05:35:42 60:00 0 0 nxtgonpho APPLE !PHONES ne 2095 03/14/20 06:21:46 60:00 10068 3144 ims 2096 03/14/20 06:35:42 60:00 0 0 nxtgonpho APPLE !PHONES ne 2097 03/14/20 07:21:46 60:00 8388 2896 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 86 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171006 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343064 MOBILITY ce. pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Date: 06/17/2020 Run Time: Data Usage Tor: INN= Item Conn. Conn. Originating AT Bytes Bytes Apn IMMIX INSI NARA NODAL Date Tame Number Up Dn (OTC) 2098 03/14/20 07:35:42 0:01 0 Onmtgonpho APPLE !PHONES ne 2099 03/14/20 07:35:45 60:00 0 0 nxtgenpho APPLE !PHONES ne 2100 03/14/20 08:21:46 60:00 11580 4112 ims 2101 03/14/20 08:35:45 60:00 0 0 nxtgenpho APPLE !PHONES ne 2102 03/14/20 09:21:46 60:00 16496 5124 ims 2103 03/14/20 09:35:45 60:00 0 0 nxtgenpho APPLE !PHONES ne 2104 03/14/20 10:21:46 60:00 8496 2896 ims 2105 03/14/20 10:35:45 60:01 0 Onmtgonpho APPLE !PHONES ne 2106 03/14/20 11:21:46 60:00 6924 2756 ims 2107 03/14/20 11:35:47 60:00 0 0 nxtgenpho APPLE !PHONES ne 2108 03/14/20 12:21:46 21:19 3408 1324 ims 2109 03/14/20 12:35:47 2:40 0 Onmtgonpho APPLE !PHONES ne 2110 03/14/20 12:38:26 0:27 192 0 nxtgenpho APPLE !PHONES ne 2111 03/14/20 12:38:27 0:27 0 0 nxtgenpho APPLE !PHONES ne 2112 03/14/20 12:38:54 1:51 0 0 nxtgenpho APPLE !PHONES ne 2113 03/14/20 12:39:01 1:58 8327 7901 ims APPLE !PHONES 2114 03/14/20 12:40:45 1:14 0 Onmtgonpho APPLE !PHONES ne 2115 03/14/20 12:40:59 0:33 5864 2431 ims APPLE !PHONES 2116 03/14/20 12:40:59 0:33 5800 2431 ims APPLE !PHONES 2117 03/14/20 12:41:32 5:59 32741 23233 ims APPLE !PHONES 2118 03/14/20 12:41:58 2:04 192 Onmtgonpho APPLE !PHONES ne 2119 03/14/20 12:41:59 2:04 0 0 nxtgenpho APPLE !PHONES ne 2120 03/14/20 12:43:33 0:29 8162 8180 ims APPLE !PHONES 2121 03/14/20 12:43:34 0:29 6872 7898 ims APPLE !PHONES 2122 03/14/20 12:44:04 1:27 0 0 nxtgenpho APPLE !PHONES ne 2123 03/14/20 12:44:07 1:24 8138 8664 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 87 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171007 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343065 MOBILITY 41110 PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ..,--fs. 4*-6s AT&T UTC. Run Date: 06/17/2020 Run Tim: Data Usage For: Item Conn. Conn. Originating ET Bytos Bytes Apn MAKE MODEL Date Tame Number Up Dn (OTC) 2124 03/14/20 12:45:31 1:59 0 Onstgenpho APPLE 'PHONES no 2125 03/14/20 12:45:36 0:34 756 0 Las APPLE 'PHONES 2126 03/14/20 12:46:10 0:27 172 0 Las APPLE 'PHONES 2127 03/14/20 12:46:10 0:27 0 0 Las APPLE 'PHONES 2128 03/14/20 12:46:37 60:00 8917 6504 Las APPLE 'PHONES 2129 03/14/20 12:47:29 2:04 192 Onxtgonpho APPLE 'PHONES no 2130 03/14/20 12:47:30 2:03 6224 6666 Las APPLE 'PHONES 2131 03/14/20 12:47:30 2:04 0 0 nxtgonpho APPLE 'PHONES no 2132 03/14/20 12:47:32 2:02 6666 5960 Las APPLE 'PHONES 2133 03/14/20 12:49:34 0:35 0 0 nxtgonpho APPLE 'PHONES no 2134 03/14/20 12:49:38 27:19 15352 14059 Las 2135 03/14/20 12:50:08 8:34 192 0 nxtgonpho APPLE 'PHONES no 2136 03/14/20 12:50:09 8:34 0 0 nxtgonpho APPLE 'PHONES no 2137 03/14/20 12:58:43 55:56 0 0 nxtgonpho APPLE 'PHONES no 2138 03/14/20 13:28:54 0:01 0 0 Las 2139 03/14/20 13:46:37 13:30 0 0 Las APPLE 'PHONES 2140 03/14/20 13:54:38 2:03 192 Onmtgonpho APPLE 'PHONES no 2141 03/14/20 13:54:39 2:03 0 0 nxtgonpho APPLE 'PHONES no 2142 03/14/20 13:54:45 9:09 8607 6380 Las 2143 03/14/20 13:56:42 0:58 0 0 nxtgonpho APPLE 'PHONES no 2144 03/14/20 13:57:39 16:49 192 0 nxtgonpho APPLE 'PHONES no 2145 03/14/20 13:57:40 16:49 0 0 nxtgonpho APPLE 'PHONES no 2146 03/14/20 14:00:06 14:22 6366 6792 Las APPLE 'PHONES 2147 03/14/20 14:00:07 14:22 6684 6102 Las APPLE 'PHONES 2148 03/14/20 14:03:54 23:55 14461 10712 Las 2149 03/14/20 14:14:29 12:50 0 Onmtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 88 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171008 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343066 MOBILITY ce. ..020 AT&T has queried AT&T has queried for records for records from 03/01/2020 12:00:00am using Eastern Time Zone. to 06/15/2020 11:59:59pm AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytom Apn flax IMSI DBMS MODEL Date Time Number Up Da (OTC) 2150 03/14/20 14:27:18 1:57 192 Onstgonpho APPLE 'PEONES ne 2151 03/14/20 14:27:19 1:57 0 0 nactgonpho APPLE 'PEONES ne 2152 03/14/20 14:27:48 1:27 6262 6672 isms APPLE 'PEONES 2153 03/14/20 14:27:49 1:27 6672 5998 isms APPLE 'PHONES 2154 03/14/20 14:29:16 31:24 0 Onactgonpho APPLE 'PHONES ne 2155 03/14/20 14:29:18 10:23 8170 6962 isms APPLE 'PHONES 2156 03/14/20 14:39:41 60:00 3532 1340 isms APPLE 'PHONES 2157 03/14/20 15:00:39 0:35 192 Onactgonpho APPLE 'PHONES ne 2158 03/14/20 15:00:41 0:34 0 0 nxtgenpho APPLE 'PHONES ne 2159 03/14/20 15:01:15 0:44 0 0 nactgonpho APPLE 'PHONES ne 2160 03/14/20 15:01:20 0:39 8898 7086 isms APPLE 'PHONES 2161 03/14/20 15:01:59 0:59 192 Onactgonpho APPLE 'PHONES ne 2162 03/14/20 15:01:59 0:59 7134 6746 isms APPLE 'PHONES 2163 03/14/20 15:02:00 0:59 0 Onxtgonpho APPLE 'PHONES ne 2164 03/14/20 15:02:01 0:58 6746 6870 isms APPLE 'PHONES 2165 03/14/20 15:02:59 2:41 0 Onxtgonpho APPLE 'PHONES ne 2166 03/14/20 15:03:01 0:18 1690 6443 isms APPLE 'PHONES 2167 03/14/20 15:03:19 60:00 33670 22735 isms APPLE 'PHONES 2168 03/14/20 15:05:39 20:24 192 Onxtgonpho APPLE 'PHONES no 2169 03/14/20 15:05:40 20:24 0 0 nxtgonpho APPLE 'PHONES no 2170 03/14/20 15:26:04 4:38 0 0 nmtgonpho APPLE !PHONES no 2171 03/14/20 15:30:41 2:26 192 0 nmtgonpho APPLE !PHONES no 2172 03/14/20 15:30:43 2:25 0 0 nmtgonpho APPLE !PHONES no 2173 03/14/20 15:33:07 10:00 192 0 nmtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 89 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171009 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343067 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. / \1 4;wis AT&T , Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ lent MAKE MODEL Date Time Number Up Dn (UTC) 2174 03/14/20 15:33:08 14:57 0 0 nactgonpho APPLE 'PHONES no 2175 03/14/20 15:39:23 0:22 0 30887 ims APPLE 'PHONES 2176 03/14/20 15:39:41 60:00 0 0 ims APPLE 'PHONES 2177 03/14/20 15:48:05 53:21 192 0 nactgonpho APPLE 'PHONES no 2178 03/14/20 15:48:06 53:21 0 0 nactgonpho APPLE 'PHONES no 2179 03/14/20 16:03:19 60:00 8512 3988 ims APPLE 'PHONES 2180 03/14/20 16:39:41 60:00 0 0 ims APPLE 'PHONES 2181 03/14/20 16:41:27 64:11 192 0 nactgonpho APPLE 'PHONES no 2182 03/14/20 16:41:28 60:00 0 0 nmtgonpho APPLE 'PHONES no 2183 03/14/20 17:03:19 60:00 7064 2880 ims APPLE 'PHONES 2184 03/14/20 17:39:41 60:00 0 0 ims APPLE 'PHONES 2185 03/14/20 17:41:28 4:11 0 0 nmtgonpho APPLE 'PHONES no 2186 03/14/20 17:45:39 40:01 192 0 nmtgonpho APPLE 'PHONES no 2187 03/14/20 17:45:40 40:01 0 0 nmtgonpho APPLE 'PHONES no 2188 03/14/20 18:03:19 60:00 7064 2772 ims APPLE 'PHONES 2189 03/14/20 18:25:41 2:43 0 0 nmtgonpho APPLE 'PHONES no 2190 03/14/20 18:28:23 8:21 192 0 nmtgonpho APPLE 'PHONES no 2191 03/14/20 18:28:24 8:21 0 0 nmtgonpho APPLE 'PHONES no 2192 03/14/20 18:36:45 1:40 0 0 nmtgonpho APPLE 'PHONES no 2193 03/14/20 18:38:24 108:33 192 0 nmtgonpho APPLE 'PHONES no 2194 03/14/20 18:38:25 60:00 0 0 nmtgonpho APPLE 'PHONES no 2195 03/14/20 18:39:41 2:22 0 0 ims APPLE 'PHONES 2196 03/14/20 19:03:19 60:00 17008 6092 ims APPLE 'PHONES 2197 03/14/20 19:38:25 48:33 0 0 nactgonpho APPLE 'PHONES no 2198 03/14/20 20:03:19 60:00 44644 28772 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 90 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171010 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343068 MOBILITY cee PRI020 AT&T has queried AT&T has queried for records for records from 03/01/2020 12:00:00am using Eastern Time Zone. to 06/15/2020 11:59:59pm AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ZT Bytes Bytes Apn ZIOLI INSI MAKE MODEL Date Time Number Up Dn (OTC) 2199 03/14/20 20:26:58 9:01 0 Onactgonpho APPLE 'PHONES no 2200 03/14/20 20:35:58 2:04 192 Onactgonpho APPLE 'PHONES no 2201 03/14/20 20:35:59 2:04 0 0 nxtgonpho APPLE 'PHONES no 2202 03/14/20 20:38:03 6:44 0 0 nxtgonpho APPLE 'PHONES no 2203 03/14/20 20:44:46 9:04 192 0 nxtgonpho APPLE 'PHONES no 2204 03/14/20 20:44:47 9:04 0 0 nxtgonpho APPLE 'PHONES no 2205 03/14/20 20:53:51 0:52 0 0 nxtgonpho APPLE 'PHONES no 2206 03/14/20 20:54:42 2:17 192 Onactgonpho APPLE 'PHONES no 2207 03/14/20 20:54:43 2:17 0 Onactgonpho APPLE 'PHONES no 2208 03/14/20 20:56:02 0:05 4279 12317 ims APPLE 'PHONES 2209 03/14/20 20:56:08 0:05 2482 11716 ims APPLE 'PHONES 2210 03/14/20 20:56:15 0:08 4618 14384 ims APPLE 'PHONES 2211 03/14/20 20:56:41 0:04 3092 10606 ims APPLE 'PHONES 2212 03/14/20 20:57:00 0:55 0 Onactgonpho APPLE 'PHONES no 2213 03/14/20 20:57:55 16:22 192 0 nxtgonpho APPLE 'PHONES no 2214 03/14/20 20:57:56 16:23 0 0 nxtgonpho APPLE 'PHONES no 2215 03/14/20 21:03:19 39:39 3532 3952 ims APPLE 'PHONES 2216 03/14/20 21:14:18 163:28 192 Onmtgonpho APPLE 'PHONES no 2217 03/14/20 21:14:19 60:00 0 0 nxtgenpho APPLE 'PHONES no 2218 03/14/20 21:38:59 22:35 7232 6866 ims APPLE 'PHONES 2219 03/14/20 21:39:00 22:35 6798 6968 ims APPLE 'PHONES 2220 03/14/20 21:58:06 3:29 8874 10570 ims 2221 03/14/20 22:01:34 3:23 7356 6800 ims APPLE 'PHONES 2222 03/14/20 22:01:35 3:23 6800 7004 ims APPLE 'PHONES 2223 03/14/20 22:04:21 0:37 4618 4712 ims 2224 03/14/20 22:04:56 13:03 7474 6796 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 91 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171011 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343069 MOBILITY 4Illo pm. AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:88:88pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. / ... 1 4`" 7s :fi s AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Siam Item Conn. Conn. Originating BT Bytes Bytes Apn EMI IMSI MARE MODEL Date Time Number Up Dn (UTC) 2225 03/14/20 22:04:57 13:03 6796 7210 ims APPLE 'PHONES 2226 03/14/20 22:08:30 0:39 5686 4904 ims 2227 03/14/20 22:11:41 8:46 6261 6676 ims APPLE 'PHONES 2228 03/14/20 22:11:43 8:45 6676 5997 ims APPLE 'PHONES 2229 03/14/20 22:14:19 60:00 0 0 nxtgonpho APPLE 'PHONES no 2230 03/14/20 22:18:29 4:24 10009 10506 ims 2231 03/14/20 22:20:27 31:59 6226 6672 ims APPLE 'PHONES 2232 03/14/20 22:20:27 32:00 6672 6070 ims APPLE 'PHONES 2233 03/14/20 22:22:53 32:36 24446 33790 ims 2234 03/14/20 22:52:25 65:21 6371 6672 ims APPLE 'PHONES 2235 03/14/20 22:52:26 60:00 6672 6107 ims APPLE 'PHONES 2236 03/14/20 22:55:29 60:00 32305 24638 ims 2237 03/14/20 23:14:19 43:28 0 Onxtgonpho APPLE 'PHONES no 2238 03/14/20 23:33:09 0:09 0 7031 ims 2239 03/14/20 23:52:26 5:21 0 0 ims APPLE 'PHONES 2240 03/14/20 23:55:29 35:09 4964 1804 ims 2241 03/14/20 23:57:47 0:34 0 0 nxtgonpho APPLE 'PHONES no 2242 03/14/20 23:58:20 8:13 192 0 nxtgonpho APPLE 'PHONES no 2243 03/14/20 23:58:21 8:13 0 0 nxtgonpho APPLE 'PHONES no 2244 03/15/20 00:06:35 4:30 0 0 nxtgonpho APPLE 'PHONES no 2245 03/15/20 00:11:04 34:40 192 0 nxtgenpho APPLE 'PHONES no 2246 03/15/20 00:11:05 34:40 0 0 nxtgenpho APPLE 'PHONES no 2247 03/15/20 00:28:17 17:27 6264 6676 ims APPLE 'PHONES 2248 03/15/20 00:28:18 17:27 6676 6108 ims APPLE 'PHONES 2249 03/15/20 00:30:39 10:18 9704 6134 ims 2250 03/15/20 00:40:57 60:00 22558 16428 ims 2251 03/15/20 00:45:44 1:24 192 Onxtgonpho APPLE 'PHONES no 2252 03/15/20 00:45:45 1:24 0 0 nxtgenpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 92 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171012 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343070 MOBILITY / 1 4 4% ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Oa= Item Conn. Conn. Originating ST Bytes Bytes Apn flat IMSI MAKS MODEL Date Time Number Up Dn (OTC) 2253 03/15/20 00:47:09 21:54 192 0 nxtgonpho APPIZ IPEOMEB no 2254 03/15/20 00:47:10 21:54 0 0 nxtgonpho APPIZ 'PROMS no 2255 03/15/20 01:09:04 0:59 0 0 nxtgonpho APPIZ 'PROMS no 2256 03/15/20 01:10:02 58:23 192 0 nxtgenphe APPIZ 'PROMS no 2257 03/15/20 01:10:03 58:23 0 0 nxtgonpho APPIZ 'PROMS no 2258 03/15/20 01:40:57 60:00 10176 3252 ims 2259 03/15/20 02:08:26 6:18 0 0 nxtgonpho APPLE IPHCME8 ne 2260 03/15/20 02:14:44 2:17 192 0 nxtgonpho APPLE 'PEONES no 2261 03/15/20 02:14:45 2:17 0 0 nxtgonpho APPLE 'PHONES no 2262 03/15/20 02:17:02 6:28 0 0 nxtgonpho APPLE 'PHONES no 2263 03/15/20 02:23:29 80:00 192 0 nxtgonphe APPLE 'PHONES ne 2264 03/15/20 02:23:30 60:00 0 0 nxtgonphe APPLE !PHONES ne 2265 03/15/20 02:40:57 60:00 7016 2540 ims 2266 03/15/20 03:23:30 60:00 0 0 nxtgonphe APPLE !PHONES ne 2267 03/15/20 03:40:57 60:00 6800 2756 ims 2268 03/15/20 04:23:30 60:00 0 0 nxtgonphe APPLE !PHONES ne 2269 03/15/20 04:40:57 60:00 16652 5952 ims 2270 03/15/20 05:23:30 60:00 0 0 nxtgonphe APPLE !PHONES ne 2271 03/15/20 05:40:57 60:00 3624 1448 ims 2272 03/15/20 06:18:55 60:00 19980 10414 ims 2273 03/15/20 06:23:30 0:02 0 0 nxtgonpho APPLE 'PHONES no 2274 03/15/20 06:40:57 60:00 0 0 ims 2275 03/15/20 07:18:55 60:00 6816 3004 ims 2276 03/15/20 07:40:57 60:00 0 0 ims 2277 03/15/20 08:18:55 60:00 8496 3144 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 93 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171013 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343071 MOBILITY 111.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Emma: Data Usage For: Item Conn. Conn. Originating EE Bytes Bytes Apn flat IMBI MAKE MODEL Date Time mane Up Dn (OTC/ 2278 03/15/20 08:40:57 60:00 0 0 ims 2279 03/15/20 09:18:55 50:48 7172 2944 ims 2280 03/15/20 09:37:51 11:04 192 Onmtgonpho APPLE 'PHONES ne 2281 03/15/20 09:37:52 11:04 0 Onmtgonpho APPLE 'PHONES ne 2282 03/15/20 09:40:57 24:11 0 0 ims 2283 03/15/20 09:48:56 60:00 0 Onmtgonpho APPLE 'PHONES ne 2284 03/15/20 10:05:07 60:00 0 0 ims 2285 03/15/20 10:09:42 60:00 18781 9775 isms 2286 03/15/20 10:48:56 2:47 0 Onmtgonpho APPLE 'PHONES ne 2287 03/15/20 10:51:42 0:42 192 Onmtgonpho APPLE 'PHONES ne 2288 03/15/20 10:51:43 0:42 0 0 nxtgonpho APPLE 'PHONES ne 2289 03/15/20 10:52:25 27:29 0 0 nxtgonpho APPLE 'PHONES no 2290 03/15/20 11:05:07 60:00 0 0 isms 2291 03/15/20 11:09:42 60:00 8480 2896 isms 2292 03/15/20 11:19:54 14:38 192 Onmtgonpho APPLE 'PHONES ne 2293 03/15/20 11:19:55 14:38 0 0 nxtgenpho APPLE 'PHONES ne 2294 03/15/20 11:34:33 45:07 0 0 nxtgonpho APPLE 'PHONES ne 2295 03/15/20 12:05:07 17:00 0 0 ims 2296 03/15/20 12:09:42 10:37 3580 1852 ims 2297 03/15/20 12:19:39 1:03 192 Onmtgonpho APPLE 'PHONES ne 2298 03/15/20 12:19:40 1:03 0 0 nxtgenpho APPLE 'PHONES ne 2299 03/15/20 12:20:43 0:36 0 0 nxtgonpho APPLE !PHONES ne 2300 03/15/20 12:21:18 7:53 192 0 nxtgonpho APPLE !PHONES no 2301 03/15/20 12:21:19 7:52 6229 6670 ims APPLE !PHONES 2302 03/15/20 12:21:20 7:52 0 Onmtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 94 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171014 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343072 MOBILITY 111.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Tame: Data Usage For: Si= Item Conn. Conn. Originating KT Bytes Bytes Apn 1101 late MODEL Date Time Up Dn (UTC) 2303 03/15/20 12:21:21 7:51 6670 6073 ims APPLE !PEONES 2304 03/15/20 12:22:07 14:05 10288 6713 ims 2305 03/15/20 12:29:12 2:10 0 Onstgenpho APPLE !PEONES no 2306 03/15/20 12:31:20 10:33 10716 12922 ims 2307 03/15/20 12:31:21 2:04 192 Onxtgonpho APPLE !PEONES no 2308 03/15/20 12:31:22 2:05 0 0 nxtgonpho APPLE !PEONES no 2309 03/15/20 12:33:26 1:09 0 0 nxtgonpho APPLE !PEONES no 2310 03/15/20 12:34:34 8:20 192 0 nxtgonpho APPLE 'PHONES ne 2311 03/15/20 12:34:35 8:20 0 0 nxtgonpho APPLE 'PHONES ne 2312 03/15/20 12:36:10 6:44 6246 6666 ims APPLE 'PHONES 2313 03/15/20 12:36:11 6:44 6666 5982 ims APPLE 'PHONES 2314 03/15/20 12:42:55 42:16 0 Onxtgonpho APPLE 'PHONES no 2315 03/15/20 12:42:57 42:14 9358 8200 ims APPLE 'PHONES 2316 03/15/20 13:25:11 14:44 0 Onxtgonpho APPLE 'PHONES ne 2317 03/15/20 13:25:13 1:31 6646 5899 isms APPLE 'PHONES 2318 03/15/20 13:26:44 0:21 11780 13060 isms APPLE 'PHONES 2319 03/15/20 13:35:22 10:29 1491 132 isms 2320 03/15/20 13:39:54 8:21 192 Onxtgonpho APPLE 'PHONES ne 2321 03/15/20 13:39:55 8:21 0 0 nxtgonpho APPLE 'PHONES ne 2322 03/15/20 13:40:00 8:15 8434 9028 ims APPLE 'PHONES 2323 03/15/20 13:40:01 8:15 8968 8170 ims APPLE 'PHONES 2324 03/15/20 13:46:03 60:00 16716 9893 ims 2325 03/15/20 13:48:16 4:58 0 Onxtgonpho APPLE 'PHONES ne 2326 03/15/20 13:53:13 2:14 192 0 nxtgonpho APPLE 'PHONES ne 2327 03/15/20 13:53:15 2:14 0 0 nxtgonpho APPLE 'PHONES ne 2328 03/15/20 13:55:29 43:50 0 0 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 95 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171015 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343073 MOBILITY e t. 11 .020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Tama: Data Usage For: Item Conn. Conn. Originating AT Bytes Bytes Apn L@3 IMSI MAKE MODEL Data Time Number Up Dn (OTC) 2329 03/15/20 14:37:06 1:42 6666 5959 ims APPLE 'PEONES 2330 03/15/20 14:38:48 60:00 12476 4360 ims APPLE 'PEONES 2331 03/15/20 14:39:18 21:07 192 Onstgonpho APPLE 'PEONES ne 2332 03/15/20 14:39:19 21:07 0 0 nxtgenpho APPLE 'PEONES ne 2333 03/15/20 14:46:03 60:00 0 0 ims 2334 03/15/20 15:00:26 22:52 0 0 nxtgenpho APPLE 'PEONES ne 2335 03/15/20 15:23:17 20:00 192 0 nxtgenpho APPLE 'PEONES ne 2336 03/15/20 15:23:18 21:30 0 0 nxtgenpho APPLE 'PEONES ne 2337 03/15/20 15:38:48 60:00 22664 10248 ims APPLE 'PHONES 2338 03/15/20 15:44:48 1:01 0 Onstgonpho APPLE 'PHONES ne 2339 03/15/20 15:45:48 1:32 192 0 nxtgenpho APPLE 'PHONES ne 2340 03/15/20 15:45:49 1:32 0 0 nxtgenpho APPLE 'PHONES ne 2341 03/15/20 15:46:02 0:14 0 6648 ims APPLE 'PHONES 2342 03/15/20 15:46:03 60:00 0 0 ims 2343 03/15/20 15:47:21 59:34 0 Onstgonpho APPLE 'PHONES ne 2344 03/15/20 16:38:48 36:33 3872 1572 ims APPLE 'PHONES 2345 03/15/20 16:46:03 24:31 0 0 ims 2346 03/15/20 16:46:54 172:16 192 Onstgonpho APPLE !PHONES ne 2347 03/15/20 16:46:55 60:00 0 0 nstgonpho APPLE !PHONES no 2348 03/15/20 17:10:33 0:10 440 144 ims APPLE 'PHONES 2349 03/15/20 17:10:34 0:10 144 0 ims APPLE 'PHONES 2350 03/15/20 17:10:46 22:56 7340 6794 ims APPLE 'PHONES 2351 03/15/20 17:10:46 22:57 6794 7076 ims APPLE 'PHONES 2352 03/15/20 17:15:21 18:56 8373 6012 ims 2353 03/15/20 17:33:42 125:28 13506 17240 ims APPLE !PHONES 2354 03/15/20 17:33:43 60:00 12048 10594 ims APPLE !PHONES 2355 03/15/20 17:34:18 10:22 0 0 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 96 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171016 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343074 MOBILITY / 1 44e. pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn nizx IMSI MIMS MODEL Date Tame Number up on (UTC) 2356 03/15/20 17:46:55 60:00 0 0 nxtgenpho APPLE 'PHONES ne 2357 03/15/20 18:33:43 60:00 5192 2648 ims APPLE 'PHONES 2358 03/15/20 18:46:55 52:16 0 0 nxtgenpho APPLE 'PHONES ne 2359 03/15/20 19:28:15 60:00 16707 8924 ims 2360 03/15/20 19:33:43 5:28 0 0 ims APPLE 'PHONES 2361 03/15/20 19:39:11 18:26 0 0 nxtgenpho APPLE 'PHONES ne 2362 03/15/20 19:57:36 2:09 192 0 nxtgenpho APPLE 'PHONES ne 2363 03/15/20 19:57:37 2:10 0 0 nxtgenpho APPLE 'PHONES ne 2364 03/15/20 19:59:47 14:14 0 0 nxtgenpho APPLE 'PHONES ne 2365 03/15/20 20:14:00 68:02 192 0 nxtgenphe APPLE 'PHONES ne 2366 03/15/20 20:14:01 60:00 0 0 nxtgenpho APPLE 'PHONES ne 2367 03/15/20 20:28:15 0:34 0 0 ims 2368 03/15/20 20:28:49 60:00 0 0 ims 2369 03/15/20 20:32:18 60:00 19964 9565 ims 2370 03/15/20 21:14:01 8:02 0 0 nxtgenpho APPLE 'PHONES ne 2371 03/15/20 21:22:03 6:02 0 0 nxtgenpho APPLE 'PHONES ne 2372 03/15/20 21:28:04 2:05 192 0 nxtgenphe APPLE 'PHONES ne 2373 03/15/20 21:28:06 2:04 0 0 nxtgenpho APPLE 'PHONES ne 2374 03/15/20 21:28:49 60:00 0 0 isms 2375 03/15/20 21:30:10 18:17 0 0 nxtgenpho APPLE 'PHONES ne 2376 03/15/20 21:32:18 60:00 7032 2680 isms 2377 03/15/20 21:48:27 42:37 192 0 nxtgenphe APPLE 'PHONES ne 2378 03/15/20 21:48:28 42:37 0 0 nxtgenpho APPLE 'PHONES ne 2379 03/15/20 22:28:49 60:00 0 0 isms AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 97 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171017 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343075 MOBILITY cro pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn 73OLI INSI MAKE MODEL Date Time Mtivehn Up Dn MC/ 2380 03/15/20 22:31:0 2:50 0 0 nxtgonpho APPLE 'PHONES ne 2381 03/15/20 22:32:1 60:00 8604 3052 isms 2382 03/15/20 22:33:5 8:19 192 0 nxtgonpho APPLE 'PHONES ne 2383 03/15/20 22:33:5 8:19 0 0 nxtgonpho APPLE 'PHONES ne 2384 03/15/20 22:42:1 60:00 0 0 nxtgonpho APPLE 'PHONES ne 2385 03/15/20 23:28:4 60:00 0 0 isms 2386 03/15/20 23:32:1 60:00 6924 2788 isms 2387 03/15/20 23:42:1 11:41 0 0 nxtgonpho APPLE 'PHONES ne 2388 03/15/20 23:53:5 0:37 192 0 nxtgonpho APPLE 'PHONES ne 2389 03/15/20 23:53:59 0:37 0 0 nxtgonpho APPLE 'PHONES ne 1 2390 03/15/20 23:54:34 2:37 288 0 nxtgonpho APPLE 'PHONES ne 2391 03/15/20 23:54:3 2:37 0 0 nxtgonpho APPLE 'PHONES ne 2392 03/15/20 23:57:1 1:22 0 0 nxtgonpho APPLE 'PHONES ne 2393 03/15/20 23:58:3 7:13 192 0 nxtgonpho APPLE 'PHONES ne 2394 03/15/20 23:58:3s 7:13 0 0 nxtgonpho APPLE 'PHONES ne 2395 03/16/20 00:05:4 2:43 192 0 nxtgonpho APPLE 'PHONES ne 2396 03/16/20 00:05:4 2:43 0 0 nxtgonpho APPLE 'PHONES ne 2397 03/16/20 00:08:2 1:58 0 0 nxtgenpho APPLE 'PHONES ne 2398 03/16/20 00:10:2 2:04 192 0 nxtgenpho APPLE 'PHONES ne 2399 03/16/20 00:10:2 2:03 0 0 nxtgenpho APPLE 'PHONES ne 2400 03/16/20 00:12:34 4:09 0 0 nxtgonpho APPLE 'PHONES ne 2401 03/16/20 00:16:4C 3:53 192 0 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 98 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171018 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343076 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:57:52pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Dato: 06/17/2020 Run Tine: Data Usage for: Si= Item Conn. Conn. Originating Elf Bytes Bytes Apn DELI IMSI MS= MODEL Data Tiara Up on (UTC) 2402 03/16/20 00:16:41 3:53 0 0 nxtgonpho APPLE IPSOMEB no 2403 03/16/20 00:20:33 4:14 192 0 nxtgenpho APPLE IDIOMS no 2404 03/16/20 00:20:34 4:14 0 0 nxtgenpho APPLE 'PROMO no 2405 03/16/20 00:24:47 2:05 192 0 nxtgenpho APPLE IDIOMS no 2406 03/16/20 00:24:48 2:05 0 0 nxtgenpho APPLE 'PROMO no 2407 03/16/20 00:26:53 9:29 0 0 nxtgonpho APPLE 'PROMO no 2408 03/16/20 00:28:49 0:01 0 0 ims 2409 03/16/20 00:32:18 13:27 5088 2084 ims 2410 03/16/20 00:36:22 3:12 0 Onstgonpho APPLE IDIOMS no 2411 03/16/20 00:39:34 16:30 192 0 nxtgenpho APPLE 'PHONES no 2412 03/16/20 00:39:35 16:30 0 0 nxtgonpho APPLE !PHONES no 2413 03/16/20 00:51:49 3:35 13841 10953 ims 2414 03/16/20 00:55:27 25:51 20087 13330 ims 2415 03/16/20 00:56:05 3:43 0 Onstgonpho APPLE !PHONES no 2416 03/16/20 00:59:47 8:32 192 0 ructgonpho APPLE !PHONES no 2417 03/16/20 00:59:49 8:31 0 0 nxtgonpho APPLE !PHONES no 2418 03/16/20 01:08:20 3:17 0 0 nxtgonpho APPLE !PHONES no 2419 03/16/20 01:11:36 2:09 192 0 nxtgonpho APPLE !PHONES no 2420 03/16/20 01:11:37 2:09 0 0 nxtgonpho APPLE !PHONES no 2421 03/16/20 01:13:46 10:15 0 0 nxtgonpho APPLE !PHONES no 2422 03/16/20 01:22:33 60:00 19156 9476 ims 2423 03/16/20 01:24:01 19:07 192 Onstgonpho APPLE !PHONES no 2424 03/16/20 01:24:02 19:07 0 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 99 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171019 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343077 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:33:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .‘•- 0° AT&T OTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DIET INSI MAKE MODEL Date Time Number Up Dn (OTC) 2425 03/16/20 01:43:09 22:23 0 0 nxtgonpho APPLE 'PHONES no 2426 03/16/20 02:05:31 2:05 192 0 nstgempho APPLE 'PHONES no 2427 03/16/20 02:05:33 2:04 0 0 nxtgonpho APPLE 'PHONES no 2428 03/16/20 02:07:37 1:08 0 0 nxtgonpho APPLE 'PHONES no 2429 03/16/20 02:08:44 2:04 192 0 nstgempho APPLE 'PHONES no 2430 03/16/20 02:08:45 2:04 0 0 nxtgonpho APPLE 'PHONES ne 2431 03/16/20 02:10:49 47:51 0 0 nxtgonpho APPLE 'PHONES ne 2432 03/16/20 02:22:33 60:00 8496 3036 ims 2433 03/16/20 02:58:39 11:57 192 °asty:mph* APPLE 'PHONES no 2434 03/16/20 02:58:40 11:57 0 0 astympho APPLE 'PHONES ne 2435 03/16/20 03:10:37 3:19 0 0 nxtgonpho APPLE 'PHONES no 2436 03/16/20 03:13:56 19:28 192 0 nstgempho APPLE 'PHONES no 2437 03/16/20 03:13:57 19:28 0 0 astympho APPLE 'PHONES ne 2438 03/16/20 03:22:33 60:00 7048 2804 ims 2439 03/16/20 03:33:25 11:15 0 0 nstgempho APPLE 'PHONES no 2440 03/16/20 03:44:39 5:34 192 0 astympho APPLE 'PHONES no 2441 03/16/20 03:44:40 5:34 0 0 nxtgenpho APPLE 'PHONES no 2442 03/16/20 03:50:14 2:57 0 0 nxtgonpho APPLE 'PHONES no 2443 03/16/20 03:53:10 93:54 192 0 nxtgonpho APPLE 'PHONES no 2444 03/16/20 03:53:11 60:00 0 0 nxtgonpho APPLE 'PHONES no 2445 03/16/20 04:22:33 60:00 8388 2928 ims 2446 03/16/20 04:53:11 33:54 0 0 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 100 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171020 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343078 MOBILITY e• pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. / 1 4-00 AT&T Run Date: 06/17/2020 Run Timm: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes AP^ EMI INSI MAKE MODEL Date Time Number Up Dn (OTC) 2447 03/16/20 05:22:33 60:00 11580 4160 ims 2448 03/16/20 05:27:04 129:59 192 0nmtgonpho APPLE 'PHONES no 2449 03/16/20 05:27:05 60:00 0 0 nwtgonpho APPLE 'PHONES ne 2450 03/16/20 06:22:33 60:00 10624 4396 ims 2451 03/16/20 06:27:05 60:00 0 0 ructgonpho APPLE 'PHONES ne 2452 03/16/20 07:22:33 60:00 8388 2928 ims 2453 03/16/20 07:27:05 9:59 0 0 nwtgonpho APPLE 'PHONES no 2454 03/16/20 07:37:04 240:01 192 0 nwtgonpho APPLE 'PHONES ne 2455 03/16/20 07:37:05 60:00 0 0 nwtgonpho APPLE 'PHONES ne 2456 03/16/20 08:22:33 60:00 8388 3036 ims 2457 03/16/20 08:37:05 60:00 0 0 nwtgonpho APPLE 'PHONES no 2458 03/16/20 09:22:33 60:00 8388 2928 ims 2459 03/16/20 09:37:05 60:00 0 0 ructgonpho APPLE 'PHONES ne 2460 03/16/20 10:22:33 60:00 10564 4252 ims 2461 03/16/20 10:37:05 60:00 0 0 ructgonpho APPLE 'PHONES ne 2462 03/16/20 11:22:33 60:00 11796 4536 ims 2463 03/16/20 11:37:05 0:01 0 0 ructgonpho APPLE 'PHONES no 2464 03/16/20 11:37:14 61:22 192 0 ructgonpho APPLE 'PHONES no 2465 03/16/20 11:37:15 60:00 0 0 ructgonpho APPLE 'PHONES no 2466 03/16/20 12:22:33 60:00 8388 2928 ims 2467 03/16/20 12:37:15 1:22 0 0 nwtgonpho APPLE 'PHONES no 2468 03/16/20 12:38:37 11:24 0 0 nwtgonpho APPLE 'PHONES no 2469 03/16/20 12:50:01 47:24 192 0 nwtgonpho APPLE 'PHONES no 2470 03/16/20 12:50:02 47:24 0 0 nwtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 101 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171021 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343079 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn ffiI IMSI MAR MODEL Date Time Number Up Dn (OTC) 2471 03/16/20 13:22:33 60:00 8496 2928 ims 2472 03/16/20 13:37:26 12:23 0 Onmtgonpho APPLE 'PROMO ne 2473 03/16/20 13:49:48 2:05 192 0 nxtgenpho APPLE 'PROMO ne 2474 03/16/20 13:49:49 2:05 0 0 nxtgenpho APPLE 'PROMO ne 2475 03/16/20 13:51:54 7:21 0 0 nxtgenpho APPLE 'PROMO ne 2476 03/16/20 13:59:14 6:36 192 0 nxtgenpho APPLE 'PROMO ne 2477 03/16/20 13:59:15 6:36 0 0 nxtgenpho APPLE IPHOME8 ne 2478 03/16/20 14:05:51 1:15 0 0 nxtgonpho APPLE 'PHONES no 2479 03/16/20 14:07:05 3:27 192 0 nxtgonpho APPLE 'PHONES no 2480 03/16/20 14:07:06 3:27 0 0 nxtgenpho APPLE 'PHONES ne 2481 03/16/20 14:10:33 2:06 0 0 nxtgonpho APPLE 'PHONES ne 2482 03/16/20 14:12:38 8:31 192 Onxtgonpho APPLE 'PHONES ne 2483 03/16/20 14:12:39 8:31 0 Onxtgonpho APPLE 'PHONES no 2484 03/16/20 14:21:10 4:53 0 0 nxtgenpho APPLE 'PHONES no 2485 03/16/20 14:22:33 60:00 8388 2928 ims 2486 03/16/20 14:26:02 20:41 192 0 nxtgonpho APPLE 'PHONES ne 2487 03/16/20 14:26:03 20:41 0 0 nxtgonpho APPLE 'PHONES no 2488 03/16/20 14:46:44 0:40 0 0 nxtgonpho APPLE 'PHONES no 2489 03/16/20 14:47:23 8:22 192 0 nxtgonpho APPLE 'PHONES no 2490 03/16/20 14:47:25 8:21 0 0 nxtgonpho APPLE 'PHONES no 2491 03/16/20 14:55:46 0:38 0 0 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 102 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171022 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343080 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn =RI IMSI MAKE MODEL Date Time Number Up Dn (OTC) 2492 03/16/20 14:56:23 14:42 192 0 nxtgonpho APPLE 'PHONES ne 2493 03/16/20 14:56:24 14:42 0 0 nxtgonpho APPLE 'PHONES ne 2494 03/16/20 15:11:06 60:00 0 0 nxtgonpho APPLE 'PHONES ne 2495 03/16/20 15:22:33 60:00 15156 4872 isms 2496 03/16/20 16:11:06 18:59 0 0 nxtgonpho APPLE 'PHONES ne 2497 03/16/20 16:22:33 60:00 6940 2804 isms 2498 03/16/20 16:30:04 8:21 192 0 nxtgonpho APPLE 'PHONES ne 2499 03/16/20 16:30:05 8:21 0 0 nxtgonpho APPLE 'PHONES ne 2500 03/16/20 16:38:26 2:54 0 0 nxtgonpho APPLE 'PHONES ne 2501 03/16/20 16:41:20 2:03 192 0 nxtgonpho APPLE 'PHONES ne 2502 03/16/20 16:41:21 2:03 0 0 nxtgonpho APPLE 'PHONES ne 2503 03/16/20 16:43:24 10:32 0 0 nxtgonpho APPLE 'PHONES ne 2504 03/16/20 16:53:55 2:15 192 0 nxtgonpho APPLE 'PHONES ne 2505 03/16/20 16:53:56 2:15 0 0 nxtgonpho APPLE 'PHONES ne 2506 03/16/20 16:56:11 1:06 0 0 nxtgonpho APPLE 'PHONES ne 2507 03/16/20 16:57:16 4:52 192 0 nxtgonpho APPLE 'PHONES ne 2508 03/16/20 16:57:17 4:52 0 0 nxtgonpho APPLE 'PHONES ne 2509 03/16/20 17:02:09 0:33 0 0 nxtgonpho APPLE 'PHONES ne 2510 03/16/20 17:02:41 14:45 192 0 nxtgonpho APPLE 'PHONES ne 2511 03/16/20 17:02:42 14:45 0 0 nxtgonpho APPLE 'PHONES ne 2512 03/16/20 17:17:27 0:50 0 0 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 103 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171023 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343081 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:30:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ INSI HAKE MODEL Date Time Number Up Dn (OTC) 2513 03/16/20 17:18:16 53:17 192 0nmtgonpho APPLE 'PHONES no 2514 03/16/20 17:18:17 53:17 0 0nmtgonpho APPLE 'PHONES no 2515 03/16/20 17:22:33 60:00 12120 4660 ims 2516 03/16/20 18:11:34 2:55 0 0nmtgonpho APPLE 'PHONES no 2517 03/16/20 18:14:28 1:08 192 0nmtgonpho APPLE 'PHONES no 2518 03/16/20 18:14:29 1:08 0 0nmtgonpho APPLE 'PHONES no 2519 03/16/20 18:15:37 7:10 0 0nmtgonpho APPLE 'PHONES no 2520 03/16/20 18:22:33 60:00 8388 3712 ims 2521 03/16/20 18:22:46 204:00 192 0nmtgonpho APPLE 'PHONES no 2522 03/16/20 18:22:47 60:00 0 0nmtgonpho APPLE 'PHONES no 2523 03/16/20 19:22:33 60:00 15172 5888 ims 2524 03/16/20 19:22:47 60:00 0 0nmtgonpho APPLE 'PHONES no 2525 03/16/20 20:22:33 60:00 10068 3408 ims 2526 03/16/20 20:22:47 60:00 0 0nmtgonpho APPLE 'PHONES no 2527 03/16/20 21:22:33 39:47 13568 5136 ims 2528 03/16/20 21:22:47 24:00 0 0nmtgonpho APPLE 'PHONES no 2529 03/16/20 21:46:47 0:06 0 0nmtgonpho APPLE 'PHONES no 2530 03/16/20 21:47:15 40:04 192 0nmtgonpho APPLE 'PHONES no 2531 03/16/20 21:47:16 40:04 0 0nmtgonpho APPLE 'PHONES no 2532 03/16/20 22:09:00 18:19 7689 12910 ims APPLE 'PHONES 2533 03/16/20 22:09:01 18:19 12842 7533 ims APPLE 'PHONES 2534 03/16/20 22:09:17 0:01 0 0 ims 2535 03/16/20 22:10:19 23:51 10036 6592 ims 2536 03/16/20 22:27:20 0:35 0 0nmtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 104 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171024 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343082 MOBILITY cm. PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .a° AT&T ‘•.. UTE. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn MAX INSI MAKE MODEL Date Time Number Up Dn (OTC) 2537 03/16/20 22:27:55 40:08 192 0nxtgonpho APPLE !PHONES ne 2538 03/16/20 22:27:56 40:08 0 0 nxtgenpho APPLE !PHONES ne 2539 03/16/20 22:31:07 36:56 7604 10041 ims APPLE !PHONES 2540 03/16/20 22:31:08 36:56 9952 7340 ims APPLE !PHONES 2541 03/16/20 23:08:04 0:41 0 0nxtgonpho APPLE !PHONES ne 2542 03/16/20 23:08:06 0:39 8822 7071 ims APPLE !PHONES 2543 03/16/20 23:08:44 8:33 192 0 nxtgenpho APPLE !PHONES ne 2544 03/16/20 23:08:45 8:32 7158 6748 ims APPLE !PHONES 2545 03/16/20 23:08:45 8:33 0 0 nxtgenpho APPLE !PHONES ne 2546 03/16/20 23:08:46 8:32 6748 6894 ims APPLE !PHONES 2547 03/16/20 23:17:18 0:49 0 0 nxtgenpho APPLE !PHONES ne 2548 03/16/20 23:17:20 0:47 12596 13562 ims APPLE !PHONES 2549 03/16/20 23:18:07 53:36 288 0 nxtgenpho APPLE !PHONES ne 2550 03/16/20 23:18:08 53:35 9000 11994 ims APPLE !PHONES 2551 03/16/20 23:18:08 53:36 0 0 nxtgenpho APPLE !PHONES ne 2552 03/16/20 23:18:09 53:35 11866 8736 ims APPLE !PHONES 2553 03/17/20 00:11:44 22:41 0 0 nxtgenpho APPLE !PHONES ne 2554 03/17/20 00:11:55 60:00 19480 9443 ims 2555 03/17/20 00:34:24 2:03 192 0 nxtgenpho APPLE !PHONES ne 2556 03/17/20 00:34:25 2:03 0 0 nxtgenpho APPLE !PHONES ne 2557 03/17/20 00:36:28 10:12 0 0 nxtgenpho APPLE !PHONES ne 2558 03/17/20 00:46:39 2:10 192 0 nxtgenpho APPLE !PHONES ne 2559 03/17/20 00:46:41 2:09 0 0 nxtgenpho APPLE !PHONES ne 2560 03/17/20 00:48:50 28:49 0 0 nxtgenpho APPLE !PHONES ne 2561 03/17/20 01:11:55 60:00 8388 2928 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 105 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171025 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343083 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in k..74 AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DOLT IMSI MAKE MODEL Date Time Number Up Dn (OTC) 2562 03/17/20 01:17:39 27:32 192 0nstgonpho APPLE 'PHONES no 2563 03/17/20 01:17:40 27:32 0 0nstgonpho APPLE 'PHONES no 2564 03/17/20 01:45:12 1:07 0 0nstgonpho APPLE 'PHONES ne 2565 03/17/20 01:46:18 8:35 192 0nstgonpho APPLE 'PHONES no 2566 03/17/20 01:46:19 8:35 0 0nstgonpho APPLE 'PHONES no 2567 03/17/20 01:54:54 8:15 0 0nstgonpho APPLE 'PHONES no 2568 03/17/20 02:03:08 6:37 192 0nstgonpho APPLE 'PHONES no 2569 03/17/20 02:03:09 6:37 0 0nstgonpho APPLE 'PHONES no 2570 03/17/20 02:09:46 4:54 0 0nstgonpho APPLE 'PHONES no 2571 03/17/20 02:11:55 60:00 9928 3376 ims 2572 03/17/20 02:14:40 2:03 192 0nstgonpho APPLE 'PHONES ne 2573 03/17/20 02:14:41 2:03 0 0nstgonpho APPLE 'PHONES no 2574 03/17/20 02:16:44 0:34 0 0nstgonpho APPLE 'PHONES no 2575 03/17/20 02:17:17 2:18 192 0nstgonpho APPLE 'PHONES ne 2576 03/17/20 02:17:18 2:18 0 0nstgonpho APPLE 'PHONES ne 2577 03/17/20 02:19:35 3:07 192 0nstgonpho APPLE 'PHONES ne 2578 03/17/20 02:19:37 3:06 0 0nstgonpho APPLE 'PHONES ne 2579 03/17/20 02:22:43 9:31 0 0nstgonpho APPLE 'PHONES ne 2580 03/17/20 02:32:14 3:31 0 0nstgonpho APPLE 'PHONES no 2581 03/17/20 02:35:44 8:26 192 0nstgonpho APPLE 'PHONES no 2582 03/17/20 02:35:45 8:26 0 0nstgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 106 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171026 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343084 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .‘•- 0. AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn LESS IMBI MAKE MODEL Date Time Dunbar Up Dn (OTC) 2583 03/17/20 02:44:11 4:18 0 0 nxtgonpho APPLE !PHONES ne 2584 03/17/20 02:48:29 0:44 0 0 nxtgonpho APPLE !PHONES ne 2585 03/17/20 02:49:13 34:19 192 0 nxtgonpho APPLE !PHONES ne 2586 03/17/20 02:49:14 34:19 0 0 nxtgonpho APPLE !PHONES ne 2587 03/17/20 03:11:55 15:38 3424 1340 ims 2588 03/17/20 03:23:33 17:56 0 0 nxtgonpho APPLE !PHONES ne 2589 03/17/20 03:28:08 0:26 6930 4178 ims APPLE !PHONES 2590 03/17/20 03:28:34 60:00 17131 11098 ims APPLE !PHONES 2591 03/17/20 03:41:28 27:16 192 0nxtgonpho APPLE !PHONES ne 2592 03/17/20 03:41:29 27:16 0 0 nxtgonpho APPLE !PHONES ne 2593 03/17/20 04:08:45 9:13 0 0 nxtgonpho APPLE !PHONES ne 2594 03/17/20 04:17:58 8:29 192 0 nxtgonpho APPLE !PHONES ne 2595 03/17/20 04:17:59 8:29 0 0 nxtgonpho APPLE !PHONES ne 2596 03/17/20 04:26:28 23:45 0 0 nxtgonpho APPLE !PHONES ne 2597 03/17/20 04:28:34 24:06 5072 1572 ims APPLE !PHONES 2598 03/17/20 04:50:12 55:06 192 0 nxtgonpho APPLE !PHONES ne 2599 03/17/20 04:50:13 60:00 0 0 nxtgonpho APPLE !PHONES ne 2600 03/17/20 04:54:18 60:00 15007 8738 ims 2601 03/17/20 05:50:13 60:00 0 0 nxtgonpho APPLE !PHONES ne 2602 03/17/20 05:54:18 3:03 0 0 ims 2603 03/17/20 06:05:16 1:38 0 0 ims 2604 03/17/20 06:09:29 14:57 8629 6424 ims 2605 03/17/20 06:35:42 11:59 8189 6016 ims 2606 03/17/20 06:50:13 60:00 0 0 nxtgonpho APPLE !PHONES ne 2607 03/17/20 06:53:34 11:08 8249 6072 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 107 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171027 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343085 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: 06/17/2020 Run Tine: Data Usage For: MS= Item Conn. Conn. Originating ET Bytos Bytes Apn MINT MPS -fly. Date Tame Number Up Dn (UTC) 2608 03/17/20 07:06:33 1:38 0 0 ims 2609 03/17/20 07:10:15 11:07 9759 6207 ims 2610 03/17/20 07:26:34 0:07 0 0 ims 2611 03/17/20 07:31:09 3:34 8189 6046 ims 2612 03/17/20 07:42:29 60:00 15005 8986 ims 2613 03/17/20 07:50:13 60:00 0 Onxtgonphe APPLE 'PEONES ne 2614 03/17/20 08:42:29 60:00 6924 2680 ims 2615 03/17/20 08:50:13 0:02 0 0 nxtgonphe APPLE 'PEONES ne 2616 03/17/20 09:42:29 9:49 0 0 ims 2617 03/17/20 09:56:08 60:00 16577 9082 ims 2618 03/17/20 10:56:08 53:28 8496 2928 ims 2619 03/17/20 11:52:58 20:02 8351 6051 ims 2620 03/17/20 12:19:55 20:03 8361 5998 ims 2621 03/17/20 12:30:21 0:05 0 Onxtgonphe APPLE !PHONES ne 2622 03/17/20 12:31:17 0:06 0 0 nxtgonphe APPLE !PHONES ne 2623 03/17/20 12:31:29 60:00 0 0 nxtgonphe APPLE !PHONES no 2624 03/17/20 12:42:30 13:58 9768 6196 ims 2625 03/17/20 13:03:49 59:58 19046 9302 ims 2626 03/17/20 13:31:29 60:00 0 0 nxtgonpho APPLE !PHONES no 2627 03/17/20 14:14:13 60:00 19300 9472 ims 2628 03/17/20 14:31:29 11:04 0 0 nxtgonphe APPLE !PHONES ne 2629 03/17/20 14:42:33 30:03 192 0 nxtgonphe APPLE !PHONES ne 2630 03/17/20 14:42:34 30:03 0 0 nxtgonphe APPLE !PHONES ne 2631 03/17/20 15:12:37 0:33 0 0 nxtgonphe APPLE !PHONES ne 2632 03/17/20 15:13:09 2:14 192 0 nxtgonphe APPLE !PHONES ne 2633 03/17/20 15:13:11 2:13 0 0 nxtgonphe APPLE !PHONES ne 2634 03/17/20 15:14:13 60:00 8744 5976 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 108 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171028 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343086 MOBILITY e s, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn EMU IMSI NXEE MODEL Date Time Number Up Dn (UTC) 2635 03/17/20 15:15:24 0:35 0 0 nxtgonpho APPLE 'PHONES no 2636 03/17/20 15:15:58 2:03 192 0 nxtgenpho APPLE 'PHONES no 2637 03/17/20 15:15:59 2:03 0 0 nxtgenpho APPLE 'PHONES no 2638 03/17/20 15:18:02 1:55 0 0 nxtgenpho APPLE 'PHONES no 2639 03/17/20 15:19:56 2:09 192 0 nxtgonpho APPLE 'PHONES no 2640 03/17/20 15:19:58 2:08 0 0 nxtgonpho APPLE 'PHONES no 2641 03/17/20 15:22:06 60:00 0 0 nxtgenpho APPLE 'PHONES no 2642 03/17/20 16:14:13 6:00 0 0 ims 2643 03/17/20 16:20:14 60:00 21092 10632 ims 2644 03/17/20 16:22:06 3:35 0 0 nxtgenpho APPLE 'PHONES ne 2645 03/17/20 16:25:40 20:42 192 0 nxtgonpho APPLE 'PHONES ne 2646 03/17/20 16:25:41 20:42 0 0 nxtgonpho APPLE 'PHONES ne 2647 03/17/20 16:46:23 4:40 0 0 nxtgonpho APPLE 'PHONES ne 2648 03/17/20 16:51:02 2:06 192 0 nxtgonpho APPLE 'PHONES ne 2649 03/17/20 16:51:04 2:05 0 0 nxtgonpho APPLE 'PHONES ne 2650 03/17/20 16:53:09 2:58 0 0 nxtgonpho APPLE 'PHONES ne 2651 03/17/20 16:56:06 31:00 192 0 nxtgonpho APPLE 'PHONES ne 2652 03/17/20 16:56:07 31:00 0 0 nxtgonpho APPLE 'PHONES ne 2653 03/17/20 17:20:14 60:00 9944 3408 ims 2654 03/17/20 17:27:07 51:24 0 0 nxtgenpho APPLE 'PHONES no 2655 03/17/20 18:18:30 155:32 192 0 nxtgenpho APPLE 'PHONES no 2656 03/17/20 18:18:31 60:00 0 0 nxtgenpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 109 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171029 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343087 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in / 1 4-so AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DOLT IMEI MAKE MODEL Date Time Up Dn (OTC/ 2657 03/17/20 18:20:14 60:00 11516 4300 ims 2658 03/17/20 19:18:31 60:00 0 0 nxtgonpho APPLE 'PHONES ne 2659 03/17/20 19:20:14 55:38 12244 4408 ims 2660 03/17/20 20:15:28 38:34 7306 6810 ims APPLE 'PHONES 2661 03/17/20 20:15:28 38:35 6742 6954 ims APPLE 'PHONES 2662 03/17/20 20:15:51 60:00 20945 14596 ims 2663 03/17/20 20:18:31 35:32 0 0 nxtgonpho APPLE 'PHONES ne 2664 03/17/20 20:54:03 60:00 0 0 nxtgonpho APPLE 'PHONES ne 2665 03/17/20 21:15:51 60:00 8604 3052 ims 2666 03/17/20 21:54:03 4:43 0 0 nxtgonpho APPLE 'PHONES ne 2667 03/17/20 21:58:45 8:40 192 0 nxtgonpho APPLE 'PHONES ne 2668 03/17/20 21:58:46 8:40 0 0 nxtgonpho APPLE 'PHONES ne 2669 03/17/20 22:07:26 31:55 0 0 nxtgonpho APPLE 'PHONES ne 2670 03/17/20 22:15:51 60:00 10268 3424 ims 2671 03/17/20 22:39:20 2:10 192 0nxtgonpho APPLE 'PHONES ne 2672 03/17/20 22:39:21 2:10 0 0 nxtgonpho APPLE 'PHONES ne 2673 03/17/20 22:41:31 1:10 0 0 nxtgonpho APPLE 'PHONES ne 2674 03/17/20 22:42:41 68:13 192 0 nxtgonpho APPLE 'PHONES ne 2675 03/17/20 22:42:42 60:00 0 0 nxtgonpho APPLE 'PHONES ne 2676 03/17/20 23:15:51 60:00 11844 3624 ims 2677 03/17/20 23:42:42 8:13 0 0 nxtgonpho APPLE 'PHONES ne 2678 03/17/20 23:50:54 18:33 192 0nxtgonpho APPLE 'PHONES ne 2679 03/17/20 23:50:55 18:33 0 0 nxtgonpho APPLE 'PHONES ne 2680 03/18/20 00:09:28 8:46 0 0 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 110 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171030 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343088 MOBILITY e s, pu020 AT&T has queried AT&T has queried UTZ. for records for records from 03/01/2020 12:00:00am using Eastern Time Zone. to 06/15/2020 11:30:50pm AT&T's records are stored and provided in AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Sidi= Item Conn. Conn. Originating ET Bytos Bytes Apn INKS INSI MAKE MODEL Date TIM* Number Up Dn (OTC) 2681 03/18/20 00:15:51 60:00 13804 6628 ism 2682 03/18/20 00:18:14 10:53 192 Onmtgonpho APPLE 'PHONES no 2683 03/18/20 00:18:14 10:54 0 0 nxtgenpho APPLE 'PHONES no 2684 03/18/20 00:29:08 56:10 0 0 nxtgenpho APPLE 'PHONES no 2685 03/18/20 01:15:51 60:00 10036 3176 ism 2686 03/18/20 01:25:18 21:55 192 0 nxtgenpho APPLE 'PHONES no 2687 03/18/20 01:25:19 21:55 0 0 nxtgenpho APPLE 'PHONES no 2688 03/16/20 01:47:13 19:14 192 0 nxtgenpho APPLE 'PHONES no 2689 03/18/20 01:47:14 19:14 0 0 nxtgenpho APPLE 'PHONES no 2690 03/18/20 02:06:28 60:00 0 0 nxtgenpho APPLE 'PHONES no 2691 03/18/20 02:15:51 60:00 10252 3300 ism 2692 03/18/20 03:06:28 6:23 0 0 nxtgenpho APPLE 'PHONES ne 2693 03/18/20 03:12:50 28:42 192 0 nxtgenpho APPLE 'PHONES ne 2694 03/18/20 03:12:51 28:42 0 0 nxtgenpho APPLE 'PHONES ne 2695 03/18/20 03:15:51 60:00 10380 4252 ims 2696 03/18/20 03:41:33 15:21 0 0 nxtgenpho APPLE 'PHONES ne 2697 03/18/20 03:56:54 0:05 0 0 nxtgenpho APPLE 'PHONES ne 2698 03/18/20 04:15:51 60:00 6848 2896 ims 2699 03/18/20 05:15:51 60:00 12028 4536 ims 2700 03/18/20 06:15:51 60:00 10272 4236 ims 2701 03/18/20 07:15:51 60:00 6956 2912 ims 2702 03/18/20 08:15:51 60:00 6956 2788 ims 2703 03/18/20 09:15:51 60:00 8496 3160 ims 2704 03/18/20 10:15:51 60:00 8604 3160 ims 2705 03/18/20 11:15:51 31:46 15236 6264 ims 2706 03/18/20 11:47:31 5:19 0 Onactgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 111 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171031 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343089 MOBILITY c .o ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Sidi= Item Conn. Conn. Originating ET Bytes Bytes Apn 73OLI INS! MAR Mori. Date Time Number Up Dn (UTC) 2707 03/18/20 11:52:50 60:00 0 0 nmtgonpho APPLE 'PEONES no 2708 03/18/20 11:52:52 60:00 14426 11616 ims APPLE 'PEONES 2709 03/18/20 12:52:50 60:00 0 0 nmtgonpho APPLE 'PEONES no 2710 03/18/20 12:52:52 60:00 5408 2756 ims APPLE !PHONES 2711 03/18/20 13:52:50 36:19 0 0 nmtgonpho APPLE !PHONES no 2712 03/18/20 13:52:52 26:54 2596 1324 ims APPLE !PHONES 2713 03/18/20 14:19:46 3:57 3316 1324 ims APPLE !PHONES 2714 03/18/20 14:23:43 4:05 3952 1448 ims APPLE !PHONES 2715 03/18/20 14:27:48 60:00 8012 2772 ims APPLE !PHONES 2716 03/18/20 14:29:08 2:23 192 Onmtgonpho APPLE !PHONES no 2717 03/18/20 14:29:09 2:23 0 0 nmtgonpho APPLE !PHONES no 2718 03/18/20 14:31:31 3:00 192 0 nmtgonpho APPLE !PHONES ne 2719 03/18/20 14:31:33 2:59 0 0 nmtgonpho APPLE !PHONES ne 2720 03/18/20 14:34:31 52:23 0 0 nmtgonpho APPLE !PHONES no 2721 03/18/20 15:02:33 60:00 18492 9824 ims 2722 03/18/20 15:26:53 2:31 192 0 nmtgonpho APPLE !PHONES no 2723 03/16/20 15:26:54 2:31 0 0 nmtgonpho APPLE !PHONES no 2724 03/18/20 15:27:48 4:43 0 0 ims APPLE !PHONES 2725 03/18/20 15:29:25 43:06 0 0 nmtgonpho APPLE !PHONES no 2726 03/18/20 15:32:31 60:00 22853 16088 ims 2727 03/18/20 16:02:33 55:23 0 0 ims 2728 03/16/20 16:12:31 1:13 192 0 nmtgonpho APPLE !PHONES no 2729 03/18/20 16:12:32 1:13 0 0 nmtgonpho APPLE !PHONES no 2730 03/18/20 16:13:44 2:04 192 0 nmtgonpho APPLE !PHONES no 2731 03/18/20 16:13:46 2:03 0 0 nmtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 112 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171032 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343090 MOBILITY e s, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DEM IMSI MAPS MODEL Date Time Numbor Up Dn (OTC) 2732 03/18/20 16:15:49 43:56 0 Onxtgonpho APPLE 'PEONES ne 2733 03/18/20 16:32:31 60:00 5072 1696 ims 2734 03/18/20 16:57:55 60:00 19408 10910 ims 2735 03/18/20 16:59:44 8:18 192 Onxtgonpho APPLE 'PEONES ne 2736 03/18/20 16:59:45 8:18 0 0 nxtgenphe APPLE 'PEONES ne 2737 03/18/20 17:08:03 49:11 0 0 nxtgenphe APPLE !PHONES ne 2738 03/18/20 17:32:31 29:42 0 0 ims 2739 03/18/20 17:57:13 6:34 192 0 nxtgenphe APPLE 'PHONES no 2740 03/18/20 17:57:14 6:34 0 0 nxtgenphe APPLE 'PHONES no 2741 03/18/20 17:57:55 4:18 0 0 ims 2742 03/18/20 18:02:11 1:36 6264 6820 ims APPLE 'PHONES 2743 03/18/20 18:02:13 1:35 6676 6000 ims APPLE 'PHONES 2744 03/18/20 18:03:04 60:00 18853 10233 ims 2745 03/18/20 18:03:48 3:10 0 0 nxtgenphe APPLE 'PHONES no 2746 03/18/20 18:06:57 9:07 192 0 nxtgenphe APPLE 'PHONES no 2747 03/18/20 18:06:59 9:06 0 0 nxtgenpho APPLE 'PHONES no 2748 03/16/20 18:16:05 2:18 0 0 ructgenpho APPLE IPHONE8 no 2749 03/18/20 18:18:22 8:15 192 0 nxtgenphe APPLE 'PHONES no 2750 03/18/20 18:18:23 8:15 0 0 nxtgenphe APPLE 'PHONES no 2751 03/18/20 18:26:38 1:07 0 0 nxtgenphe APPLE IPHONE8 ne 2752 03/18/20 18:27:44 2:03 192 0 nxtgenphe APPLE IPHONE8 ne 2753 03/18/20 18:27:45 2:03 0 0 nxtgenphe APPLE IPHONE8 ne 2754 03/18/20 18:29:48 21:07 0 0 nxtgenphe APPLE IPHONE8 ne 2755 03/18/20 18:50:54 8:34 192 0 nxtgenphe APPLE IPHONE8 ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 113 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171033 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343091 MOBILITY ce• PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:33:53pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run pato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn 73MLI INS' MAKE MODEL Date Time Number Up Dn (OTC) 2756 03/18/20 18:50:55 8:34 0 0 nxtgonpho APPLE 'PHONES no 2757 03/18/20 18:59:29 39:33 0 0 nxtgonpho APPLE 'PHONES no 2758 03/18/20 19:03:04 58:01 8048 3588 Las 2759 03/18/20 19:39:01 14:50 192 0 nxtgonpho APPLE 'PHONES no 2760 03/18/20 19:39:02 14:50 0 0 nxtgonpho APPLE 'PHONES no 2761 03/18/20 19:53:52 5:18 0 0 nxtgonpho APPLE 'PHONES no 2762 03/18/20 19:59:09 8:18 192 0 nxtgonpho APPLE 'PHONES no 2763 03/18/20 19:59:10 8:18 0 0 nxtgonpho APPLE 'PHONES no 2764 03/18/20 20:00:39 1:21 7096 6816 Las APPLE 'PHONES 2765 03/18/20 20:00:40 1:21 6748 6832 Las APPLE 'PHONES 2766 03/18/20 20:01:05 2:01 8095 5982 Las 2767 03/18/20 20:01:59 5:28 6334 6666 Las APPLE 'PHONES 2768 03/18/20 20:02:01 5:27 6666 6070 ism APPLE 'PHONES 2769 03/18/20 20:03:06 20:56 11686 8040 ism 2770 03/18/20 20:07:28 0:05 0 0 nxtgonpho APPLE 'PHONES no 2771 03/18/20 20:07:44 39:49 0 0 nxtgonpho APPLE 'PHONES no 2772 03/16/20 20:18:47 28:46 6666 5980 ism APPLE 'PHONES 2773 03/18/20 20:47:32 4:12 192 0 nxtgonpho APPLE 'PHONES no 2774 03/18/20 20:47:33 4:12 0 0 nxtgonpho APPLE 'PHONES no 2775 03/18/20 20:51:44 13:13 192 0 nxtgonpho APPLE 'PHONES ne 2776 03/18/20 20:51:45 13:13 0 0 nxtgonpho APPLE 'PHONES ne 2777 03/18/20 20:52:00 12:57 6336 6988 Las APPLE 'PHONES 2778 03/18/20 20:52:01 12:57 6864 6072 Las APPLE 'PHONES 2779 03/18/20 21:04:58 60:00 0 0 nxtgonpho APPLE 'PHONES no 2780 03/18/20 21:39:56 0:01 0 0 ism 2781 03/18/20 21:46:22 50:48 25152 16800 Las APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 114 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00171034 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343092 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .e# AT&T ‘•.. UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn EBBE IM9I MAKE MODEL Date Time Number Up Dn (OTC) 2782 03/18/20 22:04:58 60:00 0 0 nxtgenpho APPLE !PHONES no 2783 03/18/20 22:37:10 60:00 15448 5088 ims APPLE !PHONES 2784 03/18/20 23:04:58 40:02 0 Onmtgonpho APPLE !PHONES no 2785 03/18/20 23:37:10 30:08 5072 1572 ims APPLE !PHONES 2786 03/18/20 23:44:59 19:47 192 Onmtgonpho APPLE !PHONES no 2787 03/18/20 23:45:00 19:47 0 0 nxtgonpho APPLE !PHONES no 2788 03/19/20 00:04:47 1:21 0 0 nxtgonpho APPLE !PHONES no 2789 03/19/20 00:06:07 8:21 192 0 nxtgonpho APPLE !PHONES no 2790 03/19/20 00:06:08 8:21 0 0 nxtgonpho APPLE !PHONES no 2791 03/19/20 00:06:19 8:09 7226 6814 ims APPLE !PHONES 2792 03/19/20 00:06:20 8:09 6746 6962 ims APPLE !PHONES 2793 03/19/20 00:07:18 15:11 9894 8570 ims 2794 03/19/20 00:14:29 6:44 0 Onmtgonpho APPLE !PHONES no 2795 03/19/20 00:21:12 8:04 192 0 nxtgonpho APPLE !PHONES no 2796 03/19/20 00:21:13 8:04 0 0 nxtgonpho APPLE !PHONES no 2797 03/19/20 00:22:27 1:34 6263 6744 ims APPLE !PHONES 2798 03/19/20 00:22:29 1:33 6676 5999 ims APPLE !PHONES 2799 03/19/20 00:24:02 17:34 8528 6160 ims APPLE !PHONES 2800 03/19/20 00:29:17 2:55 0 0 nxtgonpho APPLE !PHONES no 2801 03/19/20 00:32:12 6:23 192 0 nxtgonpho APPLE !PHONES no 2802 03/19/20 00:32:13 6:23 0 0 nxtgonpho APPLE !PHONES no 2803 03/19/20 00:38:36 3:08 0 0 nxtgonpho APPLE !PHONES no 2804 03/19/20 00:41:43 2:03 192 0 nxtgonpho APPLE !PHONES no 2805 03/19/20 00:41:44 2:02 6225 6672 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 115 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171035 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343093 MOBILITY dro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ••-•ss AT&T UTZ. Run Date: 06/17/2020 Run Tine: Data Usage For: Item Conn. Conn. Originating ET Bytos Bytes Apn DMZ INSI HAKE MODEL Date Tame Number Up Dn (OTC) 2806 03/19/20 00:41:44 2:03 0 0 nmtgonphe APPLE 'PHONES no 2807 03/19/20 00:41:45 2:02 6672 5961 ims APPLE 'PHONES 2808 03/19/20 00:43:47 3:06 0 0 nmtgonphe APPLE 'PHONES no 2809 03/19/20 00:43:49 1:05 6692 6000 ims APPLE 'PHONES 2810 03/19/20 00:44:54 0:20 3872 1572 ims APPLE 'PHONES 2811 03/19/20 00:45:14 1:39 2644 1324 ims APPLE 'PHONES 2812 03/19/20 00:46:52 19:04 192 0nmtgonpho APPLE 'PHONES no 2813 03/19/20 00:46:53 19:04 0 0 nmtgonphe APPLE 'PHONES no 2814 03/19/20 00:46:54 19:02 6351 6674 ims APPLE 'PHONES 2815 03/19/20 00:46:55 19:02 6674 6087 ims APPLE 'PHONES 2816 03/19/20 00:47:12 60:00 20306 9690 ims 2817 03/19/20 01:05:57 7:41 0 0nmtgonpho APPLE 'PHONES no 2818 03/19/20 01:13:37 2:15 192 0 nmtgonpho APPLE 'PHONES no 2819 03/19/20 01:13:38 2:15 0 0 nmtgonpho APPLE 'PHONES no 2820 03/19/20 01:15:53 2:58 0 0 nmtgonpho APPLE 'PHONES no 2821 03/19/20 01:18:50 2:14 192 0 nmtgonpho APPLE 'PHONES no 2822 03/19/20 01:18:51 2:14 0 0 nmtgonpho APPLE 'PHONES no 2823 03/19/20 01:21:05 0:47 0 0 nmtgonphe APPLE 'PHONES no 2824 03/19/20 01:21:51 8:14 192 0 nmtgonphe APPLE 'PHONES no 2825 03/19/20 01:21:52 8:14 0 0 nmtgonphe APPLE 'PHONES no 2826 03/19/20 01:30:06 5:35 0 0 nmtgonphe APPLE 'PHONES no 2827 03/19/20 01:35:40 14:38 192 0 nmtgonphe APPLE 'PHONES no 2828 03/19/20 01:35:41 14:38 0 0 nmtgonphe APPLE 'PHONES no 2829 03/19/20 01:47:12 60:00 7064 2880 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 116 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171036 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343094 MOBILITY c r. ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ‘*-0 AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn 73@I IM9I MAKE MODEL Date T11011 Number Up Dn lint/ 2830 03/19/20 01:50:19 2:48 0 0 nmtgonpho APPLE !PHONES ne 2831 03/19/20 01:53:06 2:10 192 0 nmtgonpho APPLE !PHONES ne 2832 03/19/20 01:53:07 2:10 0 0 nmtgonpho APPLE !PHONES ne 2833 03/19/20 01:55:17 3:05 0 0 nmtgonpho APPLE !PHONES ne 2834 03/19/20 01:58:21 2:05 192 0 nmtgonpho APPLE !PHONES ne 2835 03/19/20 01:58:23 2:04 0 0 nmtgonpho APPLE !PHONES ne 2836 03/19/20 02:00:27 4:49 0 0 nmtgonpho APPLE !PHONES ne 2837 03/19/20 02:05:15 18:26 192 0 nmtgonpho APPLE !PHONES ne 2838 03/19/20 02:05:16 18:26 0 0 nmtgonpho APPLE !PHONES ne 2839 03/19/20 02:23:41 7:51 192 0 nmtgonpho APPLE !PHONES ne 2840 03/19/20 02:23:42 7:51 0 0 nmtgonpho APPLE !PHONES no 2841 03/19/20 02:31:33 8:23 192 0 nmtgonpho APPLE !PHONES no 2842 03/19/20 02:31:34 8:23 0 0 nmtgonpho APPLE !PHONES no 2843 03/19/20 02:39:56 6:12 192 0 nmtgonpho APPLE !PHONES no 2844 03/19/20 02:39:57 6:12 0 0 nmtgonpho APPLE !PHONES ne 2845 03/19/20 02:46:09 12:23 0 0 nmtgonpho APPLE !PHONES ne 2846 03/19/20 02:47:12 60:00 8388 2896 ims 2847 03/19/20 02:58:31 2:11 192 0 nmtgonpho APPLE !PHONES ne 2848 03/19/20 02:58:32 2:11 0 0 nmtgonpho APPLE !PHONES ne 2849 03/19/20 03:00:43 0:34 0 0 nmtgonpho APPLE !PHONES ne 2850 03/19/20 03:01:16 40:00 192 0 nmtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 117 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171037 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343095 MOBILITY dro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage Tor: Sidi= Item Conn. Conn. Originating ET Bytes Bytes Apn IMBI IBBI MAKZ MODEL Date Time Number Up Dn (OTC) 2851 03/19/20 03:01:17 52:53 0 0 nxtgenpho APPLE 'PEONES ne 2852 03/19/20 03:47:12 60:00 11596 4004 ims 2853 03/19/20 03:54:10 2:09 192 0 nxtgenpho APPLE 'PEONES ne 2854 03/19/20 03:54:11 2:09 0 0 nxtgenpho APPLE !PHONES ne 2855 03/19/20 03:56:20 0:34 0 0 nxtgenpho APPLE 'PHONES ne 2856 03/19/20 03:56:53 8:33 192 0 nxtgenpho APPLE 'PHONES ne 2857 03/19/20 03:56:54 8:33 0 0 nxtgenpho APPLE 'PHONES ne 2858 03/19/20 04:05:26 8:32 192 0 nxtgenpho APPLE 'PHONES ne 2859 03/19/20 04:05:28 8:31 0 0 nxtgenpho APPLE 'PHONES ne 2860 03/19/20 04:13:59 19:14 0 0 nxtgenpho APPLE 'PHONES ne 2861 03/19/20 04:33:12 14:52 192 0 nxtgenpho APPLE 'PHONES ne 2862 03/19/20 04:33:13 14:52 0 0 nxtgenpho APPLE 'PHONES ne 2863 03/19/20 04:47:12 60:00 8604 3112 ims 2864 03/19/20 04:48:05 1:29 0 0 nxtgenpho APPLE !PHONES ne 2865 03/19/20 04:49:34 21:18 192 0 nxtgenpho APPLE !PHONES ne 2866 03/19/20 04:49:34 21:19 0 0 nxtgenpho APPLE !PHONES ne 2867 03/19/20 05:10:52 27:29 192 0 nxtgenpho APPLE !PHONES ne 2868 03/19/20 05:10:53 27:29 0 0 nxtgenpho APPLE !PHONES ne 2869 03/19/20 05:38:22 0:34 0 0 nxtgenpho APPLE !PHONES ne 2870 03/19/20 05:38:55 72:10 192 0 nxtgenpho APPLE !PHONES ne 2871 03/19/20 05:38:56 60:00 0 0 nxtgenpho APPLE !PHONES ne 2872 03/19/20 05:47:12 36:19 6848 2932 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 118 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171038 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343096 MOBILITY ce. ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn L@I IISI MDME MODEL Date Time Number Up Dn (OTC) 2873 03/19/20 06:24:17 26:48 6246 6666 ims APPLE 'PEONES 2874 03/19/20 06:24:18 26:48 6666 5982 ims APPLE 'PEONES 2875 03/19/20 06:38:56 12:10 0 0 ructgonpho APPLE 'PEONES ne 2876 03/19/20 06:51:06 0:51 0 0 ructgonpho APPLE 'PEONES ne 2877 03/19/20 06:51:56 21:18 192 0 ructgonpho APPLE 'PEONES no 2878 03/19/20 06:51:57 21:18 0 0 ructgonpho APPLE 'PEONES no 2879 03/19/20 06:56:36 60:00 16703 9200 ims 2880 03/19/20 07:13:15 8:39 192 0 ructgonpho APPLE 'PHONES ne 2881 03/19/20 07:13:16 8:39 0 0 nxtgonpho APPLE !PHONES ne 2882 03/19/20 07:21:55 46:41 192 0 nxtgonpho APPLE !PHONES ne 2883 03/19/20 07:21:56 46:41 0 0 nxtgonpho APPLE !PHONES no 2884 03/19/20 07:56:36 60:00 6972 2664 ims 2885 03/19/20 08:08:36 21:07 192 0 'mtg.:mph* APPLE !PHONES no 2886 03/19/20 08:08:37 21:07 0 0 nxtgonpho APPLE !PHONES ne 2887 03/19/20 08:29:44 0:36 0 0 nxtgonpho APPLE !PHONES ne 2888 03/19/20 08:30:19 40:22 192 0 nxtgonpho APPLE !PHONES ne 2889 03/19/20 08:30:20 40:22 0 0 nxtgonpho APPLE !PHONES no 2890 03/19/20 08:56:36 60:00 10236 3360 ims 2891 03/19/20 09:10:42 14:55 192 0 nxtgonpho APPLE !PHONES ne 2892 03/19/20 09:10:43 14:55 0 0 nxtgonpho APPLE !PHONES no 2893 03/19/20 09:25:37 33:55 192 0 ructgonpho APPLE !PHONES no 2894 03/19/20 09:25:38 33:55 0 0 ructgonpho APPLE !PHONES no 2895 03/19/20 09:56:36 60:00 9928 3252 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 119 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171039 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343097 MOBILITY cee ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytos Bytes Apn ENE! INSI MAKE MODEL Date Time Number Up Dn (UTC) 2896 03/19/20 09:59:33 0:38 0 0 nxtgenpho APPLE 'PHONES ne 2897 03/19/20 10:00:10 2:49 192 0 nxtgenpho APPLE 'PHONES ne 2898 03/19/20 10:00:11 2:49 0 0 nxtgenpho APPLE 'PHONES ne 2899 03/19/20 10:03:00 0:33 0 0 nxtgenpho APPLE 'PHONES ne 2900 03/19/20 10:03:32 28:46 192 0 nxtgenpho APPLE 'PHONES ne 2901 03/19/20 10:03:33 28:46 0 0 nxtgenpho APPLE 'PHONES ne 2902 03/19/20 10:32:19 55:25 0 0 nxtgenpho APPLE 'PHONES ne 2903 03/19/20 10:56:36 60:00 8264 2772 ims 2904 03/19/20 11:27:43 31:53 192 0 nxtgenpho APPLE 'PHONES ne 2905 03/19/20 11:27:44 31:53 0 0 nxtgenpho APPLE 'PHONES ne 2906 03/19/20 11:56:36 60:00 13568 4752 ims 2907 03/19/20 11:59:37 11:37 192 0 nxtgenpho APPLE 'PHONES ne 2908 03/19/20 11:59:38 11:37 0 0 nxtgenpho APPLE 'PHONES ne 2909 03/19/20 12:11:15 8:01 0 0 nxtgenpho APPLE 'PHONES ne 2910 03/19/20 12:19:15 15:40 192 0 nxtgenpho APPLE 'PHONES ne 2911 03/19/20 12:19:16 15:40 0 0 nxtgenpho APPLE 'PHONES ne 2912 03/19/20 12:34:55 60:00 0 0 nxtgenpho APPLE 'PHONES ne 2913 03/19/20 12:47:26 60:00 18813 9516 ims 2914 03/19/20 12:56:36 60:00 0 0 ims 2915 03/19/20 13:34:55 60:00 0 0 nxtgenpho APPLE 'PHONES ne 2916 03/19/20 13:47:26 60:00 8372 3036 ims 2917 03/19/20 13:56:36 60:00 0 0 ims 2918 03/19/20 14:34:55 32:28 0 0 nxtgenpho APPLE 'PHONES ne 2919 03/19/20 14:47:26 60:00 4748 2248 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 120 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171040 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343098 MOBILITY 41111, pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. trs `s -a. AT&T Run Date: 06/17/2020 Run Tine: Data Usage For: SS= Item Conn. Conn. Originating ET Bytes Bytes Apn flat IMSI MAKE MODEL Date Time Number Up Dn (OTC) 2920 03/19/20 14:56:36 4:16 0 0 ims 2921 03/19/20 15:00:52 60:00 19541 11190 ims 2922 03/19/20 15:07:22 2:06 192 Onxtgonpho APPLE 'PHONES ne 2923 03/19/20 15:07:23 2:06 0 Onxtgonpho APPLE 'PHONES ne 2924 03/19/20 15:09:29 2:19 0 Onxtgonpho APPLE 'PHONES ne 2925 03/19/20 15:11:48 2:02 192 Onxtgonpho APPLE 'PHONES ne 2926 03/19/20 15:11:49 2:03 0 Onxtgonpho APPLE 'PHONES ne 2927 03/19/20 15:13:52 1:14 0 0 nxtgonpho APPLE 'PHONES ne 2928 03/19/20 15:15:05 1:56 192 0 nxtgonpho APPLE 'PHONES ne 2929 03/19/20 15:15:06 1:56 0 0 nxtgonpho APPLE 'PHONES ne 2930 03/19/20 15:17:02 4:44 0 0 nxtgonpho APPLE 'PHONES ne 2931 03/19/20 15:21:45 20:00 192 0 nxtgonpho APPLE 'PHONES ne 2932 03/19/20 15:21:46 35:07 0 0 nxtgonpho APPLE 'PHONES ne 2933 03/19/20 15:47:26 60:00 0 0 ims 2934 03/19/20 15:56:53 0:34 0 Onxtgonpho APPLE 'PHONES ne 2935 03/19/20 15:57:27 38:59 192 0 nxtgonpho APPLE 'PHONES ne 2936 03/19/20 15:57:27 39:00 0 0 nxtgonpho APPLE 'PHONES ne 2937 03/19/20 16:00:52 60:00 15244 12636 isms 2938 03/19/20 16:29:56 0:40 1857 0 isms 2939 03/19/20 16:36:27 12:41 0 Onxtgonpho APPLE 'PHONES ne 2940 03/19/20 16:47:26 23:01 0 0 ims 2941 03/19/20 16:49:07 2:21 192 Onxtgonpho APPLE 'PHONES ne 2942 03/19/20 16:49:09 2:20 0 0 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 121 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171041 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343099 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn EMU IMSI MAKE MODEL Date Time Number Up Dn (UTC) 2943 03/19/20 16:51:29 0:42 0 0 nxtgenpho APPLE 'PEONES ne 2944 03/19/20 16:52:10 2:41 192 Onxtgonpho APPLE 'PEONES ne 2945 03/19/20 16:52:11 2:41 0 0 nxtgenpho APPLE 'PEONES ne 2946 03/19/20 16:54:52 2:22 192 0 nxtgonpho APPLE 'PEONES ne 2947 03/19/20 16:54:53 2:22 0 0 nxtgenpho APPLE 'PEONES ne 2948 03/19/20 16:57:15 41:17 0 Onxtgonpho APPLE 'PEONES ne 2949 03/19/20 17:00:52 14:42 4840 2680 ims 2950 03/19/20 17:10:27 43:09 15853 12072 ims 2951 03/19/20 17:38:32 17:57 192 Onxtgonpho APPLE 'PHONES ne 2952 03/19/20 17:38:33 17:57 0 Onxtgonpho APPLE IPHONE8 ne 2953 03/19/20 17:53:12 3:17 7220 6844 ims APPLE 'PHONES 2954 03/19/20 17:53:13 3:17 6736 6956 ims APPLE 'PHONES 2955 03/19/20 17:53:36 60:00 11309 6742 ims 2956 03/19/20 17:56:30 8:45 0 Onxtgonpho APPLE 'PHONES ne 2957 03/19/20 18:05:14 2:18 192 0 nxtgonpho APPLE 'PHONES ne 2958 03/19/20 18:05:16 2:17 0 0 nxtgonpho APPLE 'PHONES ne 2959 03/19/20 18:07:11 0:21 6244 6674 ims APPLE 'PHONES 2960 03/19/20 18:07:12 0:21 6674 5980 ims APPLE 'PHONES 2961 03/19/20 18:07:33 1:34 0 0 nxtgenpho APPLE 'PHONES ne 2962 03/19/20 18:07:34 0:01 0 0 ims APPLE 'PHONES 2963 03/19/20 18:07:42 0:40 6672 5964 isms APPLE 'PHONES 2964 03/19/20 18:08:22 60:00 13768 4700 isms APPLE 'PHONES 2965 03/19/20 18:09:06 5:51 192 Onxtgonpho APPLE 'PHONES ne 2966 03/19/20 18:09:07 5:51 0 Onxtgonpho APPLE 'PHONES ne 2967 03/19/20 18:14:58 0:32 0 0 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 122 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171042 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343100 MOBILITY cto PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn SUSI INSI NA= MODEL Date Time Number Up Dn (UTC) 2968 03/19/20 18:15:29 81:06 192 Onxtgonpho APPLE IPHONE8 ne 2969 03/19/20 18:15:30 60:00 0 0 nxtgenpho APPLE !PHONES ne 2970 03/19/20 18:53:36 54:41 0 0 ims 2971 03/19/20 19:08:22 45:19 13716 7424 ims APPLE !PHONES 2972 03/19/20 19:15:30 21:06 0 0 nxtgenpho APPLE !PHONES ne 2973 03/19/20 19:26:32 0:19 0 520 ims APPLE !PHONES 2974 03/19/20 19:36:36 5:02 0 0 nxtgenpho APPLE !PHONES ne 2975 03/19/20 19:41:37 2:10 192 0 nxtgenpho APPLE !PHONES ne 2976 03/19/20 19:41:38 2:10 0 0 nxtgenpho APPLE !PHONES ne 2977 03/19/20 19:43:48 2:12 0 0 nxtgenpho APPLE !PHONES ne 2978 03/19/20 19:45:59 2:09 192 0 nxtgenpho APPLE !PHONES ne 2979 03/19/20 19:46:00 2:09 0 0 nxtgenpho APPLE !PHONES ne 2980 03/19/20 19:48:09 40:37 0 0 nxtgenpho APPLE !PHONES ne 2981 03/19/20 19:48:16 0:01 0 0 ims APPLE !PHONES 2982 03/19/20 19:48:30 0:04 48 0 ims APPLE !PHONES 2983 03/19/20 19:54:35 60:00 26556 11232 ims 2984 03/19/20 20:28:45 8:30 192 Onxtgonpho APPLE !PHONES ne 2985 03/19/20 20:28:46 8:30 0 0 nxtgenpho APPLE !PHONES ne 2986 03/19/20 20:37:16 6:10 0 0 nxtgenpho APPLE !PHONES ne 2987 03/19/20 20:43:26 8:26 192 0 nxtgenpho APPLE !PHONES ne 2988 03/19/20 20:43:27 8:26 0 0 nxtgonpho APPLE !PHONES no 2989 03/19/20 20:51:53 39:04 0 0 nxtgonpho APPLE !PHONES no 2990 03/19/20 20:54:35 47:17 3424 1340 ims 2991 03/19/20 21:30:57 61:25 192 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 123 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171043 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343101 MOBILITY de o ..020 AT&T has queried AT&T has queried for records for records from 03/01/2020 12:00:00am using Eastern Time Zone. to 06/15/2020 11:59:59pm AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating CT Bytes Bytes Apn MINT TWIT la= MODEL. Date Time Number Up Dn (OTC) 2992 03/19/20 21:30:58 60:00 0 0 nactgonpho APPLE 'PEONES ne 2993 03/19/20 21:51:45 40:37 8164 6868 imn APPLE 'PEONES 2994 03/19/20 21:51:46 40:37 6868 8008 imn APPLE 'PEONES 2995 03/19/20 21:52:05 9:49 10815 8812 imn 2996 03/19/20 22:01:54 30:28 9700 10530 imn APPLE 'PEONES 2997 03/19/20 22:01:55 30:28 10530 9436 imn APPLE 'PEONES 2998 03/19/20 22:30:58 1:25 0 Onactgonpho APPLE 'PEONES ne 2999 03/19/20 22:32:23 1:26 0 0 nactgonpho APPLE 'PEONES ne 3000 03/19/20 22:33:48 8:41 192 0 nactgonpho APPLE 'PEONES ne 3001 03/19/20 22:33:49 8:41 0 0 nactgonpho APPLE 'PHONES ne 3002 03/19/20 22:36:21 60:00 21342 12618 imn 3003 03/19/20 22:42:30 0:05 0 0 nmtgonpho APPLE !PHONES no 3004 03/19/20 22:42:59 37:24 192 0 nmtgonpho APPLE !PHONES no 3005 03/19/20 22:43:00 37:24 0 0 nmtgonpho APPLE !PHONES no 3006 03/19/20 23:20:24 8:28 0 0 nottgonpho APPLE 'PHONED no 3007 03/19/20 23:28:52 43:12 192 Onmtgonpho APPLE IPEOME8 ne 3008 03/19/20 23:28:53 43:12 0 0 nactgonpho APPLE IPBONE8 ne 3009 03/19/20 23:36:21 60:00 8496 3020 imn 3010 03/20/20 00:12:05 17:27 0 0 nottgonpho APPLE IPBONE8 ne 3011 03/20/20 00:29:32 11:20 192 0 nottgonpho APPLE 'PHONED ne 3012 03/20/20 00:29:33 11:20 0 0 nottgonpho APPLE 'PHONED ne 3013 03/20/20 00:36:21 60:00 8728 3128 imn 3014 03/20/20 00:40:53 4:32 0 0 nactgonpho APPLE 'PHONED ne 3015 03/20/20 00:45:24 2:11 192 0 nactgonpho APPLE 'PHONED ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 124 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SONYGAt 00171044 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343102 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INKS IMSI MAKE MODEL Date Time Number Up Dn (OTC) 3016 03/20/20 00:45:25 2:11 0 0nxtgonpho APPLE !PHONES no 3017 03/20/20 00:47:36 0:39 0 0 nxtgonpho APPLE 'PHONES no 3018 03/20/20 00:48:15 8:45 192 0 nxtgonpho APPLE 'PHONES no 3019 03/20/20 00:48:16 8:45 0 0 nxtgonpho APPLE 'PHONES no 3020 03/20/20 00:57:01 1:40 0 0 nxtgonpho APPLE 'PHONES ne 3021 03/20/20 00:58:40 2:03 192 0 nxtgonpho APPLE 'PHONES no 3022 03/20/20 00:58:41 2:03 0 0 nxtgenpho APPLE 'PHONES no 3023 03/20/20 01:00:44 14:40 0 0 nxtgonpho APPLE 'PHONES no 3024 03/20/20 01:15:24 14:56 192 0 nxtgonpho APPLE 'PHONES no 3025 03/20/20 01:15:24 14:57 0 0 nxtgonpho APPLE 'PHONES no 3026 03/20/20 01:30:21 1:11 0 0 nxtgonpho APPLE !PHONES ne 3027 03/20/20 01:31:31 39:34 192 0 nxtgonpho APPLE 'PHONES ne 3028 03/20/20 01:31:32 39:34 0 0 nxtgonpho APPLE 'PHONES ne 3029 03/20/20 01:36:21 24:43 3424 1432 ims 3030 03/20/20 02:01:02 10:03 7228 6804 ims APPLE !PHONES 3031 03/20/20 02:01:03 10:03 6736 6964 ims APPLE !PHONES 3032 03/20/20 02:02:44 60:00 15057 8834 ims 3033 03/20/20 02:11:05 2:11 192 0nxtgonpho APPLE !PHONES ne 3034 03/20/20 02:11:06 2:11 0 0 nxtgonpho APPLE !PHONES ne 3035 03/20/20 02:13:17 10:19 0 0 nxtgonpho APPLE 'PHONES ne 3036 03/20/20 02:23:35 8:16 192 0 nxtgonpho APPLE !PHONES no 3037 03/20/20 02:23:36 8:16 0 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 125 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171045 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343103 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn TIE' IMSI MAKE MODEL Date Time Number Up Dn (UTC) 3038 03/20/20 02:31:52 39:29 0 Onmtgonpho APPLE 'PEONES ne 3039 03/20/20 03:02:44 60:00 8388 3004 ims 3040 03/20/20 03:11:21 30:00 192 Onmtgonpho APPLE 'PEONES ne 3041 03/20/20 03:11:22 35:10 0 0 nxtgonpho APPLE 'PEONES no 3042 03/20/20 03:46:32 2:09 192 0 nxtgonpho APPLE 'PEONES no 3043 03/20/20 03:46:33 2:09 0 0 nxtgonpho APPLE 'PEONES no 3044 03/20/20 03:48:42 1:14 0 0 nxtgonpho APPLE IPHCME8 no 3045 03/20/20 03:49:55 21:12 192 0 nxtgonpho APPLE 'PHONES no 3046 03/20/20 03:49:56 21:12 0 0 nxtgonpho APPLE 'PHONES ne 3047 03/20/20 04:02:44 60:00 8388 3020 ims 3048 03/20/20 04:11:08 50:01 0 0 nxtgonpho APPLE 'PHONES no 3049 03/20/20 05:01:08 28:52 192 0 nxtgenpho APPLE 'PHONES no 3050 03/20/20 05:01:09 28:52 0 0 nxtgenpho APPLE 'PHONES no 3051 03/20/20 05:02:44 60:00 10036 3176 ims 3052 03/20/20 05:30:02 21:58 0 0 nxtgonpho APPLE 'PHONES ne 3053 03/20/20 05:51:59 14:46 192 0 nxtgonpho APPLE 'PHONES ne 3054 03/20/20 05:52:00 14:46 0 0 nxtgonpho APPLE 'PHONES ne 3055 03/20/20 06:02:44 60:00 16992 6140 ims 3056 03/20/20 06:06:46 60:00 0 0 nxtgonpho APPLE !PHONES ne 3057 03/20/20 07:02:44 60:00 7064 2788 ims 3058 03/20/20 07:06:46 8:54 0 0 nxtgenpho APPLE 'PHONES ne 3059 03/20/20 07:15:39 2:04 192 0 nxtgonpho APPLE !PHONES ne 3060 03/20/20 07:15:41 2:03 0 0 nxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 126 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171046 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343104 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tras ""s s AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn MEI II I MARE MODEL Date Time Up Dn (OTC) 3061 03/20/20 07:17:44 3:06 0 0 nxtgenpho APPLE 'PHONES ne 3062 03/20/20 07:20:49 3:21 192 0 nxtgenpho APPLE 'PHONES ne 3063 03/20/20 07:20:50 3:21 0 0 nxtgenpho APPLE 'PHONES ne 3064 03/20/20 07:24:11 34:08 192 0 nxtgenpho APPLE 'PHONES ne 3065 03/20/20 07:24:12 34:08 0 0 nxtgenpho APPLE 'PHONES ne 3066 03/20/20 07:58:20 54:41 0 0 nxtgenpho APPLE !PHONES ne 3067 03/20/20 08:02:44 60:00 8388 2928 ims 3068 03/20/20 08:53:00 15:29 192 0 nxtgenpho APPLE 'PHONES ne 3069 03/20/20 08:53:01 15:29 0 0 nxtgenpho APPLE 'PHONES ne 3070 03/20/20 09:02:44 60:00 7172 2912 ims 3071 03/20/20 09:08:30 8:35 192 0 nxtgenpho APPLE 'PHONES ne 3072 03/20/20 09:08:31 8:35 0 0 nxtgenpho APPLE !PHONES ne 3073 03/20/20 09:17:06 0:53 0 0 nxtgenpho APPLE !PHONES ne 3074 03/20/20 09:17:58 9:12 192 Onxtgonpho APPLE 'PHONES ne 3075 03/20/20 09:17:59 9:12 0 0 nxtgenpho APPLE !PHONES ne 3076 03/20/20 09:27:11 162:37 192 0 nxtgenpho APPLE 'PHONES ne 3077 03/20/20 09:27:12 60:00 0 0 nxtgenpho APPLE !PHONES ne 3078 03/20/20 10:02:44 60:00 10256 4236 ims 3079 03/20/20 10:27:12 60:00 0 0 nxtgenpho APPLE 'PHONES ne 3080 03/20/20 11:02:44 60:00 15016 4924 ims 3081 03/20/20 11:27:12 42:37 0 0 nxtgenpho APPLE 'PHONES ne 3082 03/20/20 12:02:44 60:00 6956 2896 ims 3083 03/20/20 12:09:48 9:26 192 0 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 127 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171C47 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343105 MOBILITY e s, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .a° AT&T ‘•- UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: IAN= Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ INSI MAKE MODEL Date Time Number Up Dn (UTC) 3084 03/20/20 12:09:50 9:25 0 0nactgonpho APPLE 'PHONES ne 3085 03/20/20 12:19:14 6:07 192 0nactgonpho APPLE 'PHONES ne 3086 03/20/20 12:19:15 6:07 0 0nactgonpho APPLE 'PHONES ne 3087 03/20/20 12:25:22 0:05 0 0nactgonpho APPLE 'PHONES ne 3088 03/20/20 12:25:38 40:55 0 0nactgonpho APPLE 'PHONES ne 3089 03/20/20 13:02:44 60:00 11580 4252 ims 3090 03/20/20 13:06:32 2:04 192 0nxtgonpho APPLE 'PHONES no 3091 03/20/20 13:06:34 2:03 0 0nxtgonpho APPLE 'PHONES no 3092 03/20/20 13:08:37 42:12 0 0nxtgonpho APPLE 'PHONES no 3093 03/20/20 13:50:48 2:21 192 0nxtgonpho APPLE 'PHONES no 3094 03/20/20 13:50:50 2:20 0 0nxtgonpho APPLE 'PHONES no 3095 03/20/20 13:53:10 21:26 0 0nxtgonpho APPLE 'PHONES no 3096 03/20/20 14:02:44 60:00 9784 3300 ism 3097 03/20/20 14:14:36 8:05 192 0nxtgonpho APPLE 'PHONES no 3098 03/20/20 14:14:37 8:05 0 0nxtgonpho APPLE 'PHONES no 3099 03/20/20 14:22:42 5:08 0 0nxtgonpho APPLE 'PHONES no 3100 03/20/20 14:27:49 18:33 192 0nmtgonpho APPLE 'PHONES no 3101 03/20/20 14:27:50 18:33 0 0nmtgonpho APPLE 'PHONES no 3102 03/20/20 14:46:23 5:23 0 0nmtgonpho APPLE 'PHONES no 3103 03/20/20 14:51:45 15:28 192 0nmtgonpho APPLE 'PHONES no 3104 03/20/20 14:51:46 15:28 0 0nmtgonpho APPLE 'PHONES no 3105 03/20/20 15:02:44 60:00 8668 4176 imp AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 128 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171048 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343106 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .a° AT&T ••- UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: dal= Item Conn. Conn. Originating ET Bytes Bytes Apn MINT TItOT MAKE MODEL Date Time Number Up Dn luTC) 3106 03/20/20 15:07:13 20:57 192 Onmtgonpho APPLE !PHONES no 3107 03/20/20 15:07:14 20:58 0 0 nxtgonpho APPLE !PHONES no 3108 03/20/20 15:28:12 9:32 0 0 nxtgonpho APPLE !PHONES no 3109 03/20/20 15:37:44 14:50 192 0 nxtgonpho APPLE !PHONES no 3110 03/20/20 15:37:45 14:50 0 0 nxtgonpho APPLE !PHONES ne 3111 03/20/20 15:52:36 11:36 0 0 nxtgonpho APPLE !PHONES ne 3112 03/20/20 16:02:44 60:00 18056 6404 ims 3113 03/20/20 16:04:11 2:04 192 0 nxtgonpho APPLE !PHONES ne 3114 03/20/20 16:04:12 2:04 0 0 nxtgonpho APPLE !PHONES ne 3115 03/20/20 16:06:16 0:34 0 0 nxtgonpho APPLE !PHONES ne 3116 03/20/20 16:06:49 8:17 192 Onxtgonpho APPLE !PHONES ne 3117 03/20/20 16:06:50 8:17 0 0 nxtgonpho APPLE !PHONES no 3118 03/20/20 16:15:07 7:04 0 0 nxtgonpho APPLE !PHONES no 3119 03/20/20 16:22:10 27:08 192 0 nxtgonpho APPLE !PHONES ne 3120 03/20/20 16:22:11 27:08 0 0 nxtgonpho APPLE !PHONES ne 3121 03/20/20 16:49:19 5:38 0 0 nxtgonpho APPLE !PHONES ne 3122 03/20/20 16:54:56 14:56 192 0 nxtgonpho APPLE !PHONES ne 3123 03/20/20 16:54:57 14:56 0 0 nxtgonpho APPLE !PHONES ne 3124 03/20/20 17:02:44 60:00 8744 4680 ims 3125 03/20/20 17:09:53 0:47 0 0 nxtgonpho APPLE !PHONES ne 3126 03/20/20 17:10:39 8:26 192 0 nxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 129 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171049 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343107 MOBILITY e• PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in / 1 4-00 AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn flax INSI MAKE MODEL Date Tame Number Up Dn (UTC) 3127 03/20/20 17:10:40 8:26 0 0 nxtgenpho APPLE 'PHONES ne 3128 03/20/20 17:19:06 3:40 0 0 nxtgenpho APPLE 'PHONES ne 3129 03/20/20 17:22:46 15:11 192 0 nxtgenpho APPLE 'PHONES ne 3130 03/20/20 17:22:47 15:11 0 0 nxtgonpho APPLE 'PHONES ne 3131 03/20/20 17:37:57 2:23 192 0 nxtgonpho APPLE 'PHONES ne 3132 03/20/20 17:37:58 2:23 0 0 nxtgonpho APPLE 'PHONES ne 3133 03/20/20 17:40:21 6:09 192 0 nxtgonpho APPLE 'PHONES ne 3134 03/20/20 17:40:22 6:09 0 0 nxtgonpho APPLE 'PHONES ne 3135 03/20/20 17:46:31 1:00 0 0 nxtgonpho APPLE 'PHONES ne 3136 03/20/20 17:47:30 8:23 192 0 nxtgenpho APPLE 'PHONES ne 3137 03/20/20 17:47:31 8:23 0 0 nxtgenpho APPLE 'PHONES ne 3138 03/20/20 17:55:54 44:08 0 0 nxtgonpho APPLE 'PHONES ne 3139 03/20/20 18:02:44 60:00 8156 3712 ims 3140 03/20/20 18:40:02 2:04 192 0 nxtgenpho APPLE 'PHONES ne 3141 03/20/20 18:40:03 2:04 0 0 nxtgenpho APPLE 'PHONES ne 3142 03/20/20 18:42:07 55:32 0 0 nxtgonpho APPLE 'PHONES ne 3143 03/20/20 19:02:44 60:00 16436 5228 ims 3144 03/20/20 19:37:38 8:36 192 0 nxtgenpho APPLE 'PHONES ne 3145 03/20/20 19:37:40 8:36 0 0 nxtgenpho APPLE 'PHONES ne 3146 03/20/20 19:46:15 6:04 192 0 nxtgenpho APPLE 'PHONES ne 3147 03/20/20 19:46:16 6:04 0 0 nxtgenpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 130 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171050 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343108 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .a° AT&T ‘•- OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INKS IMSI NAM MODEL Date Time Number Up Dn (OTC) 3148 03/20/20 19:52:20 9:41 0 0 nxtgenpho APPLE 'PHONES ne 3149 03/20/20 20:02:00 2:03 192 0 nxtgenpho APPLE 'PHONES ne 3150 03/20/20 20:02:01 2:03 0 0 nxtgenpho APPLE 'PHONES ne 3151 03/20/20 20:02:44 60:00 5072 1588 ims 3152 03/20/20 20:04:04 57:34 0 0 nxtgenpho APPLE 'PHONES ne 3153 03/20/20 20:36:24 1:34 7802 6302 ims APPLE 'PHONES 3154 03/20/20 20:37:58 60:00 13672 5576 ims APPLE 'PHONES 3155 03/20/20 21:01:37 13:48 192 Onmtgonpho APPLE 'PHONES ne 3156 03/20/20 21:01:38 13:48 0 0 nxtgenpho APPLE 'PHONES ne 3157 03/20/20 21:02:44 60:00 0 0 ims 3158 03/20/20 21:15:26 2:04 0 0 nxtgenpho APPLE 'PHONES ne 3159 03/20/20 21:17:30 2:10 192 0 nxtgenpho APPLE 'PHONES ne 3160 03/20/20 21:17:31 2:10 0 0 nxtgenpho APPLE 'PHONES ne 3161 03/20/20 21:19:41 0:05 0 0 nxtgenpho APPLE 'PHONES ne 3162 03/20/20 21:20:02 60:00 0 0 nxtgenpho APPLE 'PHONES ne 3163 03/20/20 21:37:58 60:00 8728 3020 ims APPLE 'PHONES 3164 03/20/20 22:02:44 60:00 0 0 ims 3165 03/20/20 22:20:02 60:00 0 0 nxtgenpho APPLE 'PHONES ne 3166 03/20/20 22:37:58 60:00 13768 4824 ims APPLE 'PHONES 3167 03/20/20 23:02:44 60:00 0 0 ims 3168 03/20/20 23:20:02 29:13 0 0 nxtgenpho APPLE 'PHONES ne 3169 03/20/20 23:37:58 60:00 8604 3128 ims APPLE 'PHONES 3170 03/20/20 23:49:14 7:42 192 Onmtgonpho APPLE 'PHONES ne 3171 03/20/20 23:49:15 7:42 0 0 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 131 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171051 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343109 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. el.AT&T ‘s Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn IMMIX INS! MAKE MODEL Date Time Number Up Dn (UTC) 3172 03/20/20 23:56:57 22:40 0 0 nmtgonpho APPLE !PHONES ne 3173 03/21/20 00:02:44 24:06 0 0 ims 3174 03/21/20 00:19:36 2:11 192 0 nmtgonpho APPLE !PHONES ne 3175 03/21/20 00:19:38 2:10 0 0 nmtgonpho APPLE !PHONES ne 3176 03/21/20 00:21:48 60:00 0 0 nmtgonpho APPLE !PHONES ne 3177 03/21/20 00:37:58 60:00 10036 3268 Las APPLE !PHONES 3178 03/21/20 01:21:48 36:26 0 0 nmtgonpho APPLE !PHONES ne 3179 03/21/20 01:37:58 60:00 13568 4752 Las APPLE !PHONES 3180 03/21/20 01:58:13 13:55 192 0 nmtgonpho APPLE !PHONES ne 3181 03/21/20 01:58:14 13:55 0 0 nmtgonpho APPLE !PHONES ne 3182 03/21/20 02:12:08 1:21 192 0 nmtgonpho APPLE !PHONES ne 3183 03/21/20 02:12:09 1:21 0 0 nmtgonpho APPLE !PHONES ne 3184 03/21/20 02:13:30 11:29 0 0 nmtgonpho APPLE !PHONES no 3185 03/21/20 02:24:59 4:09 0 0 nmtgonpho APPLE !PHONES no 3186 03/21/20 02:29:07 47:53 192 0 nmtgonpho APPLE !PHONES no 3187 03/21/20 02:29:08 47:53 0 0 nmtgonpho APPLE !PHONES no 3188 03/21/20 02:37:58 16:32 5072 1572 Las APPLE !PHONES 3189 03/21/20 02:54:03 22:57 6228 6736 Las APPLE !PHONES 3190 03/21/20 02:54:04 22:57 6668 6072 Las APPLE !PHONES 3191 03/21/20 02:54:30 60:00 16504 9140 Las 3192 03/21/20 03:17:01 20:00 192 Onmtgonpho APPLE !PHONES ne 3193 03/21/20 03:17:02 31:06 0 0 nmtgonpho APPLE !PHONES ne 3194 03/21/20 03:48:08 8:34 0 0 nmtgonpho APPLE !PHONES ne 3195 03/21/20 03:54:30 60:00 10036 3392 Las AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 132 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171052 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343110 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Si= Item Conn. Conn. Originating ET Bytes Bytes Apn MEI IMSI MAKE MODEL Date Time Numbor Up Dn (OTC) 3196 03/21/20 03:56:41 97:16 192 Onmtgonpho APPLE !PHONES no 3197 03/21/20 03:56:42 60:00 0 0 nxtgenpho APPLE IPHOME8 ne 3198 03/21/20 04:54:30 60:00 9928 3268 Less 3199 03/21/20 04:56:42 37:16 0 0 nxtgonpho APPLE !PHONES ne 3200 03/21/20 05:33:58 0:06 0 0 nxtgonpho APPLE 'PHONES ne 3201 03/21/20 05:49:12 3:35 192 0 nxtgonpho APPLE 'PHONES ne 3202 03/21/20 05:49:13 3:35 0 0 nxtgenpho APPLE 'PHONES no 3203 03/21/20 05:52:48 4:43 0 0 nxtgonpho APPLE 'PHONES no 3204 03/21/20 05:54:30 60:00 8496 3128 Less 3205 03/21/20 05:57:30 13:55 192 0 nxtgonpho APPLE 'PHONES no 3206 03/21/20 05:57:31 13:55 0 0 nxtgonpho APPLE 'PHONES no 3207 03/21/20 06:11:26 24:31 0 0 nxtgonpho APPLE !PHONES no 3208 03/21/20 06:35:56 8:15 192 0 nxtgonpho APPLE !PHONES no 3209 03/21/20 06:35:57 8:15 0 0 nxtgonpho APPLE !PHONES no 3210 03/21/20 06:44:12 14:22 192 0 nxtgonpho APPLE 'PHONES no 3211 03/21/20 06:44:13 14:22 0 0 nxtgonpho APPLE 'PHONES no 3212 03/21/20 06:54:30 60:00 10828 4484 Less 3213 03/21/20 06:58:35 4:51 0 0 nxtgonpho APPLE 'PHONES no 3214 03/21/20 07:03:26 4:01 0 0 nxtgenpho APPLE 'PHONES no 3215 03/21/20 07:07:26 9:27 192 0 nxtgonpho APPLE 'PHONES no 3216 03/21/20 07:07:27 9:27 0 0 nxtgonpho APPLE 'PHONES no 3217 03/21/20 07:16:54 1:37 0 0 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 133 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171053 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343111 MOBILITY ce. ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating AT Bytes Bytes Apn DEBI IMSI MAKE MODEL Date Time Number Up Dn (OTC) 3218 03/21/20 07:18:31 57:10 192 0 nxtgonpho APPLE 'PHONES no 3219 03/21/20 07:18:32 57:10 0 0 nxtgonpho APPLE 'PHONES no 3220 03/21/20 07:54:30 60:00 12244 4860 isms 3221 03/21/20 08:15:42 30:53 0 0 nxtgonpho APPLE 'PHONES no 3222 03/21/20 08:46:35 8:02 0 0 nxtgonpho APPLE 'PHONES no 3223 03/21/20 08:54:30 60:00 7172 3128 ims 3224 03/21/20 08:54:36 3:11 192 0 nxtgonpho APPLE 'PHONES no 3225 03/21/20 08:54:37 3:11 0 0 nxtgonpho APPLE 'PHONES no 3226 03/21/20 08:57:48 28:00 0 0 nxtgonpho APPLE 'PHONES no 3227 03/21/20 09:25:47 3:13 192 Onxtgonpho APPLE 'PHONES no 3228 03/21/20 09:25:48 3:13 0 0 nxtgonpho APPLE !PHONES no 3229 03/21/20 09:29:01 21:00 0 0 nxtgenpho APPLE 'PHONES no 3230 03/21/20 09:50:01 2:51 0 0 nxtgonpho APPLE 'PHONES no 3231 03/21/20 09:52:52 0:06 0 0 nxtgonpho APPLE 'PHONES no 3232 03/21/20 09:54:30 60:00 13908 4996 ims 3233 03/21/20 09:54:31 7:58 0 0 nxtgonpho APPLE 'PHONES no 3234 03/21/20 10:02:28 1:13 192 Onxtgonpho APPLE 'PHONES no 3235 03/21/20 10:02:29 1:13 0 0 nxtgonpho APPLE !PHONES no 3236 03/21/20 10:03:42 3:48 0 0 nxtgonpho APPLE 'PHONES no 3237 03/21/20 10:07:31 60:00 0 0 nxtgenpho APPLE 'PHONES no 3238 03/21/20 10:54:30 60:00 10036 3392 ims 3239 03/21/20 11:07:31 2:38 0 0 nxtgenpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 134 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171054 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343112 MOBILITY alb ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in / ... 1 44 '7.1 s• AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn L@Z IMSI MAKE MODEL Date Tim Number Up Dn (OTC) 3240 03/21/20 11:10:09 1:25 0 0 nxtgonpho APPLE 'PHONES no 3241 03/21/20 11:11:33 2:44 192 0 nxtgenpho APPLE 'PHONES no 3242 03/21/20 11:11:34 2:44 0 0 nxtgenpho APPLE 'PHONES no 3243 03/21/20 11:14:18 19:09 0 0 nxtgonpho APPLE 'PHONES no 3244 03/21/20 11:33:28 14:25 0 0 nxtgonpho APPLE 'PHONES ne 3245 03/21/20 11:47:53 26:28 0 0 nxtgenpho APPLE 'PHONES ne 3246 03/21/20 11:54:30 60:00 8728 3052 isms 3247 03/21/20 12:14:21 10:50 0 0 nxtgenpho APPLE 'PHONES ne 3248 03/21/20 12:25:11 16:19 0 0 nxtgenpho APPLE 'PHONES ne 3249 03/21/20 12:41:30 0:44 192 0 nxtgenpho APPLE 'PHONES ne 3250 03/21/20 12:41:31 0:44 0 0 nxtgenpho APPLE 'PHONES ne 3251 03/21/20 12:42:15 29:50 0 0 nxtgenpho APPLE 'PHONES ne 3252 03/21/20 12:54:30 60:00 12028 4640 isms 3253 03/21/20 13:12:04 2:03 192 0 nxtgenpho APPLE 'PHONES ne 3254 03/21/20 13:12:05 2:03 0 0 nxtgenpho APPLE 'PHONES ne 3255 03/21/20 13:14:08 60:00 0 0 nxtgenpho APPLE 'PHONES ne 3256 03/21/20 13:54:30 60:00 8496 3036 isms 3257 03/21/20 14:14:08 14:56 0 0 nxtgonpho APPLE 'PHONES no 3258 03/21/20 14:29:03 2:04 192 0 nxtgonpho APPLE 'PHONES no 3259 03/21/20 14:29:04 2:04 0 0 nxtgonpho APPLE 'PHONES ne 3260 03/21/20 14:31:08 60:00 0 0 nxtgenpho APPLE 'PHONES ne 3261 03/21/20 14:54:30 60:00 8728 3160 isms AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 135 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171055 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343113 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .`•-is AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Sidi= Item Conn. Conn. Originating ET Bytes Bytes Apn EBBS IM9I MAKE MODEL Date Time Number Up Dn (OTC) 3262 03/21/20 15:31:08 53:21 0 Onmtgonpho APPLE !PHONES ne 3263 03/21/20 15:54:30 60:00 15496 5476 ims 3264 03/21/20 16:24:29 6:53 0 0 nxtgenpho APPLE !PHONES ne 3265 03/21/20 16:31:22 34:11 0 0 nxtgenpho APPLE !PHONES ne 3266 03/21/20 16:54:30 60:00 7188 2804 ims 3267 03/21/20 17:05:32 12:47 192 Onmtgonpho APPLE !PHONES no 3268 03/21/20 17:05:33 12:47 0 0 nxtgonpho APPLE !PHONES no 3269 03/21/20 17:18:20 58:17 0 0 nxtgonpho APPLE !PHONES no 3270 03/21/20 17:54:30 60:00 10252 3408 ims 3271 03/21/20 18:22:28 42:10 192 0 nxtgonpho APPLE !PHONES ne 3272 03/21/20 18:22:29 42:10 0 0 nxtgonpho APPLE !PHONES ne 3273 03/21/20 18:54:30 60:00 11796 4484 ims 3274 03/21/20 19:04:38 4:18 192 0 nxtgonpho APPLE !PHONES ne 3275 03/21/20 19:04:40 4:17 0 0 nxtgonpho APPLE !PHONES ne 3276 03/21/20 19:08:57 60:00 0 0 nxtgenpho APPLE !PHONES no 3277 03/21/20 19:54:30 60:00 8496 3144 ims 3278 03/21/20 20:08:57 16:46 0 0 nxtgenpho APPLE !PHONES no 3279 03/21/20 20:25:42 37:54 192 0 nxtgenpho APPLE !PHONES no 3280 03/21/20 20:25:43 37:54 0 0 nxtgenpho APPLE !PHONES no 3281 03/21/20 20:54:30 60:00 13460 4624 ims 3282 03/21/20 21:03:37 60:00 0 0 nxtgonpho APPLE !PHONES no 3283 03/21/20 21:54:30 60:00 10252 3300 ims 3284 03/21/20 22:03:37 60:00 0 0 nxtgonpho APPLE !PHONES no 3285 03/21/20 22:54:30 46:10 3440 1464 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 136 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171056 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343114 MOBILITY dro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn EMI II I MAKE MODEL Date Time Number Up Dn (UTC) 3286 03/21/20 23:03:37 17:19 0 0 nxtgonpho APPLE 'PHONES ne 3287 03/21/20 23:20:55 2:03 192 0 nxtgonpho APPLE 'PHONES ne 3288 03/21/20 23:20:56 2:03 0 0 nxtgonpho APPLE 'PHONES ne 3289 03/21/20 23:22:59 60:00 0 0 nxtgonpho APPLE 'PHONES ne 3290 03/21/20 23:40:40 3:35 6668 5859 imp APPLE 'PHONES 3291 03/21/20 23:40:40 3:35 6604 5859 imp APPLE 'PHONES 3292 03/21/20 23:44:15 60:00 13892 4716 imp APPLE 'PHONES 3293 03/22/20 00:22:59 7:07 0 0 nxtgonpho APPLE 'PHONES ne 3294 03/22/20 00:30:05 2:03 192 0 nxtgonpho APPLE 'PHONES ne 3295 03/22/20 00:30:06 2:03 0 0 nxtgonpho APPLE 'PHONES ne 3296 03/22/20 00:32:09 18:47 0 0 nxtgonpho APPLE 'PHONES ne 3297 03/22/20 00:44:15 60:00 6848 2788 imp APPLE 'PHONES 3298 03/22/20 00:50:55 8:14 192 0nxtgonpho APPLE 'PHONES ne 3299 03/22/20 00:50:56 8:14 0 0 nxtgonpho APPLE 'PHONES ne 3300 03/22/20 00:59:10 1:16 0 0 nxtgonpho APPLE 'PHONES ne 3301 03/22/20 01:00:25 0:57 192 0 nxtgonpho APPLE 'PHONES ne 3302 03/22/20 01:00:26 0:57 0 0 nxtgonpho APPLE 'PHONES ne 3303 03/22/20 01:01:23 4:58 0 0 nxtgonpho APPLE 'PHONES ne 3304 03/22/20 01:06:20 13:22 192 0 nxtgonpho APPLE 'PHONES ne 3305 03/22/20 01:06:21 13:22 0 0 nxtgonpho APPLE 'PHONES ne 3306 03/22/20 01:19:43 2:02 0 0 nxtgonpho APPLE 'PHONES ne 3307 03/22/20 01:21:44 2:11 192 0 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 137 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171057 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343115 MOBILITY c .o PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .a# AT&T ‘•- UTC. Run pato: 06/17/2020 Run Time: Data Usage For: MS= Item Conn. Conn. Originating ET Bytes Bytes Apn MERE IM9I MAKE MODEL Date Time Number Up Dn (OTC) 3308 03/22/20 01:21:45 2:11 0 Onmtgonpho APPLE !PHONES ne 3309 03/22/20 01:23:56 0:44 0 0 nxtgenpho APPLE !PHONES ne 3310 03/22/20 01:24:39 2:04 192 0 nxtgenpho APPLE !PHONES ne 3311 03/22/20 01:24:41 2:03 0 0 nxtgenpho APPLE !PHONES ne 3312 03/22/20 01:26:44 0:35 0 0 nxtgenpho APPLE !PHONES ne 3313 03/22/20 01:27:19 2:03 192 0 nxtgenpho APPLE !PHONES ne 3314 03/22/20 01:27:20 2:03 0 0 nxtgenpho APPLE !PHONES no 3315 03/22/20 01:29:23 60:00 0 0 nxtgonpho APPLE !PHONES no 3316 03/22/20 01:44:15 32:14 5180 1804 Las APPLE !PHONES 3317 03/22/20 02:11:05 60:00 11882 8628 Las APPLE !PHONES 3318 03/22/20 02:29:23 60:00 0 0 nxtgonpho APPLE !PHONES no 3319 03/22/20 03:11:05 47:00 2596 1324 Las APPLE !PHONES 3320 03/22/20 03:29:23 60:00 0 0 nxtgenpho APPLE !PHONES ne 3321 03/22/20 03:58:05 60:00 11888 4220 Las APPLE !PHONES 3322 03/22/20 04:29:23 60:00 0 0 nxtgenpho APPLE !PHONES ne 3323 03/22/20 04:58:05 60:00 8712 3020 Las APPLE !PHONES 3324 03/22/20 05:29:23 0:01 0 0 nxtgenpho APPLE !PHONES ne 3325 03/22/20 05:29:27 60:00 0 0 nxtgenpho APPLE !PHONES ne 3326 03/22/20 05:58:05 60:00 6956 2648 Las APPLE !PHONES 3327 03/22/20 06:29:27 60:00 0 0 nxtgonpho APPLE !PHONES no 3328 03/22/20 06:58:05 60:00 13228 4520 Las APPLE !PHONES 3329 03/22/20 07:29:27 60:00 0 0 nxtgonpho APPLE !PHONES no 3330 03/22/20 07:58:05 60:00 8496 3004 Las APPLE !PHONES 3331 03/22/20 08:29:27 60:00 0 0 nxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 138 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171058 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343116 MOBILITY e to ..020 AT&T has queried AT&T has queried for records for records from 03/01/2020 12:00:00am using Eastern Time Zone. to 06/15/2020 11:59:59pm AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating CT Bytos Bytes Apn L@I IIS! MAKS MODEL Date Time Number Up Dn (UTC) 3332 03/22/20 08:58:05 60:00 10488 4312 ism APPLE !PEONES 3333 03/22/20 09:29:27 0:01 0 Onxtgonpho APPLE !PEONES ne 3334 03/22/20 09:29:31 60:00 0 0 mactgonpho APPLE !PEONES no 3335 03/22/20 09:58:05 60:00 6956 2880 ism APPLE 'PHONES 3336 03/22/20 10:29:31 60:00 0 0 nxtgonpho APPLE IPHONE8 ne 3337 03/22/20 10:58:05 60:00 6848 2540 ism APPLE IPHONE8 3338 03/22/20 11:29:31 60:00 0 0 nxtgonpho APPLE 'PHONES ne 3339 03/22/20 11:58:05 60:00 13696 5472 ism APPLE 'PHONES 3340 03/22/20 12:29:31 2:36 0 Onmtgonpho APPLE 'PHONES no 3341 03/22/20 12:32:07 41:03 0 Onactgonpho APPLE 'PHONES no 3342 03/22/20 12:58:05 60:00 8388 3004 ism APPLE 'PHONES 3343 03/22/20 13:13:09 2:21 192 Onxtgonpho APPLE 'PHONES ne 3344 03/22/20 13:13:11 2:20 0 0 nxtgonpho APPLE 'PHONES ne 3345 03/22/20 13:15:31 6:03 192 Onxtgonpho APPLE 'PHONES ne 3346 03/22/20 13:15:32 6:03 0 0 nxtgonpho APPLE 'PHONES no 3347 03/22/20 13:21:35 32:01 0 Onactgonpho APPLE 'PHONES no 3348 03/22/20 13:53:36 0:03 0 Onactgonpho APPLE !PHONES no 3349 03/22/20 13:53:39 58:11 0 Onactgonpho APPLE !PHONES no 3350 03/22/20 13:58:05 60:00 10036 3176 ism APPLE !PHONES 3351 03/22/20 14:54:13 60:00 0 Onactgonpho APPLE !PHONES no 3352 03/22/20 14:58:05 60:00 9912 3020 ism APPLE !PHONES 3353 03/22/20 15:54:13 60:00 0 Onmtgonpho APPLE !PHONES ne 3354 03/22/20 15:58:05 60:00 13352 4576 ism APPLE !PHONES 3355 03/22/20 16:54:13 60:00 0 Onxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 139 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171059 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343117 MOBILITY e s, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ‘•-is• AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn IN= II I MAKE MODEL Date Time Number Up Dn MC/ 3356 03/22/20 16:58:05 60:00 6956 2756 ims APPLE 'PHONES 3357 03/22/20 17:54:13 39:58 0 Onxtgonpho APPLE !PHONES ne 3358 03/22/20 17:58:05 60:00 11812 4720 ims APPLE !PHONES 3359 03/22/20 18:34:10 0:42 192 Onxtgonpho APPLE !PHONES ne 3360 03/22/20 18:34:11 0:42 0 0 nxtgenpho APPLE 'PHONES ne 3361 03/22/20 18:34:53 3:14 0 0 nxtgenpho APPLE !PHONES ne 3362 03/22/20 18:38:06 23:03 192 0 nxtgenpho APPLE 'PHONES ne 3363 03/22/20 18:38:07 23:04 0 0 nxtgenpho APPLE 'PHONES ne 3364 03/22/20 18:58:05 60:00 15020 4716 ims APPLE !PHONES 3365 03/22/20 19:01:11 1:37 0 0 nxtgenpho APPLE 'PHONES ne 3366 03/22/20 19:02:47 12:30 192 0 nxtgenpho APPLE !PHONES ne 3367 03/22/20 19:02:48 12:30 0 0 nxtgenpho APPLE 'PHONES ne 3368 03/22/20 19:15:18 44:20 0 0 nxtgenpho APPLE !PHONES ne 3369 03/22/20 19:58:05 60:00 10036 3144 ims APPLE !PHONES 3370 03/22/20 19:59:37 2:10 192 Onxtgonpho APPLE !PHONES ne 3371 03/22/20 19:59:39 2:09 0 0 nxtgenpho APPLE 'PHONES ne 3372 03/22/20 20:01:48 9:18 0 0 nxtgenpho APPLE !PHONES ne 3373 03/22/20 20:11:05 1:23 192 0 nxtgenpho APPLE !PHONES ne 3374 03/22/20 20:11:06 1:23 0 0 nxtgenpho APPLE 'PHONES ne 3375 03/22/20 20:12:28 9:21 192 0 nxtgenpho APPLE 'PHONES ne 3376 03/22/20 20:12:29 9:21 0 0 nxtgenpho APPLE 'PHONES ne 3377 03/22/20 20:21:49 6:09 192 0 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 140 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171060 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343118 MOBILITY cee ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn EBB! IASI MAKE MODEL Date Time Number Up Dn (UTC) 3378 03/22/20 20:21:50 6:09 0 0 nxtgonpho APPLE 'PHONES no 3379 03/22/20 20:27:59 17:03 0 0 nxtgonpho APPLE 'PHONES no 3380 03/22/20 20:45:01 7:26 192 0 nxtgenpho APPLE 'PHONES no 3381 03/22/20 20:45:02 7:27 0 0 nxtgonpho APPLE 'PHONES no 3382 03/22/20 20:52:29 14:32 0 0 nxtgonpho APPLE 'PHONES no 3383 03/22/20 20:58:05 18:40 14120 3456 ims APPLE 'PHONES 3384 03/22/20 21:07:00 9:46 192 0 nxtgonpho APPLE 'PHONES no 3385 03/22/20 21:07:01 9:46 0 0 nxtgonpho APPLE 'PHONES no 3386 03/22/20 21:16:47 11:17 0 0 nxtgonpho APPLE 'PHONES no 3387 03/22/20 21:16:50 0:03 0 0 ims APPLE 'PHONES 3388 03/22/20 21:16:59 60:00 21488 9906 ims 3389 03/22/20 21:28:03 4:51 192 0 nxtgonpho APPLE 'PHONES ne 3390 03/22/20 21:28:05 4:50 0 0 nxtgenpho APPLE 'PHONES no 3391 03/22/20 21:32:55 3:36 0 0 nxtgonpho APPLE 'PHONES no 3392 03/22/20 21:36:31 2:03 192 0 nxtgonpho APPLE 'PHONES no 3393 03/22/20 21:36:32 2:03 0 0 nxtgonpho APPLE 'PHONES ne 3394 03/22/20 21:38:35 60:00 0 0 nxtgonpho APPLE 'PHONES ne 3395 03/22/20 22:16:59 60:00 6848 2772 ims 3396 03/22/20 22:38:35 60:00 0 0 nxtgenpho APPLE 'PHONES no 3397 03/22/20 23:16:59 60:00 7064 2664 ims 3398 03/22/20 23:38:35 48:53 0 0 nxtgenpho APPLE 'PHONES no 3399 03/23/20 00:16:59 60:00 7388 2928 ims 3400 03/23/20 00:27:27 2:17 192 Onxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 141 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171061 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343119 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .a# AT&T ‘•- OTC. Run Data: 06/17/2020 Run Time: Data Usage For: MS= Item Conn. Conn. Originating ET Bytes Bytes Apn DOLT INSI MAKE MODEL Date T1100 Number Up Dn (OTC) 3401 03/23/20 00:27:29 2:16 0 Onmtgonpho APPLE !PHONES ne 3402 03/23/20 00:29:45 6:04 192 0 nxtgenpho APPLE !PHONES ne 3403 03/23/20 00:29:46 6:04 0 0 nxtgenpho APPLE !PHONES ne 3404 03/23/20 00:35:50 2:09 0 0 nxtgenpho APPLE !PHONES ne 3405 03/23/20 00:37:58 2:04 192 0 nxtgenpho APPLE !PHONES ne 3406 03/23/20 00:38:00 2:04 0 0 nxtgenpho APPLE !PHONES ne 3407 03/23/20 00:40:03 0:50 0 0 nxtgenpho APPLE !PHONES ne 3408 03/23/20 00:40:52 2:03 192 0 nxtgenpho APPLE !PHONES ne 3409 03/23/20 00:40:53 2:03 0 0 nxtgenpho APPLE !PHONES ne 3410 03/23/20 00:42:56 28:33 0 0 nxtgenpho APPLE !PHONES ne 3411 03/23/20 01:11:28 2:03 192 0 nxtgenpho APPLE !PHONES ne 3412 03/23/20 01:11:29 2:03 0 0 nxtgenpho APPLE !PHONES ne 3413 03/23/20 01:13:32 9:15 0 0 nxtgenpho APPLE !PHONES ne 3414 03/23/20 01:16:59 60:00 7280 2912 ims 3415 03/23/20 01:22:47 9:04 192 0 nxtgenpho APPLE !PHONES ne 3416 03/23/20 01:22:48 9:04 0 0 nxtgenpho APPLE !PHONES ne 3417 03/23/20 01:31:52 13:32 0 0 nxtgenpho APPLE !PHONES ne 3418 03/23/20 01:45:23 2:04 192 0 nxtgenpho APPLE !PHONES ne 3419 03/23/20 01:45:24 2:04 0 0 nxtgenpho APPLE !PHONES ne 3420 03/23/20 01:47:28 47:29 0 0 nxtgenpho APPLE !PHONES ne 3421 03/23/20 01:56:45 0:00 0 0 ims APPLE !PHONES 3422 03/23/20 01:56:56 60:00 18301 9608 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 142 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171062 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343120 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: MS= Item Conn. Conn. Originating ET Bytes Bytes Apn MOLT INS! NAPS *Mel. Date Time Number Up Dn (UTC) 3423 03/23/20 02:16:59 60:00 0 0 ims 3424 03/23/20 02:34:56 2:04 192 0 ructgonpho APPLE 'PEONES no 3425 03/23/20 02:34:57 2:04 0 0 nottgonpho APPLE 'PEONES no 3426 03/23/20 02:37:01 7:01 0 0 nottgonpho APPLE !PHONES no 3427 03/23/20 02:44:01 2:03 192 0 nottgonpho APPLE !PHONES no 3428 03/23/20 02:44:02 2:03 0 0 ructgonpho APPLE !PHONES no 3429 03/23/20 02:46:05 60:00 0 0 ructgonpho APPLE !PHONES no 3430 03/23/20 02:56:56 60:00 8496 3500 ims 3431 03/23/20 03:16:59 60:00 0 0 ims 3432 03/23/20 03:46:05 17:46 0 0 ructgonpho APPLE !PHONES no 3433 03/23/20 03:56:56 60:00 21140 10312 ims 3434 03/23/20 04:01:14 0:23 0 1749 ims 3435 03/23/20 04:03:50 20:27 192 0 ructgonpho APPLE !PHONES no 3436 03/23/20 04:03:51 20:27 0 0 ructgonpho APPLE !PHONES no 3437 03/23/20 04:16:59 60:00 0 0 ims 3438 03/23/20 04:24:18 3:45 0 0 nottgonpho APPLE !PHONES no 3439 03/23/20 04:28:03 8:33 192 0 nottgonpho APPLE IPHONE8 no 3440 03/23/20 04:28:04 8:33 0 0 nottgonpho APPLE IPHONE8 no 3441 03/23/20 04:36:37 0:05 0 0 ructgonpho APPLE IPHONE8 no 3442 03/23/20 04:36:56 60:00 0 0 ructgonpho APPLE IPHONE8 no 3443 03/23/20 04:56:56 60:00 8512 3036 ims 3444 03/23/20 05:16:59 25:30 0 0 ims 3445 03/23/20 05:36:56 60:00 0 0 ructgonpho APPLE IPHONE8 no 3446 03/23/20 05:56:56 60:00 10380 4144 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 143 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGAt00171063 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343121 MOBILITY / 1 44e. ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in e# AT&T ‘• UTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Si= Item Conn. Conn. Originating ET Bytos Bytes Apn MAX IASI NAM MODEL Date Timo Nomber Up Dn (OTC) 3447 03/23/20 06:36:56 60:00 0 0 nxtgenpho APPLE !PHONES no 3448 03/23/20 06:56:56 60:00 10380 4036 ims 3449 03/23/20 07:36:56 60:00 0 0 nxtgenpho APPLE !PHONES no 3450 03/23/20 07:56:56 60:00 6848 2880 ims 3451 03/23/20 08:36:56 0:01 0 0 nxtgenpho APPLE !PHONES no 3452 03/23/20 08:36:58 60:00 0 0 nxtgenpho APPLE !PHONES ne 3453 03/23/20 08:56:56 60:00 11812 4376 ims 3454 03/23/20 09:36:58 60:00 0 0 nxtgenpho APPLE !PHONES no 3455 03/23/20 09:56:56 60:00 7064 2912 ims 3456 03/23/20 10:36:58 60:00 0 0 nxtgenpho APPLE !PHONES no 3457 03/23/20 10:56:56 60:00 6848 2788 ims 3458 03/23/20 11:36:58 60:00 0 0 nxtgenpho APPLE !PHONES no 3459 03/23/20 11:56:56 60:00 15344 5732 ims 3460 03/23/20 12:36:58 0:01 0 0 nxtgenpho APPLE !PHONES ne 3461 03/23/20 12:37:01 60:00 0 0 nxtgenpho APPLE !PHONES ne 3462 03/23/20 12:56:56 60:00 6848 2788 ims 3463 03/23/20 13:37:01 60:00 0 0 nxtgenpho APPLE !PHONES ne 3464 03/23/20 13:56:56 42:04 4964 1588 ims 3465 03/23/20 14:22:56 1:03 6852 6179 ims APPLE !PHONES 3466 03/23/20 14:23:59 15:01 5180 1712 ims APPLE !PHONES 3467 03/23/20 14:37:01 60:00 0 0 nxtgenpho APPLE !PHONES ne 3468 03/23/20 14:39:00 15:49 6674 5980 ims APPLE !PHONES 3469 03/23/20 14:54:49 46:05 8404 3988 ims APPLE !PHONES 3470 03/23/20 15:37:01 60:00 0 0 nxtgenpho APPLE !PHONES ne 3471 03/23/20 15:40:54 60:00 11840 8718 ims APPLE !PHONES 3472 03/23/20 16:37:01 0:01 0 0 nxtgenpho APPLE !PHONES ne 3473 03/23/20 16:40:54 4:01 0 0 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 144 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171064 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343122 MOBILITY e s, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Si= Item Conn. Conn. Originating ET Bytes Bytes Apn EMBI INSI MAKE MODEL Date Time Number Up Dn (DTC) 3474 03/23/20 16:44:55 55:42 8852 3468 ims APPLE !PHONES 3475 03/23/20 17:28:56 7:41 0 Onmtgonphe APPLE !PHONES ne 3476 03/23/20 17:36:37 60:00 0 0 nmtgonphe APPLE !PHONES ne 3477 03/23/20 17:36:42 5:20 8156 6944 ims APPLE !PHONES 3478 03/23/20 17:42:02 60:00 13584 4608 ims APPLE !PHONES 3479 03/23/20 18:36:37 19:50 0 Onmtgonphe APPLE !PHONES ne 3480 03/23/20 18:42:02 14:26 124 372 ims APPLE !PHONES 3481 03/23/20 18:56:26 4:33 192 Onmtgonphe APPLE !PHONES ne 3482 03/23/20 18:56:27 4:32 6184 6738 ims APPLE !PHONES 3483 03/23/20 18:56:27 4:33 0 Onmtgonphe APPLE !PHONES ne 3484 03/23/20 18:56:28 4:32 6670 5920 ims APPLE !PHONES 3485 03/23/20 19:01:00 22:42 0 Onmtgonphe APPLE !PHONES ne 3486 03/23/20 19:01:23 1:26 6646 5904 ims APPLE !PHONES 3487 03/23/20 19:02:49 11:48 3532 1432 ims APPLE !PHONES 3488 03/23/20 19:14:37 9:05 9586 6195 ims APPLE !PHONES 3489 03/23/20 19:23:42 2:51 192 Onmtgonphe APPLE !PHONES ne 3490 03/23/20 19:23:43 2:51 0 0 nmtgonphe APPLE !PHONES ne 3491 03/23/20 19:26:34 6:22 0 0 nmtgonphe APPLE !PHONES ne 3492 03/23/20 19:32:55 2:23 192 0 nmtgonphe APPLE !PHONES ne 3493 03/23/20 19:32:56 2:23 0 0 nxtgenpho APPLE !PHONES ne 3494 03/23/20 19:35:19 3:26 0 0 nmtgonpho APPLE !PHONES ne 3495 03/23/20 19:38:44 1:10 192 0 nmtgonpho APPLE !PHONES ne 3496 03/23/20 19:38:45 1:10 0 0 nmtgonpho APPLE !PHONES ne 3497 03/23/20 19:39:55 10:36 0 0 nmtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 145 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171065 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343123 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:58:68pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytos Bytes Apn nizx INSI MAKE MODEL Date Time Number Up Dn (OTC) 3498 03/23/20 19:50:30 0:23 192 0 nxtgenpho APPLE 'PHONES no 3499 03/23/20 19:50:32 0:22 0 0 nxtgenpho APPLE 'PHONES no 3500 03/23/20 19:50:54 0:58 0 0 nxtgenpho APPLE 'PHONES no 3501 03/23/20 19:51:51 8:53 192 0 nxtgenpho APPLE 'PHONES no 3502 03/23/20 19:51:52 8:54 0 0 nxtgonpho APPLE 'PHONES no 3503 03/23/20 20:00:45 0:06 0 0 nxtgonpho APPLE 'PHONES no 3504 03/23/20 20:01:02 5:27 0 0 nxtgonpho APPLE 'PHONES no 3505 03/23/20 20:04:58 12:20 9917 6442 ims 3506 03/23/20 20:06:28 2:04 192 0 nxtgonpho APPLE 'PHONES no 3507 03/23/20 20:06:29 2:04 0 0 nxtgonpho APPLE 'PHONES no 3508 03/23/20 20:08:33 9:55 0 0 nxtgonpho APPLE 'PHONES no 3509 03/23/20 20:15:42 2:46 6690 5980 ims APPLE 'PHONES 3510 03/23/20 20:18:27 2:04 192 0 nxtgonpho APPLE 'PHONES no 3511 03/23/20 20:18:29 2:03 0 0 nxtgonpho APPLE 'PHONES no 3512 03/23/20 20:20:05 0:26 6246 6666 ims APPLE 'PHONES 3513 03/23/20 20:20:06 0:26 6666 5982 ims APPLE 'PHONES 3514 03/23/20 20:20:32 2:58 0 0 nxtgonpho APPLE 'PHONES no 3515 03/23/20 20:20:38 60:00 18680 11564 ims 3516 03/23/20 20:23:30 21:03 192 0 nxtgonpho APPLE 'PHONES no 3517 03/23/20 20:23:31 21:04 0 0 nxtgonpho APPLE 'PHONES no 3518 03/23/20 20:44:34 60:00 0 0 nxtgonpho APPLE 'PHONES no 3519 03/23/20 21:18:04 27:23 6648 5998 ims APPLE 'PHONES 3520 03/23/20 21:20:38 2:51 0 0 ims 3521 03/23/20 21:44:34 0:53 0 Onxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 146 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171066 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343124 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .ai. AT&T ‘•- UTZ. Run Data: 06/17/2020 Run Time: Data Usage For: Siam Item Conn. Conn. Originating ET Bytes Bytes Apn flat lent MAKE MODEL Date Tame Number Up Dn (OTC) 3522 03/23/20 21:45:26 2:04 192 0nxtgonpho APPLE !PHONES no 3523 03/23/20 21:45:27 2:04 0 0 nxtgonpho APPLE !PHONES no 3524 03/23/20 21:47:31 1:36 0 0 nxtgonpho APPLE !PHONES no 3525 03/23/20 21:48:32 0:35 7332 6052 ims APPLE !PHONES 3526 03/23/20 21:49:06 2:17 192 0 nstgenpho APPLE !PHONES no 3527 03/23/20 21:49:08 2:16 0 0 nxtgonpho APPLE !PHONES no 3528 03/23/20 21:51:24 6:04 192 0 nxtgonpho APPLE !PHONES no 3529 03/23/20 21:51:25 6:04 0 0 nxtgonpho APPLE !PHONES no 3530 03/23/20 21:53:02 22:28 11369 6710 ims 3531 03/23/20 21:57:29 3:45 0 0 nxtgonpho APPLE !PHONES no 3532 03/23/20 22:01:13 12:50 192 0 nxtgonpho APPLE !PHONES no 3533 03/23/20 22:01:14 12:51 0 0 nxtgonpho APPLE !PHONES no 3534 03/23/20 22:10:08 3:55 7160 6848 ims APPLE !PHONES 3535 03/23/20 22:10:10 3:55 6740 6896 ims APPLE !PHONES 3536 03/23/20 22:14:05 1:26 0 0 nxtgonpho APPLE !PHONES ne 3537 03/23/20 22:15:30 8:28 192 0 nxtgonpho APPLE !PHONES no 3538 03/23/20 22:15:31 8:28 0 0 nxtgonpho APPLE !PHONES no 3539 03/23/20 22:16:08 7:50 8234 6882 ims APPLE !PHONES 3540 03/23/20 22:16:09 7:50 6882 7970 ims APPLE !PHONES 3541 03/23/20 22:21:24 8:15 13552 7570 ims 3542 03/23/20 22:23:59 13:41 0 0nxtgonpho APPLE !PHONES ne 3543 03/23/20 22:36:39 1:01 7982 6106 ims APPLE !PHONES 3544 03/23/20 22:37:39 4:14 192 0 nxtgonpho APPLE !PHONES no 3545 03/23/20 22:37:41 4:13 0 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 147 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171067 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343125 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating AI Bytes Bytes Apn MDR! IMSI MUM MODEL Date Time Number Up Dn (OTC) 3546 03/23/20 22:40:10 1:43 7136 6758 ims APPLE 'PROMO 3547 03/23/20 22:40:11 1:43 6758 6872 ims APPLE 'PROMO 3548 03/23/20 22:41:54 1:34 0 0 nxtgenpho APPLE 'PROMO ne 3549 03/23/20 22:43:27 2:27 192 0 nxtgonpho APPLE 'PROMO ne 3550 03/23/20 22:43:28 2:27 0 0 nxtgenpho APPLE 'PROMO no 3551 03/23/20 22:45:00 0:54 8221 6934 ims APPLE 'PHONES 3552 03/23/20 22:45:01 0:54 6934 7957 ims APPLE 'PHONES 3553 03/23/20 22:45:55 1:30 0 0 nxtgonpho APPLE 'PHONES no 3554 03/23/20 22:46:06 1:19 6346 5812 ims APPLE 'PHONES 3555 03/23/20 22:47:24 0:37 192 Onstgonpho APPLE 'PHONES no 3556 03/23/20 22:47:25 0:37 0 0 nxtgonpho APPLE 'PHONES no 3557 03/23/20 22:48:02 41:42 0 0 nxtgonpho APPLE 'PHONES no 3558 03/23/20 22:48:21 18:31 7402 6103 ims APPLE 'PHONES 3559 03/23/20 23:06:52 60:00 18688 5212 ims APPLE 'PHONES 3560 03/23/20 23:29:43 2:04 192 Onstgonpho APPLE 'PHONES ne 3561 03/23/20 23:29:44 2:04 0 0 nxtgonpho APPLE 'PHONES no 3562 03/23/20 23:31:48 6:59 0 0 nxtgonpho APPLE 'PHONES no 3563 03/23/20 23:38:46 2:03 192 0 nxtgonpho APPLE !PHONES no 3564 03/23/20 23:38:47 2:03 0 0 nxtgonpho APPLE 'PHONES no 3565 03/23/20 23:40:50 4:36 0 0 nxtgonpho APPLE 'PHONES no 3566 03/23/20 23:45:25 2:04 192 0 nxtgonpho APPLE 'PHONES no 3567 03/23/20 23:45:27 2:03 0 0 nxtgonpho APPLE 'PHONES no 3568 03/23/20 23:47:30 5:32 0 0 nxtgonpho APPLE 'PHONES no 3569 03/23/20 23:53:01 8:37 192 0 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 148 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171068 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343126 MOBILITY ce. ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .ai. AT&T ‘ft UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating BT Bytes Bytes Apn EMBI IMSI Man MODEL Data Time Number Up Dn (UTC) 3570 03/23/20 23:53:02 8:37 0 0 nxtgenpho APPLE !PHONES ne 3571 03/24/20 00:01:39 60:00 0 0 nxtgenpho APPLE !PHONES ne 3572 03/24/20 00:06:52 60:00 30384 14136 ims APPLE !PHONES 3573 03/24/20 00:20:08 0:35 5279 27348 ims APPLE !PHONES 3574 03/24/20 01:01:39 53:19 0 Onxtgonpho APPLE !PHONES ne 3575 03/24/20 01:06:52 49:46 10128 3252 ims APPLE !PHONES 3576 03/24/20 01:46:13 0:00 0 0 ims APPLE !PHONES 3577 03/24/20 01:46:21 8:37 6674 5904 ims APPLE !PHONES 3578 03/24/20 01:54:57 2:03 192 Onxtgonpho APPLE !PHONES ne 3579 03/24/20 01:54:58 2:03 0 0 nxtgenpho APPLE !PHONES ne 3580 03/24/20 01:57:01 1:24 0 0 nxtgenpho APPLE !PHONES ne 3581 03/24/20 01:57:20 1:05 8148 6948 ims APPLE !PHONES 3582 03/24/20 01:58:24 2:10 192 Onxtgonpho APPLE !PHONES ne 3583 03/24/20 01:58:25 2:10 0 Onxtgonpho APPLE !PHONES ne 3584 03/24/20 01:58:36 1:58 6244 6690 ims APPLE !PHONES 3585 03/24/20 01:58:37 1:58 6690 5980 ims APPLE !PHONES 3586 03/24/20 02:00:35 18:49 0 Onxtgonpho APPLE !PHONES ne 3587 03/24/20 02:01:26 12:34 13808 7971 ims 3588 03/24/20 02:05:28 1:09 6674 5980 ims APPLE !PHONES 3589 03/24/20 02:06:37 7:23 5056 1572 ims APPLE !PHONES 3590 03/24/20 02:14:00 0:57 6672 5997 ims APPLE !PHONES 3591 03/24/20 02:14:57 44:43 10484 3408 ims APPLE !PHONES 3592 03/24/20 02:19:23 2:03 192 Onxtgonpho APPLE !PHONES ne 3593 03/24/20 02:19:24 2:03 0 0 nxtgenpho APPLE !PHONES ne 3594 03/24/20 02:21:27 47:19 0 0 nxtgenpho APPLE !PHONES ne 3595 03/24/20 02:54:19 13:51 6676 5998 ims APPLE !PHONES 3596 03/24/20 03:08:10 60:00 15232 5748 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 149 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171069 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343127 MOBILITY e s, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ IMBI WANE MODEM Date T11011 Number Up Dn (UTC) 3597 03/24/20 03:08:45 2:10 192 Onxtgonpho APPLE 'PEONES no 3598 03/24/20 03:08:46 2:10 0 0 nxtgonpho APPLE 'PEONES no 3599 03/24/20 03:10:56 60:00 0 0 nxtgonpho APPLE !PEONES no 3600 03/24/20 04:01:33 37:51 9266 7304 ims APPLE !PHONES 3601 03/24/20 04:08:10 3:35 0 0 ims APPLE !PHONES 3602 03/24/20 04:10:56 28:28 0 0 nxtgonpho APPLE !PHONES no 3603 03/24/20 04:39:23 130:17 192 0 mmtgonpho APPLE !PHONES no 3604 03/24/20 04:39:24 60:00 0 0 mmtgonpho APPLE !PHONES no 3605 03/24/20 05:39:24 60:00 0 0 nxtgonpho APPLE 'PHONES no 3606 03/24/20 05:50:02 40:18 12957 7433 ims 3607 03/24/20 06:39:24 10:17 0 0 nxtgonpho APPLE 'PHONES no 3608 03/24/20 06:54:54 60:00 18413 10174 ims 3609 03/24/20 07:54:54 60:00 8960 3160 ims 3610 03/24/20 08:54:54 60:00 11532 4316 ims 3611 03/24/20 09:54:54 60:00 8388 2928 ims 3612 03/24/20 10:02:03 127:28 192 Onxtgonpho APPLE 'PHONES no 3613 03/24/20 10:02:04 60:00 0 0 nxtgonpho APPLE 'PHONES no 3614 03/24/20 10:54:54 60:00 15188 5060 ims 3615 03/24/20 11:02:04 60:00 0 0 nxtgonpho APPLE 'PHONES no 3616 03/24/20 11:54:54 60:00 16512 4844 ims 3617 03/24/20 12:02:04 7:28 0 0 nxtgonpho APPLE 'PHONES no 3618 03/24/20 12:09:32 17:15 0 0 nxtgonpho APPLE !PHONES no 3619 03/24/20 12:26:46 2:16 192 0 nxtgonpho APPLE !PHONES no 3620 03/24/20 12:26:48 2:15 0 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 150 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171070 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343128 MOBILITY e s, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Tine: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn EBBE MI= MAKE MODEL Date Time Up Dn luTC) 3621 03/24/20 12:29:03 8:08 0 0 nxtgenpho APPLE 'PHONES no 3622 03/24/20 12:37:11 2:05 192 0 nxtgenpho APPLE 'PHONES no 3623 03/24/20 12:37:12 2:05 0 0 nxtgenpho APPLE 'PHONES no 3624 03/24/20 12:39:17 4:35 0 0 nxtgenpho APPLE 'PHONES no 3625 03/24/20 12:43:51 8:56 192 0 nxtgonpho APPLE 'PHONES no 3626 03/24/20 12:43:52 8:56 0 0 nxtgonpho APPLE 'PHONES no 3627 03/24/20 12:52:48 1:51 0 0 nxtgonpho APPLE 'PHONES ne 3628 03/24/20 12:54:38 17:44 192 0 nxtgonpho APPLE 'PHONES ne 3629 03/24/20 12:54:39 17:44 0 0 nxtgonpho APPLE 'PHONES ne 3630 03/24/20 12:54:54 60:00 7388 2928 ins 3631 03/24/20 13:12:23 0:39 0 0 nxtgonpho APPLE 'PHONES ne 3632 03/24/20 13:13:01 2:04 192 0 nxtgonpho APPLE 'PHONES no 3633 03/24/20 13:13:02 2:04 0 0 nxtgenpho APPLE 'PHONES no 3634 03/24/20 13:15:06 1:20 0 0 nxtgonpho APPLE 'PHONES no 3635 03/24/20 13:16:25 4:53 192 0 nxtgonpho APPLE 'PHONES ne 3636 03/24/20 13:16:27 4:52 0 0 nxtgenpho APPLE 'PHONES ne 3637 03/24/20 13:21:19 24:18 0 0 nxtgonpho APPLE 'PHONES ne 3638 03/24/20 13:45:36 2:05 192 0 nxtgonpho APPLE 'PHONES ne 3639 03/24/20 13:45:38 2:04 0 0 nxtgenpho APPLE 'PHONES ne 3640 03/24/20 13:47:42 14:39 0 0 nxtgonpho APPLE 'PHONES ne 3641 03/24/20 13:54:54 11:31 3516 1340 ins AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 151 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171071 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343129 MOBILITY ce. PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .1 / 4-fa AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn EBBS INSI MAKE MODEL Date TIM* Number Up Dn (OTC) 3642 03/24/20 14:02:20 2:42 192 0 nxtgenpho APPLE !PHONES no 3643 03/24/20 14:02:21 2:42 0 0 nxtgenpho APPLE 'PHONES no 3644 03/24/20 14:05:03 68:36 192 0 nxtgenpho APPLE 'PHONES no 3645 03/24/20 14:05:04 60:00 0 0 nxtgenpho APPLE 'PHONES ne 3646 03/24/20 14:06:04 8:43 7264 6720 ims APPLE 'PHONES 3647 03/24/20 14:06:05 8:43 6720 7000 Less APPLE 'PHONES 3648 03/24/20 14:06:25 11:13 12288 7988 Less 3649 03/24/20 14:14:47 35:50 7264 6748 Less APPLE 'PHONES 3650 03/24/20 14:14:48 35:50 6748 7000 Less APPLE 'PHONES 3651 03/24/20 14:17:38 33:40 21172 10440 Less 3652 03/24/20 14:50:37 23:02 7248 6746 Less APPLE 'PHONES 3653 03/24/20 14:50:38 23:02 6746 6984 Less APPLE 'PHONES 3654 03/24/20 14:51:18 60:00 17051 9621 Less 3655 03/24/20 15:05:04 8:36 0 Onmtgonpho APPLE !PHONES ne 3656 03/24/20 15:13:40 3:00 0 0 nxtgenpho APPLE 'PHONES ne 3657 03/24/20 15:16:39 2:21 192 0 nxtgenpho APPLE 'PHONES ne 3658 03/24/20 15:16:41 2:20 0 0 nxtgenpho APPLE 'PHONES ne 3659 03/24/20 15:19:01 22:37 0 0 nxtgenpho APPLE 'PHONES ne 3660 03/24/20 15:41:37 2:09 192 0 nxtgenpho APPLE 'PHONES ne 3661 03/24/20 15:41:38 2:09 0 0 nxtgenpho APPLE 'PHONES ne 3662 03/24/20 15:43:48 11:43 0 0 nxtgenpho APPLE 'PHONES ne 3663 03/24/20 15:51:18 29:34 4856 2572 Less 3664 03/24/20 15:55:29 2:04 192 0 nxtgenpho APPLE 'PHONES ne 3665 03/24/20 15:55:31 2:03 0 0 nxtgenpho APPLE 'PHONES ne 3666 03/24/20 15:57:34 23:48 0 0 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 152 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171072 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343130 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .‘•- 20 AT&T UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: St= Item Conn. Conn. Originating ET Bytes Bytes Apn flat INSI HAKE MODEL Date Time Number Up Dn (OTC) 3667 03/24/20 16:13:25 0:07 0 0 imp APPLE 'PHONES 3668 03/24/20 16:14:29 6:53 7398 6106 imp APPLE 'PHONES 3669 03/24/20 16:21:21 8:54 192 Onxtgonpho APPLE 'PHONES no 3670 03/24/20 16:21:23 8:53 0 Onxtgonpho APPLE 'PHONES no 3671 03/24/20 16:23:53 6:22 6244 6674 imp APPLE 'PHONES 3672 03/24/20 16:23:54 6:22 6674 5980 imp APPLE 'PHONES 3673 03/24/20 16:30:16 60:00 0 Onxtgonpho APPLE 'PHONES no 3674 03/24/20 16:30:26 0:59 8150 6962 imp APPLE 'PHONES 3675 03/24/20 16:31:25 6:14 3748 1464 imp APPLE 'PHONES 3676 03/24/20 16:37:39 15:42 7408 6122 imp APPLE 'PHONES 3677 03/24/20 16:53:21 60:00 12244 5252 imp APPLE 'PHONES 3678 03/24/20 17:30:16 41:13 0 Onxtgonpho APPLE 'PHONES ne 3679 03/24/20 17:53:21 60:00 8620 3192 imp APPLE 'PHONES 3680 03/24/20 18:11:28 1:48 192 Onxtgonpho APPLE 'PHONES ne 3681 03/24/20 18:11:29 1:48 0 Onxtgonpho APPLE 'PHONES ne 3682 03/24/20 18:13:17 14:27 192 Onxtgonpho APPLE 'PHONES ne 3683 03/24/20 18:13:18 14:27 0 Onxtgonpho APPLE 'PHONES ne 3684 03/24/20 18:27:45 1:04 0 Onxtgonpho APPLE 'PHONES ne 3685 03/24/20 18:28:48 15:14 192 Onxtgonpho APPLE 'PHONES no 3686 03/24/20 18:28:49 15:14 0 Onxtgonpho APPLE 'PHONES no 3687 03/24/20 18:44:03 0:41 0 Onxtgonpho APPLE 'PHONES no 3688 03/24/20 18:44:43 8:25 192 Onxtgonpho APPLE 'PHONES no 3689 03/24/20 18:44:45 8:24 0 Onxtgonpho APPLE 'PHONES ne 3690 03/24/20 18:53:09 13:16 0 Onxtgonpho APPLE 'PHONES ne 3691 03/24/20 18:53:21 21:37 5104 2068 imp APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 153 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171073 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343131 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating BT Bytes Bytes Apn DELT IMBI MaKE MODEL Date TIM* Number Up Dn (OTC/ 3692 03/24/20 19:06:24 14:58 192 Onxtgonpho APPLE 'PEONES ne 3693 03/24/20 19:06:25 14:58 0 Onxtgonpho APPLE 'PEONES ne 3694 03/24/20 19:10:03 11:19 6228 6732 ims APPLE !PEONES 3695 03/24/20 19:10:04 11:19 6664 5964 ims APPLE !PHONES 3696 03/24/20 19:21:23 6:31 0 Onxtgonpho APPLE !PHONES ne 3697 03/24/20 19:27:53 2:03 192 0 nxtgonpho APPLE !PHONES ne 3698 03/24/20 19:27:54 2:03 0 0 nxtgonpho APPLE !PHONES no 3699 03/24/20 19:29:57 19:58 0 0 nxtgenpho APPLE !PHONES no 3700 03/24/20 19:40:37 9:18 9188 8084 ims APPLE !PHONES 3701 03/24/20 19:49:54 8:17 192 Onxtgonpho APPLE !PHONES ne 3702 03/24/20 19:49:55 8:17 0 0 nxtgonpho APPLE !PHONES ne 3703 03/24/20 19:53:52 4:19 6244 6670 ims APPLE !PHONES 3704 03/24/20 19:53:53 4:19 6670 5980 ims APPLE !PHONES 3705 03/24/20 19:57:07 60:00 20581 10944 ims 3706 03/24/20 19:58:12 2:08 0 0 nxtgenpho APPLE !PHONES ne 3707 03/24/20 20:00:20 0:59 0 0 nxtgonpho APPLE !PHONES ne 3708 03/24/20 20:01:19 20:59 192 0 nxtgonpho APPLE !PHONES no 3709 03/24/20 20:01:20 20:59 0 0 nxtgonpho APPLE !PHONES no 3710 03/24/20 20:22:19 9:12 0 0 nxtgonpho APPLE !PHONES no 3711 03/24/20 20:31:30 2:57 192 0 nxtgonpho APPLE !PHONES no 3712 03/24/20 20:31:31 2:57 0 0 nxtgonpho APPLE !PHONES no 3713 03/24/20 20:34:28 0:05 0 0 nxtgonpho APPLE !PHONES no 3714 03/24/20 20:36:13 35:36 192 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 154 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171074 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343132 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating BT Bytes Bytes Apn MMAI IMSI MAR MODEL Date Time Number Up On (OTC) 3715 03/24/20 20:36:14 35:36 0 Onmtgonpho APPLE 'PEONES ne 3716 03/24/20 20:57:07 50:26 0 0 ims 3717 03/24/20 21:03:22 60:00 14972 9410 ims 3718 03/24/20 21:11:50 60:00 0 Onmtgonpho APPLE 'PEONES ne 3719 03/24/20 21:47:33 1:31 6674 5979 ims APPLE 'PEONES 3720 03/24/20 21:49:04 16:16 3640 1432 ims APPLE 'PEONES 3721 03/24/20 22:03:22 1:58 0 0 ims 3722 03/24/20 22:05:20 18:30 6672 5998 ims APPLE IPEOME8 3723 03/24/20 22:11:50 33:01 0 Onxtgonpho APPLE 'PHONES ne 3724 03/24/20 22:23:50 60:00 15968 4888 ims APPLE 'PHONES 3725 03/24/20 22:44:50 2:16 192 0 nxtgonpho APPLE 'PHONES ne 3726 03/24/20 22:44:51 2:16 0 Onxtgonpho APPLE 'PHONES ne 3727 03/24/20 22:47:07 19:34 0 0 nxtgonpho APPLE !PHONES ne 3728 03/24/20 23:06:40 24:26 192 0 nxtgonpho APPLE 'PHONES ne 3729 03/24/20 23:06:41 24:26 0 0 nxtgonpho APPLE !PHONES ne 3730 03/24/20 23:23:50 60:00 31544 23152 ims APPLE 'PHONES 3731 03/24/20 23:31:07 14:04 0 0 nxtgonpho APPLE !PHONES ne 3732 03/24/20 23:44:21 0:12 15211 33872 ims APPLE 'PHONES 3733 03/24/20 23:44:43 0:34 14704 31615 ims APPLE 'PHONES 3734 03/24/20 23:45:10 2:17 192 Onmtgonpho APPLE 'PHONES ne 3735 03/24/20 23:45:12 2:16 0 0 nxtgonpho APPLE 'PHONES ne 3736 03/24/20 23:47:28 35:37 0 0 nxtgonpho APPLE !PHONES ne 3737 03/25/20 00:23:04 2:10 192 0 nxtgonpho APPLE !PHONES ne 3738 03/25/20 00:23:06 2:09 0 0 nxtgonpho APPLE !PHONES ne 3739 03/25/20 00:23:50 60:00 8496 3036 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 155 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171075 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343133 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. .a# AT&T ‘•.. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DOLT INSI MAKE MODEL Date Time Number Up Dn (OTC) 3740 03/25/20 00:25:15 50:25 0 Onxtgonpho APPLE !PHONES ne 3741 03/25/20 01:15:40 14:26 192 0 nxtgonpho APPLE !PHONES ne 3742 03/25/20 01:15:41 14:26 0 0 nxtgonpho APPLE !PHONES ne 3743 03/25/20 01:23:50 41:29 12904 3780 ims APPLE !PHONES 3744 03/25/20 01:30:07 25:21 0 Onxtgonpho APPLE !PHONES no 3745 03/25/20 01:55:27 2:04 192 0 nxtgonpho APPLE !PHONES no 3746 03/25/20 01:55:28 2:04 0 0 nxtgenpho APPLE !PHONES no 3747 03/25/20 01:57:32 1:59 0 0 nxtgonpho APPLE !PHONES no 3748 03/25/20 01:59:30 8:33 192 0 nxtgonpho APPLE !PHONES no 3749 03/25/20 01:59:32 8:32 0 0 nxtgonpho APPLE !PHONES no 3750 03/25/20 02:00:26 7:37 6243 6742 igloo APPLE !PHONES 3751 03/25/20 02:00:28 7:36 6674 5979 igloo APPLE !PHONES 3752 03/25/20 02:08:04 55:21 0 Onxtgonpho APPLE !PHONES ne 3753 03/25/20 02:09:11 5:58 8830 7985 ism APPLE !PHONES 3754 03/25/20 02:15:09 6:05 3640 1464 ism APPLE !PHONES 3755 03/25/20 02:21:15 42:10 12156 9242 ism APPLE !PHONES 3756 03/25/20 03:03:24 40:00 192 Onxtgonpho APPLE !PHONES ne 3757 03/25/20 03:03:25 60:00 0 0 nxtgenpho APPLE !PHONES ne 3758 03/25/20 03:04:07 16:25 9741 6354 ism 3759 03/25/20 03:17:41 20:00 7337 8822 ism APPLE !PHONES 3760 03/25/20 03:17:42 31:54 11418 8397 ism APPLE !PHONES 3761 03/25/20 03:37:41 11:54 1324 2596 ism APPLE !PHONES 3762 03/25/20 03:48:27 5:50 8437 6426 ism 3763 03/25/20 03:49:35 12:57 7374 6800 ism APPLE !PHONES 3764 03/25/20 03:49:36 12:57 6800 7110 igloo APPLE !PHONES 3765 03/25/20 03:54:17 10:12 9261 6696 igloo 3766 03/25/20 04:02:32 14:03 6370 6676 igloo APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 156 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171076 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343134 MOBILITY cat. ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Time: Data usage for: ISM= Item conn. Conn. Originating ET Bytes Bytes Apn L@3 IMSI MAKE MODEL Data Time Number up on (OTC) 3767 03/25/20 04:02:33 14:03 6676 6106 ims APPLE 'PEONES 3768 03/25/20 04:03:25 60:00 0 0 nxtgenpho APPLE 'PEONES no 3769 03/25/20 04:07:15 14:19 8261 6177 ims 3770 03/25/20 04:16:34 75:27 9874 12042 ims APPLE IPEOME8 3771 03/25/20 04:16:35 60:00 11934 9610 ims APPLE 'PHONES 3772 03/25/20 05:03:25 28:37 0 0 nxtgenpho APPLE 'PHONES ne 3773 03/25/20 05:16:35 15:27 0 0 ims APPLE 'PHONES 3774 03/25/20 05:32:01 0:23 192 0 nxtgenpho APPLE 'PHONES no 3775 03/25/20 05:32:03 0:22 0 0 nxtgenpho APPLE 'PHONES no 3776 03/25/20 05:32:25 19:15 0 0 nxtgonpho APPLE 'PHONES ne 3777 03/25/20 05:32:29 17:46 6780 5938 ims APPLE 'PHONES 3778 03/25/20 05:50:15 60:00 11920 4500 ims APPLE 'PHONES 3779 03/25/20 05:51:39 2:42 192 Onstgonpho APPLE 'PHONES no 3780 03/25/20 05:51:40 2:42 0 0 nxtgenpho APPLE 'PHONES no 3781 03/25/20 05:54:22 0:34 0 0 nxtgenpho APPLE 'PHONES no 3782 03/25/20 05:54:56 2:04 192 0 nxtgonpho APPLE 'PHONES no 3783 03/25/20 05:54:57 2:04 0 0 nxtgonpho APPLE 'PHONES no 3784 03/25/20 05:57:00 4:19 0 0 nxtgonpho APPLE 'PHONES ne 3785 03/25/20 06:01:18 35:56 192 0 nxtgonpho APPLE 'PHONES ne 3786 03/25/20 06:01:19 35:56 0 0 nxtgonpho APPLE 'PHONES ne 3787 03/25/20 06:37:15 29:02 0 0 nxtgonpho APPLE !PHONES ne 3788 03/25/20 06:50:15 60:00 6956 2912 ims APPLE 'PHONES 3789 03/25/20 07:06:16 2:03 192 0 nxtgonpho APPLE 'PHONES ne 3790 03/25/20 07:06:17 2:03 0 0 nxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 157 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171077 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343135 MOBILITY e s, pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:58:58pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating AT Bytes Bytes Apn DMZ IMBI MAR MODEL Date T1100 Number Up Dn (OTC) 3791 03/25/20 07:08:20 24:31 0 0 nactgonphe APPLE 'PEONES ne 3792 03/25/20 07:32:50 7:25 192 0 nactgonphe APPLE 'PEONES ne 3793 03/25/20 07:32:51 7:25 0 0 nactgonphe APPLE 'PEONES ne 3794 03/25/20 07:40:16 3:48 0 0 nactgonphe APPLE 'PEONES ne 3795 03/25/20 07:44:03 14:49 192 0 nactgonphe APPLE 'PHONES ne 3796 03/25/20 07:44:04 14:49 0 0 nactgonphe APPLE !PHONES ne 3797 03/25/20 07:50:15 60:00 8372 2928 isms APPLE !PHONES 3798 03/25/20 07:58:53 60:00 0 0 nactgonphe APPLE !PHONES ne 3799 03/25/20 08:50:15 60:00 8388 3036 isms APPLE !PHONES 3800 03/25/20 08:58:53 42:29 0 0 nottgonphe APPLE !PHONES ne 3801 03/25/20 09:41:21 180:48 192 0 nottgonphe APPLE !PHONES ne 3802 03/25/20 09:41:22 60:00 0 0 nactgonphe APPLE !PHONES ne 3803 03/25/20 09:50:15 60:00 13804 6060 isms APPLE !PHONES 3804 03/25/20 10:41:22 60:00 0 0 nottgonphe APPLE !PHONES ne 3805 03/25/20 10:50:15 60:00 7064 3036 isms APPLE !PHONES 3806 03/25/20 11:41:22 60:00 0 0 nottgonphe APPLE !PHONES ne 3807 03/25/20 11:50:15 60:00 8712 3160 isms APPLE !PHONES 3808 03/25/20 12:41:22 0:48 0 0 nottgonphe APPLE !PHONES ne 3809 03/25/20 12:42:10 3:38 0 0 nottgonphe APPLE !PHONES ne 3810 03/25/20 12:45:48 135:22 192 0 nottgonphe APPLE !PHONES ne 3811 03/25/20 12:45:49 60:00 0 0 nottgonphe APPLE !PHONES ne 3812 03/25/20 12:50:15 60:00 11920 4268 isms APPLE !PHONES 3813 03/25/20 13:45:49 60:00 0 0 nottgonphe APPLE !PHONES ne 3814 03/25/20 13:50:15 37:01 6148 1480 Lms APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 158 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171078 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343136 MOBILITY 4.45 , ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: MS= Item Conn. Conn. Originating ET Bytes Bytes Apn LEST MAKE MODEL Date MAO Number Up Dn (OTC) 3815 03/25/20 14:25:56 35:14 6334 6648 ims APPLE 'PEONES 3816 03/25/20 14:25:57 35:14 6648 6070 ims APPLE 'PEONES 3817 03/25/20 14:27:16 60:00 23909 10568 ims 3818 03/25/20 14:45:49 15:22 0 0 nxtgonpho APPLE 'PEONES no 3819 03/25/20 15:01:11 40:00 192 0 nxtgonpho APPLE 'PEONES no 3820 03/25/20 15:01:12 60:00 0 0 nxtgonpho APPLE 'PEONES no 3821 03/25/20 15:22:06 20:00 7373 6800 ims APPLE !PEONES 3822 03/25/20 15:22:07 60:00 6800 7109 ims APPLE !PEONES 3823 03/25/20 15:27:16 2:33 0 0 ims 3824 03/25/20 15:29:49 60:00 17160 9341 ims 3825 03/25/20 16:01:12 46:50 0 0 nxtgonpho APPLE IPHONA8 no 3826 03/25/20 16:22:07 25:55 0 0 ims APPLE 'PHONES 3827 03/25/20 16:29:49 60:00 9804 3160 ims 3828 03/25/20 16:48:02 60:00 0 0 nxtgonpho APPLE 'PHONES no 3829 03/25/20 17:12:59 60:00 19697 10560 isms 3830 03/25/20 17:29:49 60:00 0 0 ims 3831 03/25/20 17:48:02 20:35 0 0 nxtgonpho APPLE 'PHONES no 3832 03/25/20 18:08:36 3:40 192 0 nxtgonpho APPLE 'PHONES no 3833 03/25/20 18:08:37 3:40 0 0 nxtgonpho APPLE 'PHONES no 3834 03/25/20 18:12:17 9:16 192 0 nxtgonpho APPLE !PHONES no 3835 03/25/20 18:12:18 9:16 0 0 nxtgonpho APPLE !PHONES no 3836 03/25/20 18:12:59 60:00 13168 6992 ims 3837 03/25/20 18:21:34 2:10 0 0 nxtgonpho APPLE !PHONES no 3838 03/25/20 18:23:43 9:06 192 0 nxtgonpho APPLE !PHONES no 3839 03/25/20 18:23:44 9:06 0 0 nxtgonpho APPLE !PHONES no 3840 03/25/20 18:29:49 60:00 0 0 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 159 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171079 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343137 MOBILITY cro pu020 AT&T has queried AT&T has queried OTC. for records for records from 03/01/2020 12:00:00am using Eastern Time Zone. to 06/15/2020 11:59:59pm AT&T's records are stored and provided in .a. ° AT&T ‘•- Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ST Bytes Bytes Apn DOM INSI MAKE MODEL Data Time Op Dn (OTC/ 3841 03/25/20 18:32:50 60:00 0 0 nottgonphe APPLE !PHONES ne 3842 03/25/20 19:12:59 60:00 13368 4764 ims 3843 03/25/20 19:29:49 57:37 0 0 ims 3844 03/25/20 19:32:50 8:17 0 Onmtgonphe APPLE !PHONES ne 3845 03/25/20 19:41:06 2:06 192 Onactgonphe APPLE !PHONES ne 3846 03/25/20 19:41:07 2:06 0 Onmtgonphe APPLE !PHONES ne 3847 03/25/20 19:43:13 1:41 0 0 ructgonphe APPLE !PHONES ne 3848 03/25/20 19:44:53 3:52 192 0 ructganpho APPLE !PHONES ne 3849 03/25/20 19:44:54 3:52 0 0 nxtganpho APPLE !PHONES ne 3850 03/25/20 19:48:46 0:06 0 0 nxtganpho APPLE !PHONES ne 3851 03/25/20 19:49:14 0:06 0 0 nxtganpho APPLE !PHONES ne 3852 03/25/20 19:49:42 2:28 192 0 nxtganpho APPLE !PHONES ne 3853 03/25/20 19:49:43 2:28 0 0 nxtganpho APPLE !PHONES ne 3854 03/25/20 19:52:10 7:46 192 0 ructganpho APPLE !PHONES ne 3855 03/25/20 19:52:11 7:46 0 0 ructganpho APPLE !PHONES ne 3856 03/25/20 19:59:57 9:08 192 0 ructganpho APPLE !PHONES ne 3857 03/25/20 19:59:58 9:08 0 0 ructganpho APPLE !PHONES ne 3858 03/25/20 20:09:06 3:38 192 0 ructganpho APPLE !PHONES ne 3859 03/25/20 20:09:07 3:38 0 0 ructganpho APPLE !PHONES no 3860 03/25/20 20:12:45 22:16 0 0 nxtganpho APPLE !PHONES no 3861 03/25/20 20:12:59 19:28 216 108 ims 3862 03/25/20 20:27:23 60:00 11861 7496 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 160 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171080 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343138 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Byte. Apn DMZ INS! NAVE MODEL Date Time Number Up Dn (OTC/ 3863 03/25/20 20:35:00 15:10 192 0 nstgenpho APPLE IPACEEB ne 3864 03/25/20 20:35:01 15:10 0 0 nottgonpho APPLE IPACEEB ne 3865 03/25/20 20:50:11 1:03 0 0 nottgonphe APPLE IPACEEB ne 3866 03/25/20 20:51:13 8:28 192 0 nottgonpho APPLE IPACEEB ne 3867 03/25/20 20:51:14 8:28 0 0 nottgonpho APPLE !PHONES ne 3868 03/25/20 20:59:42 15:47 0 0 nottgonpho APPLE !PHONES ne 3869 03/25/20 21:14:38 0:00 0 0 ism APPLE !PHONES 3870 03/25/20 21:15:28 8:31 192 0 nottgonpho APPLE !PHONES ne 3871 03/25/20 21:15:29 8:31 0 0 nottgonpho APPLE !PHONES ne 3872 03/25/20 21:15:37 21:10 9247 6126 ism 3873 03/25/20 21:24:00 60:00 0 o nactgenpho APPLE !PHONES ne 3874 03/25/20 21:27:23 58:11 0 0 ism 3875 03/25/20 21:40:16 60:00 15518 8368 ism 3876 03/25/20 22:24:00 51:30 0 0 nactgonpho APPLE !PHONES ne 3877 03/25/20 22:25:34 1:12 6676 5998 ism APPLE !PHONES 3878 03/25/20 22:26:46 60:00 11168 4236 ism APPLE !PHONES 3879 03/25/20 22:40:16 60:00 0 0 ism 3880 03/25/20 23:15:29 2:03 192 0 nmtgonpho APPLE !PHONES no 3881 03/25/20 23:15:30 2:03 0 0 nmtgonpho APPLE !PHONES no 3882 03/25/20 23:17:34 60:00 0 0 nmtgonpho APPLE !PHONES no 3883 03/25/20 23:26:46 60:00 7188 2896 ism APPLE !PHONES 3884 03/25/20 23:40:16 60:00 0 0 ism 3885 03/26/20 00:17:34 51:03 0 0 nmtgonpho APPLE !PHONES no 3886 03/26/20 00:26:46 60:00 8836 3052 ism APPLE !PHONES 3887 03/26/20 00:40:16 60:00 0 0 ism AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 161 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171081 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343139 MOBILITY pu020 AT&T has queried AT&T has queried UTC. for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm for records using Eastern Time Zone. AT&T's records are stored and provided in k.;:sa ls# AT&T Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn EBB! INSI MAKE MODEL Date Time Number Up Dn (OTC) 3888 03/26/20 01:08:37 5:55 192 Onactgonpho APPLE !PHONES no 3889 03/26/20 01:08:38 5:55 0 0 nactgonpho APPLE !PHONES no 3890 03/26/20 01:14:33 60:00 0 0 nactgonpho APPLE !PHONES no 3891 03/26/20 01:26:46 60:00 15000 4656 ism APPLE !PHONES 3892 03/26/20 01:40:16 45:16 0 0 ism 3893 03/26/20 02:14:33 52:17 0 Onactgonpho APPLE !PHONES no 3894 03/26/20 02:26:46 60:00 0 0 ism APPLE !PHONES 3895 03/26/20 02:29:23 60:00 15093 8712 ism 3896 03/26/20 03:26:46 60:00 0 0 ism APPLE !PHONES 3897 03/26/20 03:29:23 60:00 7048 2696 ism 3898 03/26/20 04:26:46 60:00 0 0 ism APPLE !PHONES 3899 03/26/20 04:29:23 60:00 6924 2556 ism 3900 03/26/20 05:26:46 58:57 0 0 isms APPLE !PHONES 3901 03/26/20 05:29:23 60:00 9960 3284 isms 3902 03/26/20 06:29:23 60:00 15636 6124 isms 3903 03/26/20 07:29:23 60:00 6924 2680 ism 3904 03/26/20 08:29:23 60:00 8620 3052 ism 3905 03/26/20 09:29:23 60:00 6924 2680 ism 3906 03/26/20 10:29:23 60:00 11904 4268 ism 3907 03/26/20 11:29:23 60:00 8496 3160 ism 3908 03/26/20 12:29:23 60:00 11796 4536 ism 3909 03/26/20 13:29:23 60:00 13476 4732 ism 3910 03/26/20 14:29:23 60:00 8496 3020 ism 3911 03/26/20 15:29:23 60:00 8172 3036 ism 3912 03/26/20 16:29:23 5:29 5088 2496 ism 3913 03/26/20 16:38:56 60:00 20749 9747 ism 3914 03/26/20 17:38:56 60:00 10068 3160 ism 3915 03/26/20 18:38:56 60:00 6924 2680 ism 3916 03/26/20 19:38:56 60:00 10240 4144 ism 3917 03/26/20 20:38:56 60:00 7032 2788 ism 3918 03/26/20 21:38:56 60:00 10548 4396 ism 3919 03/26/20 22:38:56 60:00 8636 3036 ism 3920 03/26/20 23:38:56 60:00 18284 9756 ism AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 162 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171082 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343140 MOBILITY e s, pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn EMMI INS! NAPS -fly. Date Tame Number Up Dn (OTC) 3921 03/26/20 23:55:40 0:17 0 2381 Las -1 3922 03/27/20 00:38:56 60:00 13584 4840 Las -1 3923 03/27/20 01:38:56 60:00 20328 11224 Las -1 3924 03/27/20 02:21:27 0:06 0 2069 Las -1 3925 03/27/20 02:38:56 60:00 13476 5124 Las -1 3926 03/27/20 03:38:56 60:00 7248 2804 Las -1 3927 03/27/20 04:38:56 60:00 11796 5160 Las -1 3928 03/27/20 05:38:56 60:00 10176 4068 Las -1 3929 03/27/20 06:38:56 60:00 9960 3176 Las -1 3930 03/27/20 07:38:56 60:00 10440 4504 Las -1 3931 03/27/20 08:38:56 60:00 10068 3392 Las -1 3932 03/27/20 09:38:56 60:00 12012 4500 Las -1 3933 03/27/20 10:38:56 60:00 8388 2928 Las -1 3934 03/27/20 11:38:56 60:00 8728 3052 Las -1 3935 03/27/20 12:38:56 26:35 15293 7737 Las -1 3936 03/27/20 13:10:29 60:00 33905 20494 Las -1 3937 03/27/20 14:05:29 0:13 2956 16052 Las -1 3938 03/27/20 14:10:29 60:00 6816 2772 Las -1 3939 03/27/20 15:10:29 60:00 8604 3176 Las -1 3940 03/27/20 16:10:29 60:00 10880 3316 Las -1 3941 03/27/20 17:08:19 23:27 8133 6105 Las -1 3942 03/27/20 17:10:29 0:15 0 0 Las -1 3943 03/27/20 17:27:52 47:51 14832 7978 Las -1 3944 03/27/20 18:11:52 9:52 8647 6516 Las -1 3945 03/27/20 18:17:27 60:00 15331 8752 Las -1 3946 03/27/20 19:17:27 13:38 0 0 Las -1 3947 03/27/20 19:27:33 24:13 8189 6016 Las -1 3948 03/27/20 19:49:11 60:00 10073 6602 Las -1 3949 03/27/20 20:02:53 60:00 62408 29060 Las -1 3950 03/27/20 20:17:34 0:04 0 7574 Las -1 3951 03/27/20 20:49:11 60:00 0 0 Las -1 3952 03/27/20 20:52:35 0:07 0 8835 Las -1 3953 03/27/20 21:02:53 60:00 8836 3252 Las -1 3954 03/27/20 21:49:11 60:00 0 0 Las -1 3955 03/27/20 22:02:53 60:00 6816 2788 Las -1 3956 03/27/20 22:49:11 60:00 0 0 Las -1 AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 163 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171083 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343141 MOBILITY / 1 4 4% PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating ET Bytos Bytes Apn EMBI MAXIS MOBIL Date Time Number Up Dn (UTC) 3957 03/27/20 23:02:53 60:00 10408 3376 ims -1 3958 03/27/20 23:49:11 16:25 0 0 ims -1 3959 03/28/20 00:02:53 60:00 21632 6868 ims -1 3960 03/28/20 01:02:53 60:00 10068 3176 ims -1 3961 03/28/20 02:02:53 60:00 6924 2804 ims -1 3962 03/28/20 03:02:53 60:00 6816 2680 ims -1 3963 03/28/20 04:02:53 60:00 11904 4160 ims -1 3964 03/28/20 05:02:53 60:00 10332 4288 ims -1 3965 03/28/20 06:02:53 60:00 9960 3176 ims -1 3966 03/28/20 07:02:53 60:00 6924 2804 ims -1 3967 03/28/20 08:02:53 60:00 10068 3176 ims -1 3968 03/28/20 09:02:53 60:00 6908 2680 ims -1 3969 03/28/20 10:02:53 60:00 13632 5844 ims -1 3970 03/28/20 11:02:53 60:00 8620 3052 ims -1 3971 03/28/20 12:02:53 60:00 8496 3036 ims -1 3972 03/28/20 13:02:53 60:00 8604 3144 ims -1 3973 03/28/20 14:02:53 60:00 13028 4408 ims -1 3974 03/28/20 15:02:53 60:00 10176 3392 ims -1 3975 03/28/20 16:02:53 60:00 13584 4924 ims -1 3976 03/28/20 17:02:53 60:00 9960 3284 ims -1 3977 03/28/20 18:02:53 60:00 14940 4872 ims -1 3978 03/28/20 19:02:53 60:00 6924 2680 ims -1 3979 03/28/20 20:02:53 60:00 8388 2928 ims -1 3980 03/28/20 21:02:53 60:00 10332 4412 ims -1 3981 03/28/20 22:02:53 60:00 13988 4872 ims -1 3982 03/28/20 23:02:53 60:00 10284 3532 ims -1 3983 03/29/20 00:02:53 60:00 6924 2572 ims -1 3984 03/29/20 01:02:53 60:00 13290 7713 ims -1 3985 03/29/20 02:02:53 60:00 11904 4592 ims -1 3986 03/29/20 03:02:53 60:00 8604 2928 ims -1 3987 03/29/20 04:02:53 60:00 6924 2680 ims -1 3988 03/29/20 05:02:53 60:00 8496 2928 ims -1 3989 03/29/20 06:02:53 60:00 6816 2680 ims -1 3990 03/29/20 07:02:53 60:00 19920 6620 ims -1 3991 03/29/20 08:02:53 60:00 8388 2820 ims -1 3992 03/29/20 09:02:53 60:00 6924 2896 ims -1 AT&T Proprietary The AT&T network constantly communicates with internet enabled de when they are powered on. These communications will show as data usag- customer records but do not necessarily indicate a customer initiated a transaction. Page 164 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171084 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343142 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: ISM= Item Conn. Conn. Originating ET Bytes Bytes E1721 T1@I UWE 10JUL IIODBL Date Time Number Up Dn (UTC) 3993 03/29/20 10:02:53 60:00 8496 3144 ims -1 3994 03/29/20 11:02:53 60:00 16992 6356 ims -1 3995 03/29/20 12:02:53 60:00 6816 2680 ims -1 3996 03/29/20 13:02:53 60:00 8496 2928 ims -1 3997 03/29/20 14:02:53 60:00 6924 2788 ims -1 3998 03/29/20 15:02:53 60:00 11580 4268 ims -1 3999 03/29/20 16:02:53 60:00 13924 4892 ims -1 4000 03/29/20 17:02:53 60:00 6816 2788 ims -1 4001 03/29/20 18:02:53 60:00 8496 3036 ims -1 4002 03/29/20 19:02:53 51:30 13260 3672 ims -1 4003 03/29/20 19:49:05 60:00 21488 9904 ims -1 4004 03/29/20 20:49:05 60:00 10300 3176 ims -1 4005 03/29/20 21:49:05 60:00 10176 3376 ims -1 4006 03/29/20 22:49:05 60:00 0 0 ims -1 4007 03/29/20 22:51:54 60:00 25444 10932 ims -1 4008 03/29/20 23:49:05 60:00 0 0 ims -1 4009 03/29/20 23:51:54 60:00 8604 3036 ims -1 4010 03/30/20 00:49:05 60:00 0 0 ims -1 4011 03/30/20 00:51:54 60:00 8620 3788 ims -1 4012 03/30/20 01:49:05 44:23 0 0 ims -1 4013 03/30/20 01:51:54 60:00 9960 3376 ims -1 4014 03/30/20 02:51:54 60:00 13368 4532 ims -1 4015 03/30/20 03:51:54 60:00 12352 5772 ims -1 4016 03/30/20 04:51:54 60:00 8836 3160 ims -1 4017 03/30/20 05:51:54 60:00 10408 3316 ims -1 4018 03/30/20 06:51:54 60:00 7032 3144 ims -1 4019 03/30/20 07:51:54 60:00 13368 5284 ims -1 4020 03/30/20 08:51:54 60:00 10332 4412 ims -1 4021 03/30/20 09:51:54 60:00 10068 3176 ims -1 4022 03/30/20 10:51:54 60:00 8388 2928 ims -1 4023 03/30/20 11:51:54 60:00 8604 2928 ims -1 4024 03/30/20 12:51:54 60:00 10564 5020 ims -1 4025 03/30/20 13:51:54 60:00 8388 2820 ims -1 4026 03/30/20 14:51:54 60:00 11904 4428 ims -1 4027 03/30/20 15:51:54 30:01 3408 1340 ims -1 4028 03/30/20 16:22:01 25:48 14212 7007 ims -1 AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 165 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171085 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343143 MOBILITY 45, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn flat INS! NAPS MOMS. Date Time Number Up Dn (OTC) 4029 03/30/20 16:46:13 34:04 16845 25082 ims -1 4030 03/30/20 17:12:33 12:33 12041 8604 ims -1 4031 03/30/20 17:20:17 21:57 12080 6640 ims -1 4032 03/30/20 17:25:06 33:45 12986 11660 ims -1 4033 03/30/20 17:42:14 35:24 8473 9288 ims -1 4034 03/30/20 17:58:51 19:50 29297 21296 ims -1 4035 03/30/20 18:17:38 60:00 21830 13216 ims -1 4036 03/30/20 19:17:38 60:00 8712 3896 ims -1 4037 03/30/20 20:17:38 60:00 8388 2896 ims -1 4038 03/30/20 21:17:38 60:00 10160 3252 ims -1 4039 03/30/20 22:17:38 60:00 15264 5056 ims -1 4040 03/30/20 23:17:38 60:00 26472 11676 ims -1 4041 03/30/20 23:55:25 0:19 0 2746 ims -1 4042 03/31/20 00:17:38 60:00 8728 3128 ims -1 4043 03/31/20 01:17:38 60:00 3408 1432 ims -1 4044 03/31/20 01:25:37 60:00 23874 10212 ims -1 4045 03/31/20 02:17:38 60:00 0 0 ims -1 4046 03/31/20 02:25:37 60:00 9944 3144 ims -1 4047 03/31/20 03:17:38 60:00 0 0 ims -1 4048 03/31/20 03:25:37 60:00 10176 3144 ims -1 4049 03/31/20 04:17:38 60:00 0 0 ims -1 4050 03/31/20 04:25:37 60:00 11580 4220 ims -1 4051 03/31/20 05:17:38 7:49 0 0 ims -1 4052 03/31/20 05:25:37 60:00 10548 4380 ims -1 4053 03/31/20 06:25:37 60:00 8496 3004 ims -1 4054 03/31/20 07:25:37 60:00 6816 2648 ims -1 4055 03/31/20 08:25:37 60:00 13476 4468 ims -1 4056 03/31/20 09:25:37 60:00 8604 3004 ims -1 4057 03/31/20 10:25:37 60:00 10408 3392 ims -1 4058 03/31/20 11:25:37 60:00 12028 5272 ims -1 4059 03/31/20 12:25:37 60:00 13476 4468 ims -1 4060 03/31/20 13:25:37 60:00 10068 3376 ims -1 4061 03/31/20 14:25:37 20:28 3764 1448 ims -1 4062 03/31/20 15:53:12 60:00 18557 9445 ims -1 4063 03/31/20 16:53:12 12:04 0 0 ims -1 4064 03/31/20 17:01:34 60:00 36523 22430 ims -1 AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 166 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171086 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343144 MOBILITY cro pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn =sr IIISI INOZIL MOWS. Date Time Number Up Dn (OTC) 4065 03/31/20 17:28:05 0:01 0 1163 ims -1 4066 03/31/20 17:28:11 4:47 516565 1094626 ims -1 4067 03/31/20 18:01:34 60:00 5088 1572 ims -1 4068 03/31/20 18:34:47 60:00 21708 10015 ims -1 4069 03/31/20 19:01:34 60:00 0 0 ims -1 4070 03/31/20 19:34:47 60:00 9944 3284 ims -1 4071 03/31/20 20:01:34 60:00 0 0 ims -1 4072 03/31/20 20:34:47 60:00 10176 3392 ims -1 4073 03/31/20 21:01:34 60:00 0 0 ims -1 4074 03/31/20 21:34:47 60:00 8620 3788 ims -1 4075 03/31/20 22:01:34 17:03 0 0 ims -1 4076 03/31/20 22:34:47 60:00 18580 6228 ims -1 4077 03/31/20 23:34:47 60:00 8496 3144 ims -1 4078 04/01/20 00:34:47 60:00 8604 3160 ims -1 4079 04/01/20 01:34:47 60:00 12012 4608 ims -1 4080 04/01/20 02:34:47 60:00 6924 2788 ims -1 4081 04/01/20 03:34:47 60:00 8712 3284 ims -1 4082 04/01/20 04:34:47 60:00 11904 4500 ims -1 4083 04/01/20 05:34:47 60:00 10116 4144 ims -1 4084 04/01/20 06:34:47 60:00 8820 3144 ims -1 4085 04/01/20 07:34:47 60:00 8388 3036 ims -1 4086 04/01/20 08:34:47 60:00 8388 2820 ims -1 4087 04/01/20 09:34:47 60:00 11904 4716 ims -1 4088 04/01/20 10:34:47 60:00 7048 3680 ims -1 4089 04/01/20 11:34:47 60:00 10332 4128 ims -1 4090 04/01/20 12:34:47 60:00 8728 3160 ims -1 4091 04/01/20 13:34:47 60:00 10564 4484 ims -1 4092 04/01/20 14:34:47 60:00 7156 2804 ims -1 4093 04/01/20 15:34:47 60:00 10084 4176 ims -1 4094 04/01/20 16:09:53 60:00 44265 25658 ims -1 4095 04/01/20 16:34:47 60:00 0 0 ims -1 4096 04/01/20 16:49:32 0:19 3439 14876 ims -1 4097 04/01/20 16:49:59 44:46 9122409 5951191 ims -1 4098 04/01/20 17:09:53 60:00 11148 4800 ims -1 4099 04/01/20 17:34:47 60:00 0 0 isms -1 4100 04/01/20 18:09:53 60:00 8728 3160 ims -1 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 167 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171087 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343145 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. .evi AT&T / 1 4-4 Run Data: 06/17/2020 Run Tina: Data Usage For: NM= Item Conn. Conn. Originating ET Bytes Bytes Apn INS! !OJOS MOWS. Date Time Number Up Dn (OTC) 4101 04/01/20 18:34:47 60:00 0 0 ims -1 4102 04/01/20 19:09:53 60:00 8728 3160 ims -1 4103 04/01/20 19:34:47 34:13 0 0 ims -1 4104 04/01/20 20:09:53 60:00 10348 5020 ims -1 4105 04/01/20 21:09:53 60:00 24612 13268 ims -1 4106 04/01/20 21:53:57 0:28 2176 14903 ims -1 4107 04/01/20 22:09:53 60:00 22420 10184 ims -1 4108 04/01/20 22:49:39 57:35 11972374 8027714 ims -1 4109 04/01/20 23:09:53 60:00 16216 9776 ims -1 4110 04/01/20 23:47:14 4:10 686613 925183 ims -1 4111 04/02/20 00:09:53 60:00 6816 2788 ims -1 4112 04/02/20 01:09:53 60:00 7156 2912 ims -1 4113 04/02/20 02:09:53 60:00 13864 7304 ims -1 4114 04/02/20 03:09:53 60:00 8264 2804 ims -1 4115 04/02/20 04:09:53 60:00 7048 2804 ims -1 4116 04/02/20 05:09:53 60:00 13584 4640 ims -1 4117 04/02/20 06:09:53 60:00 6924 2680 ims -1 4118 04/02/20 07:09:53 60:00 10456 4304 ims -1 4119 04/02/20 08:09:53 60:00 10332 4020 ims -1 4120 04/02/20 09:09:53 60:00 6816 2680 ims -1 4121 04/02/20 10:09:53 60:00 6816 2572 ims -1 4122 04/02/20 11:09:53 60:00 7032 2804 ims -1 4123 04/02/20 12:09:53 60:00 13848 5736 ims -1 4124 04/02/20 13:09:53 60:00 7032 2928 ims -1 4125 04/02/20 14:09:53 60:00 10300 3300 ims -1 4126 04/02/20 15:09:53 60:00 8496 3036 ims -1 4127 04/02/20 16:09:53 60:00 8480 2928 ims -1 4128 04/02/20 17:09:53 14:58 4980 1588 ims -1 4129 04/02/20 17:27:13 60:00 17057 9338 ims -1 4130 04/02/20 18:27:13 60:00 8512 3712 ims -1 4131 04/02/20 19:27:13 60:00 8496 3160 ims -1 4132 04/02/20 20:27:13 60:00 8712 3144 ims -1 4133 04/02/20 21:27:13 60:00 8604 3176 ims -1 4134 04/02/20 22:27:13 54:40 12012 4536 ims -1 4135 04/02/20 23:22:57 60:00 18568 9660 ims -1 4136 04/03/20 00:22:57 60:00 8944 3176 ims -1 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 168 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171088 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343146 MOBILITY ce• ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DM IMSI ISMS MODEL Date Time Number Up Dn (UTC) 4137 04/03/20 01:22:57 60:00 6924 2696 ims 4138 04/03/20 02:22:57 60:00 8388 2928 ims 4139 04/03/20 03:22:57 60:00 15760 5908 ims 4140 04/03/20 04:22:57 60:00 8836 3052 ims 4141 04/03/20 05:22:57 37:29 10392 6580 ims 4142 04/03/20 12:23:15 60:00 16857 9144 ims 4143 04/03/20 12:23:54 0:50 192 0 nxtgenpho APPLR IPROS8 ne 4144 04/03/20 12:23:55 0:50 0 0 nxtgenpho APPLR IPROS8 ne 4145 04/03/20 12:24:36 0:10 1305 5631 nxtgenpho ne 4146 04/03/20 12:24:44 2:11 192 Onmtgonpho APPLE !PHONES ne 4147 04/03/20 12:24:45 2:11 0 Onmtgonpho APPLE !PHONES ne 4148 04/03/20 12:25:44 11:35 3225 5417 nxtgenpho ne 4149 04/03/20 12:26:56 17:20 0 Onxtgonpho APPLE !PHONES ne 4150 04/03/20 12:44:15 2:00 192 Onxtgonpho APPLE !PHONES ne 4151 04/03/20 12:44:16 2:00 0 0 nxtgenpho APPLE !PHONES ne 4152 04/03/20 12:46:15 2:26 192 Onmtgonpho APPLE !PHONES ne 4153 04/03/20 12:46:16 2:26 0 Onmtgonpho APPLE !PHONES no 4154 04/03/20 12:48:42 5:46 192 0 nxtgonpho APPLE !PHONES no 4155 04/03/20 12:48:43 5:46 0 0 nxtgenpho APPLE !PHONES ne 4156 04/03/20 12:54:29 14:38 192 0 nxtgenpho APPLE !PHONES ne 4157 04/03/20 12:54:29 14:39 0 0 nxtgenpho APPLE !PHONES ne 4158 04/03/20 13:09:08 27:17 192 0 nxtgenpho APPLE !PHONES ne 4159 04/03/20 13:09:09 27:17 0 0 nxtgenpho APPLE !PHONES ne 4160 04/03/20 13:23:15 60:00 10068 3268 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 169 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171089 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343147 MOBILITY ceo• PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .0# AT&T ‘•- UTE. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn ENE! INSI MAKE MODEL Date Time Number Up Dn (uzz) 4161 04/03/20 13:36:26 0:41 0 0nxtgonpho APPLE !PHONES ne 4162 04/03/20 13:37:07 0:44 0 0 nxtgenpho APPLE !PHONES ne 4163 04/03/20 13:37:50 14:43 192 0 nxtgenpho APPLE !PHONES ne 4164 04/03/20 13:37:51 14:43 0 0 nxtgenpho APPLE !PHONES ne 4165 04/03/20 13:52:34 0:55 0 0 nxtgenpho APPLE !PHONES ne 4166 04/03/20 13:53:28 2:10 192 0 nxtgenpho APPLE !PHONES ne 4167 04/03/20 13:53:29 2:10 0 0 nxtgenpho APPLE !PHONES ne 4168 04/03/20 13:55:39 30:41 0 0 nxtgenpho APPLE !PHONES ne 4169 04/03/20 14:23:15 12:20 11140 6868 ism 4170 04/03/20 14:24:18 0:12 0 4598 ism 4171 04/03/20 14:26:19 63:58 192 0nxtgonpho APPLE !PHONES ne 4172 04/03/20 14:26:20 60:00 0 0 nxtgenpho APPLE !PHONES ne 4173 04/03/20 14:37:17 3:50 0 0 ism 4174 04/03/20 14:37:41 52:36 6352 6754 ism APPLE !PHONES 4175 04/03/20 14:37:42 52:36 6686 6088 ism APPLE !PHONES 4176 04/03/20 14:41:07 60:00 21261 12240 ism 4177 04/03/20 15:26:20 3:58 0 0 nxtgenpho APPLE !PHONES ne 4178 04/03/20 15:30:18 10:00 192 0 nxtgenpho APPLE !PHONES ne 4179 04/03/20 15:30:19 56:58 0 0 nxtgenpho APPLE !PHONES ne 4180 04/03/20 15:41:07 60:00 10036 3160 ism 4181 04/03/20 16:27:17 31:12 192 0 nxtgenpho APPLE !PHONES ne 4182 04/03/20 16:27:18 31:12 0 0 nxtgenpho APPLE !PHONES ne 4183 04/03/20 16:41:07 2:30 0 0 ism 4184 04/03/20 16:43:15 15:14 6337 6734 ism APPLE !PHONES 4185 04/03/20 16:43:16 15:14 6666 6073 ism APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 170 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171090 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343148 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn L@I INSI MAKE MODEL Date Time Number Up Dn (OTC/ 4186 04/03/20 16:43:37 60:00 18576 9466 ims 4187 04/03/20 16:58:30 16:57 0 Onxtgonpho APPLE 'PHONES ne 4188 04/03/20 17:15:26 20:55 192 0 nxtgenpho APPLE 'PHONES ne 4189 04/03/20 17:15:27 20:55 0 0 nxtgenpho APPLE 'PHONES ne 4190 04/03/20 17:36:22 2:07 0 0 nxtgenpho APPLE 'PHONES ne 4191 04/03/20 17:38:28 43:32 192 0 nxtgenpho APPLE 'PHONES ne 4192 04/03/20 17:38:29 43:33 0 0 nxtgenpho APPLE 'PHONES ne 4193 04/03/20 17:43:37 60:00 8604 3036 ims 4194 04/03/20 18:22:02 1:30 0 0 nxtgenpho APPLE 'PHONES ne 4195 04/03/20 18:23:31 33:11 192 Onxtgonpho APPLE 'PHONES ne 4196 04/03/20 18:23:32 33:11 0 0 nxtgenpho APPLE 'PHONES ne 4197 04/03/20 18:43:37 60:00 10036 3408 ims 4198 04/03/20 18:56:43 8:45 0 0 nxtgenpho APPLE 'PHONES ne 4199 04/03/20 19:05:28 15:03 192 0 nxtgenpho APPLE 'PHONES ne 4200 04/03/20 19:05:29 15:03 0 0 nxtgenpho APPLE 'PHONES ne 4201 04/03/20 19:20:32 1:07 0 0 nxtgenpho APPLE 'PHONES ne 4202 04/03/20 19:21:39 27:43 192 0 nxtgenpho APPLE 'PHONES ne 4203 04/03/20 19:21:40 27:43 0 0 nxtgenpho APPLE 'PHONES ne 4204 04/03/20 19:43:37 60:00 41164 21628 ims 4205 04/03/20 19:49:23 19:28 192 0 nxtgenpho APPLE 'PHONES ne 4206 04/03/20 19:49:24 19:28 0 0 nxtgenpho APPLE 'PHONES ne 4207 04/03/20 20:07:29 0:30 53214 52202 ims 4208 04/03/20 20:08:10 1:00 159700 98815 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 171 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171091 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343149 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:30:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTZ. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn flat INS! late MODZI. Date Time Number Op Dn (OTC) 4209 04/03/20 20:08:52 1:54 0 0 nxtgonpho APPLE !PEONES ne 4210 04/03/20 20:10:45 8:21 192 0 nxtgonpho APPLE !PEONES no 4211 04/03/20 20:10:46 8:21 0 0 nxtgonpho APPLE !PEONES no 4212 04/03/20 20:19:07 21:45 0 0 nxtgonpho APPLE !PEONES no 4213 04/03/20 20:40:51 2:26 192 0 nxtgonpho APPLE !PEONES no 4214 04/03/20 20:40:53 2:25 0 0 nxtgonpho APPLE !PEONES no 4215 04/03/20 20:43:18 0:05 0 0 nxtgonpho APPLE !PEONES ne 4216 04/03/20 20:43:37 60:00 10380 4128 ims 4217 04/03/20 20:44:43 4:25 0 0 nxtgonpho APPLE IMMO ne 4218 04/03/20 20:49:08 35:47 192 0 nxtgonpho APPLE 'PHONES ne 4219 04/03/20 20:49:09 35:47 0 0 nxtgonpho APPLE 'PHONES ne 4220 04/03/20 21:24:55 8:10 192 0 nxtgonpho APPLE 'PHONES ne 4221 04/03/20 21:24:56 8:10 0 0 nxtgonpho APPLE 'PHONES ne 4222 04/03/20 21:33:06 7:16 0 0 nxtgonpho APPLE 'PHONES ne 4223 04/03/20 21:40:22 21:44 192 0 nxtgonpho APPLE 'PHONES ne 4224 04/03/20 21:40:22 21:46 0 0 nxtgonpho APPLE 'PHONES ne 4225 04/03/20 21:43:37 60:00 13568 4784 ims 4226 04/03/20 22:02:07 0:34 0 0 nxtgonpho APPLE 'PHONES no 4227 04/03/20 22:02:40 1:45 192 0 nxtgonpho APPLE 'PHONES no 4228 04/03/20 22:02:42 1:44 0 0 nxtgonpho APPLE 'PHONES no 4229 04/03/20 22:04:26 60:00 0 0 nxtgonpho APPLE 'PHONES ne 4230 04/03/20 22:43:37 60:00 8388 3036 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 172 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171092 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343150 MOBILITY cro pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/17/2020 Run Tina: Data Usage For: Item Conn. Conn. Originating AI Bytes Bytes Apn EMBI IMSI MOWS MODEL Data Time Number Up Dn (OTC) 4231 04/03/20 23:04:26 60:00 0 0 nxtgenpho APPLE IPROME8 no 4232 04/03/20 23:43:37 60:00 9928 3176 ims 4233 04/04/20 00:04:26 28:17 0 0 nxtgenpho APPLE IPE06E8 ne 4234 04/04/20 00:32:43 60:00 0 0 nxtgenpho APPLE 'PEONES ne 4235 04/04/20 00:43:37 60:00 13352 4624 ism 4236 04/04/20 01:32:43 60:00 0 0 nxtgenpho APPLE 'PHONES ne 4237 04/04/20 01:43:37 60:00 10252 3300 Las 4238 04/04/20 02:32:43 60:00 0 0 nxtgenpho APPLE 'PHONES ne 4239 04/04/20 02:43:37 60:00 15988 5032 Las 4240 04/04/20 03:32:43 60:00 0 0 nxtgenpho APPLE 'PHONES ne 4241 04/04/20 03:43:37 60:00 8388 2928 ism 4242 04/04/20 04:32:43 0:01 0 0 nxtgenpho APPLE 'PHONES ne 4243 04/04/20 04:32:46 60:00 0 0 nxtgenpho APPLE 'PHONES ne 4244 04/04/20 04:43:37 60:00 11580 3548 ism 4245 04/04/20 05:32:46 60:00 0 0 nxtgenpho APPLE 'PHONES ne 4246 04/04/20 05:43:37 60:00 11812 4484 ism 4247 04/04/20 06:32:46 60:00 0 0 nxtgenpho APPLE !PHONES no 4248 04/04/20 06:43:37 60:00 6956 2680 ism 4249 04/04/20 07:32:46 60:00 0 0 nxtgenpho APPLE IPHONE8 no 4250 04/04/20 07:43:37 60:00 13444 4676 isms 4251 04/04/20 08:32:46 0:01 0 0 nxtgenpho APPLE 'PHONES ne 4252 04/04/20 08:32:50 60:00 0 0 nxtgenpho APPLE 'PHONES ne 4253 04/04/20 08:43:37 60:00 13244 4640 ism 4254 04/04/20 09:32:50 60:00 0 0 nxtgenpho APPLE !PHONES ne 4255 04/04/20 09:43:37 60:00 10252 3284 ism AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 173 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171093 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343151 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Per: Item Conn. Conn. Originating ET Bytes Bytes Apn =MI IMBI MAKE MODEL Date Time Number Up Dn (UTC) 4256 04/04/20 10:32:50 60:00 0 0 nxtgenpho APPLE 'PHONES ne 4257 04/04/20 10:43:37 60:00 8388 3036 ims 4258 04/04/20 11:32:50 12:22 0 Onxtgonpho APPLE 'PHONES ne 4259 04/04/20 11:43:37 60:00 13584 5680 ims 4260 04/04/20 11:45:11 65:36 192 Onxtgonpho APPLE 'PHONES ne 4261 04/04/20 11:45:12 60:00 0 0 nxtgenpho APPLE 'PHONES ne 4262 04/04/20 12:43:37 39:34 4964 1588 ims 4263 04/04/20 12:45:12 5:36 0 0 nxtgenpho APPLE !PHONES ne 4264 04/04/20 12:50:48 2:53 0 0 nxtgenpho APPLE !PHONES ne 4265 04/04/20 12:53:40 58:19 192 0 nxtgenpho APPLE 'PHONES ne 4266 04/04/20 12:53:41 58:19 0 0 nxtgenpho APPLE !PHONES ne 4267 04/04/20 13:19:41 32:18 6298 8144 ims APPLE 'PHONES 4268 04/04/20 13:19:42 32:18 8076 6142 ims APPLE 'PHONES 4269 04/04/20 13:23:11 60:00 18342 9433 ims 4270 04/04/20 13:52:00 0:06 0 0 nxtgenpho APPLE !PHONES ne 4271 04/04/20 13:52:17 60:00 0 0 nxtgenpho APPLE 'PHONES ne 4272 04/04/20 14:23:11 60:00 10068 3144 ims 4273 04/04/20 14:52:17 60:00 0 0 nxtgenpho APPLE !PHONES ne 4274 04/04/20 15:23:11 60:00 9960 3252 ims 4275 04/04/20 15:52:17 27:29 0 0 nxtgenpho APPLE !PHONES ne 4276 04/04/20 16:19:45 2:41 192 0 nxtgenpho APPLE 'PHONES ne 4277 04/04/20 16:19:47 2:40 0 0 nxtgenpho APPLE !PHONES ne 4278 04/04/20 16:22:27 0:52 0 0 nxtgenpho APPLE !PHONES ne 4279 04/04/20 16:23:11 60:00 13260 4592 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 174 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171094 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343152 MOBILITY ear. PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .s.AT&T ‘•- UTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn ffiI INSI MAKE MODEL Date Time Number Up Dn (OTC) 4280 04/04/20 16:23:18 0:23 192 0 nxtgonpho APPLE 'PHONES no 4281 04/04/20 16:23:20 0:22 0 0 nxtgonpho APPLE 'PHONES no 4282 04/04/20 16:23:42 24:09 0 0 nxtgonpho APPLE 'PHONES no 4283 04/04/20 16:47:50 2:25 192 0 nxtgonpho APPLE 'PHONES no 4284 04/04/20 16:47:52 2:24 0 0 nxtgonpho APPLE 'PHONES ne 4285 04/04/20 16:50:15 4:58 192 0 nxtgonpho APPLE 'PHONES ne 4286 04/04/20 16:50:16 4:58 0 0 nxtgonpho APPLE 'PHONES ne 4287 04/04/20 16:55:14 0:05 0 0 nxtgonpho APPLE 'PHONES ne 4288 04/04/20 16:55:45 7:33 0 0 nxtgonpho APPLE 'PHONES ne 4289 04/04/20 17:03:17 2:07 192 0 nxtgonpho APPLE 'PHONES ne 4290 04/04/20 17:03:19 2:06 0 0 nxtgonpho APPLE 'PHONES ne 4291 04/04/20 17:05:25 5:57 0 0 nxtgonpho APPLE 'PHONES no 4292 04/04/20 17:11:21 2:19 192 0 nxtgonpho APPLE 'PHONES no 4293 04/04/20 17:11:22 2:19 0 0 nxtgonpho APPLE 'PHONES no 4294 04/04/20 17:13:41 0:05 0 0 nxtgonpho APPLE 'PHONES ne 4295 04/04/20 17:14:37 7:18 192 0 nxtgonpho APPLE 'PHONES ne 4296 04/04/20 17:14:38 7:18 0 0 nxtgonpho APPLE 'PHONES ne 4297 04/04/20 17:21:56 8:23 192 0 nxtgonpho APPLE 'PHONES ne 4298 04/04/20 17:21:57 8:23 0 0 nxtgonpho APPLE 'PHONES ne 4299 04/04/20 17:23:11 60:00 10856 4488 ims 4300 04/04/20 17:30:20 1:32 0 0 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 175 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171095 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343153 MOBILITY cre ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTZ. Run Date: 06/17/2020 Run Timm: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn MBE! IM9I NAM MODEL Date Time Nuclear Up Dn (OTC) 4301 04/04/20 17:31:53 3:22 0 0 nxtgonpho APPLE 'PHONES no 4302 04/04/20 17:35:14 2:05 192 0 nxtgonpho APPLE 'PHONES no 4303 04/04/20 17:35:15 2:05 0 0 nxtgenpho APPLE 'PHONES no 4304 04/04/20 17:37:20 21:09 0 0 nxtgenpho APPLE 'PHONES no 4305 04/04/20 17:58:29 2:21 192 0 nxtgonpho APPLE 'PHONES no 4306 04/04/20 17:58:30 2:21 0 0 nxtgonpho APPLE 'PHONES no 4307 04/04/20 18:00:50 6:43 192 0 nxtgonpho APPLE 'PHONES no 4308 04/04/20 18:00:52 6:42 0 0 nxtgonpho APPLE 'PHONES no 4309 04/04/20 18:07:34 60:00 0 0 nxtgonpho APPLE 'PHONES no 4310 04/04/20 18:23:11 60:00 8512 3004 ims 4311 04/04/20 19:07:34 60:00 0 0 nxtgonpho APPLE 'PHONES no 4312 04/04/20 19:23:11 60:00 12120 4452 ims 4313 04/04/20 20:07:34 32:48 0 0 nxtgonpho APPLE 'PHONES no 4314 04/04/20 20:23:11 60:00 0 0 ims 4315 04/04/20 20:40:22 14:45 192 0 nxtgonpho APPLE 'PHONES no 4316 04/04/20 20:40:23 14:45 0 0 nxtgonpho APPLE 'PHONES no 4317 04/04/20 20:47:50 60:00 15113 8893 ims 4318 04/04/20 20:55:08 5:50 0 0 nxtgonpho APPLE 'PHONES no 4319 04/04/20 21:00:57 23:10 192 0 nxtgonpho APPLE 'PHONES no 4320 04/04/20 21:00:58 23:10 0 0 nxtgonpho APPLE 'PHONES no 4321 04/04/20 21:23:11 60:00 0 0 ims 4322 04/04/20 21:24:08 5:55 0 0 nxtgonpho APPLE 'PHONES no 4323 04/04/20 21:30:02 3:38 192 0 nxtgenpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 176 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171096 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343154 MOBILITY 45, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: IS= Item Conn. Conn. Originating ET Bytes Bytes Apn MAX INSI MAR NOBEL Date Time Nusher Up Dn (UTC) 4324 04/04/20 21:30:03 3:38 0 0 nxtgonphe APPLE 'PEONES no 4325 04/04/20 21:33:41 22:58 192 0 nxtgenphe APPLE !PHONES no 4326 04/04/20 21:33:42 22:58 0 0 nxtgonphe APPLE !PHONES no 4327 04/04/20 21:47:50 60:00 10176 3408 ims 4328 04/04/20 21:56:40 1:21 0 0 nxtgonphe APPLE !PHONES ne 4329 04/04/20 21:58:00 2:04 192 0 nxtgonphe APPLE !PHONES ne 4330 04/04/20 21:58:02 2:03 0 0 nxtgonphe APPLE !PHONES ne 4331 04/04/20 22:00:05 32:56 0 0 nxtgonphe APPLE !PHONES ne 4332 04/04/20 22:23:11 60:00 0 0 ims 4333 04/04/20 22:33:01 50:49 192 0 nxtgonphe APPLE !PHONES no 4334 04/04/20 22:33:02 50:49 0 0 nxtgonphe APPLE !PHONES no 4335 04/04/20 22:47:50 60:00 6924 3020 ims 4336 04/04/20 23:23:11 59:45 0 0 ims 4337 04/04/20 23:23:51 7:23 192 0 nxtgonpho APPLE !PHONES no 4338 04/04/20 23:23:52 7:23 0 0 nxtgonpho APPLE !PHONES no 4339 04/04/20 23:31:15 60:00 0 0 nxtgonpho APPLE !PHONES no 4340 04/04/20 23:47:50 60:00 10160 3176 ims 4341 04/05/20 00:31:15 60:00 0 0 nxtgonpho APPLE !PHONES no 4342 04/05/20 00:47:50 60:00 8496 2928 ims 4343 04/05/20 01:31:15 10:13 0 0 nxtgonpho APPLE !PHONES no 4344 04/05/20 01:41:28 39:59 0 0 nxtgonpho APPLE !PHONES no 4345 04/05/20 01:47:50 60:00 11672 4412 ims 4346 04/05/20 02:21:26 76:32 192 0 nxtgonpho APPLE !PHONES no 4347 04/05/20 02:21:27 60:00 0 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 177 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171097 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343155 MOBILITY P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in k..70 .0 AT&T UTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DOLT INSI MAKE MODEL Date Time Numbor Up Dn (UTC) 4348 04/05/20 02:47:50 60:00 6924 2696 isms 4349 04/05/20 03:21:27 16:32 0 Onxtgonpho APPLE 'PHONES ne 4350 04/05/20 03:37:59 176:19 192 Onxtgonpho APPLE 'PHONES ne 4351 04/05/20 03:38:00 60:00 0 Onxtgonpho APPLE 'PHONES ne 4352 04/05/20 03:47:50 60:00 13924 4856 isms 4353 04/05/20 04:38:00 60:00 0 Onxtgonpho APPLE 'PHONES ne 4354 04/05/20 04:47:50 60:00 8496 3036 isms 4355 04/05/20 05:38:00 56:19 0 Onxtgonpho APPLE 'PHONES ne 4356 04/05/20 05:47:50 60:00 6816 2788 isms 4357 04/05/20 06:47:50 60:00 11796 4536 isms 4358 04/05/20 07:47:50 12:50 4980 1588 isms 4359 04/05/20 08:08:28 60:00 18067 9628 isms 4360 04/05/20 09:08:28 60:00 8388 3020 isms 4361 04/05/20 09:18:59 54:33 0 Onxtgonpho APPLE 'PHONES ne 4362 04/05/20 10:08:28 60:00 8388 3020 isms 4363 04/05/20 10:13:31 68:53 192 Onxtgonpho APPLE 'PHONES ne 4364 04/05/20 10:13:32 60:00 0 Onxtgonpho APPLE 'PHONES ne 4365 04/05/20 11:08:28 60:00 11888 4376 isms 4366 04/05/20 11:13:32 8:53 0 Onxtgonpho APPLE 'PHONES ne 4367 04/05/20 11:22:25 22:37 192 Onxtgonpho APPLE 'PHONES ne 4368 04/05/20 11:22:26 22:37 0 Onxtgonpho APPLE 'PHONES ne 4369 04/05/20 11:45:03 21:34 0 Onxtgonpho APPLE 'PHONES ne 4370 04/05/20 12:06:36 60:29 192 Onxtgonpho APPLE 'PHONES ne 4371 04/05/20 12:06:37 60:00 0 Onxtgonpho APPLE 'PHONES ne 4372 04/05/20 12:08:28 32:45 5088 1588 isms 4373 04/05/20 12:40:12 26:53 6352 6666 isms APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 178 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171098 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343156 MOBILITY 0 PRIO2O AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in C / 1 4 "#. 1 04 AT&T UTC. Run pato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Aprt DMZ INSI MAKE MODEL Date Time Number Up Dn (OTC) 4374 04/05/20 12:40:13 26:53 6666 6088 ims APPLE 'PHONES 4375 04/05/20 12:43:45 60:00 15273 8758 ims 4376 04/05/20 13:06:37 0:29 0 0nxtgonphe APPLE 'PHONES ne 4377 04/05/20 13:07:05 8:12 192 0 nxtgonphe APPLE 'PHONES ne 4378 04/05/20 13:07:06 8:12 0 0 nxtgonphe APPLE 'PHONES ne 4379 04/05/20 13:15:18 0:56 0 0 nxtgonphe APPLE 'PHONES ne 4380 04/05/20 13:16:13 2:17 192 0 nxtgonphe APPLE 'PHONES ne 4381 04/05/20 13:16:14 2:17 0 0 nxtgonpho APPLE 'PHONES ne 4382 04/05/20 13:18:31 12:27 192 0 nxtgonphe APPLE 'PHONES ne 4383 04/05/20 13:18:32 12:27 0 0 nxtgonphe APPLE 'PHONES ne 4384 04/05/20 13:30:59 2:36 0 0 nxtgonphe APPLE 'PHONES ne 4385 04/05/20 13:33:34 8:26 192 0nxtgonphe APPLE 'PHONES ne 4386 04/05/20 13:33:36 8:25 0 0 nxtgonphe APPLE 'PHONES ne 4387 04/05/20 13:42:01 15:56 0 0 nxtgonphe APPLE 'PHONES ne 4388 04/05/20 13:43:45 60:00 8604 3160 isms 4389 04/05/20 13:57:56 2:04 192 0 nxtgonphe APPLE 'PHONES ne 4390 04/05/20 13:57:57 2:04 0 0 nxtgonphe APPLE 'PHONES ne 4391 04/05/20 14:00:01 1:59 0 0 nxtgonphe APPLE 'PHONES ne 4392 04/05/20 14:01:59 2:05 192 0 nxtgonphe APPLE 'PHONES ne 4393 04/05/20 14:02:01 2:04 0 0 nxtgonphe APPLE 'PHONES ne 4394 04/05/20 14:04:05 16:42 0 0 nxtgonphe APPLE 'PHONES ne 4395 04/05/20 14:20:46 2:04 192 0 nxtgonphe APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 179 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNI_ 00171099 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343157 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ IMSI MAKE MODEL Date Time Number Up Dn (OTC) 4396 04/05/20 14:20:47 2:04 0 0 nxtgonpho APPLE 'PHONES no 4397 04/05/20 14:22:51 8:27 0 0 nxtgonpho APPLE 'PHONES no 4398 04/05/20 14:31:17 2:04 192 0 nxtgonpho APPLE 'PHONES no 4399 04/05/20 14:31:18 2:04 0 0 nxtgonpho APPLE 'PHONES no 4400 04/05/20 14:33:22 2:09 0 0 nxtgonpho APPLE 'PHONES no 4401 04/05/20 14:35:30 2:05 192 0 nxtgonpho APPLE 'PHONES no 4402 04/05/20 14:35:32 2:04 0 0 nxtgonpho APPLE 'PHONES no 4403 04/05/20 14:37:36 0:34 0 0 nxtgonpho APPLE 'PHONES ne 4404 04/05/20 14:38:10 2:04 192 0 nxtgonpho APPLE 'PHONES ne 4405 04/05/20 14:38:11 2:04 0 0 nxtgonpho APPLE 'PHONES ne 4406 04/05/20 14:40:15 3:13 0 0 nxtgonpho APPLE 'PHONES no 4407 04/05/20 14:43:27 2:18 192 0 nxtgonpho APPLE 'PHONES no 4408 04/05/20 14:43:28 2:18 0 0 nxtgonpho APPLE 'PHONES no 4409 04/05/20 14:43:45 60:00 6956 2696 ims 4410 04/05/20 14:45:46 6:03 192 0 nxtgonpho APPLE 'PHONES no 4411 04/05/20 14:45:47 6:03 0 0 nxtgonpho APPLE 'PHONES no 4412 04/05/20 14:51:50 0:36 0 0 nxtgonpho APPLE 'PHONES no 4413 04/05/20 14:52:25 2:04 192 0 nxtgonpho APPLE 'PHONES ne 4414 04/05/20 14:52:26 2:04 0 0 nxtgonpho APPLE 'PHONES ne 4415 04/05/20 14:54:30 0:37 0 0 nxtgonpho APPLE 'PHONES ne 4416 04/05/20 14:55:06 2:04 192 0 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 180 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171100 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343158 MOBILITY 41.10 ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ktre "ses -s. AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ INS! MAKE MODEL Date Time Number Up Dn (OTC/ 4417 04/05/20 14:55:07 2:04 0 0 nxtgenpho APPLE 'PHONES no 4418 04/05/20 14:57:11 0:37 0 0 nxtgenpho APPLE 'PHONES no 4419 04/05/20 14:57:47 34:03 192 0 nxtgenpho APPLE 'PHONES no 4420 04/05/20 14:57:48 34:03 0 0 nxtgenpho APPLE 'PHONES no 4421 04/05/20 15:31:50 10:00 192 0 nxtgenpho APPLE 'PHONES no 4422 04/05/20 15:31:51 27:42 0 0 nxtgenpho APPLE 'PHONES ne 4423 04/05/20 15:43:45 60:00 8496 2928 ims 4424 04/05/20 15:59:32 2:04 192 0 nxtgonpho APPLE 'PHONES ne 4425 04/05/20 15:59:33 2:04 0 0 nxtgonpho APPLE 'PHONES ne 4426 04/05/20 16:01:37 0:35 0 0 nxtgonpho APPLE 'PHONES ne 4427 04/05/20 16:02:11 2:18 192 0 nxtgonpho APPLE 'PHONES ne 4428 04/05/20 16:02:12 2:18 0 0 nxtgonpho APPLE 'PHONES ne 4429 04/05/20 16:04:30 12:46 192 0 nxtgonpho APPLE 'PHONES ne 4430 04/05/20 16:04:31 12:46 0 0 nxtgonpho APPLE 'PHONES ne 4431 04/05/20 16:17:16 2:04 192 0 nxtgonpho APPLE 'PHONES ne 4432 04/05/20 16:17:18 2:03 0 0 nxtgonpho APPLE 'PHONES ne 4433 04/05/20 16:19:21 2:23 0 0 nxtgonpho APPLE 'PHONES ne 4434 04/05/20 16:21:43 8:44 192 0 nxtgonpho APPLE 'PHONES ne 4435 04/05/20 16:21:44 8:44 0 0 nxtgonpho APPLE 'PHONES ne 4436 04/05/20 16:30:28 27:49 192 0 nxtgonpho APPLE 'PHONES ne 4437 04/05/20 16:30:29 27:49 0 0 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 181 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171101 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343159 MOBILITY cro pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 1/4•-si. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn L@1 IICiI MAKE MODEL Date Time Number Up Dn (OTC) 4438 04/05/20 16:43:45 60:00 11920 4376 ims 4439 04/05/20 16:58:18 8:22 192 Onmtgenpho APPLE 'PHONES ne 4440 04/05/20 16:58:19 8:22 0 0 nxtgenpho APPLE 'PHONES ne 4441 04/05/20 17:06:41 0:36 0 0 nxtgenpho APPLE 'PHONES ne 4442 04/05/20 17:07:16 2:05 192 0 nxtgenpho APPLE 'PHONES ne 4443 04/05/20 17:07:18 2:04 0 0 nxtgenpho APPLE 'PHONES ne 4444 04/05/20 17:09:22 1:06 0 0 nxtgenpho APPLE 'PHONES ne 4445 04/05/20 17:10:27 2:17 192 Onxtgenpho APPLE 'PHONES ne 4446 04/05/20 17:10:28 2:17 0 0 nxtgenpho APPLE 'PHONES ne 4447 04/05/20 17:12:44 6:03 192 0 nxtgenpho APPLE 'PHONES ne 4448 04/05/20 17:12:45 6:04 0 0 nxtgenpho APPLE 'PHONES ne 4449 04/05/20 17:18:49 0:36 0 0 nxtgenpho APPLE 'PHONES ne 4450 04/05/20 17:19:24 8:21 192 0 nxtgenpho APPLE 'PHONES ne 4451 04/05/20 17:19:25 8:21 0 Onxtgenpho APPLE 'PHONES ne 4452 04/05/20 17:27:46 19:00 0 0 nxtgenpho APPLE 'PHONES ne 4453 04/05/20 17:43:45 34:11 6924 2840 ims 4454 04/05/20 17:46:46 2:26 0 0 nxtgenpho APPLE 'PHONES ne 4455 04/05/20 17:49:11 8:24 192 0 nxtgenpho APPLE 'PHONES ne 4456 04/05/20 17:49:12 8:24 0 0 nxtgenpho APPLE 'PHONES ne 4457 04/05/20 17:57:36 60:00 0 0 nxtgenpho APPLE 'PHONES ne 4458 04/05/20 18:24:57 8:44 8816 6178 ims APPLE 'PHONES 4459 04/05/20 18:33:41 0:01 0 0 ims APPLE 'PHONES 4460 04/05/20 18:33:50 60:00 16765 9014 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 182 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171102 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343160 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. .a# AT&T ‘•.. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INKS INSI MAKE MODEL Date Time Number Up Dn (OTC) 4461 04/05/20 18:57:36 60:00 0 0 nxtgenpho APPLE !PHONES ne 4462 04/05/20 19:33:50 60:00 10144 3284 ims 4463 04/05/20 19:57:36 60:00 0 0 nxtgenpho APPLE !PHONES ne 4464 04/05/20 20:33:50 34:45 5072 1572 ims 4465 04/05/20 20:57:36 54:28 0 0 nxtgenpho APPLE !PHONES no 4466 04/05/20 21:08:36 42:23 9268 7288 ims APPLE !PHONES 4467 04/05/20 21:50:59 60:00 11920 4220 ims APPLE !PHONES 4468 04/05/20 21:52:03 2:04 192 Ormtgonpho APPLE !PHONES no 4469 04/05/20 21:52:04 2:04 0 0 nxtgenpho APPLE !PHONES no 4470 04/05/20 21:54:08 56:14 0 0 nxtgenpho APPLE !PHONES no 4471 04/05/20 22:50:22 8:53 192 0 nxtgenpho APPLE !PHONES no 4472 04/05/20 22:50:23 8:53 0 0 nxtgenpho APPLE !PHONES no 4473 04/05/20 22:50:59 60:00 8728 3020 ims APPLE !PHONES 4474 04/05/20 22:59:15 6:04 192 0 nxtgenpho APPLE !PHONES no 4475 04/05/20 22:59:17 6:03 0 0 nxtgenpho APPLE !PHONES no 4476 04/05/20 23:05:20 26:11 0 0 nxtgenphe APPLE !PHONES no 4477 04/05/20 23:31:30 2:05 192 0 nxtgenphe APPLE !PHONES no 4478 04/05/20 23:31:31 2:05 0 0 nxtgenphe APPLE !PHONES no 4479 04/05/20 23:33:36 6:40 0 0 nxtgenphe APPLE !PHONES no 4480 04/05/20 23:40:15 2:04 192 0 nxtgenphe APPLE !PHONES no 4481 04/05/20 23:40:16 2:05 0 0 nxtgenpho APPLE !PHONES no 4482 04/05/20 23:42:21 14:38 0 0 nxtgenpho APPLE !PHONES no 4483 04/05/20 23:50:59 60:00 8496 2896 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 183 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171103 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343161 MOBILITY 45, pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: libkm Item Conn. Conn. Originating ET Bytos Bytes Apn MAX INSI MAKE MODEL Date Timm Number Up Dn (OTC) 4484 04/05/20 23:56:58 2:46 192 Onstgenpho APPLE !PHONES ne 4485 04/05/20 23:56:59 2:46 0 0 nxtgonpho APPLE !PHONES ne 4486 04/05/20 23:59:44 14:30 192 0 nxtgonpho APPLE !PHONES ne 4487 04/05/20 23:59:45 14:30 0 0 nxtgonpho APPLE !PHONES no 4488 04/06/20 00:14:15 14:15 0 0 nxtgonpho APPLE !PHONES no 4489 04/06/20 00:28:29 1:16 192 0 nxtgonpho APPLE !PHONES no 4490 04/06/20 00:28:30 1:16 0 0 nxtgonpho APPLE !PHONES ne 4491 04/06/20 00:29:46 0:49 0 0 nxtgonpho APPLE !PHONES ne 4492 04/06/20 00:30:34 2:04 192 0 nxtgonpho APPLE !PHONES ne 4493 04/06/20 00:30:35 2:04 0 0 nxtgonpho APPLE !PHONES no 4494 04/06/20 00:32:39 0:36 0 0 nxtgonpho APPLE !PHONES no 4495 04/06/20 00:33:14 8:27 192 0 nxtgonpho APPLE !PHONES no 4496 04/06/20 00:33:15 8:27 0 0 nxtgonpho APPLE !PHONES no 4497 04/06/20 00:41:42 1:42 0 0 nxtgonpho APPLE !PHONES no 4498 04/06/20 00:43:23 2:05 192 0 nxtgonpho APPLE !PHONES ne 4499 04/06/20 00:43:24 2:05 0 0 nxtgenpho APPLE !PHONES ne 4500 04/06/20 00:45:29 1:25 0 0 nxtgonpho APPLE !PHONES no 4501 04/06/20 00:46:53 2:04 192 0 nxtgenpho APPLE !PHONES no 4502 04/06/20 00:46:54 2:04 0 0 nxtgenpho APPLE !PHONES ne 4503 04/06/20 00:48:58 2:12 0 0 nxtgonpho APPLE !PHONES ne 4504 04/06/20 00:50:59 60:00 6956 2648 ism APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 184 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171104 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343162 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating BT Bytes Bytes Apn TERI IMSI MAKS MODEL Date Time Number Up On (OTC) 4505 04/06/20 00:51:09 3:35 192 0 nxtgenpho APPLE !PEONES ne 4506 04/06/20 00:51:10 3:35 0 0 nxtgenpho APPLE !PEONES ne 4507 04/06/20 00:54:45 5:15 0 0 nxtgenpho APPLE !PEONES ne 4508 04/06/20 00:59:59 8:19 192 0 nxtgenpho APPLE !PEONES ne 4509 04/06/20 01:00:01 8:18 0 0 nxtgenpho APPLE 'PHONES ne 4510 04/06/20 01:08:19 39:00 0 0 nxtgenpho APPLE 'PHONES ne 4511 04/06/20 01:47:18 9:03 192 0 nxtgenpho APPLE 'PHONES ne 4512 04/06/20 01:47:20 9:02 0 0 nxtgenpho APPLE 'PHONES ne 4513 04/06/20 01:50:59 60:00 15420 5828 ims APPLE 'PHONES 4514 04/06/20 01:56:22 3:04 0 0 nxtgenpho APPLE 'PHONES ne 4515 04/06/20 01:59:25 3:08 192 0 nxtgenpho APPLE 'PHONES ne 4516 04/06/20 01:59:26 3:08 0 0 nxtgenpho APPLE 'PHONES ne 4517 04/06/20 02:02:33 2:54 192 0 nxtgenpho APPLE 'PHONES ne 4518 04/06/20 02:02:34 2:54 0 0 nxtgenpho APPLE 'PHONES ne 4519 04/06/20 02:05:28 23:22 0 0 nxtgenpho APPLE 'PHONES ne 4520 04/06/20 02:28:49 14:16 192 0 nxtgenpho APPLE 'PHONES ne 4521 04/06/20 02:28:50 14:16 0 0 nxtgenpho APPLE 'PHONES ne 4522 04/06/20 02:43:06 2:07 0 0 nxtgenpho APPLE 'PHONES ne 4523 04/06/20 02:45:12 6:13 192 0 nxtgenpho APPLE 'PHONES ne 4524 04/06/20 02:45:13 6:13 0 0 nxtgenpho APPLE 'PHONES ne 4525 04/06/20 02:50:59 60:00 8388 2896 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 185 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171105 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343163 MOBILITY / 1 44e. pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Sim Item Conn. Conn. Originating CT Bytes Bytes Apn nom IMBI MAIM MODEL Date Time Number Up Dn (OTC) 4526 04/06/20 02:51:26 25:12 0 0 nxtgenpho APPLE !PEONES ne 4527 04/06/20 03:16:37 1:30 192 0 nxtgenpho APPLE !PEONES ne 4528 04/06/20 03:16:38 1:30 0 0 nxtgenpho APPLE !PEONES ne 4529 04/06/20 03:18:08 1:14 0 0 nxtgenpho APPLE !PEONES ne 4530 04/06/20 03:19:21 2:10 192 0 nxtgenpho APPLE !PEONES ne 4531 04/06/20 03:19:22 2:10 0 0 nxtgenpho APPLE !PEONES ne 4532 04/06/20 03:21:32 26:22 0 0 nxtgenpho APPLE !PEONES ne 4533 04/06/20 03:49:54 12:26 192 0 nxtgenpho APPLE !PHONES ne 4534 04/06/20 03:49:55 12:27 0 0 nxtgenpho APPLE 'PHONES ne 4535 04/06/20 03:50:59 56:49 13136 4872 ims APPLE 'PHONES 4536 04/06/20 04:02:22 8:42 0 0 nxtgenpho APPLE !PHONES ne 4537 04/06/20 04:11:03 2:04 192 0 nxtgenpho APPLE !PHONES ne 4538 04/06/20 04:11:04 2:04 0 0 nxtgenpho APPLE !PHONES ne 4539 04/06/20 04:13:08 6:05 0 0 nxtgenpho APPLE !PHONES ne 4540 04/06/20 04:19:12 2:04 192 0 nxtgenpho APPLE !PHONES ne 4541 04/06/20 04:19:13 2:04 0 0 nxtgenpho APPLE !PHONES ne 4542 04/06/20 04:21:17 0:59 0 0 nxtgenpho APPLE !PHONES ne 4543 04/06/20 04:22:15 2:05 192 0 nxtgenpho APPLE !PHONES ne 4544 04/06/20 04:22:16 2:05 0 0 nxtgenpho APPLE !PHONES ne 4545 04/06/20 04:24:21 0:32 0 0 nxtgenpho APPLE !PHONES ne 4546 04/06/20 04:24:52 2:04 192 0 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 186 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171106 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343164 MOBILITY e s, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:38:58pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .s# AT&T `•-. UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: libkm Item Conn. Conn. Originating ET Bytes Bytes Apn DC INSI MAKE MODEL Date Time Numbor Up Dn (OTC) 4547 04/06/20 04:24:53 2:04 0 0 nxtgonpho APPLE 'PHONES ne 4548 04/06/20 04:26:57 10:37 0 0 nxtgonpho APPLE 'PHONES ne 4549 04/06/20 04:37:33 9:34 192 0 nxtgonpho APPLE 'PHONES ne 4550 04/06/20 04:37:35 9:33 0 0 nxtgonpho APPLE 'PHONES ne 4551 04/06/20 04:47:08 2:44 192 0 nxtgonpho APPLE 'PHONES ne 4552 04/06/20 04:47:09 2:43 7048 6456 isms APPLE 'PHONES 4553 04/06/20 04:47:09 2:45 0 0 nxtgonpho APPLE 'PHONES ne 4554 04/06/20 04:47:10 2:44 6456 6784 isms APPLE 'PHONES 4555 04/06/20 04:49:28 60:00 16637 9036 isms 4556 04/06/20 04:49:53 0:49 0 0 nxtgonpho APPLE 'PHONES ne 4557 04/06/20 04:50:42 240:02 192 0nxtgonpho APPLE 'PHONES ne 4558 04/06/20 04:50:43 60:00 0 0 nxtgonpho APPLE 'PHONES ne 4559 04/06/20 05:49:28 60:00 8388 2928 isms 4560 04/06/20 05:50:43 60:00 0 0 nxtgonpho APPLE 'PHONES ne 4561 04/06/20 06:49:28 60:00 8496 3036 isms 4562 04/06/20 06:50:43 60:00 0 0 nxtgonpho APPLE 'PHONES ne 4563 04/06/20 07:49:28 60:00 15048 4872 isms 4564 04/06/20 07:50:43 60:00 0 0 nxtgonpho APPLE 'PHONES no 4565 04/06/20 08:49:28 60:00 6940 3680 isms 4566 04/06/20 08:50:43 0:02 0 0 nxtgonpho APPLE 'PHONES ne 4567 04/06/20 08:50:45 1:58 192 0 nxtgonpho APPLE 'PHONES ne 4568 04/06/20 08:50:46 1:58 0 0 nxtgonpho APPLE 'PHONES ne 4569 04/06/20 08:52:44 1:23 0 0 nxtgonpho APPLE 'PHONES ne 4570 04/06/20 08:54:06 21:13 192 0 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 187 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171107 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343165 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .al. AT&T ‘ft UTC. Run Date: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating BT Bytes Bytes Apn L@3 IMSI MAKE MODEL Date Time Number Up Dn (OTC) 4571 04/06/20 08:54:07 21:13 0 0 nxtgonphe APPLE !PHONES ne 4572 04/06/20 09:15:20 0:39 0 0 nxtgonphe APPLE 'PHONES ne 4573 04/06/20 09:15:58 27:10 192 0 nxtgonpho APPLE 'PHONES ne 4574 04/06/20 09:15:59 27:10 0 0 nxtgonphe APPLE 'PHONES ne 4575 04/06/20 09:43:09 1:40 0 0 nxtgonphe APPLE 'PHONES ne 4576 04/06/20 09:44:48 2:18 192 0nxtgonphe APPLE !PHONES ne 4577 04/06/20 09:44:50 2:17 0 0 nxtgonphe APPLE !PHONES no 4578 04/06/20 09:47:06 6:44 192 0 nxtgonphe APPLE 'PHONES no 4579 04/06/20 09:47:07 6:44 0 0 nxtgonphe APPLE 'PHONES no 4580 04/06/20 09:49:28 60:00 13368 4676 ims 4581 04/06/20 09:53:51 44:00 192 0 nxtgonphe APPLE 'PHONES ne 4582 04/06/20 09:53:52 44:00 0 0 nxtgonphe APPLE 'PHONES ne 4583 04/06/20 10:37:52 0:42 0 0 nxtgonphe APPLE 'PHONES ne 4584 04/06/20 10:38:33 29:40 192 0 nxtgonphe APPLE 'PHONES ne 4585 04/06/20 10:38:34 29:41 0 0 nxtgonphe APPLE 'PHONES ne 4586 04/06/20 10:49:28 60:00 13584 4516 ims 4587 04/06/20 11:08:14 0:35 0 0 nxtgonphe APPLE 'PHONES ne 4588 04/06/20 11:08:48 14:53 192 0 nxtgonphe APPLE 'PHONES no 4589 04/06/20 11:08:49 14:53 0 0 nxtgonpho APPLE 'PHONES no 4590 04/06/20 11:23:42 1:37 0 0 nxtgonpho APPLE 'PHONES no 4591 04/06/20 11:25:18 27:35 192 0 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 188 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171108 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343166 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .••- 0° AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: IS= Item Conn. Conn. Originating ET Bytes Bytes Apn EMI INSI MAKE MODEL Date Time Numbor Up Dn (OTC) 4592 04/06/20 11:25:19 27:35 0 0 nmtgonpho APPLE 'PHONES ne 4593 04/06/20 11:49:28 60:00 8620 3052 Las 4594 04/06/20 11:52:53 2:04 192 0 nmtgonpho APPLE 'PHONES ne 4595 04/06/20 11:52:54 2:04 0 0 nmtgonpho APPLE 'PHONES ne 4596 04/06/20 11:54:58 0:36 0 0 nmtgonpho APPLE 'PHONES ne 4597 04/06/20 11:55:34 20:57 192 0 nmtgonpho APPLE 'PHONES no 4598 04/06/20 11:55:35 20:57 0 0 nmtgonpho APPLE 'PHONES no 4599 04/06/20 12:16:32 0:48 0 0 nmtgonpho APPLE 'PHONES no 4600 04/06/20 12:17:19 20:57 192 0 nmtgonpho APPLE 'PHONES no 4601 04/06/20 12:17:20 20:57 0 0 nmtgonpho APPLE 'PHONES ne 4602 04/06/20 12:38:17 17:13 0 0 nmtgonpho APPLE 'PHONES ne 4603 04/06/20 12:49:28 60:00 8372 2928 ims 4604 04/06/20 12:55:29 2:04 192 0 nmtgonpho APPLE 'PHONES ne 4605 04/06/20 12:55:31 2:03 0 0 nmtgonpho APPLE 'PHONES ne 4606 04/06/20 12:57:34 4:36 0 0 nmtgonpho APPLE 'PHONES ne 4607 04/06/20 13:02:09 2:05 192 0 nmtgonpho APPLE 'PHONES ne 4608 04/06/20 13:02:10 2:05 0 0 nmtgonpho APPLE 'PHONES no 4609 04/06/20 13:04:15 6:34 0 0 nmtgonpho APPLE 'PHONES no 4610 04/06/20 13:10:49 26:43 0 0 nmtgonpho APPLE 'PHONES no 4611 04/06/20 13:37:31 8:58 192 0 nmtgonpho APPLE 'PHONES no 4612 04/06/20 13:37:32 8:58 0 0 nmtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 189 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171109 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343167 MOBILITY e s, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run pato: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating Be Bytes Bytes Apn 7:1012 INS! NAPS MOD= Date Time Up Dn (OTC/ 4613 04/06/20 13:46:30 13:07 192 0 nxtgenpho APPLE 'PEONES ne 4614 04/06/20 13:46:31 13:07 0 0 nxtgenpho APPLE 'PEONES ne 4615 04/06/20 13:49:28 60:00 10068 3176 ims 4616 04/06/20 13:59:38 18:41 0 Onstgenpho APPLE 'PEONES ne 4617 04/06/20 14:18:18 42:38 288 0 nxtgenpho APPLE 'PEONES ne 4618 04/06/20 14:18:19 42:38 0 0 nxtgenpho APPLE 'PEONES ne 4619 04/06/20 14:49:28 60:00 17440 6372 ims 4620 04/06/20 15:00:57 6:02 0 0 nxtgenpho APPLE !PHONES no 4621 04/06/20 15:06:58 5:33 192 0 nxtgenpho APPLE !PHONES ne 4622 04/06/20 15:07:00 5:32 0 0 nxtgenpho APPLE !PHONES ne 4623 04/06/20 15:12:32 0:51 0 0 nxtgenpho APPLE !PHONES ne 4624 04/06/20 15:13:22 2:03 192 0 nxtgenpho APPLE !PHONES ne 4625 04/06/20 15:13:23 2:03 0 0 nxtgenpho APPLE !PHONES ne 4626 04/06/20 15:15:26 6:09 0 0 nxtgenpho APPLE !PHONES ne 4627 04/06/20 15:21:35 8:13 192 0 nxtgenpho APPLE !PHONES ne 4628 04/06/20 15:21:36 8:14 0 0 nxtgenpho APPLE !PHONES ne 4629 04/06/20 15:29:49 3:33 0 0 nxtgenpho APPLE !PHONES ne 4630 04/06/20 15:33:21 2:04 192 0 nxtgenpho APPLE !PHONES no 4631 04/06/20 15:33:22 2:04 0 0 nxtgenpho APPLE !PHONES no 4632 04/06/20 15:35:26 7:07 0 0 nxtgenpho APPLE !PHONES no 4633 04/06/20 15:42:32 2:10 192 0 nxtgenpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 190 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171110 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343168 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ttra lso AT&T Run Date: 06/17/2020 Run Tine: Data Usage For: IS= Item Conn. Conn. Originating BT Bytes Bytes Apn MBE! INSI MAKE MODEL Date Time Number Up 06 (OTC/ 4634 04/06/20 15:42:33 2:10 0 Onxtgenpho APPLE 'PHONES ne 4635 04/06/20 15:44:43 1:56 0 0 nxtgenpho APPLE 'PHONES ne 4636 04/06/20 15:46:38 33:20 192 0 nxtgenpho APPLE 'PHONES ne 4637 04/06/20 15:46:39 33:20 0 0 nxtgenpho APPLE 'PHONES ne 4638 04/06/20 15:49:28 60:00 6924 2804 ims 4639 04/06/20 16:19:59 16:41 192 0 nxtgenphe APPLE 'PHONES ne 4640 04/06/20 16:20:00 16:41 0 0 nxtgenpho APPLE 'PHONES ne 4641 04/06/20 16:36:41 12:04 192 0 nxtgenpho APPLE 'PHONES ne 4642 04/06/20 16:36:42 12:04 0 0 nxtgenpho APPLE 'PHONES ne 4643 04/06/20 16:48:46 60:00 0 0 nxtgenphe APPLE 'PHONES ne 4644 04/06/20 16:49:28 60:00 7264 2928 ims 4645 04/06/20 17:48:46 50:14 0 0 nxtgenphe APPLE 'PHONES ne 4646 04/06/20 17:49:28 60:00 11796 4268 ims 4647 04/06/20 18:38:59 2:26 192 0 nxtgenphe APPLE 'PHONES ne 4648 04/06/20 18:39:00 2:26 0 0 nxtgenphe APPLE 'PHONES ne 4649 04/06/20 18:41:26 2:48 192 0 nxtgenphe APPLE 'PHONES ne 4650 04/06/20 18:41:27 2:48 0 0 nxtgenphe APPLE 'PHONES ne 4651 04/06/20 18:44:14 2:21 192 0 nxtgenpho APPLE 'PHONES ne 4652 04/06/20 18:44:16 2:20 0 0 nxtgenpho APPLE 'PHONES ne 4653 04/06/20 18:46:35 33:05 192 0 nxtgenpho APPLE 'PHONES ne 4654 04/06/20 18:46:36 33:05 0 0 nxtgenpho APPLE 'PHONES ne 4655 04/06/20 18:49:28 60:00 8820 3268 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 191 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171111 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343169 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: SS= Item Conn. Conn. Originating ET Bytos Bytes Apn EMBI IMSI MAKE MODEL Date Time Number Up Dn (OTC/ 4656 04/06/20 19:19:41 55:50 0 0 nactgenpho APPLE IPEOMTA ne 4657 04/06/20 19:49:28 60:00 12120 4784 isms 4658 04/06/20 20:15:30 8:54 192 0 nactgonpho APPLE IPEOMTA ne 4659 04/06/20 20:15:31 8:54 0 0 nactgonpho APPLE IPEOMTA ne 4660 04/06/20 20:24:24 6:21 192 0 nactgonpho APPLE !PEONES ne 4661 04/06/20 20:24:25 6:21 0 0 nactgonpho APPLE 'PAMPA ne 4662 04/06/20 20:30:46 42:51 0 0 nactgonpho APPLE 'PHONES ne 4663 04/06/20 20:49:28 25:15 23832 16740 ims 4664 04/06/20 21:07:51 0:28 1749 10097 ims 4665 04/06/20 21:08:48 5:55 1425959 510796 ims 4666 04/06/20 21:13:37 23:36 192 Onmtgonpho APPLE 'PHONES ne 4667 04/06/20 21:13:38 23:36 0 0 nmtgonpho APPLE 'PHONES ne 4668 04/06/20 21:14:41 22:32 17908 14555 ims APPLE 'PHONES 4669 04/06/20 21:14:42 22:32 14142 17664 ims APPLE 'PHONES 4670 04/06/20 21:15:01 12:05 1705278 2630230 ims APPLE 'PHONES 4671 04/06/20 21:15:02 12:05 2630230 1705278 ims APPLE 'PHONES 4672 04/06/20 21:32:47 39:04 20650 12963 ims 4673 04/06/20 21:37:14 3:54 0 0 nxtgenpho APPLE 'PHONES ne 4674 04/06/20 21:41:07 2:38 192 0 nactgonpho APPLE 'PHONES ne 4675 04/06/20 21:41:08 2:38 0 0 nxtgenpho APPLE 'PHONES ne 4676 04/06/20 21:43:46 8:35 0 0 nmtgonpho APPLE 'PHONES no 4677 04/06/20 21:52:20 9:49 192 0 nxtgonpho APPLE 'PHONES no 4678 04/06/20 21:52:21 9:49 0 0 nxtgonpho APPLE 'PHONES no 4679 04/06/20 22:02:10 9:40 192 0 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 192 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171112 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343170 MOBILITY cee pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Mg= Item Conn. Conn. Originating ET Bytes Bytes Apn L@1 IMSI MAKE MODEL Date Time Number Up Dn (OTC) 4680 04/06/20 22:02:11 9:40 0 0 nmtgonpho APPLE 'PHONES no 4681 04/06/20 22:11:51 1:08 0 0 nmtgonpho APPLE 'PHONES no 4682 04/06/20 22:11:55 60:00 49293 32806 ims 4683 04/06/20 22:12:58 2:04 192 0 nmtgonpho APPLE 'PHONES no 4684 04/06/20 22:13:00 2:03 0 0 nmtgonpho APPLE 'PHONES no 4685 04/06/20 22:15:03 6:57 0 0 nmtgonpho APPLE 'PHONES no 4686 04/06/20 22:21:59 2:07 192 0 nmtgonpho APPLE 'PHONES no 4687 04/06/20 22:22:00 2:07 0 0 nmtgonpho APPLE 'PHONES no 4688 04/06/20 22:24:07 0:05 0 0 nmtgonpho APPLE 'PHONES no 4689 04/06/20 22:26:25 5:05 192 0 nmtgonpho APPLE 'PHONES no 4690 04/06/20 22:26:27 5:04 0 0 nmtgonpho APPLE 'PHONES ne 4691 04/06/20 22:31:30 6:03 192 0 nmtgonpho APPLE 'PHONES ne 4692 04/06/20 22:31:31 6:03 0 0 nmtgonpho APPLE 'PHONES ne 4693 04/06/20 22:37:34 60:00 0 0 nmtgonpho APPLE 'PHONES ne 4694 04/06/20 22:56:05 0:01 0 0 ims 4695 04/06/20 22:56:45 0:27 1950 16876 ims 4696 04/06/20 22:57:30 0:38 2441 2326 ims 4697 04/06/20 23:11:55 60:00 34864 21112 ims 4698 04/06/20 23:18:04 0:31 12104 22462 ims 4699 04/06/20 23:28:04 0:27 1565 9674 ims 4700 04/06/20 23:37:34 4:26 0 Onmtgonpho APPLE 'PHONES no 4701 04/06/20 23:41:59 2:03 192 0 nmtgonpho APPLE 'PHONES no 4702 04/06/20 23:42:00 2:03 0 0 nmtgonpho APPLE 'PHONES no 4703 04/06/20 23:44:03 6:00 0 0 nmtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 193 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171113 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343171 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .‘•- 0° AT&T UTZ. Run Date: 06/17/2020 Run Time: Data Usage For: MS= Item Conn. Conn. Originating ET Bytes Bytes Apn L@I INSI MARS MODEL Date Time Number Up Dn (UTC) 4704 04/06/20 23:50:02 3:37 288 Onxtgonpho APPLE 'PHONES no 4705 04/06/20 23:50:04 3:36 0 0 nxtgonpho APPLE 'PHONES no 4706 04/06/20 23:53:40 12:00 192 0 nxtgonpho APPLE 'PHONES no 4707 04/06/20 23:53:40 12:01 0 0 nxtgonpho APPLE 'PHONES no 4708 04/07/20 00:05:41 4:12 0 0 nxtgonpho APPLE 'PHONES no 4709 04/07/20 00:09:52 2:04 192 0 nxtgenpho APPLE 'PHONES ne 4710 04/07/20 00:09:53 2:04 0 0 nxtgenpho APPLE 'PHONES ne 4711 04/07/20 00:11:55 60:00 27688 15432 ims 4712 04/07/20 00:11:57 8:45 0 0 nxtgenpho APPLE 'PHONES ne 4713 04/07/20 00:15:21 0:22 0 0 ims 4714 04/07/20 00:20:41 3:16 192 0 nxtgenpho APPLE 'PHONES ne 4715 04/07/20 00:20:42 3:16 0 0 nxtgenpho APPLE 'PHONES ne 4716 04/07/20 00:23:57 7:20 192 0 nxtgenpho APPLE 'PHONES ne 4717 04/07/20 00:23:58 7:20 0 0 nxtgenpho APPLE 'PHONES ne 4718 04/07/20 00:31:01 19:06 3827046 2845143 ims 4719 04/07/20 00:31:18 9:51 0 0 nxtgonpho APPLE 'PHONES no 4720 04/07/20 00:41:08 45:54 192 0 nxtgonpho APPLE 'PHONES no 4721 04/07/20 00:41:09 45:54 0 0 nxtgonpho APPLE 'PHONES no 4722 04/07/20 01:11:55 60:00 7204 4680 ims 4723 04/07/20 01:27:03 16:02 0 0 nxtgenpho APPLE 'PHONES ne 4724 04/07/20 01:43:04 2:15 192 0 nxtgenpho APPLE 'PHONES ne 4725 04/07/20 01:43:05 2:16 0 0 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 194 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171114 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343172 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating AT Bytes Bytes Apn DMZ IMSI MAKE MODEL Date Time Number Up Dn (OTC) 4726 04/07/20 01:45:20 7:07 0 0 nxtgenpho APPLE !PHONES ne 4727 04/07/20 01:52:26 2:09 192 0 nxtgonpho APPLE !PHONES ne 4728 04/07/20 01:52:27 2:09 0 0 nxtgonpho APPLE !PHONES ne 4729 04/07/20 01:54:36 0:33 0 0 nxtgonphe APPLE !PHONES ne 4730 04/07/20 01:55:08 2:03 192 0 nxtgonphe APPLE !PHONES ne 4731 04/07/20 01:55:09 2:03 0 0 nxtgonphe APPLE !PHONES ne 4732 04/07/20 01:57:12 3:46 0 0 nxtgonphe APPLE !PHONES ne 4733 04/07/20 02:00:57 8:25 192 0 nxtgonphe APPLE !PHONES ne 4734 04/07/20 02:00:58 8:25 0 0 nxtgonphe APPLE !PHONES ne 4735 04/07/20 02:09:23 1:48 0 0 nxtgenphe APPLE !PHONES ne 4736 04/07/20 02:11:10 9:15 192 0 nxtgonphe APPLE !PHONES ne 4737 04/07/20 02:11:11 9:15 0 0 nxtgonphe APPLE !PHONES ne 4738 04/07/20 02:11:55 60:00 8496 2928 ims 4739 04/07/20 02:20:26 41:54 0 0 nxtgenphe APPLE !PHONES ne 4740 04/07/20 03:02:19 2:06 192 0 nxtgonphe APPLE !PHONES ne 4741 04/07/20 03:02:20 2:06 0 0 nxtgenphe APPLE !PHONES ne 4742 04/07/20 03:04:26 11:16 0 0 nxtgonphe APPLE !PHONES ne 4743 04/07/20 03:11:55 58:22 16460 9500 ims 4744 04/07/20 03:15:42 12:14 192 0 nxtgenphe APPLE !PHONES ne 4745 04/07/20 03:15:42 12:15 0 0 nxtgenphe APPLE !PHONES ne 4746 04/07/20 03:27:57 10:00 192 0 nxtgenphe APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 195 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171115 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343173 MOBILITY „so PRI020 AT&T has queried AT&T has queried for records for records from 03/01/2020 12:00:00am using Eastern Time Zone. to 06/15/2020 11:59:59pm AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytos Bytes Apn TMEI INSI MAR MODEL Date Tame Number Up Dn (OTC) 4747 04/07/20 03:27:58 60:00 0 Onactgonpho APPIZ 'PROEM no 4748 04/07/20 03:39:43 35:30 15340 8152 isms 4749 04/07/20 04:10:16 25:55 7232 6866 isms APPIZ 'PROEM 4750 04/07/20 04:10:17 25:55 6798 7076 isms APPIZ 'PROEM 4751 04/07/20 04:25:53 60:00 8737 6350 isms 4752 04/07/20 04:27:58 60:00 0 Onactgonpho APPIZ 'PROEM no 4753 04/07/20 04:36:06 60:00 24696 14261 ims 4754 04/07/20 05:25:53 4:10 0 0 ims 4755 04/07/20 05:27:58 60:00 0 Onactgonpho APPIZ 'PROEM ne 4756 04/07/20 05:30:03 60:00 15001 8802 ims 4757 04/07/20 05:36:06 60:00 0 0 ims 4758 04/07/20 06:27:58 17:38 0 Onactgonpho APPIZ 'PROEM ne 4759 04/07/20 06:30:03 60:00 8388 3036 ims 4760 04/07/20 06:36:06 60:00 0 0 ims 4761 04/07/20 06:45:35 240:02 192 Onactgonpho APPLE 'PHONES ne 4762 04/07/20 06:45:36 60:00 0 0 nxtgonpho APPLE 'PHONES ne 4763 04/07/20 07:30:03 60:00 8388 2928 ims 4764 04/07/20 07:36:06 60:00 0 0 ims 4765 04/07/20 07:45:36 60:00 0 0 nxtgonpho APPLE 'PHONES ne 4766 04/07/20 08:30:03 60:00 6924 2912 ims 4767 04/07/20 08:36:06 53:11 0 0 ims 4768 04/07/20 08:45:36 60:00 0 0 nxtgonpho APPLE 'PHONES no 4769 04/07/20 09:30:03 60:00 8604 3052 ims 4770 04/07/20 09:45:36 60:00 0 Onactgonpho APPLE !PHONES no 4771 04/07/20 10:30:03 60:00 15312 5752 ims 4772 04/07/20 10:45:36 0:02 0 0 nxtgonpho APPLE !PHONES no 4773 04/07/20 10:45:39 123:35 192 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 196 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171116 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343174 MOBILITY 4Illo ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in kte `-a. s AT&T UTC. Run Date: 06/17/2020 Run Tame: Data Usage For: Sim Item Conn. Conn. Originating ET Bytes Bytes Apn EBBS IMSI MAKE MODEL Date Time Number Up Dn (OTC) 4774 04/07/20 10:45:40 60:00 0 Onmtgonphe APPLE !PHONES ne 4775 04/07/20 11:30:03 32:17 4980 1696 ims 4776 04/07/20 11:45:40 60:00 0 0 nmtgonphe APPLE !PHONES ne 4777 04/07/20 12:01:57 60:00 0 0 ims 4778 04/07/20 12:02:20 60:00 17933 10006 ims 4779 04/07/20 12:45:40 3:35 0 Onmtgonphe APPLE !PHONES ne 4780 04/07/20 12:49:15 6:50 0 0 nmtgonphe APPLE !PHONES ne 4781 04/07/20 12:56:04 15:29 192 0 nmtgonphe APPLE !PHONES ne 4782 04/07/20 12:56:05 15:29 0 0 nmtgonphe APPLE !PHONES ne 4783 04/07/20 13:01:57 37:07 0 0 ims 4784 04/07/20 13:02:20 36:11 8248 4160 ims 4785 04/07/20 13:11:34 4:46 0 Onmtgonphe APPLE !PHONES ne 4786 04/07/20 13:16:19 21:35 192 0 nmtgonphe APPLE !PHONES ne 4787 04/07/20 13:16:20 21:36 0 0 nmtgonphe APPLE !PHONES ne 4788 04/07/20 13:37:55 56:30 0 0 nmtgonphe APPLE !PHONES ne 4789 04/07/20 13:39:05 55:37 18325 11487 ims 4790 04/07/20 13:41:18 14:30 11530 6588 ims APPLE !PHONES 4791 04/07/20 13:55:48 5:22 3500 1324 ims APPLE !PHONES 4792 04/07/20 13:55:48 5:22 2688 1324 ims APPLE !PHONES 4793 04/07/20 14:01:14 32:20 10000 7462 ims APPLE !PHONES 4794 04/07/20 14:33:34 10:31 3640 1448 ims APPLE !PHONES 4795 04/07/20 14:34:25 50:47 192 Onmtgonphe APPLE !PHONES ne 4796 04/07/20 14:34:26 50:47 0 0 nmtgonphe APPLE !PHONES ne 4797 04/07/20 14:34:41 50:31 15084 17479 ims APPLE !PHONES 4798 04/07/20 14:34:42 50:31 17108 14820 ims APPLE !PHONES 4799 04/07/20 14:35:10 49:00 6345718 9090635 ims APPLE !PHONES 4800 04/07/20 14:35:11 49:00 9090077 6345718 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 197 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171117 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343175 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in el.AT&T ‘s UTC. Run Date: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn DOLT INSI MAKE MODEL Date Tine Number Up Dn (OTC/ 4801 04/07/20 15:25:14 6:35 0 Onxtgonpho APPLE !PHONES ne 4802 04/07/20 15:25:16 0:38 8144 6212 Las APPLE !PHONES 4803 04/07/20 15:25:54 60:00 14000 4932 Las APPLE !PHONES 4804 04/07/20 15:31:48 8:15 192 Onxtgonpho APPLE !PHONES ne 4805 04/07/20 15:31:49 8:16 0 Onxtgonpho APPLE !PHONES ne 4806 04/07/20 15:40:04 7:32 0 Onxtgonpho APPLE !PHONES ne 4807 04/07/20 15:47:36 3:56 192 Onxtgonpho APPLE !PHONES ne 4808 04/07/20 15:47:37 3:56 0 Onxtgonpho APPLE !PHONES ne 4809 04/07/20 15:51:33 60:00 0 Onxtgonpho APPLE !PHONES ne 4810 04/07/20 16:25:54 46:30 16116 10480 Las APPLE !PHONES 4811 04/07/20 16:51:33 2:27 0 Onxtgonpho APPLE !PHONES ne 4812 04/07/20 16:54:00 2:03 192 Onxtgonpho APPLE !PHONES ne 4813 04/07/20 16:54:01 2:03 0 Onxtgonpho APPLE !PHONES ne 4814 04/07/20 16:56:04 17:38 0 Onxtgonpho APPLE !PHONES ne 4815 04/07/20 17:02:56 0:30 2502 14856 Las APPLE !PHONES 4816 04/07/20 17:12:24 1:18 328 372 Las APPLE !PHONES 4817 04/07/20 17:13:41 8:30 192 Onxtgonpho APPLE 'PHONES ne 4818 04/07/20 17:13:42 8:30 0 Onxtgonpho APPLE 'PHONES ne 4819 04/07/20 17:13:43 10:43 8209 6216 Las 4820 04/07/20 17:18:59 3:12 7136 6746 Las APPLE 'PHONES 4821 04/07/20 17:19:01 3:11 6746 6872 Las APPLE 'PHONES 4822 04/07/20 17:22:12 21:13 192 Onxtgonpho APPLE 'PHONES ne 4823 04/07/20 17:22:13 21:12 7214 6900 Las APPLE 'PHONES 4824 04/07/20 17:22:13 21:14 0 Onxtgonpho APPLE 'PHONES ne 4825 04/07/20 17:22:14 21:13 6792 6950 Las APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 198 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171118 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343176 MOBILITY ‘4 % PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ..77,4 1,/4 00 AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn ENE! INSI MAKE MODEL Date Time Numbor Up Dn (OTC) 4826 04/07/20 17:43:26 45:37 0 Onxtgonpho APPLE !PHONES ne 4827 04/07/20 17:43:34 37:01 13367 7676 ims APPLE !PHONES 4828 04/07/20 18:20:35 0:23 30740 1324 ims APPLE !PHONES 4829 04/07/20 18:20:35 0:23 2704 1324 ims APPLE !PHONES 4830 04/07/20 18:20:58 60:00 10380 4080 ims APPLE !PHONES 4831 04/07/20 18:29:02 2:03 192 Onxtgonpho APPLE !PHONES ne 4832 04/07/20 18:29:03 2:03 0 0 nxtgenpho APPLE !PHONES ne 4833 04/07/20 18:31:06 0:59 0 0 nxtgenpho APPLE !PHONES ne 4834 04/07/20 18:32:04 2:05 192 0 nxtgenpho APPLE !PHONES ne 4835 04/07/20 18:32:05 2:05 0 0 nxtgenpho APPLE !PHONES ne 4836 04/07/20 18:34:10 52:08 0 0 nxtgenpho APPLE !PHONES ne 4837 04/07/20 19:20:58 45:52 7064 2880 ims APPLE !PHONES 4838 04/07/20 19:26:17 2:03 192 Onxtgonpho APPLE !PHONES ne 4839 04/07/20 19:26:18 2:03 0 0 nxtgenpho APPLE !PHONES ne 4840 04/07/20 19:28:21 14:08 0 0 nxtgenpho APPLE !PHONES ne 4841 04/07/20 19:42:28 2:04 192 0 nxtgenpho APPLE !PHONES ne 4842 04/07/20 19:42:29 2:04 0 0 nxtgenpho APPLE !PHONES ne 4843 04/07/20 19:44:33 21:02 0 0 nxtgenpho APPLE !PHONES ne 4844 04/07/20 20:05:34 2:03 192 0 nxtgenpho APPLE !PHONES ne 4845 04/07/20 20:05:35 2:03 0 0 nxtgenpho APPLE !PHONES ne 4846 04/07/20 20:06:49 0:48 7264 6992 ims APPLE !PHONES 4847 04/07/20 20:06:50 0:48 6740 7000 ims APPLE !PHONES 4848 04/07/20 20:07:06 55:54 14013 10990 ims 4849 04/07/20 20:07:38 60:00 0 0 nxtgenpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 199 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171119 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343177 MOBILITY idlli pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. •-as. AT&T `""s° ‘-'74444ssel Run Data: 06/17/2020 Run Tina: Data Usage For: MI= Item Conn. Conn. Originating ET Bytos Bytes Apn Tl@I INSI NAAS MODEL Date Time Number Up Dn (OTC) 4850 04/07/20 20:10:47 0:48 8152 6944 ims APPLE !PHONES 4851 04/07/20 20:11:35 51:24 7296 2772 ims APPLE !PHONES 4852 04/07/20 21:03:00 0:00 0 0 ims APPLE !PHONES 4853 04/07/20 21:03:08 60:00 22855 14615 ims 4854 04/07/20 21:07:38 44:18 0 0 nxtgenpho APPLE !PHONES ne 4855 04/07/20 21:51:56 4:22 192 0 nxtgenpho APPLE !PHONES ne 4856 04/07/20 21:51:57 4:22 0 0 nxtgenpho APPLE !PHONES ne 4857 04/07/20 21:56:19 4:13 0 0 nxtgenpho APPLE !PHONES ne 4858 04/07/20 22:00:31 2:03 192 0 nxtgenpho APPLE !PHONES ne 4859 04/07/20 22:00:32 2:03 0 0 nxtgenpho APPLE !PHONES ne 4860 04/07/20 22:02:35 9:28 0 0 nxtgenpho APPLE !PHONES ne 4861 04/07/20 22:03:08 60:00 22776 15016 ims 4862 04/07/20 22:12:02 2:04 192 0 nxtgenpho APPLE !PHONES ne 4863 04/07/20 22:12:03 2:04 0 0 nxtgenpho APPLE !PHONES ne 4864 04/07/20 22:14:07 19:48 0 0 nxtgenpho APPLE !PHONES ne 4865 04/07/20 22:24:33 0:33 5274 33524 ims 4866 04/07/20 22:33:55 2:28 192 0 nxtgenpho APPLE !PHONES no 4867 04/07/20 22:33:56 2:28 0 0 nxtgonpho APPLE !PHONES no 4868 04/07/20 22:36:24 60:00 0 0 nxtgonpho APPLE !PHONES no 4869 04/07/20 22:39:24 60:00 18166 10174 ims 4870 04/07/20 23:03:08 60:00 0 0 ims 4871 04/07/20 23:36:24 8:55 0 0 nxtgenpho APPLE !PHONES ne 4872 04/07/20 23:39:24 60:00 10068 3144 ims 4873 04/07/20 23:45:18 2:03 192 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 200 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171120 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343178 MOBILITY cr. pm. AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating Br Bytes Bytes Apn L@1 IMSI MAKE MODEL Date Time Number Up Dn (OTC) 4874 04/07/20 23:45:19 2:03 0 0 nxtgenpho APPLE 'PEONES ne 4875 04/07/20 23:47:22 3:54 0 0 nxtgenpho APPLE 'PEONES ne 4876 04/07/20 23:51:15 2:03 192 0 nxtgenpho APPLE 'PEONES ne 4877 04/07/20 23:51:16 2:04 0 0 nxtgenpho APPLE 'PEONES ne 4878 04/07/20 23:53:20 9:20 0 0 nxtgenpho APPLE 'PHONES ne 4879 04/08/20 00:02:39 9:08 192 0 nxtgenpho APPLE 'PHONES ne 4880 04/08/20 00:02:40 9:08 0 0 nxtgenpho APPLE 'PHONES ne 4881 04/08/20 00:03:08 60:00 0 0 ims 4882 04/08/20 00:11:48 60:00 0 0 nxtgenpho APPLE 'PHONES ne 4883 04/08/20 00:39:24 12:41 0 0 ims APPLE 'PHONES 4884 04/08/20 00:52:05 0:52 2820 1324 ims APPLE 'PHONES 4885 04/08/20 00:52:05 0:52 2688 1324 ims APPLE 'PHONES 4886 04/08/20 00:53:01 1:21 6672 5904 ims APPLE 'PHONES 4887 04/08/20 00:54:26 1:27 6672 5963 ims APPLE 'PHONES 4888 04/08/20 00:55:53 36:35 20352 8940 ims APPLE 'PHONES 4889 04/08/20 01:03:08 60:00 0 0 ims 4890 04/08/20 01:11:48 18:16 0 Onstgonpho APPLE 'PHONES ne 4891 04/08/20 01:30:03 2:26 192 0 nxtgenpho APPLE 'PHONES ne 4892 04/08/20 01:30:04 2:26 0 0 nxtgenpho APPLE IPHONE8 ne 4893 04/08/20 01:32:30 10:52 0 0 nxtgenpho APPLE 'PHONES no 4894 04/08/20 01:32:34 0:17 7270 3849 ims APPLE 'PHONES 4895 04/08/20 01:32:51 1:12 8240 5296 ims APPLE 'PHONES 4896 04/08/20 01:34:03 8:08 2860 1432 ims APPLE 'PHONES 4897 04/08/20 01:42:11 0:35 5072 1680 ims APPLE 'PHONES 4898 04/08/20 01:42:46 0:17 3484 2324 ims APPLE 'PHONES 4899 04/08/20 01:43:03 60:00 12028 4220 ims APPLE 'PHONES 4900 04/08/20 01:43:21 6:30 192 Onstgonpho APPLE IPHONE8 no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 201 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171121 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343179 MOBILITY 45, pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn L@I IISI SASE MOM Date Time Number Up Dn (OTC) 4901 04/08/20 01:43:22 6:30 0 0 nxtgonpho APPLE 'PEONES no 4902 04/08/20 01:49:52 60:00 0 0 nxtgonpho APPLE 'PEONES no 4903 04/08/20 02:03:08 35:59 0 0 ims 4904 04/08/20 02:43:03 60:00 7064 2756 ims APPLE !PHONES 4905 04/08/20 02:49:52 60:00 0 0 nxtgonpho APPLE IPHONE8 no 4906 04/08/20 03:43:03 60:00 8480 3020 ims APPLE !PHONES 4907 04/08/20 03:49:52 60:00 0 0 nxtgonpho APPLE !PHONES no 4908 04/08/20 04:43:03 60:00 8604 3128 isms APPLE !PHONES 4909 04/08/20 04:49:52 60:00 0 0 nxtgonpho APPLE !PHONES no 4910 04/08/20 05:43:03 60:00 9928 3144 ims APPLE !PHONES 4911 04/08/20 05:49:52 0:01 0 0 nxtgonpho APPLE !PHONES no 4912 04/08/20 05:49:56 60:00 0 0 nxtgonpho APPLE !PHONES no 4913 04/08/20 06:43:03 60:00 10256 4364 ims APPLE !PHONES 4914 04/08/20 06:49:56 60:00 0 0 nxtgonpho APPLE !PHONES no 4915 04/08/20 07:43:03 60:00 10272 4080 ims APPLE !PHONES 4916 04/08/20 07:49:56 60:00 0 0 nxtgenpho APPLE !PHONES no 4917 04/08/20 08:43:03 60:00 6848 2648 ims APPLE !PHONES 4918 04/08/20 08:49:56 60:00 0 0 nxtgenpho APPLE !PHONES no 4919 04/08/20 09:43:03 60:00 6848 2756 ims APPLE !PHONES 4920 04/08/20 09:49:56 0:00 0 0 nxtgonpho APPLE !PHONES no 4921 04/08/20 09:49:58 60:00 0 0 nxtgonpho APPLE !PHONES no 4922 04/08/20 10:43:03 60:00 8496 3128 ims APPLE !PHONES 4923 04/08/20 10:49:58 60:00 0 0 nxtgonpho APPLE !PHONES no 4924 04/08/20 11:43:03 60:00 16852 6076 ims APPLE !PHONES 4925 04/08/20 11:49:58 39:44 0 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 202 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171122 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343180 MOBILITY dro pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn LBSI IMSI MAKS MODEL Date Time Numbor Up Dn (OTC) 4926 04/08/20 12:29:43 58:16 0 0 nxtgonpho APPLE 'PHONES ne 4927 04/08/20 12:43:03 48:33 9912 3888 isms APPLE 'PHONES 4928 04/08/20 13:20:59 36:55 13827 10907 isms 4929 04/08/20 13:31:36 44:51 20550 12782 isms 4930 04/08/20 13:57:54 39:18 15283 11088 isms 4931 04/08/20 14:16:27 19:57 10035 6461 isms 4932 04/08/20 14:37:12 2:49 11278 6408 isms APPLE 'PHONES 4933 04/08/20 14:38:10 60:00 0 0 nxtgenpho APPLE 'PHONES ne 4934 04/08/20 14:40:01 1:06 3536 1448 isms APPLE 'PHONES 4935 04/08/20 14:40:01 1:06 3404 1448 isms APPLE 'PHONES 4936 04/08/20 14:41:07 60:00 13676 4592 isms APPLE 'PHONES 4937 04/08/20 15:38:10 0:15 0 0 nxtgonpho APPLE 'PHONES ne 4938 04/08/20 15:41:07 39:31 3408 1432 isms APPLE 'PHONES 4939 04/08/20 15:56:05 2:10 192 Onxtgonpho APPLE 'PHONES ne 4940 04/08/20 15:56:06 2:10 0 0 nxtgonpho APPLE 'PHONES ne 4941 04/08/20 15:58:16 16:34 0 0 nxtgonpho APPLE 'PHONES ne 4942 04/08/20 16:14:49 8:15 192 0 nxtgonpho APPLE 'PHONES ne 4943 04/08/20 16:14:50 8:15 0 0 nxtgonpho APPLE 'PHONES ne 4944 04/08/20 16:22:45 60:00 18464 9488 isms 4945 04/08/20 16:23:05 15:54 0 0 nxtgonpho APPLE 'PHONES ne 4946 04/08/20 16:38:58 2:10 192 0 nxtgonpho APPLE 'PHONES ne 4947 04/08/20 16:38:59 2:10 0 0 nxtgonpho APPLE 'PHONES ne 4948 04/08/20 16:41:09 1:44 0 0 nxtgonpho APPLE 'PHONES ne 4949 04/08/20 16:42:52 0:42 192 0 nxtgonpho APPLE 'PHONES ne 4950 04/08/20 16:42:53 0:42 0 0 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 203 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171123 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343181 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:36:56pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .al. AT&T ‘•- UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: IS= Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ INEI MAKE MODEL Date Time Numbor Up Dn (OTC) 4951 04/08/20 16:43:35 1:06 0 0nmtgonpho APPLE 'PHONES ne 4952 04/08/20 16:44:41 2:03 192 0nmtgonpho APPLE 'PHONES ne 4953 04/08/20 16:44:42 2:03 0 0nmtgonpho APPLE 'PHONES ne 4954 04/08/20 16:46:45 23:13 0 0nmtgonpho APPLE 'PHONES ne 4955 04/08/20 17:09:57 9:19 192 0nmtgonpho APPLE 'PHONES ne 4956 04/08/20 17:09:58 9:19 0 0nmtgonpho APPLE 'PHONES ne 4957 04/08/20 17:19:17 11:18 0 0nmtgonpho APPLE 'PHONES ne 4958 04/08/20 17:22:45 1:12 0 0 ims APPLE 'PHONES 4959 04/08/20 17:23:56 2:15 4000 1464 ims APPLE 'PHONES 4960 04/08/20 17:23:57 2:14 3936 1464 ims APPLE 'PHONES 4961 04/08/20 17:26:11 59:38 8852 3144 ims APPLE 'PHONES 4962 04/08/20 17:30:34 2:36 192 0nmtgonpho APPLE 'PHONES ne 4963 04/08/20 17:30:35 2:36 0 0nmtgonpho APPLE 'PHONES ne 4964 04/08/20 17:33:11 22:30 0 0nmtgonpho APPLE 'PHONES ne 4965 04/08/20 17:55:41 2:03 192 0nmtgonpho APPLE 'PHONES ne 4966 04/08/20 17:55:42 2:03 0 0nmtgonpho APPLE 'PHONES ne 4967 04/08/20 17:57:45 2:17 0 0nmtgonpho APPLE 'PHONES ne 4968 04/08/20 18:00:01 1:14 192 0nmtgonpho APPLE 'PHONES ne 4969 04/08/20 18:00:02 1:14 0 0nmtgonpho APPLE 'PHONES ne 4970 04/08/20 18:01:16 6:09 0 0nmtgonpho APPLE 'PHONES ne 4971 04/08/20 18:07:24 8:17 192 0nmtgonpho APPLE 'PHONES ne 4972 04/08/20 18:07:25 8:17 0 0nmtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 204 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171124 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343182 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Tine: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DOLT IM9I MAKE MODEL Date Time Mtienhas. Up Dn (UTC) 4973 04/08/20 18:15:42 5:36 0 0 nntgonpho APPLE 'PHONES no 4974 04/08/20 18:21:17 2:10 192 0 nntgonpho APPLE 'PHONES no 4975 04/08/20 18:21:18 2:11 0 0 nntgonpho APPLE 'PHONES no 4976 04/08/20 18:21:19 2:08 7136 6814 ins APPLE 'PHONES 4977 04/08/20 18:21:20 2:09 6746 6872 ins APPLE 'PHONES 4978 04/08/20 18:23:29 14:17 0 0 nntgonpho APPLE 'PHONES no 4979 04/08/20 18:23:30 14:16 6676 6000 ins APPLE 'PHONES 4980 04/08/20 18:37:45 2:11 192 0 nntgonpho APPLE 'PHONES no 4981 04/08/20 18:37:46 2:10 6246 6674 ins APPLE 'PHONES 4982 04/08/20 18:37:46 2:11 0 0nntgonpho APPLE 'PHONES no 4983 04/08/20 18:37:48 2:09 6674 5982 ins APPLE 'PHONES 4984 04/08/20 18:39:57 7:06 0 0 nntgonpho APPLE 'PHONES no 4985 04/08/20 18:39:59 7:04 8478 8108 ins APPLE 'PHONES 4986 04/08/20 18:47:03 1:04 0 0 nntgonpho APPLE 'PHONES ne 4987 04/08/20 18:48:06 47:06 192 0 nntgonpho APPLE 'PHONES ne 4988 04/08/20 18:48:07 47:06 0 0 nntgonpho APPLE 'PHONES ne 4989 04/08/20 18:48:12 47:00 7500 10382 ins APPLE 'PHONES 4990 04/08/20 18:48:13 47:00 10382 7344 ins APPLE 'PHONES 4991 04/08/20 19:35:13 4:52 0 0nntgonpho APPLE 'PHONES no 4992 04/08/20 19:35:16 4:49 9386 6194 ins APPLE 'PHONES 4993 04/08/20 19:40:04 2:03 192 0 nntgonpho APPLE 'PHONES no 4994 04/08/20 19:40:05 2:03 0 0 nntgonpho APPLE 'PHONES no 4995 04/08/20 19:40:20 1:47 6228 6672 ins APPLE 'PHONES 4996 04/08/20 19:40:21 1:47 6672 5964 ins APPLE 'PHONES 4997 04/08/20 19:42:08 18:18 0 0 nntgonpho APPLE 'PHONES no 4998 04/08/20 19:42:10 14:47 6666 5982 ins APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 205 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171125 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343183 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:37:57pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .4 / 1 ""7:si AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn MAKE MODEL Date Time Number Up Dn (OTC/ 4999 04/08/20 19:57:05 60:00 36371 17916 ims 5000 04/08/20 19:59:48 18:29 1212540 3937406 ims 5001 04/08/20 20:00:25 14:37 192 0nmtgonpho APPLE 'PHONES ne 5002 04/08/20 20:00:26 14:37 0 0 nmtgonpho APPLE 'PHONES ne 5003 04/08/20 20:15:03 1:07 0 0 nmtgonpho APPLE 'PHONES ne 5004 04/08/20 20:16:09 8:07 192 0 nmtgonpho APPLE 'PHONES ne 5005 04/08/20 20:16:10 8:07 0 0 nxtgenpho APPLE 'PHONES ne 5006 04/08/20 20:24:17 60:00 0 0 nxtgenpho APPLE 'PHONES ne 5007 04/08/20 20:57:05 60:00 8356 3004 ims 5008 04/08/20 21:24:17 34:57 0 0 nmtgonpho APPLE 'PHONES ne 5009 04/08/20 21:57:05 60:00 9928 3252 ims 5010 04/08/20 21:59:14 9:19 192 0 nmtgonpho APPLE 'PHONES ne 5011 04/08/20 21:59:15 9:20 0 0 nmtgonpho APPLE 'PHONES ne 5012 04/08/20 22:08:35 31:30 0 0 nmtgonpho APPLE 'PHONES ne 5013 04/08/20 22:40:04 8:16 192 0 nmtgonpho APPLE 'PHONES ne 5014 04/08/20 22:40:06 8:15 0 0 nmtgonpho APPLE 'PHONES ne 5015 04/08/20 22:48:21 5:35 0 0 nmtgonpho APPLE 'PHONES ne 5016 04/08/20 22:53:55 7:12 192 0 nmtgonpho APPLE 'PHONES ne 5017 04/08/20 22:53:57 7:11 0 0 nmtgonpho APPLE 'PHONES ne 5018 04/08/20 22:57:05 60:00 12136 4344 ims 5019 04/08/20 23:01:08 1:34 0 0 nmtgonpho APPLE 'PHONES ne 5020 04/08/20 23:02:41 8:21 192 0 nmtgonpho APPLE 'PHONES ne 5021 04/08/20 23:02:42 8:21 0 0 ructgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 206 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171126 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343184 MOBILITY ceo. PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:36:56pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .s.AT&T ‘•- OTC. Run Date: 06/17/2020 Run Tine: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn ENE! INSI MAKE MODEL Date Ti.. Number Up Dn (OTC) 5022 04/08/20 23:11:03 59:55 0 0 ructgenpho APPLE 'PHONES no 5023 04/08/20 23:57:05 60:00 8604 3020 ism 5024 04/09/20 00:10:58 32:47 192 0 ructgenpho APPLE 'PHONES no 5025 04/09/20 00:10:58 32:48 0 0 ructgenpho APPLE 'PHONES no 5026 04/09/20 00:43:46 49:30 0 0 nxtgenpho APPLE 'PHONES no 5027 04/09/20 00:57:05 60:00 13676 4768 ims 5028 04/09/20 01:33:15 3:23 192 0 nxtgenpho APPLE 'PHONES no 5029 04/09/20 01:33:16 3:23 0 0 nxtgonpho APPLE 'PHONES no 5030 04/09/20 01:36:40 1:09 0 0 nxtgenpho APPLE 'PHONES no 5031 04/09/20 01:37:48 2:03 192 0 nxtgenphe APPLE 'PHONES no 5032 04/09/20 01:37:49 2:03 0 0 nxtgenphe APPLE 'PHONES no 5033 04/09/20 01:39:02 0:49 6244 6686 ims APPLE !PHONES 5034 04/09/20 01:39:03 0:49 6686 5980 ims APPLE !PHONES 5035 04/09/20 01:39:52 2:54 0 0 nxtgonpho APPLE !PHONES no 5036 04/09/20 01:39:54 0:15 6692 6000 ims APPLE !PHONES 5037 04/09/20 01:40:09 0:33 3640 1340 ims APPLE !PHONES 5038 04/09/20 01:40:42 0:39 2628 1340 ims APPLE !PHONES 5039 04/09/20 01:41:21 60:00 10164 3896 ims APPLE !PHONES 5040 04/09/20 01:42:45 2:04 192 Onactgonpho APPLE !PHONES ne 5041 04/09/20 01:42:46 2:04 0 0 nxtgenphe APPLE 'PHONES ne 5042 04/09/20 01:44:50 3:24 0 0 nxtgonpho APPLE !PHONES no 5043 04/09/20 01:48:14 19:41 192 0 nxtgenphe APPLE 'PHONES no 5044 04/09/20 01:48:15 19:41 0 0 nxtgenphe APPLE 'PHONES no 5045 04/09/20 01:57:05 54:47 0 0 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 207 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171127 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343185 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in el.AT&T ‘s OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: IAA= Item Conn. Conn. Originating ET Bytos Bytes Apn L@I IMSI MARE MODEL Date Time Number Up Dn (UTC) 5046 04/09/20 02:07:55 1:52 192 0 nxtgenpho APPLE 'PHONES no 5047 04/09/20 02:07:56 1:52 0 0 nxtgonpho APPLE 'PHONES no 5048 04/09/20 02:09:48 24:10 192 0 nxtgonpho APPLE 'PHONES no 5049 04/09/20 02:09:49 24:10 0 0 nxtgonpho APPLE 'PHONES no 5050 04/09/20 02:33:59 58:16 0 0 nxtgonpho APPLE 'PHONES no 5051 04/09/20 02:41:21 60:00 216 0 ims APPLE 'PHONES 5052 04/09/20 02:51:52 60:00 21281 10462 ims 5053 04/09/20 03:41:21 60:00 0 0 ims APPLE 'PHONES 5054 04/09/20 03:51:52 60:00 8496 3036 ims 5055 04/09/20 04:41:21 60:00 0 0 ims APPLE 'PHONES 5056 04/09/20 04:51:52 29:42 4980 1588 ims 5057 04/09/20 05:41:21 60:00 0 0 ims APPLE 'PHONES 5058 04/09/20 06:41:21 1:14 0 0 ims APPLE 'PHONES 5059 04/09/20 12:39:38 1:16 0 Onmtgonpho APPLE 'PHONES no 5060 04/09/20 12:39:50 1:04 8226 8704 ims APPLE 'PHONES 5061 04/09/20 12:40:54 4:31 192 0 nxtgonpho APPLE 'PHONES no 5062 04/09/20 12:40:55 4:31 0 0 nxtgonpho APPLE 'PHONES no 5063 04/09/20 12:42:27 2:58 6225 6646 ims APPLE 'PHONES 5064 04/09/20 12:42:29 2:57 6646 5961 ims APPLE 'PHONES 5065 04/09/20 12:45:26 60:00 0 Onxtgonpho APPLE 'PHONES ne 5066 04/09/20 12:45:31 60:00 13308 10592 ims APPLE 'PHONES 5067 04/09/20 13:45:26 33:02 0 0 nxtgonpho APPLE 'PHONES ne 5068 04/09/20 13:45:31 32:57 2596 1324 ims APPLE 'PHONES 5069 04/09/20 14:18:27 3:29 192 0 nxtgonpho APPLE 'PHONES ne 5070 04/09/20 14:18:28 3:29 0 0 nxtgonpho APPLE 'PHONES ne 5071 04/09/20 14:18:31 3:25 7232 6798 ims APPLE 'PHONES 5072 04/09/20 14:18:32 3:25 6798 6968 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 208 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171128 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343186 MOBILITY pm. AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. .4 AT&T h•- Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytos Bytes Apn IMSI MUM MODEL Date Time Number Up Dn (OTC) 5073 04/09/20 14:21:57 2:17 0 0 nxtgenpho APPLE 'PEONES ne 5074 04/09/20 14:22:01 2:13 6664 5977 ims APPLE 'PEONES 5075 04/09/20 14:24:13 2:05 192 Onxtgonpho APPLE 'PEONES ne 5076 04/09/20 14:24:14 2:05 0 0 nxtgenpho APPLE IPEONE8 ne 5077 04/09/20 14:24:16 2:02 7202 6744 ims APPLE 'PHONES 5078 04/09/20 14:24:17 2:02 6744 6850 ims APPLE 'PHONES 5079 04/09/20 14:26:19 5:03 0 0 nxtgenpho APPLE 'PHONES ne 5080 04/09/20 14:26:23 4:59 10870 9856 ims APPLE 'PHONES 5081 04/09/20 14:31:22 9:11 192 Onxtgonpho APPLE 'PHONES ne 5082 04/09/20 14:31:23 9:11 0 0 nxtgonpho APPLE 'PHONES ne 5083 04/09/20 14:31:25 9:08 13898 16793 ims APPLE 'PHONES 5084 04/09/20 14:31:26 9:08 15888 13634 ims APPLE 'PHONES 5085 04/09/20 14:31:39 7:54 1168181 1273192 ims APPLE 'PHONES 5086 04/09/20 14:31:40 7:54 1273192 1168181 ims APPLE 'PHONES 5087 04/09/20 14:40:34 2:03 192 Onxtgonpho APPLE 'PHONES no 5088 04/09/20 14:40:35 2:03 0 0 nxtgonpho APPLE !PHONES no 5089 04/09/20 14:40:43 1:54 6264 6672 ims APPLE !PHONES 5090 04/09/20 14:40:44 1:54 6672 6000 ims APPLE !PHONES 5091 04/09/20 14:42:38 5:51 0 Onxtgonpho APPLE !PHONES no 5092 04/09/20 14:42:42 5:47 8354 7864 ims APPLE !PHONES 5093 04/09/20 14:48:28 2:12 192 Onxtgonpho APPLE !PHONES no 5094 04/09/20 14:48:29 2:12 0 0 nxtgonpho APPLE IPHONE8 ne 5095 04/09/20 14:49:33 1:07 7156 6748 ims APPLE 'PHONES 5096 04/09/20 14:49:34 1:07 6748 6892 ims APPLE 'PHONES 5097 04/09/20 14:50:41 2:16 0 Onxtgonpho APPLE 'PHONES ne 5098 04/09/20 14:50:56 2:01 48 0 ims APPLE 'PHONES 5099 04/09/20 14:52:57 13:49 192 0 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 209 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171129 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343187 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn LEI IMSI MAKS MODEL Date Time Number Up Dn (OTC) 5100 04/09/20 14:52:58 13:49 0 Onstgonpho APPLE 'PHONES ne 5101 04/09/20 14:53:03 13:43 6312 6682 ism APPLE 'PHONES 5102 04/09/20 14:53:04 13:43 6682 5960 ism APPLE 'PHONES 5103 04/09/20 15:06:47 7:06 0 Onstgonpho APPLE 'PHONES ne 5104 04/09/20 15:08:15 5:38 8934 7979 ism APPLE 'PHONES 5105 04/09/20 15:13:52 16:13 192 Onstgonpho APPLE 'PHONES ne 5106 04/09/20 15:13:53 16:13 0 0 nstgonpho APPLE 'PHONES ne 5107 04/09/20 15:14:14 15:51 7238 7452 ism APPLE 'PHONES 5108 04/09/20 15:14:15 15:51 7452 6974 ism APPLE 'PHONES 5109 04/09/20 15:30:06 8:54 192 Onstgonpho APPLE 'PHONES ne 5110 04/09/20 15:30:07 8:53 6243 6686 ism APPLE 'PHONES 5111 04/09/20 15:30:07 8:54 0 0 nxtgenpho APPLE 'PHONES ne 5112 04/09/20 15:30:08 8:53 6686 5979 ism APPLE 'PHONES 5113 04/09/20 15:39:00 6:19 192 Onstgonpho APPLE 'PHONES ne 5114 04/09/20 15:39:01 6:19 0 Onstgonpho APPLE !PHONES ne 5115 04/09/20 15:39:04 6:15 6262 6672 ism APPLE IPHONE8 5116 04/09/20 15:39:05 6:15 6672 5998 ism APPLE 'PHONES 5117 04/09/20 15:45:20 0:06 0 Onstgonpho APPLE 'PHONES ne 5118 04/09/20 15:45:53 8:04 0 0 nxtgenpho APPLE 'PHONES ne 5119 04/09/20 15:47:28 6:29 10998 8256 ism APPLE 'PHONES 5120 04/09/20 15:53:56 24:15 192 Onstgonpho APPLE 'PHONES ne 5121 04/09/20 15:53:57 24:15 0 0 nstgonpho APPLE 'PHONES ne 5122 04/09/20 15:53:59 24:12 6262 6780 ism APPLE 'PHONES 5123 04/09/20 15:54:00 24:12 6780 5998 ism APPLE 'PHONES 5124 04/09/20 16:18:12 0:38 0 Onstgonpho APPLE !PHONES ne 5125 04/09/20 16:18:15 0:35 6688 5998 ism APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 210 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171130 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343188 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in 1/4-.rns AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage Tor: IAA= Item Conn. Conn. Originating ET Bytes Bytes Apn TERI IMSI MAKE MODEL Date Time Number Up Dn (UTC) 5126 04/09/20 16:18:49 8:32 192 Onstgonpho APPLE 'PEONES ne 5127 04/09/20 16:18:51 8:31 0 0 nxtgenpho APPLE 'PEONES ne 5128 04/09/20 16:18:53 8:28 6244 6666 ims APPLE 'PEONES 5129 04/09/20 16:18:54 8:28 6666 5980 ims APPLE 'PHONES 5130 04/09/20 16:27:22 22:13 0 Onstgonpho APPLE 'PHONES ne 5131 04/09/20 16:28:43 20:52 8168 6944 ims APPLE 'PHONES 5132 04/09/20 16:49:34 2:34 192 Onstgonpho APPLE 'PHONES ne 5133 04/09/20 16:49:35 2:34 0 0 nxtgenpho APPLE 'PHONES ne 5134 04/09/20 16:52:09 10:01 192 0 nxtgenpho APPLE 'PHONES ne 5135 04/09/20 16:52:10 10:00 7138 6746 ims APPLE 'PHONES 5136 04/09/20 16:52:10 10:02 0 Onstgonpho APPLE 'PHONES ne 5137 04/09/20 16:52:11 10:01 6746 6874 ims APPLE 'PHONES 5138 04/09/20 17:02:11 2:54 0 0 nxtgenpho APPLE 'PHONES ne 5139 04/09/20 17:02:15 2:50 8958 7944 ims APPLE 'PHONES 5140 04/09/20 17:05:04 8:33 192 0 nxtgenpho APPLE 'PHONES ne 5141 04/09/20 17:05:05 8:34 0 0 nxtgenpho APPLE !PHONES ne 5142 04/09/20 17:05:07 8:30 6224 6688 ims APPLE IPHONE8 5143 04/09/20 17:05:08 8:31 6688 5960 ims APPLE 'PHONES 5144 04/09/20 17:13:38 0:46 0 Onstgonpho APPLE 'PHONES ne 5145 04/09/20 17:13:43 0:41 8390 8080 ims APPLE 'PHONES 5146 04/09/20 17:14:23 21:05 192 0 nxtgenpho APPLE !PHONES ne 5147 04/09/20 17:14:24 21:06 0 0 nxtgenpho APPLE !PHONES ne 5148 04/09/20 17:16:36 18:52 6262 18824 ims APPLE 'PHONES 5149 04/09/20 17:16:37 18:53 6692 5998 ims APPLE 'PHONES 5150 04/09/20 17:35:30 54:43 0 Onstgonpho APPLE !PHONES ne 5151 04/09/20 17:47:03 43:10 9282 7304 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 211 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171131 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343189 MOBILITY 45, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .‘•- is AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INEZ INS! MAKE MODEL Date T11011 Number Up Dn luTC) 5152 04/09/20 18:30:12 21:10 192 0nmtgonpho APPLE 'PHONES ne 5153 04/09/20 18:30:13 21:10 0 0 nmtgonpho APPLE 'PHONES ne 5154 04/09/20 18:30:16 21:06 6440 8812 ims APPLE 'PHONES 5155 04/09/20 18:30:16 21:07 8812 6176 ims APPLE 'PHONES 5156 04/09/20 18:51:23 0:28 0 0 nmtgonpho APPLE 'PHONES ne 5157 04/09/20 18:51:50 2:09 192 0 nmtgonpho APPLE 'PHONES ne 5158 04/09/20 18:51:51 2:09 0 0 nmtgonpho APPLE 'PHONES ne 5159 04/09/20 18:54:00 7:49 0 0 nmtgonpho APPLE 'PHONES ne 5160 04/09/20 18:54:02 7:47 6674 5982 ims APPLE 'PHONES 5161 04/09/20 19:01:49 8:25 192 0 nmtgonpho APPLE 'PHONES ne 5162 04/09/20 19:01:50 8:25 0 0 nmtgonpho APPLE 'PHONES ne 5163 04/09/20 19:05:35 4:39 6226 6672 ims APPLE 'PHONES 5164 04/09/20 19:05:36 4:39 6672 5962 ims APPLE 'PHONES 5165 04/09/20 19:10:15 11:12 0 0 nmtgonpho APPLE 'PHONES ne 5166 04/09/20 19:13:55 7:32 6686 5980 ims APPLE 'PHONES 5167 04/09/20 19:21:26 31:08 192 0 nmtgonpho APPLE 'PHONES no 5168 04/09/20 19:21:27 31:08 0 0 nmtgonpho APPLE 'PHONES no 5169 04/09/20 19:22:05 30:29 31967 81232 ims APPLE 'PHONES 5170 04/09/20 19:22:06 30:29 46600 36287 ims APPLE 'PHONES 5171 04/09/20 19:29:26 0:17 208 0 ims APPLE 'PHONES 5172 04/09/20 19:29:27 0:16 0 208 ims APPLE 'PHONES 5173 04/09/20 19:29:54 0:26 0 0 ims APPLE 'PHONES 5174 04/09/20 19:37:26 0:27 8044 5083 ims APPLE 'PHONES 5175 04/09/20 19:37:27 0:27 4623 8044 ims APPLE 'PHONES 5176 04/09/20 19:48:21 0:03 0 0 ims APPLE 'PHONES 5177 04/09/20 19:52:35 0:52 0 0nmtgonpho APPLE 'PHONES no 5178 04/09/20 19:52:39 0:48 7416 6104 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 212 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171132 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343190 MOBILITY 45, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ST Bytes Bytes Apn INKS IMSI MAKE MODEL Data Time Number Up Dn (UTC) 5179 04/09/20 19:53:26 19:00 192 Onxtgonpho APPLE 'PHONES ne 5180 04/09/20 19:53:27 19:00 0 Onxtgonpho APPLE 'PHONES ne 5181 04/09/20 19:53:30 18:56 6243 6670 ims APPLE 'PHONES 5182 04/09/20 19:53:31 18:56 6670 5979 ims APPLE 'PHONES 5183 04/09/20 20:12:27 8:57 0 Onxtgonpho APPLE 'PHONES ne 5184 04/09/20 20:12:31 8:53 13288 10292 ims APPLE 'PHONES 5185 04/09/20 20:21:23 15:14 192 Onxtgonpho APPLE 'PHONES ne 5186 04/09/20 20:21:24 15:14 0 Onxtgonpho APPLE 'PHONES ne 5187 04/09/20 20:21:26 15:11 6262 25616 ims APPLE 'PHONES 5188 04/09/20 20:21:27 15:11 6784 5998 ims APPLE 'PHONES 5189 04/09/20 20:36:38 0:39 0 Onxtgonpho APPLE 'PHONES ne 5190 04/09/20 20:36:42 0:35 6692 5998 ims APPLE 'PHONES 5191 04/09/20 20:37:17 15:46 192 Onxtgonpho APPLE 'PHONES ne 5192 04/09/20 20:37:18 15:46 0 0 nxtgonpho APPLE 'PHONES ne 5193 04/09/20 20:37:20 15:43 17838 19124 ims APPLE 'PHONES 5194 04/09/20 20:37:21 15:43 18424 17574 ims APPLE 'PHONES 5195 04/09/20 20:39:13 0:27 12546 5521 ims APPLE 'PHONES 5196 04/09/20 20:39:14 0:27 5521 12546 ims APPLE 'PHONES 5197 04/09/20 20:53:04 5:24 0 Onxtgonpho APPLE 'PHONES ne 5198 04/09/20 20:53:08 5:20 8152 6920 ims APPLE 'PHONES 5199 04/09/20 20:58:27 59:43 192 Onxtgonpho APPLE 'PHONES ne 5200 04/09/20 20:58:28 59:43 0 0 nxtgonpho APPLE 'PHONES ne 5201 04/09/20 20:58:30 59:40 23490 33074 ims APPLE 'PHONES 5202 04/09/20 20:58:31 59:40 29420 23138 ims APPLE 'PHONES 5203 04/09/20 21:03:35 22:19 5259603 4388034 ims APPLE 'PHONES 5204 04/09/20 21:03:36 22:19 4388034 5259603 ims APPLE 'PHONES 5205 04/09/20 21:29:43 28:03 4870778 3178523 ims APPLE 'PHONES 5206 04/09/20 21:29:44 28:02 3178523 4870778 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 213 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171133 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343191 MOBILITY pu020 AT&T has queried AT&T has queried OTC. for records for records from 03/01/2020 12:00:00am using Eastern Time Zone. to 06/15/2020 11:59:59pm AT&T's records are stored and provided in AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating AT Bytes Bytes Apn EMBI IMSI MAKE MODEL Date Time Number Up Dn (UTC) 5207 04/09/20 21:58:11 19:57 0 Onactgonpho APPLE 'PROMO ne 5208 04/09/20 21:58:14 19:54 6682 5961 ims APPLE 'PROMO 5209 04/09/20 22:18:07 14:26 192 Onxtgonpho APPLE 'PROMO ne 5210 04/09/20 22:18:08 14:26 0 0 nactgonpho APPLE !PHONES ne 5211 04/09/20 22:18:11 14:22 6225 6668 ims APPLE IPHONE8 5212 04/09/20 22:18:12 14:22 6668 5961 ims APPLE IPHONE8 5213 04/09/20 22:32:34 0:37 0 0 nxtgenpho APPLE IPHONE8 ne 5214 04/09/20 22:33:11 14:33 192 0 nactgonpho APPLE !PHONES ne 5215 04/09/20 22:33:12 14:33 0 0 nactgonpho APPLE !PHONES ne 5216 04/09/20 22:33:17 14:27 14436 17820 ims APPLE !PHONES 5217 04/09/20 22:33:18 14:27 16610 14172 ims APPLE !PHONES 5218 04/09/20 22:33:53 13:26 1717807 2636672 ims APPLE !PHONES 5219 04/09/20 22:33:54 13:26 2636672 1717807 ims APPLE !PHONES 5220 04/09/20 22:47:45 1:23 0 0 nxtgenpho APPLE !PHONES ne 5221 04/09/20 22:47:49 1:19 6690 5980 ims APPLE !PHONES 5222 04/09/20 22:49:07 4:55 192 Onxtgonpho APPLE !PHONES ne 5223 04/09/20 22:49:08 4:55 0 0 nxtgenpho APPLE !PHONES ne 5224 04/09/20 22:49:10 4:52 12820 13228 ims APPLE !PHONES 5225 04/09/20 22:49:11 4:52 13228 12556 ims APPLE !PHONES 5226 04/09/20 22:49:23 4:10 613278 833749 ims APPLE !PHONES 5227 04/09/20 22:49:24 4:10 832938 613278 ims APPLE !PHONES 5228 04/09/20 22:54:02 18:15 192 Onxtgonpho APPLE !PHONES ne 5229 04/09/20 22:54:03 18:16 0 0 nictgonpho APPLE !PHONES ne 5230 04/09/20 22:54:31 17:46 7136 49428 ims APPLE !PHONES 5231 04/09/20 22:54:32 17:47 6756 6872 ims APPLE !PHONES 5232 04/09/20 23:12:19 22:57 0 0 nxtgenpho APPLE !PHONES ne 5233 04/09/20 23:14:25 20:51 21192 21367 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 214 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171134 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343192 MOBILITY / 1 44ro pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn L@I IMSI MAKS MODEL Date Time Number Up Dn (UTC) 5234 04/09/20 23:32:08 0:33 51730 63016 isms APPLE 'PEONES 5235 04/09/20 23:33:28 0:26 44687 70034 isms APPLE 'PEONES 5236 04/09/20 23:35:15 2:03 192 Onatgonpho APPLE 'PEONES ne 5237 04/09/20 23:35:16 2:03 0 0 nxtgonpho APPLE 'PEONES ne 5238 04/09/20 23:35:18 2:00 7214 6788 isms APPLE 'PEONES 5239 04/09/20 23:35:19 2:00 6788 6950 isms APPLE 'PEONES 5240 04/09/20 23:37:19 0:44 0 Onatgonpho APPLE 'PEONES ne 5241 04/09/20 23:37:23 0:40 6672 5964 isms APPLE 'PHONES 5242 04/09/20 23:38:02 52:28 192 0 nxtgonpho APPLE 'PHONES ne 5243 04/09/20 23:38:03 52:28 0 0 nxtgenpho APPLE 'PHONES no 5244 04/09/20 23:38:05 52:25 14044 15264 Les APPLE !PHONES 5245 04/09/20 23:38:06 52:25 15264 13780 Les APPLE !PHONES 5246 04/10/20 00:24:34 2:04 436591 350281 Les APPLE !PHONES 5247 04/10/20 00:24:35 2:04 350002 436591 isms APPLE !PHONES 5248 04/10/20 00:30:31 0:38 0 Onatgonpho APPLE !PHONES ne 5249 04/10/20 00:30:34 0:35 3394 2180 isms APPLE !PHONES 5250 04/10/20 00:31:09 103:15 192 Onatgonpho APPLE !PHONES ne 5251 04/10/20 00:31:10 60:00 0 0 nxtgonpho APPLE !PHONES ne 5252 04/10/20 00:31:12 103:12 12072 15268 isms APPLE !PHONES 5253 04/10/20 00:31:13 60:00 12060 10484 isms APPLE !PHONES 5254 04/10/20 01:31:10 43:15 0 Onatgonpho APPLE !PHONES ne 5255 04/10/20 01:31:13 43:12 2596 1324 isms APPLE !PHONES 5256 04/10/20 02:14:24 21:02 192 0 nxtgonpho APPLE !PHONES ne 5257 04/10/20 02:14:25 21:02 0 0 ructgonpho APPLE !PHONES no 5258 04/10/20 02:14:46 20:40 6264 6676 imp APPLE !PHONES 5259 04/10/20 02:14:47 20:40 6676 6000 imp APPLE !PHONES 5260 04/10/20 02:35:27 60:00 192 Onatgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 215 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171135 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343193 MOBILITY e s, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Tame: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ INSI HAKE MODEL Date Tame Number Up Dn (UTC) 5261 04/10/20 02:35:28 60:00 8816 12226 ims APPLE 'PHONES 5262 04/10/20 02:35:28 60:00 0 0 nxtgonpho APPLE 'PHONES no 5263 04/10/20 02:35:29 60:00 12226 8660 ims APPLE 'PHONES 5264 04/10/20 03:35:28 186:43 17299 25710 ims APPLE 'PHONES 5265 04/10/20 03:35:28 60:00 0 0 nxtgonpho APPLE 'PHONES ne 5266 04/10/20 03:35:29 60:00 21406 15711 ims APPLE 'PHONES 5267 04/10/20 04:35:28 60:00 0 0 nxtgonpho APPLE 'PHONES ne 5268 04/10/20 04:35:29 60:00 4304 1696 ims APPLE 'PHONES 5269 04/10/20 05:22:42 60:00 16977 10370 ims 5270 04/10/20 05:35:28 60:00 0 0 nxtgonpho APPLE 'PHONES ne 5271 04/10/20 05:35:29 60:00 0 0 ims APPLE 'PHONES 5272 04/10/20 06:22:42 60:00 8388 2896 ims 5273 04/10/20 06:35:28 0:01 0 0 nxtgonpho APPLE 'PHONES ne 5274 04/10/20 06:35:29 6:43 0 0 ims APPLE 'PHONES 5275 04/10/20 06:42:11 100:51 192 0 nxtgonpho APPLE 'PHONES ne 5276 04/10/20 06:42:12 60:00 0 0 nxtgonpho APPLE 'PHONES ne 5277 04/10/20 07:22:42 60:00 8372 2912 ims 5278 04/10/20 07:42:12 40:51 0 0 nxtgonpho APPLE 'PHONES ne 5279 04/10/20 08:22:42 60:00 0 0 ims 5280 04/10/20 08:23:03 0:34 0 0 nxtgonpho APPLE 'PHONES ne 5281 04/10/20 08:23:36 1:53 192 0 nxtgonpho APPLE 'PHONES ne 5282 04/10/20 08:23:37 1:53 0 0 nxtgonpho APPLE 'PHONES ne 5283 04/10/20 08:25:30 0:52 0 0 nxtgonpho APPLE 'PHONES ne 5284 04/10/20 08:26:21 0:55 192 0 nxtgonpho APPLE 'PHONES ne 5285 04/10/20 08:26:22 0:55 0 0 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 216 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNI_ 00171136 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343194 MOBILITY ce. PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .‘•- a. ° AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn EBBE INSI MAKE MODEL Date Time Number Up Dn (67C) 5286 04/10/20 08:27:17 0:05 0 Onxtgonpho APPLE !PHONES ne 5287 04/10/20 08:27:35 3:10 0 Onxtgonpho APPLE !PHONES ne 5288 04/10/20 08:30:44 2:59 192 0 nxtgonpho APPLE !PHONES ne 5289 04/10/20 08:30:45 2:59 0 0 nxtgonpho APPLE !PHONES ne 5290 04/10/20 08:30:51 34:02 17797 12158 ism 5291 04/10/20 08:33:44 2:28 0 0 nxtgonpho APPLE !PHONES ne 5292 04/10/20 08:36:11 5:00 192 0 nxtgonpho APPLE !PHONES no 5293 04/10/20 08:36:13 4:59 0 0 nxtgonpho APPLE 'PHONES no 5294 04/10/20 08:41:12 9:22 0 0 nxtgonpho APPLE !PHONES no 5295 04/10/20 08:50:34 2:10 192 0 nxtgonpho APPLE !PHONES no 5296 04/10/20 08:50:35 2:10 0 0 nxtgonpho APPLE !PHONES no 5297 04/10/20 08:52:45 1:15 0 0 nxtgonpho APPLE !PHONES no 5298 04/10/20 08:53:59 2:56 192 0 nxtgonpho APPLE !PHONES no 5299 04/10/20 08:54:00 2:57 0 0 nxtgonpho APPLE !PHONES no 5300 04/10/20 08:56:56 0:06 0 0 nxtgonpho APPLE !PHONES no 5301 04/10/20 08:58:02 3:39 192 0 nxtgonpho APPLE !PHONES no 5302 04/10/20 08:58:04 3:38 0 0 nxtgonpho APPLE !PHONES no 5303 04/10/20 09:01:42 0:54 0 0 nxtgonpho APPLE !PHONES no 5304 04/10/20 09:02:35 2:08 192 0 nxtgonpho APPLE !PHONES no 5305 04/10/20 09:02:36 2:08 0 0 nxtgonpho APPLE !PHONES no 5306 04/10/20 09:04:43 0:06 0 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 217 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171137 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343195 MOBILITY cro PRI020 AT&T has queried AT&T has queried for records for records from 03/01/2020 12:00:00am using Eastern Time Zone. to 06/15/2020 11:59:59pm AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn MKT IMSI NAPS MODEL Date Time Number Up Dn (UTC) 5307 04/10/20 09:22:42 60:00 0 0 ims 5308 04/10/20 10:22:42 60:00 0 0 ims 5309 04/10/20 11:22:42 44:03 0 0 ims 5310 04/10/20 11:30:56 8:35 192 Onxtgonpho APPLE 'PROMO ne 5311 04/10/20 11:30:57 8:34 6264 6668 ims APPLE !PHONES 5312 04/10/20 11:30:57 8:35 0 Onxtgonpho APPLE IPHONE8 ne 5313 04/10/20 11:30:58 8:34 6668 6000 ims APPLE IPHONE8 5314 04/10/20 11:39:32 1:48 0 Onxtgonpho APPLE !PHONES ne 5315 04/10/20 11:39:34 1:46 8594 6070 ims APPLE !PHONES 5316 04/10/20 11:41:19 14:42 192 Onactgonpho APPLE !PHONES ne 5317 04/10/20 11:41:20 14:41 6228 6670 ims APPLE !PHONES 5318 04/10/20 11:41:20 14:42 0 Onxtgonpho APPLE !PHONES ne 5319 04/10/20 11:41:21 14:41 6670 5964 ims APPLE !PHONES 5320 04/10/20 11:56:02 0:44 0 Onxtgonpho APPLE !PHONES ne 5321 04/10/20 11:56:05 0:41 11394 10004 ims APPLE !PHONES 5322 04/10/20 11:56:45 13:02 192 Onactgonpho APPLE !PHONES ne 5323 04/10/20 11:56:46 13:01 6304 6734 ims APPLE !PHONES 5324 04/10/20 11:56:46 13:02 0 Onmtgonpho APPLE !PHONES no 5325 04/10/20 11:56:47 13:01 6734 6040 ims APPLE !PHONES 5326 04/10/20 12:09:21 55:07 16157 8192 ims 5327 04/10/20 12:09:48 1:39 0 Onmtgonpho APPLE !PHONES no 5328 04/10/20 12:11:26 24:08 192 0 nxtgonpho APPLE !PHONES ne 5329 04/10/20 12:11:27 24:08 0 0 nxtgonpho APPLE !PHONES ne 5330 04/10/20 12:35:35 10:15 0 0 nxtgonpho APPLE !PHONES ne 5331 04/10/20 12:45:49 2:05 192 0 nxtgonpho APPLE !PHONES ne 5332 04/10/20 12:45:50 2:05 0 0 nxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 218 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171138 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343196 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. .‘•- 1. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: "MI= Item Conn. Conn. Originating ET Bytes Bytes Apn DOLT INSI MAKE MODEL Date Time Number Up Dn (OTC) 5333 04/10/20 12:47:55 0:54 0 0 nxtgenpho APPLE 'PHONES ne 5334 04/10/20 12:48:48 1:40 192 0 nxtgenpho APPLE 'PHONES ne 5335 04/10/20 12:48:49 1:40 0 0 nxtgenpho APPLE 'PHONES ne 5336 04/10/20 12:50:29 1:10 0 Onxtgonpho APPLE 'PHONES ne 5337 04/10/20 12:51:38 2:19 192 Onxtgonpho APPLE 'PHONES no 5338 04/10/20 12:51:40 2:18 0 0 nxtgonpho APPLE 'PHONES ne 5339 04/10/20 12:53:58 12:56 192 0 nxtgenpho APPLE 'PHONES ne 5340 04/10/20 12:53:59 12:56 0 0 nxtgenpho APPLE 'PHONES ne 5341 04/10/20 12:59:18 7:36 6245 6644 ims APPLE 'PHONES 5342 04/10/20 12:59:19 7:36 6644 6089 ims APPLE 'PHONES 5343 04/10/20 13:04:28 60:00 9924 6494 ims 5344 04/10/20 13:06:55 4:52 0 0 nxtgenpho APPLE 'PHONES ne 5345 04/10/20 13:11:46 2:03 192 0 nxtgenpho APPLE 'PHONES ne 5346 04/10/20 13:11:47 2:03 0 0 nxtgenpho APPLE 'PHONES ne 5347 04/10/20 13:12:42 60:00 19744 9906 ims 5348 04/10/20 13:13:50 3:31 0 0 nxtgenpho APPLE 'PHONES ne 5349 04/10/20 13:17:20 4:03 192 0 nxtgenpho APPLE 'PHONES ne 5350 04/10/20 13:17:22 4:03 0 0 nxtgenpho APPLE 'PHONES ne 5351 04/10/20 13:21:25 1:11 0 0 nxtgenpho APPLE !PHONES ne 5352 04/10/20 13:22:35 2:31 192 0 nxtgenpho APPLE 'PHONES ne 5353 04/10/20 13:22:36 2:31 0 0 nxtgenpho APPLE 'PHONES ne 5354 04/10/20 13:25:07 5:25 0 0 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 219 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171139 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343197 MOBILITY cre PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Time: Data usage For: IS= Item Conn. Conn. Originating ET Bytes Bytes Apn flax IMSI MAKE MODEL Date Time Number up nn (OTC) 5355 04/10/20 13:30:31 0:24 192 0 nxtgenpho APPLE 'PEONES ne 5356 04/10/20 13:30:32 0:24 0 0 nxtgenpho APPLE 'PEONES ne 5357 04/10/20 13:30:56 3:56 0 0 nxtgenpho APPLE 'PEONES ne 5358 04/10/20 13:34:51 1:06 192 0 nxtgenpho APPLE 'PEONES ne 5359 04/10/20 13:34:53 1:05 0 0 nxtgenpho APPLE 'PHONES ne 5360 04/10/20 13:35:58 8:44 0 0 nxtgenpho APPLE 'PHONES ne 5361 04/10/20 13:44:41 3:44 192 0 nxtgenpho APPLE 'PHONES ne 5362 04/10/20 13:44:42 3:44 0 0 nxtgenpho APPLE 'PHONES ne 5363 04/10/20 13:48:26 7:00 0 0 nxtgenpho APPLE 'PHONES ne 5364 04/10/20 13:55:26 0:37 192 0 nxtgenpho APPLE 'PHONES ne 5365 04/10/20 13:55:27 0:37 0 0 nxtgenpho APPLE 'PHONES ne 5366 04/10/20 13:56:04 5:57 0 0 nxtgenpho APPLE 'PHONES ne 5367 04/10/20 14:02:00 2:03 192 0 nxtgenpho APPLE 'PHONES ne 5368 04/10/20 14:02:01 2:03 0 0 nxtgenpho APPLE 'PHONES ne 5369 04/10/20 14:04:04 6:37 0 0 nxtgenpho APPLE 'PHONES ne 5370 04/10/20 14:04:28 9:37 0 0 ims 5371 04/10/20 14:10:40 1:21 192 Onxtgenpho APPLE IPHONE8 ne 5372 04/10/20 14:10:41 1:21 0 0 nxtgenpho APPLE IPHONE8 ne 5373 04/10/20 14:12:03 10:13 0 0 nxtgenpho APPLE IPHONE8 ne 5374 04/10/20 14:12:42 21:53 0 0 ims 5375 04/10/20 14:14:05 0:00 0 0 ims APPLE IPHONE8 5376 04/10/20 14:14:20 8:00 24235 15112 ims APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 220 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171140 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343198 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:68:58pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ‘•-is° AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating CT Bytes Bytes Apn DMZ IMSI HAKE MODEL Date Time Number Up Dn (UTC) 5377 04/10/20 14:22:16 12:14 0 0 nxtgonpho APPLE 'PHONES ne 5378 04/10/20 14:22:20 12:10 2876 1448 ims APPLE 'PHONES 5379 04/10/20 14:22:20 12:10 2812 1448 ims APPLE 'PHONES 5380 04/10/20 14:34:29 13:24 192 0nxtgonpho APPLE 'PHONES ne 5381 04/10/20 14:34:30 13:24 0 0 nxtgonpho APPLE 'PHONES ne 5382 04/10/20 14:34:34 13:18 7524 7212 ims APPLE 'PHONES 5383 04/10/20 14:34:35 13:18 7212 7260 ims APPLE 'PHONES 5384 04/10/20 14:48:09 52:40 0 0nxtgonpho APPLE 'PHONES ne 5385 04/10/20 14:48:11 45:16 9278 7412 ims APPLE 'PHONES 5386 04/10/20 15:33:30 7:19 6666 5962 ims APPLE 'PHONES 5387 04/10/20 15:40:48 16:22 192 0 nxtgonpho APPLE 'PHONES ne 5388 04/10/20 15:40:49 16:21 6262 6672 ims APPLE 'PHONES 5389 04/10/20 15:40:49 16:22 0 0 nxtgonpho APPLE 'PHONES no 5390 04/10/20 15:40:50 16:21 6672 5998 ims APPLE 'PHONES 5391 04/10/20 15:56:05 1:07 22574 12240 ims 5392 04/10/20 15:57:41 2:03 192 0 nxtgonpho APPLE 'PHONES no 5393 04/10/20 15:57:42 2:02 8124 6870 ims APPLE 'PHONES 5394 04/10/20 15:57:42 2:03 0 0 nxtgonpho APPLE 'PHONES ne 5395 04/10/20 15:57:44 2:01 6870 7860 isms APPLE 'PHONES 5396 04/10/20 15:58:24 60:00 16737 9198 isms 5397 04/10/20 15:59:45 36:21 0 0 nxtgonpho APPLE 'PHONES ne 5398 04/10/20 16:36:05 8:30 192 0 nxtgonpho APPLE 'PHONES ne 5399 04/10/20 16:36:07 8:29 0 0 nxtgonpho APPLE 'PHONES ne 5400 04/10/20 16:44:36 40:31 0 0 nxtgonpho APPLE 'PHONES no 5401 04/10/20 16:58:24 60:00 8388 2912 ims 5402 04/10/20 17:25:06 4:50 192 0 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 221 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171141 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343199 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ INSI MAKE MODEL Date Time Number Up Dn (UTC) 5403 04/10/20 17:25:07 4:50 0 0nmtgonpho APPLE 'PHONES ne 5404 04/10/20 17:29:56 1:01 192 0nstgenpho APPLE 'PHONES ne 5405 04/10/20 17:29:58 1:00 0 0nstgenpho APPLE 'PHONES ne 5406 04/10/20 17:30:58 33:15 192 0nstgenpho APPLE 'PHONES ne 5407 04/10/20 17:30:59 33:15 0 0nstgenpho APPLE 'PHONES ne 5408 04/10/20 17:58:24 60:00 24756 10268 ims 5409 04/10/20 18:04:14 35:13 0 0nstgenpho APPLE 'PHONES no 5410 04/10/20 18:26:14 0:23 0 1682 ims 5411 04/10/20 18:39:26 2:21 192 0nmtgonpho APPLE 'PHONES ne 5412 04/10/20 18:39:28 2:20 0 0nstgenpho APPLE 'PHONES ne 5413 04/10/20 18:41:47 39:06 192 0nstgenpho APPLE 'PHONES ne 5414 04/10/20 18:41:48 39:06 0 0nstgenpho APPLE 'PHONES ne 5415 04/10/20 18:58:24 60:00 10268 3408 isms 5416 04/10/20 19:20:54 2:03 0 0nmtgonpho APPLE 'PHONES no 5417 04/10/20 19:22:56 8:51 192 0nstgenpho APPLE 'PHONES ne 5418 04/10/20 19:22:57 8:51 0 0nstgenpho APPLE 'PHONES ne 5419 04/10/20 19:31:48 6:03 192 0nstgenpho APPLE 'PHONES no 5420 04/10/20 19:31:49 6:03 0 0nstgenpho APPLE 'PHONES no 5421 04/10/20 19:37:52 1:59 0 0nstgenpho APPLE 'PHONES no 5422 04/10/20 19:39:50 2:10 192 0nstgenpho APPLE 'PHONES no 5423 04/10/20 19:39:51 2:10 0 0nstgenpho APPLE 'PHONES no 5424 04/10/20 19:42:01 15:31 0 0nstgenpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 222 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171142 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343200 MOBILITY e s, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn 731/LI IMSI MAKE MODEL Date Time Number Up Dn (UTC) 5425 04/10/20 19:57:31 8:26 192 Onxtgonpho APPLE 'PHONES ne 5426 04/10/20 19:57:32 8:26 0 Onxtgonpho APPLE IPHOME8 ne 5427 04/10/20 19:58:24 60:00 18300 6264 ims 5428 04/10/20 20:05:59 11:58 0 Onxtgonpho APPLE 'PHONES ne 5429 04/10/20 20:17:56 8:07 192 Onxtgenpho APPLE 'PHONES ne 5430 04/10/20 20:17:57 8:07 0 Onxtgonpho APPLE 'PHONES ne 5431 04/10/20 20:26:04 40:33 0 Onxtgonpho APPLE 'PHONES ne 5432 04/10/20 20:58:24 60:00 10376 3408 ims 5433 04/10/20 21:06:36 2:10 192 Onxtgonpho APPLE 'PHONES ne 5434 04/10/20 21:06:38 2:09 0 Onxtgenpho APPLE 'PHONES ne 5435 04/10/20 21:08:47 60:00 0 Onxtgenpho APPLE 'PHONES ne 5436 04/10/20 21:58:24 60:00 6956 2680 ims 5437 04/10/20 22:08:47 60:00 0 Onxtgonpho APPLE 'PHONES ne 5438 04/10/20 22:58:24 60:00 10144 3300 ims 5439 04/10/20 23:08:47 4:57 0 Onxtgonpho APPLE 'PHONES ne 5440 04/10/20 23:13:43 102:45 192 Onxtgenpho APPLE 'PHONES ne 5441 04/10/20 23:13:44 60:00 0 Onxtgenpho APPLE 'PHONES ne 5442 04/10/20 23:58:24 60:00 10144 3176 ims 5443 04/11/20 00:13:44 42:45 0 Onxtgonpho APPLE 'PHONES ne 5444 04/11/20 00:56:04 0:24 7215 6860 ims APPLE 'PHONES 5445 04/11/20 00:56:05 0:24 6792 6951 ims APPLE 'PHONES 5446 04/11/20 00:56:29 4:38 0 Onxtgonpho APPLE 'PHONES ne 5447 04/11/20 00:56:31 0:58 6684 6000 ims APPLE 'PHONES 5448 04/11/20 00:57:29 5:13 3640 1432 ims APPLE 'PHONES 5449 04/11/20 00:58:24 2:35 0 0 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 223 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171143 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343201 MOBILITY cee P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn MDRI IMSI Ma= MODEL Data Tam. Suitor Up Dn (OTC) 5450 04/11/20 01:01:06 2:58 192 0 nxtgonpho APPLE IPEOMEB no 5451 04/11/20 01:01:07 2:57 15076 15712 ims APPLE 'PEONES 5452 04/11/20 01:01:07 2:58 0 0 nxtgonpho APPLE 'PEONES no 5453 04/11/20 01:01:09 2:56 15712 14812 ims APPLE 'PEONES 5454 04/11/20 01:02:42 60:00 15829 9382 ims 5455 04/11/20 01:04:05 60:00 0 0 nxtgonpho APPLE 'PEONES no 5456 04/11/20 02:02:42 60:00 8388 3036 ims 5457 04/11/20 02:04:05 40:56 0 0 nxtgonpho APPLE 'PHONES no 5458 04/11/20 02:45:00 27:48 192 0 nstgempho APPLE 'PHONES no 5459 04/11/20 02:45:01 27:48 0 0 nxtgonpho APPLE 'PHONES no 5460 04/11/20 03:02:42 60:00 6924 2912 ims 5461 04/11/20 03:12:49 0:42 0 0 nxtgonpho APPLE !PHONES no 5462 04/11/20 03:13:30 20:58 192 °asty:mph* APPLE 'PHONES no 5463 04/11/20 03:13:31 20:58 0 0 nxtgonpho APPLE !PHONES no 5464 04/11/20 03:34:29 54:40 0 0 nxtgonpho APPLE !PHONES no 5465 04/11/20 04:02:42 60:00 7032 2928 ims 5466 04/11/20 04:29:08 13:55 192 0 nxtgonpho APPLE 'PHONES no 5467 04/11/20 04:29:09 13:55 0 0 nxtgonpho APPLE !PHONES no 5468 04/11/20 04:43:04 0:59 0 Onstympho APPLE !PHONES no 5469 04/11/20 04:44:02 22:54 192 0 nxtgonpho APPLE 'PHONES no 5470 04/11/20 04:44:03 22:54 0 0 nxtgonpho APPLE !PHONES no 5471 04/11/20 05:02:42 60:00 11780 4484 ims 5472 04/11/20 05:06:57 0:41 0 0 nxtgonpho APPLE !PHONES no 5473 04/11/20 05:07:37 1:21 192 0 nstympho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 224 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171144 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343202 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Tina: Data Usage For: MS= Item Conn. Conn. Originating ET Bytes Bytes Apn EBB! INSI NAAS MODEL Date Tana Number Up Dn (UTC) 5474 04/11/20 05:07:38 1:21 0 0 nxtgenpho APPLE !PHONES no 5475 04/11/20 05:08:59 1:22 0 0 nxtgenpho APPLE !PHONES no 5476 04/11/20 05:10:21 60:00 0 0 nxtgenpho APPLE !PHONES no 5477 04/11/20 06:02:42 60:00 12228 4784 ism 5478 04/11/20 06:10:21 60:00 0 0 nxtgenpho APPLE !PHONES ne 5479 04/11/20 07:02:42 60:00 8388 2928 ism 5480 04/11/20 07:10:21 60:00 0 0 nxtgenpho APPLE !PHONES ne 5481 04/11/20 08:02:42 60:00 8264 2804 ism 5482 04/11/20 08:10:21 60:00 0 0 nxtgenpho APPLE !PHONES ne 5483 04/11/20 09:02:42 60:00 13476 4748 ism 5484 04/11/20 09:10:21 0:01 0 0 nxtgenpho APPLE !PHONES no 5485 04/11/20 09:10:24 60:00 0 0 nxtgenpho APPLE !PHONES no 5486 04/11/20 10:02:42 60:00 8496 2928 ism 5487 04/11/20 10:10:24 60:00 0 0 nxtgenpho APPLE !PHONES no 5488 04/11/20 11:02:42 60:00 11796 4536 ism 5489 04/11/20 11:10:24 23:33 0 0 nxtgenpho APPLE !PHONES no 5490 04/11/20 11:33:56 1:41 192 0 nxtgenpho APPLE !PHONES no 5491 04/11/20 11:33:58 1:40 0 0 nxtgenpho APPLE !PHONES no 5492 04/11/20 11:35:38 4:12 0 0 nxtgenpho APPLE !PHONES no 5493 04/11/20 11:39:50 3:00 0 0 nxtgenpho APPLE !PHONES no 5494 04/11/20 11:42:49 2:48 192 0 nxtgenpho APPLE !PHONES ne 5495 04/11/20 11:42:51 2:47 0 0 nxtgenpho APPLE !PHONES ne 5496 04/11/20 11:45:38 60:00 0 0 nxtgenpho APPLE !PHONES ne 5497 04/11/20 12:02:42 1:51 0 0 ism AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 225 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171145 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343203 MOBILITY ce. pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:50:60pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn ffiI INSI MAKE MODEL Date Time Number Up Dn (OTC) 5498 04/11/20 12:11:46 0:01 0 0 ims APPLE 'PHONES 5499 04/11/20 12:16:06 60:00 9926 6400 ims 5500 04/11/20 12:43:42 60:00 16873 9419 ims 5501 04/11/20 12:45:38 10:14 0 Onmtgonpho APPLE 'PHONES ne 5502 04/11/20 12:55:52 2:03 192 0 nxtgonpho APPLE 'PHONES ne 5503 04/11/20 12:55:53 2:03 0 0 nxtgonpho APPLE 'PHONES ne 5504 04/11/20 12:57:56 60:00 0 0 nxtgonpho APPLE 'PHONES ne 5505 04/11/20 13:16:06 60:00 0 0 ims 5506 04/11/20 13:43:42 60:00 8388 2928 ims 5507 04/11/20 13:57:56 48:58 0 0 nxtgonpho APPLE 'PHONES ne 5508 04/11/20 14:16:06 60:00 0 0 ims 5509 04/11/20 14:43:42 60:00 8388 2928 ims 5510 04/11/20 14:46:53 2:04 192 0 nxtgonpho APPLE 'PHONES ne 5511 04/11/20 14:46:54 2:04 0 0 nxtgonpho APPLE 'PHONES ne 5512 04/11/20 14:48:59 7:30 0 0 nxtgonpho APPLE 'PHONES ne 5513 04/11/20 14:56:28 5:35 192 0 nxtgonpho APPLE 'PHONES no 5514 04/11/20 14:56:29 5:35 0 0 nxtgonpho APPLE 'PHONES no 5515 04/11/20 15:02:04 17:37 0 0 nxtgonpho APPLE 'PHONES ne 5516 04/11/20 15:16:06 60:00 0 0 ims 5517 04/11/20 15:19:40 2:39 192 0 nxtgonpho APPLE 'PHONES ne 5518 04/11/20 15:19:42 2:38 0 0 nxtgonpho APPLE 'PHONES ne 5519 04/11/20 15:22:20 33:47 0 0 nxtgonpho APPLE 'PHONES ne 5520 04/11/20 15:43:42 60:00 8496 2928 ims 5521 04/11/20 15:56:06 32:38 192 0 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 226 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171146 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343204 MOBILITY e• ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in / 1 4•••0 AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn =MI IM9I MAKE MODEL Date Tame Up Dn (OTC) 5522 04/11/20 15:56:07 32:38 0 0 nxtgenpho APPLE !PHONES ne 5523 04/11/20 16:16:06 30:53 0 0 ims 5524 04/11/20 16:28:45 1:02 0 0 nxtgenpho APPLE !PHONES ne 5525 04/11/20 16:29:47 39:09 192 0 nxtgenpho APPLE !PHONES ne 5526 04/11/20 16:29:48 39:09 0 0 nxtgenpho APPLE !PHONES ne 5527 04/11/20 16:43:42 60:00 18068 6356 ims 5528 04/11/20 17:08:57 1:37 0 0 nxtgenpho APPLE !PHONES ne 5529 04/11/20 17:10:34 27:26 192 0 nxtgenpho APPLE !PHONES ne 5530 04/11/20 17:10:35 27:26 0 0 nxtgenpho APPLE !PHONES ne 5531 04/11/20 17:38:01 7:44 0 0 nxtgenpho APPLE !PHONES ne 5532 04/11/20 17:43:42 60:00 6956 2788 ims 5533 04/11/20 17:45:44 41:32 192 0 nxtgenpho APPLE !PHONES ne 5534 04/11/20 17:45:45 41:32 0 0 nxtgenpho APPLE !PHONES ne 5535 04/11/20 18:27:17 16:02 0 0 nxtgenpho APPLE !PHONES ne 5536 04/11/20 18:43:18 2:04 192 0 nxtgenpho APPLE !PHONES ne 5537 04/11/20 18:43:20 2:03 0 0 nxtgenpho APPLE !PHONES ne 5538 04/11/20 18:43:42 60:00 8496 3052 ims 5539 04/11/20 18:45:23 26:19 0 0 nxtgenpho APPLE !PHONES ne 5540 04/11/20 19:11:41 2:10 192 0 nxtgenpho APPLE !PHONES ne 5541 04/11/20 19:11:43 2:10 0 0 nxtgenpho APPLE !PHONES ne 5542 04/11/20 19:13:53 36:13 0 0 nxtgenpho APPLE !PHONES ne 5543 04/11/20 19:43:42 60:00 13352 4516 Las 5544 04/11/20 19:50:05 11:47 192 0 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 227 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171147 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343205 MOBILITY cm% ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in •-•rns AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: it= Item Conn. Conn. Originating ET Bytos Bytes Apn EBBE IMSI MAKE MODEL Date T11011 Number Up Dn lu7C) 5545 04/11/20 19:50:06 11:48 0 Onxtgonpho APPLE !PHONES ne 5546 04/11/20 20:01:53 4:41 192 0 nxtgenpho APPLE !PHONES ne 5547 04/11/20 20:01:54 4:41 0 0 nxtgenpho APPLE !PHONES ne 5548 04/11/20 20:06:35 2:39 0 0 nxtgenpho APPLE !PHONES ne 5549 04/11/20 20:09:13 2:18 192 0 nxtgenpho APPLE !PHONES ne 5550 04/11/20 20:09:15 2:17 0 0 nxtgenpho APPLE !PHONES ne 5551 04/11/20 20:11:32 6:09 192 0 nxtgenpho APPLE !PHONES ne 5552 04/11/20 20:11:33 6:09 0 0 nxtgenpho APPLE !PHONES ne 5553 04/11/20 20:17:42 60:00 0 0 nxtgenpho APPLE !PHONES ne 5554 04/11/20 20:42:49 60:00 18287 9340 ims 5555 04/11/20 20:43:42 60:00 0 0 ims 5556 04/11/20 21:17:42 2:45 0 Onxtgonpho APPLE !PHONES ne 5557 04/11/20 21:20:26 2:04 192 0 nxtgenpho APPLE !PHONES ne 5558 04/11/20 21:20:27 2:04 0 0 nxtgenpho APPLE !PHONES ne 5559 04/11/20 21:22:31 60:00 0 0 nxtgenpho APPLE !PHONES ne 5560 04/11/20 21:42:49 60:00 8712 3252 ims 5561 04/11/20 21:43:42 60:00 0 0 ims 5562 04/11/20 22:22:31 15:13 0 Onxtgonpho APPLE !PHONES ne 5563 04/11/20 22:37:43 83:24 192 0 nxtgenpho APPLE !PHONES ne 5564 04/11/20 22:37:44 60:00 0 0 nxtgenpho APPLE !PHONES no 5565 04/11/20 22:42:49 60:00 6848 2648 Las 5566 04/11/20 22:43:42 60:00 0 0 Las 5567 04/11/20 23:37:44 23:24 0 0 nxtgenpho APPLE !PHONES ne 5568 04/11/20 23:42:49 60:00 10720 4096 Las AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 228 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171148 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343206 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .•-.so AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn 731ZI II I MAKE MODEL Date Time Number Up Dn (OTC) 5569 04/11/20 23:43:42 58:52 0 0 ism 5570 04/12/20 00:01:08 60:00 0 0nstgenpho APPLE 'PHONES ne 5571 04/12/20 00:42:49 60:00 11920 4612 ism 5572 04/12/20 01:01:08 52:41 0 0nstgenpho APPLE 'PHONES ne 5573 04/12/20 01:42:49 60:00 8604 3112 ism 5574 04/12/20 01:58:01 34:14 192 0nstgenpho APPLE 'PHONES ne 5575 04/12/20 01:58:02 34:14 0 0nstgenpho APPLE 'PHONES ne 5576 04/12/20 02:32:16 70:00 192 0nstgenpho APPLE 'PHONES ne 5577 04/12/20 02:32:17 60:00 0 0nstgenpho APPLE 'PHONES ne 5578 04/12/20 02:42:49 60:00 8604 2896 ism 5579 04/12/20 03:32:17 60:00 0 0nstgenpho APPLE 'PHONES ne 5580 04/12/20 03:42:49 60:00 6956 2756 ism 5581 04/12/20 04:32:17 60:00 0 0nstgenpho APPLE 'PHONES ne 5582 04/12/20 04:42:49 60:00 11936 4236 ism 5583 04/12/20 05:32:17 5:52 0 0nstgenpho APPLE 'PHONES ne 5584 04/12/20 05:42:49 60:00 10488 4364 isms 5585 04/12/20 06:42:49 60:00 6848 2648 isms 5586 04/12/20 07:42:49 60:00 10036 3144 ism 5587 04/12/20 08:42:49 60:00 13460 4576 ism 5588 04/12/20 09:42:49 60:00 8372 3036 ism 5589 04/12/20 10:42:49 60:00 8388 2788 ism 5590 04/12/20 11:42:49 60:00 15000 5000 ism 5591 04/12/20 11:42:58 78:11 192 0nstgenpho APPLE 'PHONES ne 5592 04/12/20 11:42:59 60:00 0 0nstgenpho APPLE 'PHONES ne 5593 04/12/20 12:42:49 60:00 13352 4576 ism 5594 04/12/20 12:42:59 18:11 0 0nstgenpho APPLE 'PHONES ne 5595 04/12/20 13:01:10 5:46 0 0nstgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 229 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171149 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343207 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn neer 1162 10JCIL MCOEL Date Time Number Up Dn MC/ 5596 04/12/20 13:06:55 74:35 192 0 nottgonpho APPLE !PHONES ne 5597 04/12/20 13:06:56 60:00 0 0 nottgonpho APPLE 'PHONES ne 5598 04/12/20 13:42:49 60:00 8496 3004 ims 5599 04/12/20 14:06:56 14:35 0 0 nottgonpho APPLE 'PHONES ne 5600 04/12/20 14:21:31 9:25 192 0 nottgonpho APPLE 'PHONES no 5601 04/12/20 14:21:32 9:25 0 0 nottgonpho APPLE 'PHONES no 5602 04/12/20 14:30:57 60:00 0 0 nottgonpho APPLE 'PHONES no 5603 04/12/20 14:42:49 60:00 8388 2896 ism 5604 04/12/20 15:30:57 47:29 0 0 nmtgonpho APPLE 'PHONES no 5605 04/12/20 15:42:49 60:00 8496 3004 ism 5606 04/12/20 16:18:26 0:22 192 0 nottgonpho APPLE 'PHONES ne 5607 04/12/20 16:18:27 0:22 0 0 nottgonpho APPLE 'PHONES ne 5608 04/12/20 16:18:49 4:54 0 0 nottgonpho APPLE 'PHONES ne 5609 04/12/20 16:23:42 2:03 192 0 nottgonpho APPLE 'PHONES ne 5610 04/12/20 16:23:43 2:03 0 0 nactgonpho APPLE 'PHONES ne 5611 04/12/20 16:25:46 23:14 0 0nactgonpho APPLE 'PHONES ne 5612 04/12/20 16:42:49 60:00 12028 4504 ism 5613 04/12/20 16:49:00 24:00 192 0 nactgonpho APPLE 'PHONES ne 5614 04/12/20 16:49:01 24:00 0 0 nottgonpho APPLE 'PHONES ne 5615 04/12/20 17:13:00 71:45 192 0 nottgonpho APPLE 'PHONES no 5616 04/12/20 17:13:01 60:00 0 0 nottgonpho APPLE 'PHONES no 5617 04/12/20 17:42:49 60:00 10396 4096 ism 5618 04/12/20 18:13:01 11:45 0 0 nmtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 230 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171150 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343208 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Dato: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating ET Bytos Bytes Apn nom nen MAPS MODEL Date Time Number up 0n (UTC) 5619 04/12/20 18:24:46 27:09 192 0 nxtgenpho APPLE 'PEONES ne 5620 04/12/20 18:24:47 27:09 0 0 nxtgenpho APPLE 'PEONES ne 5621 04/12/20 18:42:49 60:00 8604 3004 ims 5622 04/12/20 18:51:56 2:16 0 0 nxtgenpho APPLE 'PHONES ne 5623 04/12/20 18:54:11 63:24 192 0 nxtgenpho APPLE !PHONES ne 5624 04/12/20 18:54:12 60:00 0 0 nxtgenpho APPLE !PHONES ne 5625 04/12/20 19:42:49 60:00 8388 3004 ims 5626 04/12/20 19:54:12 3:24 0 0 nxtgenpho APPLE !PHONES ne 5627 04/12/20 19:57:35 6:10 192 0 nxtgenpho APPLE !PHONES ne 5628 04/12/20 19:57:36 6:10 0 0 nxtgenpho APPLE !PHONES ne 5629 04/12/20 20:03:46 38:14 0 0 nxtgenpho APPLE !PHONES ne 5630 04/12/20 20:41:59 8:25 192 0 nxtgenpho APPLE !PHONES ne 5631 04/12/20 20:42:00 8:25 0 0 nxtgenpho APPLE !PHONES ne 5632 04/12/20 20:42:49 35:13 3532 1324 ims 5633 04/12/20 20:50:25 6:41 0 0 nxtgenpho APPLE !PHONES ne 5634 04/12/20 20:57:05 14:27 192 0 nxtgenpho APPLE !PHONES ne 5635 04/12/20 20:57:06 14:27 0 0 nxtgenpho APPLE !PHONES ne 5636 04/12/20 21:11:33 1:25 0 0 nxtgenpho APPLE !PHONES ne 5637 04/12/20 21:12:57 19:03 192 0 nxtgenpho APPLE !PHONES ne 5638 04/12/20 21:12:58 19:03 0 0 nxtgenpho APPLE !PHONES ne 5639 04/12/20 21:13:33 18:27 6182 7136 ims APPLE !PHONES 5640 04/12/20 21:13:34 18:27 7068 5918 ims APPLE !PHONES 5641 04/12/20 21:32:01 0:53 0 Onmtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 231 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171151 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343209 MOBILITY cr, pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. t,rzsaioAT&T Run Date: 06/17/2020 Run Tine: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes API INSI MAKE MODEL Date Time Number Up Dn (OTC) 5642 04/12/20 21:32:04 0:47 9586 6195 ins APPLE 'PHONES 5643 04/12/20 21:32:51 60:00 8604 3004 ins APPLE 'PHONES 5644 04/12/20 21:32:53 2:03 192 0nmtgonpho APPLE 'PHONES ne 5645 04/12/20 21:32:54 2:04 0 0 nottgonpho APPLE 'PHONES ne 5646 04/12/20 21:34:58 60:00 0 0 nottgonpho APPLE 'PHONES ne 5647 04/12/20 22:16:52 0:01 0 0 ins APPLE 'PHONES 5648 04/12/20 22:17:06 5:31 8205 5997 ins APPLE 'PHONES 5649 04/12/20 22:22:37 30:23 3500 1448 ins APPLE 'PHONES 5650 04/12/20 22:22:37 30:23 3436 1448 ins APPLE 'PHONES 5651 04/12/20 22:32:51 60:00 0 0 ins APPLE 'PHONES 5652 04/12/20 22:34:58 18:02 0 0nmtgonpho APPLE 'PHONES ne 5653 04/12/20 22:53:00 57:48 192 0 nottgonpho APPLE 'PHONES ne 5654 04/12/20 22:53:01 57:47 12190 13292 ins APPLE 'PHONES 5655 04/12/20 22:53:01 57:48 0 0 nottgonpho APPLE 'PHONES no 5656 04/12/20 22:53:02 57:47 13292 12034 ins APPLE 'PHONES 5657 04/12/20 23:32:51 60:00 0 0 ins APPLE 'PHONES 5658 04/12/20 23:50:49 17:41 0 0 nottgonpho APPLE 'PHONES no 5659 04/12/20 23:50:51 17:39 6688 5998 ins APPLE 'PHONES 5660 04/13/20 00:08:29 2:25 192 0 nottgonpho APPLE 'PHONES ne 5661 04/13/20 00:08:30 2:25 0 0 nottgonpho APPLE 'PHONES ne 5662 04/13/20 00:10:55 1:24 0 0 nottgonpho APPLE 'PHONES ne 5663 04/13/20 00:11:18 0:00 0 0 ins APPLE 'PHONES 5664 04/13/20 00:11:26 0:17 4760 6048 ins APPLE 'PHONES 5665 04/13/20 00:11:43 27:42 19592 10964 ins APPLE 'PHONES 5666 04/13/20 00:12:18 2:03 192 0nmtgonpho APPLE 'PHONES ne 5667 04/13/20 00:12:19 2:03 0 0 nottgonpho APPLE 'PHONES ne 5668 04/13/20 00:14:22 26:57 0 0 nottgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 232 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171152 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343210 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ INSI HAKE MODEL Date Time Numbor Up Dn (UTC) 5669 04/13/20 00:32:51 54:28 0 0 ims APPLE 'PHONES 5670 04/13/20 00:39:25 1:54 4152 1324 ims APPLE 'PHONES 5671 04/13/20 00:39:25 1:54 4152 1412 ims APPLE 'PHONES 5672 04/13/20 00:41:19 19:39 192 0nmtgonpho APPLE 'PHONES ne 5673 04/13/20 00:41:20 19:39 0 0nmtgonpho APPLE 'PHONES ne 5674 04/13/20 00:41:20 12:15 7114 6740 ims APPLE 'PHONES 5675 04/13/20 00:41:21 12:15 6740 6850 ims APPLE 'PHONES 5676 04/13/20 00:57:25 3:33 8162 6864 ims APPLE 'PHONES 5677 04/13/20 00:57:26 3:33 6864 7898 ims APPLE 'PHONES 5678 04/13/20 01:00:59 0:05 0 0nmtgonpho APPLE 'PHONES ne 5679 04/13/20 01:01:28 0:05 0 0nmtgonpho APPLE 'PHONES ne 5680 04/13/20 01:01:43 0:06 0 0nmtgonpho APPLE 'PHONES ne 5681 04/13/20 01:03:23 10:40 192 0nmtgonpho APPLE 'PHONES no 5682 04/13/20 01:03:24 10:39 6228 6778 ims APPLE 'PHONES 5683 04/13/20 01:03:24 10:40 0 0nmtgonpho APPLE 'PHONES no 5684 04/13/20 01:03:25 10:39 6670 5964 ims APPLE 'PHONES 5685 04/13/20 01:14:04 4:17 0 0nmtgonpho APPLE 'PHONES no 5686 04/13/20 01:14:08 4:13 9758 7088 ims APPLE 'PHONES 5687 04/13/20 01:18:20 2:10 192 0nmtgonpho APPLE 'PHONES ne 5688 04/13/20 01:18:21 2:09 6094 6444 ims APPLE 'PHONES 5689 04/13/20 01:18:21 2:10 0 0nmtgonpho APPLE 'PHONES ne 5690 04/13/20 01:18:23 2:08 6336 5830 ims APPLE 'PHONES 5691 04/13/20 01:20:31 3:13 0 0nmtgonpho APPLE 'PHONES ne 5692 04/13/20 01:20:33 3:11 8084 6051 ims APPLE 'PHONES 5693 04/13/20 01:23:43 8:21 192 0nmtgonpho APPLE 'PHONES ne 5694 04/13/20 01:23:44 0:00 88 0 ims APPLE 'PHONES 5695 04/13/20 01:23:44 8:21 0 0nmtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 233 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171153 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343211 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in / 1 4-00 AT&T UTC. Run Data: 06/17/2020 Run Time: Data usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ DOI HUM MODEL Date TIM* Number up on (OTC/ 5696 04/13/20 01:23:45 0:00 0 0 ims APPLE !PEONES 5697 04/13/20 01:23:45 8:19 6244 6670 ims APPLE !PEONES 5698 04/13/20 01:23:46 8:19 6670 6088 ims APPLE !PEONES 5699 04/13/20 01:27:19 0:01 0 0 ims 5700 04/13/20 01:28:22 3:42 6228 6672 ims APPLE !PHONES 5701 04/13/20 01:28:23 3:42 6672 5964 ims APPLE IPHONE8 5702 04/13/20 01:32:05 7:54 0 0 nxtgenpho APPLE 'PHONES ne 5703 04/13/20 01:32:07 4:01 8276 6210 ims APPLE 'PHONES 5704 04/13/20 01:36:08 10:56 4964 1712 ims APPLE 'PHONES 5705 04/13/20 01:39:58 5:51 192 Onatgonpho APPLE 'PHONES ne 5706 04/13/20 01:39:59 5:51 0 0 natgonpho APPLE 'PHONES ne 5707 04/13/20 01:43:26 2:23 6262 6676 ims APPLE 'PHONES 5708 04/13/20 01:43:28 2:22 6676 5998 ims APPLE 'PHONES 5709 04/13/20 01:45:50 60:00 0 0 nxtgenpho APPLE 'PHONES ne 5710 04/13/20 01:45:52 40:00 11524 7572 ims APPLE 'PHONES 5711 04/13/20 02:25:52 29:08 3532 1432 ims APPLE 'PHONES 5712 04/13/20 02:45:50 60:00 0 0 nxtgenpho APPLE 'PHONES ne 5713 04/13/20 02:55:01 57:47 12600 8910 ims APPLE 'PHONES 5714 04/13/20 03:45:50 6:58 0 0 nxtgenpho APPLE 'PHONES ne 5715 04/13/20 03:52:47 8:19 192 0 natgonpho APPLE 'PHONES ne 5716 04/13/20 03:52:48 8:18 6225 6672 ims APPLE 'PHONES 5717 04/13/20 03:52:48 8:19 0 Onatgonpho APPLE 'PHONES ne 5718 04/13/20 03:52:49 8:18 6672 5961 ims APPLE 'PHONES 5719 04/13/20 04:01:07 60:00 0 0 nxtgenpho APPLE 'PHONES ne 5720 04/13/20 04:01:09 60:00 12220 8844 ims APPLE 'PHONES 5721 04/13/20 05:01:07 34:23 0 0 nxtgenpho APPLE 'PHONES ne 5722 04/13/20 05:01:09 34:21 2596 1324 ims APPLE 'PHONES 5723 04/13/20 05:35:29 69:54 192 Onatgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 234 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171154 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343212 MOBILITY 45, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn L@I IMSI MAKE MODEL Date Time Number Up Dn (OTC) 5724 04/13/20 05:35:30 60:00 0 0 nxtgenpho APPLE 'PEONES ne 5725 04/13/20 05:35:30 63:43 7567 9266 ims APPLE IPEOME8 5726 04/13/20 05:35:31 60:00 9266 7411 ims APPLE 'PROMO 5727 04/13/20 06:14:34 46:58 12933 7833 ims 5728 04/13/20 06:35:30 9:54 0 0 nxtgenpho APPLE 'PHONED no 5729 04/13/20 06:35:31 3:43 0 0 ims APPLE 'PHONED 5730 04/13/20 06:39:08 6:45 0 0 ims 5731 04/13/20 06:45:24 2:55 0 Onstgonpho APPLE 'PHONED no 5732 04/13/20 06:48:18 4:11 192 0 nstgonpho APPLE 'PHONED no 5733 04/13/20 06:48:19 4:10 7214 6792 ims APPLE 'PHONES 5734 04/13/20 06:48:19 4:11 0 Onstgonpho APPLE 'PHONES ne 5735 04/13/20 06:48:20 4:10 6792 6950 ims APPLE 'PHONES 5736 04/13/20 06:52:30 9:19 0 Onstgonpho APPLE 'PHONES ne 5737 04/13/20 06:52:33 9:16 7064 5954 ims APPLE 'PHONES 5738 04/13/20 07:01:32 0:23 4009 1386 ims APPLE 'PHONES 5739 04/13/20 07:01:49 60:00 0 0 nxtgenpho APPLE 'PHONES ne 5740 04/13/20 07:01:55 22:01 10704 7538 ims APPLE 'PHONES 5741 04/13/20 07:01:55 22:01 10532 7538 ims APPLE 'PHONES 5742 04/13/20 07:23:56 60:00 11980 4328 ims APPLE 'PHONES 5743 04/13/20 08:01:49 60:00 0 Onstgonpho APPLE !PHONES no 5744 04/13/20 08:23:56 60:00 6924 2880 ims APPLE 'PHONES 5745 04/13/20 09:01:49 60:00 0 0 nxtgenpho APPLE 'PHONES no 5746 04/13/20 09:23:56 60:00 8572 3020 ims APPLE !PHONES 5747 04/13/20 10:01:49 40:47 0 Onstgonpho APPLE !PHONES ne 5748 04/13/20 10:23:56 60:00 12920 3624 ims APPLE !PHONES 5749 04/13/20 11:01:46 132:27 192 Onstgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 235 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171155 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343213 MOBILITY ce. PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn EBBE II I MAKE MODEL Date Time Number Up Dn (uTC) 5750 04/13/20 11:01:47 60:00 0 0 nxtgenpho APPLE 'PHONES ne 5751 04/13/20 11:23:56 60:00 17100 6308 ims APPLE 'PHONES 5752 04/13/20 12:01:47 60:00 0 0 nxtgenpho APPLE 'PHONES ne 5753 04/13/20 12:23:56 60:00 8496 2896 ims APPLE 'PHONES 5754 04/13/20 13:01:47 12:27 0 0 nxtgenpho APPLE 'PHONES ne 5755 04/13/20 13:14:13 32:46 192 0 nxtgenpho APPLE 'PHONES ne 5756 04/13/20 13:14:14 32:46 0 0 nxtgenpho APPLE 'PHONES ne 5757 04/13/20 13:23:56 11:03 0 0 ims APPLE 'PHONES 5758 04/13/20 13:34:40 12:19 7267 6796 ims APPLE 'PHONES 5759 04/13/20 13:34:41 12:19 6796 7111 ims APPLE 'PHONES 5760 04/13/20 13:34:59 49:16 20726 9147 ims 5761 04/13/20 13:47:00 1:55 0 0 nxtgenpho APPLE !PHONES ne 5762 04/13/20 13:48:54 8:54 192 0 nxtgenpho APPLE 'PHONES ne 5763 04/13/20 13:48:55 8:54 0 0 nxtgenpho APPLE 'PHONES ne 5764 04/13/20 13:57:49 4:05 0 0 nxtgenpho APPLE !PHONES ne 5765 04/13/20 14:01:53 48:22 192 0 nxtgenpho APPLE 'PHONES ne 5766 04/13/20 14:01:54 48:22 0 0 nxtgenpho APPLE !PHONES ne 5767 04/13/20 14:23:59 0:41 8373 8940 ims APPLE 'PHONES 5768 04/13/20 14:24:00 0:41 8940 8109 ims APPLE 'PHONES 5769 04/13/20 14:24:14 0:01 0 0 ims 5770 04/13/20 14:24:19 19:44 6519 8958 ism APPLE 'PHONES 5771 04/13/20 14:24:20 19:44 8894 6363 ims APPLE 'PHONES 5772 04/13/20 14:24:39 10:47 9857 6463 ims 5773 04/13/20 14:40:52 9:23 7476 7072 ims APPLE 'PHONES 5774 04/13/20 14:40:53 9:23 7072 7124 ims APPLE 'PHONES 5775 04/13/20 14:43:58 60:00 37349 19946 ims 5776 04/13/20 14:50:16 1:37 0 0 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 236 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171156 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343214 MOBILITY 4Illo PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in " tte --6s AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: ION= Item Conn. Conn. Originating BT Bytes Bytes Apn EMI IMSI BAEZ MODEL Date Time Number Up Dn (OTC) 5777 04/13/20 14:51:53 11:47 192 Onxtgonpho APPLE 'PHONES ne 5778 04/13/20 14:51:54 11:47 0 0 nxtgenpho APPLE 'PHONES ne 5779 04/13/20 15:03:40 3:51 192 0 nxtgenpho APPLE 'PHONES ne 5780 04/13/20 15:03:41 3:51 0 0 nxtgenpho APPLE 'PHONES ne 5781 04/13/20 15:07:32 2:08 0 0 nxtgenpho APPLE 'PHONES ne 5782 04/13/20 15:09:39 15:40 192 0 nxtgenpho APPLE 'PHONES ne 5783 04/13/20 15:09:40 15:40 0 0 nxtgenpho APPLE 'PHONES no 5784 04/13/20 15:24:03 0:06 0 4245 ims 5785 04/13/20 15:25:20 10:00 192 0 nxtgenpho APPLE 'PHONES no 5786 04/13/20 15:25:21 24:42 0 0 nxtgenpho APPLE 'PHONES ne 5787 04/13/20 15:34:09 60:00 19807 10032 ims 5788 04/13/20 15:43:58 60:00 0 0 ims 5789 04/13/20 15:50:03 24:22 0 0 nxtgenpho APPLE 'PHONES ne 5790 04/13/20 16:14:24 2:09 192 0 nxtgenpho APPLE 'PHONES ne 5791 04/13/20 16:14:25 2:09 0 0 nxtgenpho APPLE 'PHONES ne 5792 04/13/20 16:16:34 27:03 0 0 nxtgenpho APPLE 'PHONES ne 5793 04/13/20 16:34:09 60:00 8620 2912 ims 5794 04/13/20 16:43:36 8:21 192 0 nxtgenpho APPLE 'PHONES ne 5795 04/13/20 16:43:37 8:21 0 0 nxtgenpho APPLE 'PHONES ne 5796 04/13/20 16:43:58 60:00 0 0 ims 5797 04/13/20 16:51:58 2:41 0 0 nxtgenpho APPLE 'PHONES ne 5798 04/13/20 16:54:38 149:51 192 0 nxtgenpho APPLE 'PHONES ne 5799 04/13/20 16:54:39 60:00 0 0 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 237 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171157 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343215 MOBILITY pu020 AT&T has queried AT&T has queried UTC. for records for records from 03/01/2020 12:00:00am using Eastern Time Zone. to 06/15/2020 11:59:59pm AT&T's records are stored and provided in 1/4 ... ""s -zes AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn flat INSI MAKE MODEL Date Time Rumba Up Dn (OTC) 5800 04/13/20 17:34:09 44:31 8496 3004 ism 5801 04/13/20 17:43:58 32:17 0 0 isms 5802 04/13/20 17:54:39 60:00 0 Onstgenpho APPLE 'PHONES ne 5803 04/13/20 18:16:13 68:16 7340 6862 imp APPLE 'PHONES 5804 04/13/20 18:16:14 60:00 6794 7076 imp APPLE 'PHONES 5805 04/13/20 18:18:40 60:00 16889 9374 imp 5806 04/13/20 18:54:39 29:51 0 Onactgonpho APPLE 'PHONES ne 5807 04/13/20 19:16:14 8:16 0 0 imp APPLE 'PHONES 5808 04/13/20 19:18:40 29:32 5304 1696 imp 5809 04/13/20 19:24:30 1:38 0 Onactgonpho APPLE 'PHONES ne 5810 04/13/20 19:26:07 8:33 192 Onactgonpho APPLE 'PHONES ne 5811 04/13/20 19:26:08 8:33 0 Onactgonpho APPLE 'PHONES ne 5812 04/13/20 19:34:41 2:13 0 Onactgonpho APPLE 'PHONES ne 5813 04/13/20 19:36:53 2:03 192 Onactgonpho APPLE 'PHONES ne 5814 04/13/20 19:36:54 2:03 0 Onmtgonpho APPLE 'PHONES ne 5815 04/13/20 19:38:57 0:51 0 Onmtgonpho APPLE 'PHONES ne 5816 04/13/20 19:39:47 8:33 192 Onmtgonpho APPLE 'PHONES ne 5817 04/13/20 19:39:48 8:33 0 Onmtgonpho APPLE 'PHONES ne 5818 04/13/20 19:42:51 5:29 7200 6740 imp APPLE 'PHONES 5819 04/13/20 19:42:52 5:29 6740 6848 imp APPLE 'PHONES 5820 04/13/20 19:48:21 7:02 0 Onmtgonpho APPLE 'PHONES ne 5821 04/13/20 19:48:25 0:01 0 0 imp APPLE 'PHONES 5822 04/13/20 19:50:01 60:00 18557 9854 imp 5823 04/13/20 19:55:22 2:36 192 Onmtgonpho APPLE 'PHONES ne 5824 04/13/20 19:55:23 2:36 0 Onmtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 238 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171158 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343216 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Dato: 06/17/2020 Run Time: Data Usage For: lad= Item Conn. Conn. Originating ET Bytes Bytes Apn LBSI INSI MAKE MODEL Date Tame Number Up Dn )OTC) 5825 04/13/20 19:57:58 12:17 192 0 nxtgenphe APPLE 'PHONES ne 5826 04/13/20 19:57:59 12:17 0 0 nxtgenpho APPLE !PHONES ne 5827 04/13/20 20:10:16 3:21 0 0 nxtgenpho APPLE !PHONES ne 5828 04/13/20 20:13:36 28:42 192 0 nxtgenpho APPLE !PHONES ne 5829 04/13/20 20:13:37 28:42 0 0 nxtgenpho APPLE !PHONES ne 5830 04/13/20 20:42:18 2:21 192 0 nxtgenpho APPLE !PHONES ne 5831 04/13/20 20:42:19 2:21 0 0 nxtgenpho APPLE !PHONES ne 5832 04/13/20 20:44:39 6:04 192 0 nxtgenpho APPLE !PHONES ne 5833 04/13/20 20:44:40 6:04 0 0 nxtgenpho APPLE !PHONES ne 5834 04/13/20 20:50:01 12:47 0 0 ism 5835 04/13/20 20:50:44 3:02 0 0 nxtgenpho APPLE !PHONES ne 5836 04/13/20 20:53:45 10:01 192 0 nxtgenpho APPLE !PHONES ne 5837 04/13/20 20:53:46 10:01 0 0 nxtgenpho APPLE !PHONES ne 5838 04/13/20 21:02:31 1:15 7372 8932 ism APPLE !PHONES 5839 04/13/20 21:02:32 1:15 8824 7108 ism APPLE !PHONES 5840 04/13/20 21:02:48 0:01 0 0 ism 5841 04/13/20 21:03:29 11:24 8193 6032 ism 5842 04/13/20 21:03:47 23:08 0 0 nxtgenpho APPLE !PHONES ne 5843 04/13/20 21:24:06 13:03 18729 12748 ism 5844 04/13/20 21:26:55 21:31 192 0 nxtgenpho APPLE !PHONES ne 5845 04/13/20 21:26:56 19:08 6244 6798 ism APPLE !PHONES 5846 04/13/20 21:26:56 21:31 0 0 nxtgenpho APPLE !PHONES ne 5847 04/13/20 21:26:57 19:08 6670 5980 ism APPLE !PHONES 5848 04/13/20 21:45:05 10:24 10801 7698 ism 5849 04/13/20 21:46:03 2:23 6228 6668 ism APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 239 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171159 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343217 MOBILITY ceo . pm. AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. .a° AT&T ‘•.. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn ENE! INSI NAAS MODEL Date Time Numbor Up Dn (OTC) 5850 04/13/20 21:46:05 2:22 6668 5964 ims APPLE !PHONES 5851 04/13/20 21:48:27 6:59 0 Onxtgonpho APPLE !PHONES ne 5852 04/13/20 21:48:28 6:57 6692 5998 ims APPLE !PHONES 5853 04/13/20 21:55:25 0:04 2008 480 ims APPLE !PHONES 5854 04/13/20 21:55:26 130:10 192 Onxtgonpho APPLE !PHONES ne 5855 04/13/20 21:55:27 60:00 0 0 nxtgenpho APPLE !PHONES ne 5856 04/13/20 21:55:28 130:08 7676 67790 ims APPLE !PHONES 5857 04/13/20 21:55:29 60:00 9266 7412 ims APPLE !PHONES 5858 04/13/20 22:28:43 60:00 18659 9587 ims 5859 04/13/20 22:55:27 60:00 0 0 nxtgenpho APPLE !PHONES ne 5860 04/13/20 22:55:29 60:00 0 0 ims APPLE !PHONES 5861 04/13/20 23:28:43 26:49 9912 4300 ims 5862 04/13/20 23:55:27 10:10 0 Onxtgonpho APPLE !PHONES ne 5863 04/13/20 23:55:29 10:08 0 0 ims APPLE !PHONES 5864 04/13/20 23:55:41 60:00 18361 9746 ims 5865 04/14/20 00:05:37 8:19 0 Onxtgonpho APPLE !PHONES ne 5866 04/14/20 00:13:56 53:23 192 0 nxtgenpho APPLE !PHONES ne 5867 04/14/20 00:13:56 53:24 0 0 nxtgenpho APPLE !PHONES ne 5868 04/14/20 00:55:41 60:00 8496 2928 ims 5869 04/14/20 01:07:20 27:20 0 0 nxtgenpho APPLE !PHONES ne 5870 04/14/20 01:34:39 2:33 192 0 nxtgenpho APPLE !PHONES ne 5871 04/14/20 01:34:41 2:32 0 0 nxtgenpho APPLE !PHONES ne 5872 04/14/20 01:37:13 0:06 0 0 nxtgenpho APPLE !PHONES ne 5873 04/14/20 01:37:39 0:48 0 0 nxtgenpho APPLE !PHONES ne 5874 04/14/20 01:38:26 8:19 192 Onxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 240 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171160 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343218 MOBILITY e s, pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating CT Bytes Bytes Apn DMZ II SI WARR MOLL Date Time Number Up Dn (OTC) 5875 04/14/20 01:38:28 8:18 0 0 nxtgonpho APPLR 'PROMO no 5876 04/14/20 01:46:46 8:50 0 0 nxtgonpho APPLR 'PROMO no 5877 04/14/20 01:55:35 58:53 192 0 nxtgonpho APPLR 'PROMO no 5878 04/14/20 01:55:36 58:53 0 0 nxtgonpho APPLR 'PROMO no 5879 04/14/20 01:55:41 60:00 7156 3112 imp 5880 04/14/20 02:54:29 10:58 0 0 nxtgenpho APPLE !PHONES no 5881 04/14/20 02:55:41 60:00 13600 4748 imp 5882 04/14/20 03:05:26 15:05 192 0 nxtgenpho APPLE !PHONES no 5883 04/14/20 03:05:27 15:05 0 0 nxtgenpho APPLE !PHONES no 5884 04/14/20 03:20:32 32:57 0 0 nxtgonpho APPLE !PHONES ne 5885 04/14/20 03:53:28 2:10 192 0 nxtgonpho APPLE !PHONES ne 5886 04/14/20 03:53:30 2:09 0 0 nxtgenpho APPLE !PHONES ne 5887 04/14/20 03:55:39 2:05 0 0 nxtgenpho APPLE !PHONES no 5888 04/14/20 03:55:41 60:00 10332 4180 imp 5889 04/14/20 03:57:43 18:31 192 Onxtgonpho APPLE !PHONES ne 5890 04/14/20 03:57:44 18:31 0 0 nxtgonpho APPLE !PHONES no 5891 04/14/20 04:16:15 10:13 0 0 nxtgonpho APPLE IPHONE8 no 5892 04/14/20 04:26:27 6:51 192 0 nxtgonpho APPLE !PHONES no 5893 04/14/20 04:26:28 6:51 0 0 nxtgonpho APPLE !PHONES no 5894 04/14/20 04:33:19 4:22 0 0 nxtgonpho APPLE !PHONES ne 5895 04/14/20 04:37:40 8:33 192 0 nxtgonpho APPLE !PHONES ne 5896 04/14/20 04:37:42 8:32 0 0 nxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 241 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171161 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343219 MOBILITY cr. ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn IN/LI IMSI MAR MODEL Date Time Up Dn (OTC) 5897 04/14/20 04:46:14 60:00 0 0 nxtgenpho APPLE IPROME8 ne 5898 04/14/20 04:55:41 60:00 6924 2896 ims 5899 04/14/20 05:46:14 60:00 0 0 nxtgenpho APPLE IPROME8 ne 5900 04/14/20 05:55:41 60:00 10068 3284 ims 5901 04/14/20 06:46:14 60:00 0 0 nxtgenpho APPLE IPROME8 ne 5902 04/14/20 06:55:41 60:00 9960 3176 ims 5903 04/14/20 07:46:14 60:00 0 0 nxtgenpho APPLE 'PHONES ne 5904 04/14/20 07:55:41 60:00 13476 4624 ims 5905 04/14/20 08:46:14 0:00 0 0 nxtgenpho APPLE 'PHONES ne 5906 04/14/20 08:46:16 60:00 0 0 nxtgenpho APPLE 'PHONES ne 5907 04/14/20 08:55:41 60:00 8496 3036 ims 5908 04/14/20 09:46:16 60:00 0 0 nxtgenpho APPLE 'PHONES ne 5909 04/14/20 09:55:41 60:00 13368 4676 ims 5910 04/14/20 10:46:16 46:11 0 0 nxtgenpho APPLE 'PHONES ne 5911 04/14/20 10:55:41 60:00 14940 4764 ims 5912 04/14/20 11:32:26 27:59 192 0 nxtgonpho APPLE !PHONES no 5913 04/14/20 11:32:27 27:59 0 0 nxtgonpho APPLE !PHONES no 5914 04/14/20 11:55:41 60:00 8496 2928 ims 5915 04/14/20 12:00:25 8:37 192 0 nxtgenpho APPLE !PHONES ne 5916 04/14/20 12:00:26 8:37 0 0 nxtgenpho APPLE !PHONES no 5917 04/14/20 12:09:03 11:04 192 0 nxtgonpho APPLE !PHONES no 5918 04/14/20 12:09:04 11:04 0 0 nxtgonpho APPLE !PHONES no 5919 04/14/20 12:20:08 9:11 0 0 nxtgonpho APPLE !PHONES no 5920 04/14/20 12:29:18 28:04 192 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 242 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171162 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343220 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: NM= Item Conn. Conn. Originating ET Bytes Bytes Apn =RI ISM WANE MODES Date Time Number Up Dn (OTC/ 5921 04/14/20 12:29:19 28:04 0 0 nxtgenpho APPLE IPEONEB no 5922 04/14/20 12:55:41 60:00 10068 3300 ism 5923 04/14/20 12:57:23 9:06 0 Onxtgonpho APPLE 'PEONES ne 5924 04/14/20 13:06:30 57:52 0 0 nxtgonpho APPLE !PEONES ne 5925 04/14/20 13:55:41 60:00 8496 3036 ims 5926 04/14/20 14:04:21 2:26 192 Onxtgonpho APPLE !PHONES ne 5927 04/14/20 14:04:22 2:27 0 0 nxtgonpho APPLE !PHONES no 5928 04/14/20 14:06:49 9:38 0 0 nxtgonpho APPLE !PHONES no 5929 04/14/20 14:16:28 6:11 0 0 nxtgenpho APPLE !PHONES no 5930 04/14/20 14:22:38 3:18 192 0 nxtgonpho APPLE !PHONES no 5931 04/14/20 14:22:40 3:17 0 0 nxtgenpho APPLE !PHONES ne 5932 04/14/20 14:25:57 57:00 0 0 nxtgonpho APPLE !PHONES ne 5933 04/14/20 14:55:41 60:00 15528 5984 ims 5934 04/14/20 15:22:57 20:00 192 Onxtgonpho APPLE !PHONES no 5935 04/14/20 15:22:58 33:02 0 0 nxtgonpho APPLE !PHONES ne 5936 04/14/20 15:55:41 60:00 6924 2788 ims 5937 04/14/20 15:56:00 45:52 0 Onxtgonpho APPLE !PHONES ne 5938 04/14/20 16:41:52 22:32 192 0 nxtgonpho APPLE !PHONES ne 5939 04/14/20 16:41:53 22:32 0 0 nxtgonpho APPLE !PHONES ne 5940 04/14/20 16:52:53 11:31 8221 8496 ims APPLE !PHONES 5941 04/14/20 16:52:54 11:31 8428 8065 ims APPLE !PHONES 5942 04/14/20 16:55:41 2:33 0 0 ims 5943 04/14/20 17:02:02 60:00 20034 9674 ims 5944 04/14/20 17:04:26 60:00 0 Onxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 243 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171163 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343221 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:37:57pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .0# AT&T ••- OTC. Run Dato: 06/17/2020 Run Time: Data Usage Tor: NM= Item Conn. Conn. Originating BT Bytes Bytom Apn DOLT II I NAM MODEL Dato Time ut, ...hm. Up Dn (OTC/ 5945 04/14/20 18:02:02 60:00 8604 3664 ims 5946 04/14/20 18:04:26 4:28 0 Onxtgonpho APPLE 'PHONES ne 5947 04/14/20 18:08:54 7:52 0 Onxtgonpho APPLE 'PHONES ne 5948 04/14/20 18:16:45 5:27 192 0 nxtgonpho APPLE 'PHONES ne 5949 04/14/20 18:16:46 5:27 0 0 nxtgonpho APPLE 'PHONES ne 5950 04/14/20 18:22:13 3:03 0 0 nxtgonpho APPLE 'PHONES ne 5951 04/14/20 18:25:16 2:03 288 0 nxtgenpho APPLE 'PHONES ne 5952 04/14/20 18:25:17 2:03 0 0 nxtgonpho APPLE 'PHONES ne 5953 04/14/20 18:27:20 5:05 0 0 nxtgonpho APPLE 'PHONES ne 5954 04/14/20 18:32:24 2:03 192 0 nxtgonpho APPLE 'PHONES ne 5955 04/14/20 18:32:25 2:03 0 0 nxtgonpho APPLE 'PHONES ne 5956 04/14/20 18:34:28 60:00 0 0 nxtgonpho APPLE 'PHONES ne 5957 04/14/20 19:02:02 60:00 10408 3376 ims 5958 04/14/20 19:34:28 2:29 0 Onxtgonpho APPLE 'PHONES ne 5959 04/14/20 19:36:56 2:09 192 0 ructgonpho APPLE 'PHONES ne 5960 04/14/20 19:36:57 2:09 0 0 ructgonpho APPLE 'PHONES ne 5961 04/14/20 19:39:06 7:13 0 0 nxtgonpho APPLE 'PHONES ne 5962 04/14/20 19:46:18 2:04 192 0 nxtgenpho APPLE 'PHONES ne 5963 04/14/20 19:46:20 2:03 0 0 nxtgenpho APPLE 'PHONES ne 5964 04/14/20 19:48:23 17:27 0 0 nxtgonpho APPLE 'PHONES ne 5965 04/14/20 20:02:02 18:54 5304 1696 ims 5966 04/14/20 20:05:50 2:03 192 Onxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 244 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171164 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343222 MOBILITY dro PRI020 AT&T has queried AT&T has queried for records for records from 03/01/2020 12:00:00am using Eastern Time Zone. to 06/15/2020 11:59:59pm AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Timm: Data Usage For: Item Conn. Conn. Originating BT Bytes Bytes Apn L62 IMSI MAKE MODEL Date Time Number Up Dn (UTC) 5967 04/14/20 20:05:51 2:03 0 0 nxtgenpho APPLE 'PEONES ne 5968 04/14/20 20:07:54 11:36 0 0 nottgonpho APPLE 'PEONES ne 5969 04/14/20 20:19:29 4:44 192 0 ructgonpho APPLE 'PEONES ne 5970 04/14/20 20:19:30 4:43 6244 6666 ims APPLE 'PEONES 5971 04/14/20 20:19:30 4:44 0 0 nxtgenpho APPLE 'PEONES ne 5972 04/14/20 20:19:31 4:43 6666 6088 ims APPLE 'PEONES 5973 04/14/20 20:20:56 10:30 8209 6232 ims 5974 04/14/20 20:24:14 28:09 0 Oructgonpho APPLE 'PEONES ne 5975 04/14/20 20:24:15 28:08 6674 5980 ims APPLE IPSOMES 5976 04/14/20 20:52:22 8:08 192 Oructgonpho APPLE 'PHONES ne 5977 04/14/20 20:52:24 2:53 6318 8080 ims APPLE 'PHONES 5978 04/14/20 20:52:24 8:07 0 0 nxtgenpho APPLE 'PHONES ne 5979 04/14/20 20:52:25 2:54 8080 6054 ims APPLE 'PHONES 5980 04/14/20 20:52:46 2:33 11634 6729 ism 5981 04/14/20 20:55:17 5:13 6264 6672 ism APPLE 'PHONES 5982 04/14/20 20:55:18 5:13 6672 6000 ism APPLE 'PHONES 5983 04/14/20 21:00:31 9:47 0 Onmtgonpho APPLE 'PHONES ne 5984 04/14/20 21:00:34 9:44 8784 8084 ims APPLE 'PHONES 5985 04/14/20 21:10:17 14:25 192 Onwtgonpho APPLE 'PHONES ne 5986 04/14/20 21:10:18 0:23 7335 8926 ims APPLE 'PHONES 5987 04/14/20 21:10:18 14:25 0 Onmtgonpho APPLE 'PHONES ne 5988 04/14/20 21:10:19 0:23 8818 7071 ims APPLE 'PHONES 5989 04/14/20 21:10:38 0:04 2569 1211 ims 5990 04/14/20 21:10:40 4:21 6450 6674 ims APPLE 'PHONES 5991 04/14/20 21:10:42 4:20 6674 6186 ims APPLE 'PHONES 5992 04/14/20 21:11:03 0:01 0 0 ims 5993 04/14/20 21:11:31 13:11 6478 6848 ims APPLE 'PHONES 5994 04/14/20 21:11:32 13:11 6784 6214 ims APPLE 'PHONES 5995 04/14/20 21:15:01 11:20 8209 6119 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 245 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171165 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343223 MOBILITY ..020 AT&T has queried AT&T has queried for records for records from 03/01/2020 12:00:00am using Eastern Time Zone. to 06/15/2020 11:59:59pm AT&T's records are stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn Lett INS! IDOZZ MOODS Date Time Number Up Dn (OTC) 5996 04/14/20 21:24:43 60:00 0 0 nottgonpho APPLE 'PHONES no 5997 04/14/20 21:26:21 25:20 2768 1340 ims APPLE !PHONES 5998 04/14/20 21:26:21 25:20 2704 1340 ims APPLE !PHONES 5999 04/14/20 21:51:41 40:52 6864 2912 ims APPLE !PHONES 6000 04/14/20 22:24:43 60:00 0 Onactgonpho APPLE !PHONES no 6001 04/14/20 22:27:13 19:15 6670 5979 ims APPLE !PHONES 6002 04/14/20 22:46:28 1:00 14920 9248 ims APPLE !PHONES 6003 04/14/20 22:47:44 0:33 9726 6322 ims APPLE !PHONES 6004 04/14/20 22:48:17 17:59 5072 2448 ims APPLE !PHONES 6005 04/14/20 23:06:16 10:35 4540 5060 ims APPLE !PHONES 6006 04/14/20 23:16:51 13:42 4964 1788 ims APPLE !PHONES 6007 04/14/20 23:24:43 54:18 0 Onactgonpho APPLE !PHONES no 6008 04/14/20 23:30:33 0:34 11432 9252 ims APPLE !PHONES 6009 04/14/20 23:31:07 20:39 3532 1432 ims APPLE !PHONES 6010 04/14/20 23:51:46 27:15 7680 3944 ims APPLE !PHONES 6011 04/15/20 00:19:00 2:33 192 Onactgonpho APPLE !PHONES no 6012 04/15/20 00:19:01 2:33 0 0 nottgonpho APPLE !PHONES no 6013 04/15/20 00:19:03 8:32 8209 6124 Lan 6014 04/15/20 00:21:33 5:58 192 0 nottgonpho APPLE !PHONES no 6015 04/15/20 00:21:34 5:58 0 0 nottgonpho APPLE !PHONES no 6016 04/15/20 00:27:32 33:55 192 0 nottgonpho APPLE !PHONES no 6017 04/15/20 00:27:33 28:02 7373 6800 ism APPLE IPHONE8 6018 04/15/20 00:27:33 33:55 0 0 nottgonpho APPLE !PHONES no 6019 04/15/20 00:27:34 28:03 6800 7109 ism APPLE !PHONES 6020 04/15/20 00:28:44 32:17 10165 7589 ism 6021 04/15/20 00:55:35 5:52 7156 6856 ism APPLE !PHONES 6022 04/15/20 00:55:36 5:52 6748 6892 ism APPLE !PHONES 6023 04/15/20 01:01:28 5:02 0 Onactgonpho APPLE !PHONES no 6024 04/15/20 01:01:30 5:00 8082 6922 ism APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 246 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171166 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343224 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:30:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn =RI INSI MAKE MODEL Date Time Number Up Dn (UTC) 6025 04/15/20 01:06:29 8:19 192 0nmtgonpho APPLE 'PHONES ne 6026 04/15/20 01:06:30 8:18 6243 6666 ims APPLE 'PHONES 6027 04/15/20 01:06:30 8:19 0 0nmtgonpho APPLE 'PHONES ne 6028 04/15/20 01:06:31 8:18 6666 5979 ims APPLE 'PHONES 6029 04/15/20 01:14:49 33:25 0 0 nmtgonpho APPLE 'PHONES ne 6030 04/15/20 01:14:52 10:41 9040 7288 ims APPLE 'PHONES 6031 04/15/20 01:25:33 12:45 3640 1432 ims APPLE 'PHONES 6032 04/15/20 01:41:05 23:27 10067 6600 ims 6033 04/15/20 01:48:13 14:46 192 0nmtgonpho APPLE 'PHONES ne 6034 04/15/20 01:48:14 14:46 0 0 nmtgonpho APPLE 'PHONES ne 6035 04/15/20 02:03:00 21:22 0 0 nmtgonpho APPLE 'PHONES ne 6036 04/15/20 02:03:04 5:16 8884 7068 ims APPLE 'PHONES 6037 04/15/20 02:08:20 27:47 3764 1448 ims APPLE 'PHONES 6038 04/15/20 02:24:21 11:46 192 0nmtgonpho APPLE 'PHONES ne 6039 04/15/20 02:24:22 11:46 0 0 nmtgonpho APPLE 'PHONES ne 6040 04/15/20 02:36:08 20:20 0 0 nmtgonpho APPLE 'PHONES ne 6041 04/15/20 02:36:12 7:44 8902 7088 ims APPLE 'PHONES 6042 04/15/20 02:43:56 0:08 8528 6192 ims APPLE 'PHONES 6043 04/15/20 02:44:47 19:04 8189 6014 ims 6044 04/15/20 02:56:27 2:13 192 0nmtgonpho APPLE 'PHONES ne 6045 04/15/20 02:56:28 2:13 0 0 nmtgonpho APPLE 'PHONES ne 6046 04/15/20 02:58:40 6:04 192 0 nmtgonpho APPLE 'PHONES ne 6047 04/15/20 02:58:42 6:03 0 0 nmtgonpho APPLE 'PHONES ne 6048 04/15/20 03:03:33 1:11 6261 7424 ims APPLE 'PHONES 6049 04/15/20 03:03:34 1:11 6676 5997 ims APPLE 'PHONES 6050 04/15/20 03:03:51 14:19 9423 6373 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 247 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171167 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343225 MOBILITY pu020 AT&T has queried AT&T has queried UTE. for records for records from 03/01/2020 12:00:00am using Eastern Time Zone. to 06/15/2020 11:59:59pm AT&T's records are stored and provided in AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn EBB! INSI MAKE MODEL Date Time Number Up Dn (OTC) 6051 04/15/20 03:04:45 33:51 0 Onactgonphe APPLE !PHONES ne 6052 04/15/20 03:27:10 3:06 8084 6944 ism APPLE !PHONES 6053 04/15/20 03:30:16 60:00 13336 4684 ism APPLE !PHONES 6054 04/15/20 03:38:35 57:12 192 Onactgonphe APPLE !PHONES ne 6055 04/15/20 03:38:36 57:12 0 0 nactgonphe APPLE !PHONES ne 6056 04/15/20 04:30:16 60:00 8496 3020 ism APPLE !PHONES 6057 04/15/20 04:35:48 58:13 0 Onactgonphe APPLE !PHONES ne 6058 04/15/20 05:30:16 60:00 3208 1216 ism APPLE !PHONES 6059 04/15/20 06:06:55 59:56 24940 9938 ism 6060 04/15/20 06:30:16 60:00 0 0 ism APPLE !PHONES 6061 04/15/20 07:12:07 60:00 21084 9390 ism 6062 04/15/20 07:30:16 60:00 0 0 ism APPLE !PHONES 6063 04/15/20 08:12:07 60:00 6800 2756 ism 6064 04/15/20 08:16:08 2:04 192 Onactgonphe APPLE !PHONES ne 6065 04/15/20 08:16:09 2:04 0 0 nactgonphe APPLE !PHONES ne 6066 04/15/20 08:18:13 2:06 0 0 nactgonphe APPLE !PHONES ne 6067 04/15/20 08:20:18 1:22 192 0 nactgonphe APPLE !PHONES ne 6068 04/15/20 08:20:19 1:22 0 0 nactgonphe APPLE !PHONES ne 6069 04/15/20 08:21:41 18:55 0 0 nactgonphe APPLE !PHONES ne 6070 04/15/20 08:30:16 60:00 0 0 ism APPLE !PHONES 6071 04/15/20 08:40:36 32:10 192 Onactgonphe APPLE !PHONES ne 6072 04/15/20 08:40:37 32:10 0 0 nactgonphe APPLE !PHONES ne 6073 04/15/20 09:12:07 60:00 9960 3144 ism 6074 04/15/20 09:12:47 2:09 0 Onactgonphe APPLE !PHONES ne 6075 04/15/20 09:14:56 32:32 192 0 nxtgonphe APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 248 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171168 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343226 MOBILITY e s, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating BT Bytes Bytes Apn INS! ISAICZ MODZI. Date Time Number Up Dn (OTC) 6076 04/15/20 09:14:57 32:32 0 Onxtgonpho APPLE 'PEONES no 6077 04/15/20 09:30:16 9:51 0 0 ims APPLE 'PEONES 6078 04/15/20 09:47:29 15:58 0 0 nxtgonpho APPLE 'PEONES no 6079 04/15/20 10:03:26 2:04 192 0 nxtgonpho APPLE 'PEONES no 6080 04/15/20 10:03:27 2:04 0 0 nxtgonpho APPLE 'PEONES no 6081 04/15/20 10:05:31 9:37 0 0 nxtgonpho APPLE 'PEONES no 6082 04/15/20 10:12:07 60:00 9960 3036 ims 6083 04/15/20 10:15:07 2:03 192 0 nxtgonpho APPLE !PEONES no 6084 04/15/20 10:15:08 2:03 0 0 nxtgonpho APPLE 'PHONES no 6085 04/15/20 10:17:11 51:15 0 0 nxtgonpho APPLE 'PHONES no 6086 04/15/20 11:08:26 27:15 192 0 nxtgonpho APPLE 'PHONES no 6087 04/15/20 11:08:26 27:16 0 0 nxtgonpho APPLE 'PHONES no 6088 04/15/20 11:12:07 60:00 8496 2896 ims 6089 04/15/20 11:35:42 23:11 0 0 nxtgonpho APPLE 'PHONES no 6090 04/15/20 11:58:52 9:20 192 0 nxtgonpho APPLE 'PHONES no 6091 04/15/20 11:58:53 9:20 0 0 nxtgonpho APPLE IPHONE8 no 6092 04/15/20 12:08:13 32:41 0 0 nxtgonpho APPLE IPHONE8 no 6093 04/15/20 12:12:07 60:00 12012 4396 ims 6094 04/15/20 12:40:53 2:13 192 0 nxtgonpho APPLE IPHONE8 no 6095 04/15/20 12:40:54 2:13 0 0 nxtgonpho APPLE IPHONE8 no 6096 04/15/20 12:43:07 0:05 0 0 nxtgonpho APPLE IPHONE8 no 6097 04/15/20 12:43:34 22:29 0 0 nxtgonpho APPLE IPHONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 249 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171169 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343227 MOBILITY pu020 AT&T has queried AT&T has queried UTE. for records for records from 03/01/2020 12:00:00am using Eastern Time Zone. to 06/15/2020 11:59:59pm AT&T's records are stored and provided in AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn L@3 IMSI MAKE MODEL Date Time Number Up Dn (OTC) 6098 04/15/20 13:06:02 2:03 192 Onmtgonpho APPLE !PHONES ne 6099 04/15/20 13:06:03 2:03 0 0 nxtgenpho APPLE !PHONES ne 6100 04/15/20 13:08:06 12:43 0 0 nxtgenpho APPLE !PHONES ne 6101 04/15/20 13:12:07 60:00 11888 4436 ims 6102 04/15/20 13:20:48 8:14 192 Onmtgonpho APPLE !PHONES ne 6103 04/15/20 13:20:49 8:14 0 Onactgonpho APPLE !PHONES ne 6104 04/15/20 13:29:03 11:54 0 0 nxtgenpho APPLE !PHONES no 6105 04/15/20 13:40:56 7:46 192 0 nxtgonpho APPLE !PHONES no 6106 04/15/20 13:40:57 7:46 0 0 nxtgonpho APPLE !PHONES no 6107 04/15/20 13:48:43 4:52 0 0 nxtgenpho APPLE !PHONES ne 6108 04/15/20 13:53:34 9:51 192 0 nxtgenpho APPLE !PHONES ne 6109 04/15/20 13:53:35 9:51 0 0 nxtgenpho APPLE !PHONES no 6110 04/15/20 14:03:26 35:03 0 0 nxtgonpho APPLE !PHONES no 6111 04/15/20 14:12:07 60:00 6908 2880 ims 6112 04/15/20 14:38:29 7:10 0 0 nxtgenpho APPLE !PHONES ne 6113 04/15/20 14:45:38 0:50 192 0 nxtgenpho APPLE !PHONES ne 6114 04/15/20 14:45:39 0:50 0 0 nxtgenpho APPLE !PHONES ne 6115 04/15/20 14:46:30 2:48 0 0 nxtgenpho APPLE !PHONES ne 6116 04/15/20 14:49:18 13:09 192 0 nxtgonpho APPLE !PHONES no 6117 04/15/20 14:49:19 13:09 0 0 nxtgonpho APPLE !PHONES no 6118 04/15/20 15:02:28 2:01 0 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 250 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171170 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343228 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Tim: Data usage For: Item Conn. Corm. originating Br Bytes Bytes Apn flat IASI Ian MODEM Data Time mambos up Dn (OTC) 6119 04/15/20 15:04:28 8:17 192 Onstgenpho APPLE WEANED ne 6120 04/15/20 15:04:30 8:16 0 Onstgenpho APPLE WEANED ne 6121 04/15/20 15:12:07 41:27 8388 3004 ims APPLE WEANED 6122 04/15/20 15:12:46 3:22 0 Onstgenpho APPLE WEANED ne 6123 04/15/20 15:16:09 20:00 192 Onstgenpho APPLE WEANED ne 6124 04/15/20 15:16:10 35:10 0 Onstgenpho APPLE WEANED ne 6125 04/15/20 15:51:20 3:30 0 Onstgenpho APPLE IPHONE8 ne 6126 04/15/20 15:53:34 1:16 19736 2324 ims APPLE !PHONES 6127 04/15/20 15:53:34 1:16 3388 2324 ims APPLE !PHONES 6128 04/15/20 15:54:49 23:05 192 Onstgenpho APPLE !PHONES ne 6129 04/15/20 15:54:50 23:05 0 Onstgenpho APPLE !PHONES ne 6130 04/15/20 15:54:50 12:52 6334 6856 ism APPLE 'PHONES 6131 04/15/20 15:54:51 12:52 6856 6070 ism APPLE 'PHONES 6132 04/15/20 16:06:56 0:51 9065 6460 ism 6133 04/15/20 16:07:39 60:00 0 0 ism APPLE 'PHONES 6134 04/15/20 16:07:46 4:11 6245 6674 ims APPLE 'PHONES 6135 04/15/20 16:07:47 4:11 6674 5981 ims APPLE 'PHONES 6136 04/15/20 16:16:14 29:08 20553 13524 ims 6137 04/15/20 16:17:55 5:13 0 Onstgenpho APPLE 'PHONES ne 6138 04/15/20 16:23:07 14:51 192 Onstgenpho APPLE 'PHONES ne 6139 04/15/20 16:23:08 14:51 0 Onstgenpho APPLE 'PHONES ne 6140 04/15/20 16:37:59 11:35 0 Onstgenpho APPLE 'PHONES ne 6141 04/15/20 16:47:33 2:01 11986 13222 ims APPLE 'PHONES 6142 04/15/20 16:49:34 15:07 192 Onstgenpho APPLE 'PHONES ne 6143 04/15/20 16:49:35 15:06 7328 7652 ims APPLE 'PHONES 6144 04/15/20 16:49:35 15:07 0 Onstgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 251 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171171 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343229 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DOM INSI MAIM MOBIL Date Time Number Up Dn (OTC) 6145 04/15/20 16:49:36 15:06 7544 6976 isms APPLE !PEONES 6146 04/15/20 17:04:42 16:57 0 Onxtgonpho APPLE !PEONES no 6147 04/15/20 17:04:45 15:37 8338 8030 isms APPLE !PEONES 6148 04/15/20 17:07:39 18:46 0 0 isms APPLE !PEONES 6149 04/15/20 17:20:22 8:34 3532 1432 ims APPLE !PEONES 6150 04/15/20 17:21:38 8:17 192 Onmtgonpho APPLE !PEONES no 6151 04/15/20 17:21:39 8:17 0 0 nxtgonpho APPLE !PEONES no 6152 04/15/20 17:26:24 3:31 6333 50190 ims APPLE !PEONES 6153 04/15/20 17:26:25 3:31 6670 5981 ims APPLE !PEONES 6154 04/15/20 17:28:56 17:03 8263 6198 ims 6155 04/15/20 17:29:56 24:29 0 Onatgonpho APPLE !PEONES no 6156 04/15/20 17:41:23 13:02 8058 6034 ims APPLE 'PHONES 6157 04/15/20 17:54:24 2:03 192 0 nxtgonpho APPLE 'PHONES no 6158 04/15/20 17:54:25 2:02 6952 6512 ims APPLE 'PHONES 6159 04/15/20 17:54:25 2:03 0 0 nxtgonpho APPLE 'PHONES no 6160 04/15/20 17:54:26 2:02 6404 6688 ims APPLE 'PHONES 6161 04/15/20 17:56:28 8:49 0 0 nxtgonpho APPLE 'PHONES no 6162 04/15/20 17:56:29 8:48 7732 6246 ims APPLE 'PHONES 6163 04/15/20 18:05:16 2:04 192 0 nxtgonpho APPLE 'PHONES no 6164 04/15/20 18:05:17 2:03 6458 7494 ims APPLE 'PHONES 6165 04/15/20 18:05:17 2:04 0 0 nxtgonpho APPLE !PHONES no 6166 04/15/20 18:05:18 2:03 7494 6194 ims APPLE !PHONES 6167 04/15/20 18:07:21 0:05 0 0 nxtgonpho APPLE !PHONES no 6168 04/15/20 18:07:37 51:27 0 0 nxtgonpho APPLE !PHONES no 6169 04/15/20 18:07:40 45:14 11412 7607 ims APPLE !PHONES 6170 04/15/20 18:52:54 27:01 3548 2524 ims APPLE !PHONES 6171 04/15/20 18:59:03 8:16 192 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 252 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171172 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343230 MOBILITY c r. pu020 AT&T has queried AT&T has queried UTE. for records for records from 03/01/2020 12:00:00am using Eastern Time Zone. to 06/15/2020 11:59:59pm AT&T's records are stored and provided in AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating CT Bytes Bytes Apn n6I INSI MAKE MODEL Date Time Number Up Dn (OTC) 6172 04/15/20 18:59:05 8:15 0 Onmtgonphe 310410214827503 APPLE !PHONES ne 6173 04/15/20 19:07:20 0:36 0 0 nactgonphe 310410214827503 APPLE !PHONES ne 6174 04/15/20 19:07:56 2:03 192 0 nactgonphe 310410214827503 APPLE !PHONES ne 6175 04/15/20 19:07:57 2:03 0 0 nactgonphe 310410214827503 APPLE !PHONES ne 6176 04/15/20 19:10:00 7:55 0 0 nactgonpho 310410214827503 APPLE !PHONES ne 6177 04/15/20 19:17:33 60:00 16873 9324 ism 310410214827503 6178 04/15/20 19:17:54 2:09 192 0 nactgonphe 310410214827503 APPLE !PHONES ne 6179 04/15/20 19:17:55 2:09 0 0 nactgonphe 310410214827503 APPLE !PHONES ne 6180 04/15/20 19:20:05 60:00 0 0 nmtgonphe 310410214827503 APPLE !PHONES ne 6181 04/15/20 20:17:33 60:00 10376 3268 ism 310410214827503 6182 04/15/20 20:20:05 3:36 0 0 nictgonphe 310410214827503 APPLE !PHONES ne 6183 04/15/20 20:23:40 6:04 192 0 nictgonphe 310410214827503 APPLE !PHONES ne 6184 04/15/20 20:23:41 6:04 0 0 nictgonphe 310410214827503 APPLE !PHONES ne 6185 04/15/20 20:29:45 57:39 0 0 nictgonphe 310410214827503 APPLE !PHONES ne 6186 04/15/20 21:17:33 55:02 16772 9188 ism 310410214827503 6187 04/15/20 21:27:23 35:36 192 0 nictgonphe 310410214827503 APPLE !PHONES ne 6188 04/15/20 21:27:24 35:36 0 0 nictgonphe 310410214827503 APPLE !PHONES ne 6189 04/15/20 22:03:00 13:02 0 0 nictgonphe 310410214827503 APPLE !PHONES ne 6190 04/15/20 22:07:09 0:00 0 0 ism 310410214827503 APPLE !PHONES 6191 04/15/20 22:10:27 60:00 39452 25378 ism 310410214827503 6192 04/15/20 22:16:01 37:38 192 0 nictgonphe 310410214827503 APPLE !PHONES ne 6193 04/15/20 22:16:02 37:38 0 0 nictgonphe 310410214827503 APPLE !PHONES ne 6194 04/15/20 22:53:40 1:14 0 0 nictgonphe 310410214827503 APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 253 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171173 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343231 MOBILITY ce. ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ei.AT&T ‘s UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn TIM INSI MAKE MODEL Date Time Number Up Dn (OTC) 6195 04/15/20 22:54:00 0:29 4811 18287 ism 6196 04/15/20 22:54:53 28:10 192 Onxtgonpho APPLE !PHONES ne 6197 04/15/20 22:54:54 28:10 0 0 nxtgenpho APPLE !PHONES ne 6198 04/15/20 23:06:36 25:23 5201114 4269382 ism 6199 04/15/20 23:10:27 60:00 16484 15256 ism 6200 04/15/20 23:23:03 3:39 192 Onxtgonpho APPLE !PHONES ne 6201 04/15/20 23:23:04 3:39 0 0 nxtgenpho APPLE !PHONES ne 6202 04/15/20 23:26:43 1:53 0 0 nxtgenpho APPLE !PHONES ne 6203 04/15/20 23:28:35 3:42 192 0 nxtgenpho APPLE !PHONES ne 6204 04/15/20 23:28:36 3:42 0 0 nxtgenpho APPLE !PHONES ne 6205 04/15/20 23:32:18 7:25 0 0 nxtgenpho APPLE !PHONES ne 6206 04/15/20 23:39:42 13:51 192 0 nxtgenpho APPLE !PHONES ne 6207 04/15/20 23:39:43 13:51 0 0 nxtgenpho APPLE !PHONES ne 6208 04/15/20 23:53:34 34:44 192 0 nxtgenpho APPLE !PHONES ne 6209 04/15/20 23:53:35 34:44 0 0 nxtgenpho APPLE !PHONES ne 6210 04/16/20 00:10:27 60:00 10036 3408 ism 6211 04/16/20 00:28:19 1:10 0 0 nxtgonpho APPLE !PHONES no 6212 04/16/20 00:29:28 9:34 192 0 nxtgonpho APPLE !PHONES ne 6213 04/16/20 00:29:29 9:34 0 0 nxtgenpho APPLE !PHONES ne 6214 04/16/20 00:39:03 28:34 0 0 nxtgenpho APPLE !PHONES ne 6215 04/16/20 01:07:36 2:10 192 0 nxtgenpho APPLE !PHONES ne 6216 04/16/20 01:07:38 2:09 0 0 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 254 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171174 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343232 MOBILITY ctio PRI020 AT&T has queried AT&T has queried for records for records from 03/01/2020 12:00:00am using Eastern Time Zone. to 06/15/2020 11:59:59pm AT&T's records are stored and provided in AT&T OTC. Run pato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn EBB! INSI NAAS MODEL Date Time Number Up Dn (OTC) 6217 04/16/20 01:09:46 33:55 0 Onactgonpho APPLE !PHONES ne 6218 04/16/20 01:10:27 60:00 6956 2788 Las 6219 04/16/20 01:43:40 1:07 192 Onactgonpho APPLE !PHONES ne 6220 04/16/20 01:43:41 1:07 0 0 nxtgenpho APPLE !PHONES ne 6221 04/16/20 01:44:48 24:29 0 0 nxtgenpho APPLE !PHONES ne 6222 04/16/20 02:09:16 2:04 192 0 nxtgenpho APPLE !PHONES ne 6223 04/16/20 02:09:17 2:04 0 0 nxtgenpho APPLE !PHONES ne 6224 04/16/20 02:10:27 60:00 12260 4516 ism 6225 04/16/20 02:11:21 14:40 0 0 nxtgenpho APPLE !PHONES ne 6226 04/16/20 02:26:00 2:04 192 0 nxtgenpho APPLE !PHONES ne 6227 04/16/20 02:26:01 2:04 0 0 nxtgenpho APPLE !PHONES ne 6228 04/16/20 02:28:05 27:57 0 0 nxtgenpho APPLE !PHONES ne 6229 04/16/20 02:56:02 0:40 192 0 nxtgenpho APPLE !PHONES ne 6230 04/16/20 02:56:03 0:40 0 0 nxtgenpho APPLE !PHONES ne 6231 04/16/20 02:56:42 56:17 0 0 nxtgenpho APPLE !PHONES ne 6232 04/16/20 03:10:27 60:00 10272 4288 ism 6233 04/16/20 04:10:27 60:00 8496 3036 ism 6234 04/16/20 05:10:27 60:00 6956 2804 ism 6235 04/16/20 05:47:48 6:10 0 Onactgonpho APPLE !PHONES ne 6236 04/16/20 05:53:58 20:47 192 0 nxtgenpho APPLE !PHONES ne 6237 04/16/20 05:53:59 20:47 0 0 nxtgenpho APPLE !PHONES ne 6238 04/16/20 06:10:27 60:00 14892 4764 ism 6239 04/16/20 06:14:46 1:49 0 0 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 255 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171175 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343233 MOBILITY 4:211 0 ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tar," AT&T ‘...1....._stoe OTC. Run Data: 06/17/2020 Run Tina: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn MAX IASI NAM MODEL Date Time Number Up Dn (OTC) 6240 04/16/20 06:16:34 1:35 192 Onxtgonpho APPLE !PHONES ne 6241 04/16/20 06:16:36 1:34 0 0 nxtgonpho APPLE !PHONES ne 6242 04/16/20 06:18:10 60:00 0 0 nxtgonpho APPLE !PHONES ne 6243 04/16/20 07:10:27 60:00 6956 2788 ims 6244 04/16/20 07:18:10 59:18 0 0 nxtgonpho APPLE !PHONES ne 6245 04/16/20 08:10:27 60:00 10272 4180 ims 6246 04/16/20 08:17:27 1:30 192 Onxtgonpho APPLE !PHONES no 6247 04/16/20 08:17:28 1:30 0 0 nxtgonpho APPLE !PHONES no 6248 04/16/20 08:18:58 19:37 0 0 nxtgonpho APPLE !PHONES ne 6249 04/16/20 08:38:34 1:41 192 0 nxtgonpho APPLE !PHONES ne 6250 04/16/20 08:38:35 1:41 0 0 nxtgonpho APPLE !PHONES ne 6251 04/16/20 08:40:16 60:00 0 0 nxtgonpho APPLE !PHONES no 6252 04/16/20 09:10:27 60:00 13352 4516 ims 6253 04/16/20 09:40:16 60:00 0 0 nxtgonpho APPLE !PHONES ne 6254 04/16/20 10:10:27 60:00 8388 2928 ims 6255 04/16/20 10:40:16 60:00 0 0 nxtgonpho APPLE !PHONES ne 6256 04/16/20 11:10:27 60:00 7064 2788 ims 6257 04/16/20 11:40:16 60:00 0 0 nxtgonpho APPLE !PHONES ne 6258 04/16/20 12:10:27 60:00 8604 3036 ims 6259 04/16/20 12:40:16 0:00 0 0 nxtgonpho APPLE !PHONES ne 6260 04/16/20 12:40:18 60:00 0 0 nxtgonpho APPLE !PHONES no 6261 04/16/20 13:10:27 60:00 13444 4676 ims 6262 04/16/20 13:40:18 60:00 0 0 nxtgonpho APPLE !PHONES no 6263 04/16/20 14:10:27 60:00 13568 4516 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 256 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171176 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343234 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .a° AT&T ‘•.. UTC. Run Data: 06/17/2020 Run Time: Data Usage For: Mid= Item Conn. Conn. Originating ET Bytes Bytes Apn flat INSI HAKE MODEL Date Time Up Dn (OTC) 6264 04/16/20 14:40:18 60:00 0 0 nmtgonpho APPLE !PHONES no 6265 04/16/20 15:10:27 55:27 6956 2788 ism 6266 04/16/20 15:40:18 25:06 0 0 nmtgonpho APPLE !PHONES no 6267 04/16/20 16:05:23 2:23 192 0 nmtgonpho APPLE !PHONES no 6268 04/16/20 16:05:25 2:21 7268 6900 ism APPLE !PHONES 6269 04/16/20 16:05:25 2:23 0 0 nmtgonpho APPLE !PHONES no 6270 04/16/20 16:05:26 2:22 6792 7004 ism APPLE !PHONES 6271 04/16/20 16:05:54 0:01 0 0 ism 6272 04/16/20 16:06:16 1:30 6386 7468 ism APPLE !PHONES 6273 04/16/20 16:06:17 1:31 7404 6122 ism APPLE !PHONES 6274 04/16/20 16:07:47 2:18 0 Onxtgonpho APPLE !PHONES no 6275 04/16/20 16:07:49 2:16 8400 7968 ism APPLE !PHONES 6276 04/16/20 16:10:04 4:37 192 0 nxtgonpho APPLE 'PHONES no 6277 04/16/20 16:10:05 4:36 6335 6668 ism APPLE 'PHONES 6278 04/16/20 16:10:05 4:37 0 0 nxtgonpho APPLE 'PHONES no 6279 04/16/20 16:10:06 4:36 6668 6071 ism APPLE 'PHONES 6280 04/16/20 16:11:02 60:00 21113 10326 ism 6281 04/16/20 16:14:42 60:00 0 Onxtgonpho APPLE 'PHONES no 6282 04/16/20 17:11:02 60:00 6956 2680 ism 6283 04/16/20 17:14:42 19:04 0 0 nxtgonpho APPLE 'PHONES no 6284 04/16/20 17:33:46 18:29 192 0 nxtgonpho APPLE 'PHONES no 6285 04/16/20 17:33:46 18:30 0 0 nxtgonpho APPLE 'PHONES no 6286 04/16/20 17:52:15 6:37 192 0 nxtgonpho APPLE 'PHONES no 6287 04/16/20 17:52:16 6:37 0 0 nxtgonpho APPLE 'PHONES no 6288 04/16/20 17:58:53 19:47 0 0 nmtgonpho APPLE 'PHONES no 6289 04/16/20 18:11:02 39:36 3424 1340 ism AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 257 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171177 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343235 MOBILITY cro pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Dato: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ INSI MAKE MODEL Date Time Number Up Dn (OTC) 6290 04/16/20 18:18:39 2:20 192 0nmtgonpho APPLE !PHONES ne 6291 04/16/20 18:18:40 2:20 0 0nstgenpho APPLE !PHONES ne 6292 04/16/20 18:21:00 29:34 0 0nmtgonpho APPLE !PHONES ne 6293 04/16/20 18:50:33 2:51 192 0nmtgonpho APPLE !PHONES ne 6294 04/16/20 18:50:34 2:51 0 0nxtgonpho APPLE !PHONES ne 6295 04/16/20 18:50:36 2:48 8152 7618 Las APPLE !PHONES 6296 04/16/20 18:50:37 2:48 7550 7888 Las APPLE !PHONES 6297 04/16/20 18:53:25 22:32 0 0nmtgonpho APPLE !PHONES ne 6298 04/16/20 18:53:29 60:00 16933 9322 Las 6299 04/16/20 19:15:56 2:03 192 0nmtgonpho APPLE !PHONES ne 6300 04/16/20 19:15:57 2:03 0 0nstgenpho APPLE !PHONES ne 6301 04/16/20 19:18:00 55:48 0 0nstgenpho APPLE !PHONES ne 6302 04/16/20 19:53:29 60:00 9928 3176 isms 6303 04/16/20 20:13:47 1:51 192 0nmtgonpho APPLE !PHONES ne 6304 04/16/20 20:13:48 1:51 0 0nmtgonpho APPLE !PHONES ne 6305 04/16/20 20:15:39 5:31 0 0nxtgonpho APPLE !PHONES ne 6306 04/16/20 20:21:09 3:19 192 0nmtgonpho APPLE !PHONES ne 6307 04/16/20 20:21:10 3:19 0 0nxtgonpho APPLE !PHONES ne 6308 04/16/20 20:24:29 7:26 0 0nxtgonpho APPLE !PHONES ne 6309 04/16/20 20:31:55 29:30 0 0nstgenpho APPLE !PHONES ne 6310 04/16/20 20:53:29 60:00 12260 4576 isms 6311 04/16/20 21:01:24 2:03 192 0nstgenpho APPLE !PHONES ne 6312 04/16/20 21:01:25 2:03 0 0 nstgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 258 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171178 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343236 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .ai. AT&T ••- OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: MI= Item Conn. Conn. Originating BT Bytos Bytes Apn MMAI IASI MARE MODEL Date Time Number Up Dn lu7C) 6313 04/16/20 21:03:28 3:29 0 0 nxtgonpho APPLE !PHONES no 6314 04/16/20 21:06:56 14:30 192 0 nxtgonpho APPLE !PHONES no 6315 04/16/20 21:06:57 14:30 0 0 nxtgonpho APPLE !PHONES no 6316 04/16/20 21:21:27 0:54 0 0 nxtgonpho APPLE !PHONES no 6317 04/16/20 21:22:20 2:17 192 Onxtgonpho APPLE !PHONES no 6318 04/16/20 21:22:21 2:17 0 0 nxtgonpho APPLE !PHONES no 6319 04/16/20 21:24:38 0:05 0 0 nxtgonpho APPLE !PHONES no 6320 04/16/20 21:24:56 9:39 0 0 nxtgonpho APPLE !PHONES no 6321 04/16/20 21:34:34 8:20 192 0 nxtgonpho APPLE !PHONES no 6322 04/16/20 21:34:36 8:19 0 0 nxtgonpho APPLE !PHONES no 6323 04/16/20 21:42:55 0:55 0 0 nxtgonpho APPLE !PHONES no 6324 04/16/20 21:43:50 8:20 192 0 nxtgonpho APPLE !PHONES no 6325 04/16/20 21:43:51 8:20 0 0 nxtgonpho APPLE !PHONES no 6326 04/16/20 21:52:11 9:10 0 0 nxtgonpho APPLE !PHONES no 6327 04/16/20 21:53:29 9:05 0 0 ims 6328 04/16/20 22:01:21 21:51 192 0 nxtgonpho APPLE !PHONES no 6329 04/16/20 22:01:22 21:52 0 0 nxtgonpho APPLE !PHONES no 6330 04/16/20 22:07:21 15:51 18152 16510 ims APPLE !PHONES 6331 04/16/20 22:07:22 15:51 16442 17888 ims APPLE !PHONES 6332 04/16/20 22:15:08 0:21 9096 0 ims APPLE !PHONES 6333 04/16/20 22:15:09 0:21 0 9096 ims APPLE !PHONES 6334 04/16/20 22:23:13 1:29 0 Onmtgonpho APPLE !PHONES no 6335 04/16/20 22:23:20 50:27 19231 15535 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 259 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171179 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343237 MOBILITY cro pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: SS= Item Conn. Conn. Originating ET Bytes Bytes Apn MST IMSI MAR MODEL Date Time Numbor Up Dn (OTC) 6336 04/16/20 22:24:41 2:11 192 Onxtgonpho APPLE 'PROMO ne 6337 04/16/20 22:24:44 2:09 0 0 nxtgenpho APPLE 'PROMO ne 6338 04/16/20 22:26:53 1:11 0 0 nxtgenpho APPLE 'PROMO ne 6339 04/16/20 22:28:03 2:09 192 0 nxtgonpho APPLE 'PROMO ne 6340 04/16/20 22:28:05 2:09 0 0 nxtgonpho APPLE 'PHONES ne 6341 04/16/20 22:30:14 1:44 0 0 nxtgonpho APPLE !PHONES ne 6342 04/16/20 22:31:48 0:11 1003 5372 nxtgenpho no 6343 04/16/20 22:31:57 2:04 192 0 nxtgenpho APPLE !PHONES no 6344 04/16/20 22:31:58 2:04 0 0 nxtgenpho APPLE 'PHONES no 6345 04/16/20 22:34:02 16:17 0 0 nxtgenpho APPLE 'PHONES no 6346 04/16/20 22:50:18 9:04 192 0 nxtgenpho APPLE 'PHONES no 6347 04/16/20 22:50:19 9:04 0 0 nxtgenpho APPLE 'PHONES no 6348 04/16/20 22:59:22 1:09 192 0 nxtgenpho APPLE !PHONES no 6349 04/16/20 22:59:23 1:09 0 0 nxtgenpho APPLE !PHONES no 6350 04/16/20 22:59:58 0:35 4807 34708 nxtgonpho no 6351 04/16/20 23:00:31 0:56 192 0 nxtgonpho APPLE !PHONES ne 6352 04/16/20 23:00:32 0:56 0 0 nxtgonpho APPLE !PHONES no 6353 04/16/20 23:01:28 60:00 0 0 nxtgonpho APPLE !PHONES ne 6354 04/16/20 23:08:27 42:36 9266 7303 ims APPLE !PHONES 6355 04/16/20 23:51:03 24:33 3748 1664 ism APPLE !PHONES 6356 04/17/20 00:01:28 27:44 0 Onxtgonpho APPLE !PHONES no 6357 04/17/20 00:15:36 0:58 2644 1324 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 260 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171180 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343238 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:58:58pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in es AT&T UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn LEI IMEI IOJCIL MODEL Date Time Number Up Dn (OTC/ 6358 04/17/20 00:16:34 60:00 24032 13612 ims APPLE !PEONES 6359 04/17/20 00:28:44 0:12 9796 20982 ims APPLE !PEONES 6360 04/17/20 00:29:11 2:04 192 Onmtgonpho APPLE !PEONES ne 6361 04/17/20 00:29:12 2:05 0 Onmtgonpho APPLE !PEONES ne 6362 04/17/20 00:31:16 60:00 0 Onmtgonpho APPLE !PEONES ne 6363 04/17/20 01:16:34 60:00 14512 8752 ims APPLE IPHONE8 6364 04/17/20 01:31:16 28:19 0 Onmtgonpho APPLE !PHONES no 6365 04/17/20 01:54:16 42:00 6204486 8118640 ims APPLE !PHONES 6366 04/17/20 01:59:33 1:39 192 Onmtgonpho APPLE !PHONES ne 6367 04/17/20 01:59:35 1:38 0 Onmtgonpho APPLE !PHONES ne 6368 04/17/20 02:01:13 1:08 0 Onmtgonpho APPLE !PHONES ne 6369 04/17/20 02:02:20 2:03 192 Onmtgonpho APPLE !PHONES ne 6370 04/17/20 02:02:21 2:03 0 Onmtgonpho APPLE !PHONES ne 6371 04/17/20 02:04:24 4:04 0 Onmtgonpho APPLE !PHONES ne 6372 04/17/20 02:08:27 2:04 192 Onmtgonpho APPLE !PHONES ne 6373 04/17/20 02:08:28 2:04 0 Onmtgonpho APPLE !PHONES ne 6374 04/17/20 02:10:32 2:52 0 Onmtgonpho APPLE !PHONES ne 6375 04/17/20 02:13:23 14:17 192 Onmtgonpho APPLE !PHONES ne 6376 04/17/20 02:13:24 14:17 0 Onmtgonpho APPLE IPHONE8 ne 6377 04/17/20 02:16:34 60:00 6224 2920 ims APPLE !PHONES 6378 04/17/20 02:27:41 60:00 0 Onmtgonpho APPLE !PHONES ne 6379 04/17/20 02:51:19 0:00 0 0 ims APPLE !PHONES 6380 04/17/20 02:51:29 60:00 21442 9856 ims 6381 04/17/20 03:16:34 60:00 0 0 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 261 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171181 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343239 MOBILITY ..020 AT&T has queried AT&T has queried for records for records from 03/01/2020 12:00:00am using Eastern Time Zone. to 06/15/2020 11:59:59pm AT&T's records are stored and provided in .‘•- 0° AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn DOLT INSI MAKE MODEL Date Time Number Up Dn (OTC/ 6382 04/17/20 03:27:41 24:51 0 Onactgonpho APPLE !PHONES ne 6383 04/17/20 03:51:29 60:00 8388 2896 ins 6384 04/17/20 03:52:31 2:24 192 Onactgonpho APPLE !PHONES ne 6385 04/17/20 03:52:32 2:24 0 0 nxtgenpho APPLE !PHONES ne 6386 04/17/20 03:54:55 6:03 192 0 nxtgenpho APPLE !PHONES no 6387 04/17/20 03:54:56 6:03 0 0 nxtgenpho APPLE !PHONES no 6388 04/17/20 04:01:00 60:00 0 0 nxtgenpho APPLE !PHONES no 6389 04/17/20 04:16:34 60:00 0 0 Las APPLE !PHONES 6390 04/17/20 04:51:29 60:00 7440 3236 Las 6391 04/17/20 05:01:00 60:00 0 0 nxtgenphe APPLE !PHONES ne 6392 04/17/20 05:16:34 60:00 0 0 Las APPLE !PHONES 6393 04/17/20 05:51:29 60:00 10020 3268 Las 6394 04/17/20 06:01:00 60:00 0 0 nxtgenphe APPLE !PHONES ne 6395 04/17/20 06:16:34 19:50 0 0 Las APPLE !PHONES 6396 04/17/20 06:51:29 60:00 17224 6216 Las 6397 04/17/20 07:01:00 60:00 0 0 nxtgenphe APPLE !PHONES no 6398 04/17/20 07:51:29 60:00 7636 2896 Las 6399 04/17/20 08:01:00 0:01 0 0 nxtgenphe APPLE !PHONES no 6400 04/17/20 08:01:02 40:34 0 0 nxtgenphe APPLE !PHONES no 6401 04/17/20 08:41:35 3:31 192 0 nxtgenphe APPLE !PHONES no 6402 04/17/20 08:41:36 3:31 0 0 nxtgenphe APPLE !PHONES no 6403 04/17/20 08:45:07 8:39 0 0 nxtgenphe APPLE !PHONES no 6404 04/17/20 08:51:29 60:00 8156 2988 Las 6405 04/17/20 08:53:47 3:01 0 0 nxtgenphe APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 262 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171182 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343240 MOBILITY 41110 PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:50:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ttrs„s `-a. AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage For: Mid= Item Conn. Conn. Originating ET Bytes Bytes Apn flax INSI NAME MODEL Date Tame Number Up Dn (OTC) 6406 04/17/20 08:56:47 1:40 192 0 nxtgenpho APPLE 'PHONES ne 6407 04/17/20 08:56:48 1:40 0 0 nxtgenpho APPLE 'PHONES NO 6408 04/17/20 08:58:28 48:46 0 0 nxtgenpho APPLE 'PHONES ne 6409 04/17/20 09:47:13 2:12 192 0 nxtgenpho APPLE 'PHONES ne 6410 04/17/20 09:47:14 2:12 0 0 nxtgenpho APPLE 'PHONES ne 6411 04/17/20 09:49:26 60:00 0 0 nxtgenpho APPLE 'PHONES ne 6412 04/17/20 09:51:29 60:00 7064 2664 ims 6413 04/17/20 10:49:26 60:00 0 0 nxtgenpho APPLE 'PHONES ne 6414 04/17/20 10:51:29 60:00 12028 4220 ims 6415 04/17/20 11:49:26 60:00 0 0 nxtgenpho APPLE 'PHONES ne 6416 04/17/20 11:51:29 60:00 7204 2880 ims 6417 04/17/20 12:45:00 0:00 0 0 ims APPLE 'PHONES 6418 04/17/20 12:45:09 60:00 16705 9144 ims 6419 04/17/20 12:49:26 60:00 0 0 nxtgenpho APPLE 'PHONES ne 6420 04/17/20 12:51:29 60:00 0 0 ims 6421 04/17/20 13:45:09 60:00 8388 2928 ims 6422 04/17/20 13:49:26 0:02 0 0 nxtgenpho APPLE 'PHONES ne 6423 04/17/20 13:49:30 60:00 0 0 nxtgenpho APPLE 'PHONES ne 6424 04/17/20 13:51:29 60:00 0 0 ims 6425 04/17/20 14:45:09 60:00 24360 11316 ims 6426 04/17/20 14:49:30 41:44 0 0 nxtgenpho APPLE 'PHONES ne 6427 04/17/20 14:51:29 60:00 0 0 ims 6428 04/17/20 15:31:13 2:23 192 0 nxtgenpho APPLE 'PHONES ne 6429 04/17/20 15:31:14 2:23 0 0 nxtgenpho APPLE 'PHONES ne 6430 04/17/20 15:33:37 5:17 0 0 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 263 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171183 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343241 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Dato: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn DNB! IMSI MOSE MODEL Date Tame Number Up Dn luIt) 6431 04/17/20 15:38:53 2:04 192 0 nxtgonpho APPLE 'PHONES no 6432 04/17/20 15:38:54 2:04 0 0 nxtgenpho APPLE 'PHONES no 6433 04/17/20 15:40:58 5:27 0 0 nxtgenpho APPLE 'PHONES no 6434 04/17/20 15:45:09 60:00 7064 2804 ims 6435 04/17/20 15:46:24 8:14 192 0 nxtgOnphe APPLE 'PHONES ne 6436 04/17/20 15:46:25 8:14 0 0 nxtgenpho APPLE 'PHONES no 6437 04/17/20 15:51:29 43:57 0 0 ims 6438 04/17/20 15:54:39 18:19 0 0 nxtgenphe APPLE 'PHONES no 6439 04/17/20 16:12:58 8:17 192 0 nxtgonpho APPLE 'PHONES ne 6440 04/17/20 16:12:59 8:18 0 0 nxtgenpho APPLE 'PHONES ne 6441 04/17/20 16:21:17 54:04 0 0 nxtgenpho APPLE 'PHONES no 6442 04/17/20 16:45:09 5:45 0 0 ims 6443 04/17/20 16:53:26 8:56 10013 6480 ims 6444 04/17/20 17:05:08 60:00 19982 10381 ims 6445 04/17/20 17:15:20 2:03 192 Onmtgonpho APPLE 'PHONES ne 6446 04/17/20 17:15:21 2:03 0 0 nxtgenpho APPLE 'PHONES ne 6447 04/17/20 17:17:24 14:47 0 0 nxtgenpho APPLE 'PHONES ne 6448 04/17/20 17:32:10 2:03 192 0 nxtgenpho APPLE 'PHONES ne 6449 04/17/20 17:32:11 2:03 0 0 nxtgenpho APPLE 'PHONES ne 6450 04/17/20 17:34:14 3:45 0 0 nxtgenpho APPLE 'PHONES ne 6451 04/17/20 17:37:58 2:03 192 0 nxtgenpho APPLE 'PHONES ne 6452 04/17/20 17:37:59 2:03 0 0 nxtgenpho APPLE 'PHONES ne 6453 04/17/20 17:40:02 52:04 0 0 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 264 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00171184 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343242 MOBILITY „so ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run pato: 06/17/2020 Run Time: Data Usage For: Mid= Item Conn. Conn. Originating ET Bytes Bytes Apn flat INS! 10IO2 MCOEI. Date Time Up Dn (OTC) 6454 04/17/20 18:05:08 18:10 4764 1464 ims 6455 04/17/20 18:29:14 0:26 8340 7264 ims APPLE 'PHONES 6456 04/17/20 18:29:40 42:12 8296 5756 ims APPLE 'PHONES 6457 04/17/20 18:32:05 2:05 192 Onmtgonpho APPLE 'PHONES ne 6458 04/17/20 18:32:06 2:05 0 0 nwtgonpho APPLE 'PHONES ne 6459 04/17/20 18:34:11 35:22 0 0 nwtgonpho APPLE 'PHONES ne 6460 04/17/20 18:39:07 60:00 16480 8335 ims 6461 04/17/20 19:09:32 2:04 192 Onwtgonpho APPLE 'PHONES ne 6462 04/17/20 19:09:34 2:03 0 0 nwtgonpho APPLE 'PHONES ne 6463 04/17/20 19:11:37 58:25 0 0 nwtgonpho APPLE 'PHONES ne 6464 04/17/20 19:11:52 0:00 0 0 ims APPLE 'PHONES 6465 04/17/20 19:12:03 60:00 19843 11038 ims 6466 04/17/20 19:39:07 31:47 0 0 ims 6467 04/17/20 20:10:53 9:10 0 0 nwtgonpho APPLE 'PHONES ne 6468 04/17/20 20:10:54 9:09 6670 5981 ims APPLE 'PHONES 6469 04/17/20 20:12:03 9:10 0 0 ims 6470 04/17/20 20:20:02 1:37 192 0 nwtgonpho APPLE 'PHONES ne 6471 04/17/20 20:20:03 1:36 6244 6778 ims APPLE 'PHONES 6472 04/17/20 20:20:03 1:37 0 0 nwtgonpho APPLE 'PHONES ne 6473 04/17/20 20:20:05 1:35 6670 5980 ims APPLE 'PHONES 6474 04/17/20 20:21:40 14:12 745421 19273243 nxtgenpho APPLE 'PHONES ne 6475 04/17/20 20:21:42 43:34 9264 7230 ims APPLE 'PHONES 6476 04/17/20 20:35:52 1:27 304075 19807400 nxtgenpho APPLE 'PHONES ne 6477 04/17/20 20:37:19 0:30 181567 19821855 nxtgenpho APPLE 'PHONES ne 6478 04/17/20 20:37:49 0:44 186909 19813913 nxtgenpho APPLE 'PHONES ne 6479 04/17/20 20:38:33 26:43 122067 1895480 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 265 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171185 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343243 MOBILITY cro mus020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Dato: 06/17/2020 Run Time: Data Usage For: NM= Item Conn. Conn. Originating ET Bytes Bytes Apn flat INS! MAKE MODEL Date Time Up Dn luTC) 6480 04/17/20 21:05:15 8:30 26349 20421 nxtgenpho APPLE 'PHONES ne 6481 04/17/20 21:05:16 8:29 7164 6848 ims APPLE 'PHONES 6482 04/17/20 21:05:16 8:30 20421 26061 nxtgenpho APPLE 'PHONES ne 6483 04/17/20 21:05:17 8:29 6740 6900 ims APPLE 'PHONES 6484 04/17/20 21:08:07 60:00 25214 17928 ims 6485 04/17/20 21:13:46 2:17 5221 6055 nxtgenpho APPLE 'PHONES no 6486 04/17/20 21:13:47 2:17 6055 4933 nxtgonpho APPLE 'PHONES no 6487 04/17/20 21:16:03 1:07 192 Onmtgonpho APPLE 'PHONES no 6488 04/17/20 21:16:04 1:06 5285 6873 nxtgonpho APPLE 'PHONES no 6489 04/17/20 21:16:05 1:06 6873 4997 nxtgonpho APPLE 'PHONES no 6490 04/17/20 21:16:05 1:06 0 0 nxtgonpho APPLE 'PHONES ne 6491 04/17/20 21:16:07 0:04 0 1347 ims 6492 04/17/20 21:17:11 24:25 19364 13069 nxtgonpho APPLE 'PHONES no 6493 04/17/20 21:41:35 1:55 5217 6037 nxtgonpho APPLE 'PHONES no 6494 04/17/20 21:41:37 1:54 6037 4929 nxtgonpho APPLE 'PHONES ne 6495 04/17/20 21:43:31 60:00 49433 41515 nxtgenpho APPLE 'PHONES ne 6496 04/17/20 22:08:07 60:00 8604 2912 ims 6497 04/17/20 22:43:31 46:14 8721 7492 nxtgenpho APPLE 'PHONES no 6498 04/17/20 23:08:07 60:00 8496 2896 ims 6499 04/17/20 23:29:45 8:24 7513 5070 nxtgonpho APPLE 'PHONES ne 6500 04/17/20 23:38:09 2:16 14373 15984 nxtgenpho APPLE 'PHONES ne 6501 04/17/20 23:40:24 98:40 10467 12250 nxtgenpho APPLE 'PHONES no 6502 04/17/20 23:40:25 60:00 12250 11763 nxtgonpho APPLE 'PHONES no 6503 04/18/20 00:08:07 60:00 8496 2896 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 266 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171186 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343244 MOBILITY ce• pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Dato: 06/17/2020 Run Time: Data Usage For: Slid= Item Conn. Conn. Originating ET Bytes Bytes Apn DEBI IIISI Mae 110Corl. Date Tame Number Up Dn (OTC/ 6504 04/18/20 00:40:25 38:40 0 92 nxtgenpho APPLE 'PEONES ne 6505 04/18/20 01:08:07 60:00 17208 6308 ims 6506 04/18/20 01:19:05 2:03 5390 6989 nxtgenpho APPLE 'PEONES ne 6507 04/18/20 01:19:06 2:03 6989 5102 nxtgenpho APPLE !PHONES ne 6508 04/18/20 01:21:09 60:00 8034 6067 nxtgenpho APPLE 'PHONES ne 6509 04/18/20 02:08:07 60:00 7080 2772 ims 6510 04/18/20 02:21:09 14:28 173 105 nxtgenpho APPLE 'PHONES ne 6511 04/18/20 02:35:36 6:48 5217 6053 nxtgenpho APPLE 'PHONES ne 6512 04/18/20 02:35:38 6:47 6053 4929 nxtgenpho APPLE 'PHONES ne 6513 04/18/20 02:44:26 11:14 6686 7509 nxtgenpho APPLE 'PHONES ne 6514 04/18/20 02:44:27 11:14 7509 6302 nxtgenpho APPLE 'PHONES ne 6515 04/18/20 02:55:41 60:00 7977 6173 nxtgenpho APPLE 'PHONES ne 6516 04/18/20 03:08:07 60:00 9928 3252 ims 6517 04/18/20 03:55:41 60:00 692 420 nxtgenpho APPLE 'PHONES ne 6518 04/18/20 04:08:07 60:00 8604 3004 ims 6519 04/18/20 04:55:41 60:00 808 630 nxtgenpho APPLE 'PHONES ne 6520 04/18/20 05:08:07 60:00 8388 2896 ims 6521 04/18/20 05:55:41 60:00 635 525 nxtgenpho APPLE 'PHONES ne 6522 04/18/20 06:08:07 60:00 9928 3252 ims 6523 04/18/20 06:55:41 60:00 635 525 nxtgenpho APPLE 'PHONES ne 6524 04/18/20 07:08:07 60:00 16884 5968 ims 6525 04/18/20 07:55:41 60:00 519 315 nxtgenpho APPLE 'PHONES ne 6526 04/18/20 08:08:07 60:00 8388 2896 ims 6527 04/18/20 08:55:41 60:00 635 525 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 267 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171187 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343245 MOBILITY 0 ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in e,# AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn EMI IM9I MAKE MODEL Date Tame Number Up Dn (OTC) 6528 04/18/20 09:08:07 31:01 4964 1572 ims 6529 04/18/20 09:47:30 60:00 14740 9988 ims APPLE 'PHONES 6530 04/18/20 09:55:41 60:00 635 525 nxtgonpho APPLE 'PHONES ne 6531 04/18/20 10:47:30 60:00 5408 2896 ims APPLE 'PHONES 6532 04/18/20 10:55:41 60:00 519 315 nxtgonpho APPLE 'PHONES ne 6533 04/18/20 11:47:30 43:00 5192 2680 ims APPLE 'PHONES 6534 04/18/20 11:55:41 60:00 462 420 nxtgonpho APPLE 'PHONES ne 6535 04/18/20 12:30:30 60:00 13228 4608 ims APPLE 'PHONES 6536 04/18/20 12:55:41 60:00 1012 4754 nxtgonpho APPLE 'PHONES ne 6537 04/18/20 13:30:30 60:00 8388 3036 ims APPLE 'PHONES 6538 04/18/20 13:55:41 27:30 173 105 nxtgonpho APPLE 'PHONES ne 6539 04/18/20 14:23:10 4:53 5594 7645 nxtgonpho APPLE 'PHONES ne 6540 04/18/20 14:23:12 4:52 7645 5306 nxtgonpho APPLE 'PHONES no 6541 04/18/20 14:28:04 0:05 0 0 nxtgonpho APPLE 'PHONES no 6542 04/18/20 14:28:38 60:00 11330 10559 nxtgonpho APPLE 'PHONES no 6543 04/18/20 14:30:30 60:00 16220 5032 ims APPLE 'PHONES 6544 04/18/20 15:28:38 35:07 462 420 nxtgonpho APPLE 'PHONES ne 6545 04/18/20 15:30:30 60:00 8388 2928 ims APPLE 'PHONES 6546 04/18/20 16:03:44 5:20 5220 6055 nxtgonpho APPLE 'PHONES ne 6547 04/18/20 16:03:45 5:20 6055 4932 nxtgonpho APPLE 'PHONES ne 6548 04/18/20 16:09:05 27:35 18577 17292 nxtgonpho APPLE 'PHONES ne 6549 04/18/20 16:09:06 27:35 17292 18193 nxtgonpho APPLE 'PHONES ne 6550 04/18/20 16:30:30 60:00 8496 2928 ims APPLE 'PHONES 6551 04/18/20 16:36:41 4:52 48 0 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 268 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171188 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343246 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in t,rzs0# 0 AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn LBSI INSI MAKE MODEL Date Time Number Up Dn (OTC) 6552 04/18/20 16:41:32 3:04 16409 16604 nxtgonpho APPLE !PHONES no 6553 04/18/20 16:41:33 3:04 16604 16121 nxtgonpho APPLE !PHONES no 6554 04/18/20 16:44:37 14:23 37551 16113 nxtgonpho APPLE !PHONES no 6555 04/18/20 16:58:59 2:24 288 48 nxtgonpho APPLE !PHONES no 6556 04/18/20 16:59:00 2:24 48 0 nxtgonpho APPLE !PHONES no 6557 04/18/20 17:01:24 12:10 288 48 nxtgonpho APPLE !PHONES no 6558 04/18/20 17:01:25 12:10 48 0 nxtgonphe APPLE !PHONES no 6559 04/18/20 17:13:36 21:30 7882 5543nmtgonphe APPLE !PHONES no 6560 04/18/20 17:30:30 60:00 15108 4780 ims APPLE !PHONES 6561 04/18/20 17:35:06 202:36 88303 48880nmtgonphe APPLE !PHONES no 6562 04/18/20 17:35:06 60:00 7737 6614 nxtgonpho APPLE !PHONES no 6563 04/18/20 18:30:30 60:00 8604 3160 ims APPLE !PHONES 6564 04/18/20 18:35:06 60:00 2251 7376 nxtgonpho APPLE !PHONES no 6565 04/18/20 19:30:30 60:00 8712 3052 ims APPLE !PHONES 6566 04/18/20 19:35:06 60:00 1775 5767 nxtgonpho APPLE !PHONES ne 6567 04/18/20 20:30:30 14:31 6284 5300 ims APPLE !PHONES 6568 04/18/20 20:33:46 4:10 17900 11707 ims 6569 04/18/20 20:35:06 22:37 37117 73669nmtgonphe APPLE !PHONES ne 6570 04/18/20 20:39:50 10:10 8169 9622 ims APPLE !PHONES 6571 04/18/20 20:39:51 10:10 9622 8013 ims APPLE !PHONES 6572 04/18/20 20:45:01 5:17 10948 6732 ims 6573 04/18/20 20:50:00 6:39 6350 6668 ims APPLE !PHONES 6574 04/18/20 20:50:01 6:40 6668 6106 ims APPLE !PHONES 6575 04/18/20 20:50:18 8:24 8313 6322 ims 6576 04/18/20 20:56:39 1:03 6300 6762 ims APPLE !PHONES 6577 04/18/20 20:56:40 1:03 6762 6036 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 269 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171189 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343247 MOBILITY e s, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Timm: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn THEM IMSI MISOM MODEL Date TIM* Number Up On (v=1 6578 04/18/20 20:57:43 0:05 0 Onxtgonpho APPLE 'PEONES ne 6579 04/18/20 20:58:15 45:42 11877 7692 ims 6580 04/18/20 20:58:26 18:47 5702 6379 nxtgonpho APPLE 'PEONES ne 6581 04/18/20 20:58:27 18:47 6379 9106 nxtgonpho APPLE !PEONES ne 6582 04/18/20 21:17:14 46:11 22023 32502 nxtgonpho APPLE 'PROMS ne 6583 04/18/20 21:17:15 46:11 32502 22401 nxtgonpho APPLE 'PROMS no 6584 04/18/20 21:38:46 24:39 6409 7586 ims APPLE 'PHONES 6585 04/18/20 21:38:47 24:39 7478 6253 ims APPLE 'PHONES 6586 04/18/20 21:44:00 28:27 13616 8036 ims 6587 04/18/20 22:03:26 8:25 7581 5071 nxtgonpho APPLE 'PHONES no 6588 04/18/20 22:11:50 3:20 5693 7267 nxtgonpho APPLE 'PHONES no 6589 04/18/20 22:11:51 3:20 7267 5309 nxtgonpho APPLE 'PHONES no 6590 04/18/20 22:11:58 3:12 6136 6566 ims APPLE 'PHONES 6591 04/18/20 22:12:00 3:11 6566 5872 ims APPLE 'PHONES 6592 04/18/20 22:12:27 60:00 21529 11092 ims 6593 04/18/20 22:15:11 7:17 6871 4961 nxtgonpho APPLE 'PHONES no 6594 04/18/20 22:22:27 4:15 6154 6539 nxtgonpho APPLE 'PHONES no 6595 04/18/20 22:22:28 4:15 6539 5866 nxtgonpho APPLE 'PHONES no 6596 04/18/20 22:26:43 6:07 6107 4901 nxtgonpho APPLE !PHONES no 6597 04/18/20 22:32:49 2:04 5177 6115 nxtgonpho APPLE !PHONES no 6598 04/18/20 22:32:50 2:04 6115 4889 nxtgonpho APPLE !PHONES no 6599 04/18/20 22:34:54 0:05 0 0 nxtgonpho APPLE !PHONES ne 6600 04/18/20 22:35:10 1:24 7184 4966 nxtgonpho APPLE !PHONES ne 6601 04/18/20 22:36:33 4:06 5218 6053 nxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 270 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171190 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343248 MOBILITY es, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in / s 1 4zs ioAT&T , OTC. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn nom INSI MAKE MODEL Date Time Number Up Dn (OTC) 6602 04/18/20 22:36:34 4:06 6053 4930 nxtgonpho APPLE 'PHONES no 6603 04/18/20 22:40:40 3:05 5220 6055 nxtgenpho APPLE 'PHONES no 6604 04/18/20 22:40:41 3:05 6055 4932 nxtgonpho APPLE 'PHONES no 6605 04/18/20 22:43:46 5:54 7593 5176 nxtgenpho APPLE 'PHONES no 6606 04/18/20 22:49:39 2:10 5117 6107 nxtgonpho APPLE 'PHONES no 6607 04/18/20 22:49:40 2:10 6107 4829 nxtgonpho APPLE 'PHONES no 6608 04/18/20 22:51:50 37:24 8592 6485 nxtgenpho APPLE 'PHONES no 6609 04/18/20 23:12:27 60:00 10036 3176 ims 6610 04/18/20 23:29:13 8:08 5222 6091 nxtgonpho APPLE 'PHONES no 6611 04/18/20 23:29:14 8:08 6091 4934 nxtgonpho APPLE 'PHONES no 6612 04/18/20 23:37:22 1:49 6977 5025 nxtgenpho APPLE 'PHONES no 6613 04/18/20 23:39:10 2:05 5220 6055 nxtgenpho APPLE 'PHONES no 6614 04/18/20 23:39:11 2:05 6055 4932 nxtgonpho APPLE 'PHONES ne 6615 04/18/20 23:41:16 0:34 0 0 nxtgenpho APPLE 'PHONES ne 6616 04/18/20 23:41:49 2:17 5221 6055 nxtgonpho APPLE 'PHONES no 6617 04/18/20 23:41:50 2:17 6055 4933 nxtgonpho APPLE 'PHONES no 6618 04/18/20 23:44:07 6:04 5221 6055 nxtgonpho APPLE 'PHONES no 6619 04/18/20 23:44:08 6:04 6055 4933 nxtgenpho APPLE 'PHONES ne 6620 04/18/20 23:50:12 18:55 7226 5437 nxtgenpho APPLE 'PHONES ne 6621 04/19/20 00:09:06 2:03 5220 6055 nxtgenpho APPLE 'PHONES ne 6622 04/19/20 00:09:07 2:03 6055 4932 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 271 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171191 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343249 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in & a.'`i asas AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn EBBE IMSI MAKE MODEL Date Time Number Up Dn (OTC/ 6623 04/19/20 00:11:1 60:00 9724 10943 nxtgenpho APPLE !PHONES ne 6624 04/19/20 00:12:2 60:00 8496 2912 ims 6625 04/19/20 01:11:1 60:00 1322 1155 nxtgenpho APPLE !PHONES ne 6626 04/19/20 01:12:2 60:00 7080 2912 ims 6627 04/19/20 02:11:1 1:39 0 0 nxtgenpho APPLE !PHONES ne 6628 04/19/20 02:12:2 60:00 12120 4268 ims 6629 04/19/20 02:12:4 2:03 5222 6228 nxtgenpho APPLE !PHONES ne 6630 04/19/20 02:12:5 2:03 6228 4934 nxtgenpho APPLE !PHONES ne 6631 04/19/20 02:14:5 14:51 6472 5426 nxtgenpho APPLE !PHONES ne 6632 04/19/20 02:29:4 8:55 5548 10407 nxtgenpho APPLE !PHONES ne 6633 04/19/20 02:29:4 8:55 10407 5260 nxtgenpho APPLE !PHONES ne 6634 04/19/20 02:38:3 2:03 5220 6107 nxtgenpho APPLE !PHONES ne 6635 04/19/20 02:38:4 2:03 6107 4932 nxtgenpho APPLE !PHONES ne 6636 04/19/20 02:40:4 60:00 8271 6277 nxtgenpho APPLE !PHONES ne 6637 04/19/20 03:12:2 60:00 13676 4676 ims 6638 04/19/20 03:40:4 60:00 1213 1155 nxtgenpho APPLE !PHONES ne 6639 04/19/20 04:12:2 60:00 8604 3052 ims 6640 04/19/20 04:40:4 60:00 1097 1106 nxtgenpho APPLE !PHONES ne 6641 04/19/20 05:12:2 0:37 0 0 ims 6642 04/19/20 05:18:3 60:00 11845 7942 ims 6643 04/19/20 05:40:4 60:00 1213 1155 nxtgenpho APPLE !PHONES ne 6644 04/19/20 06:18:3 60:00 13460 4624 ims 6645 04/19/20 06:40:4 60:00 687 630 nxtgenpho APPLE !PHONES ne 6646 04/19/20 07:18:3 60:00 8388 2804 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 272 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171192 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343250 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .A° AT&T ‘•- UTZ. Run Date: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn DOLI IM9I MAKE MODEL Date Time Number Up Dn (OTC) 6647 04/19/20 07:40:43 60:00 751 735 nxtgonpho APPLE 'PHONES ne 6648 04/19/20 08:18:33 60:00 9928 3160 ims 6649 04/19/20 08:40:43 60:00 346 210 nxtgonpho APPLE 'PHONES no 6650 04/19/20 09:18:33 60:00 9928 3068 ims 6651 04/19/20 09:40:43 60:00 519 315 nxtgonpho APPLE 'PHONES no 6652 04/19/20 10:18:33 60:00 16760 6340 ims 6653 04/19/20 10:40:43 60:00 462 420 nxtgonpho APPLE 'PHONES no 6654 04/19/20 11:18:33 60:00 10128 3176 ims 6655 04/19/20 11:40:43 50:17 346 210 nxtgonpho APPLE 'PHONES no 6656 04/19/20 12:18:33 60:00 8620 3036 ims 6657 04/19/20 12:30:59 25:21 10112 7542 nxtgonpho APPLE 'PHONES no 6658 04/19/20 12:31:00 25:21 7542 9824 nxtgonpho APPLE 'PHONES no 6659 04/19/20 12:56:21 1:39 7526 5062 nxtgonpho APPLE 'PHONES ne 6660 04/19/20 12:57:59 8:37 5278 6165 nxtgonpho APPLE 'PHONES ne 6661 04/19/20 12:58:00 8:37 6165 4990 nxtgonpho APPLE 'PHONES ne 6662 04/19/20 13:06:37 0:45 0 0 nxtgonpho APPLE 'PHONES no 6663 04/19/20 13:07:21 46:42 6167 6986 nxtgonpho APPLE 'PHONES no 6664 04/19/20 13:07:22 46:42 6986 5879 nxtgonpho APPLE 'PHONES ne 6665 04/19/20 13:18:33 60:00 13352 4516 ims 6666 04/19/20 13:54:04 2:17 6055 4902 nxtgonpho APPLE 'PHONES no 6667 04/19/20 13:56:21 8:25 5117 6055 nxtgonpho APPLE 'PHONES no 6668 04/19/20 13:56:22 8:25 6055 4829 nxtgonpho APPLE 'PHONES no 6669 04/19/20 14:04:47 1:58 6873 4965 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 273 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171193 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343251 MOBILITY P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .‘•- 1. AT&T UTC. Run Data: 06/17/2020 Run Timm: Data Usage For: Item Conn. Conn. Originating ET Bytos Bytes Apn DMZ IMSI MAKE MODEL Date Time Number Up Dn (OTC) 6670 04/19/20 14:06:44 2:03 5176 6115 nxtgenpho APPLE 'PHONES ne 6671 04/19/20 14:06:45 2:03 6115 4888 nxtgenpho APPLE 'PHONES ne 6672 04/19/20 14:08:48 0:49 7465 4966 nxtgenpho APPLE 'PHONES ne 6673 04/19/20 14:09:36 2:09 5177 6115 nxtgenpho APPLE 'PHONES ne 6674 04/19/20 14:09:37 2:09 6115 4889 nxtgenpho APPLE 'PHONES ne 6675 04/19/20 14:11:46 2:36 8000 5024 nxtgenpho APPLE 'PHONES ne 6676 04/19/20 14:14:21 2:09 5117 6107 nxtgenpho APPLE 'PHONES ne 6677 04/19/20 14:14:22 2:09 6107 4829 nxtgenpho APPLE 'PHONES ne 6678 04/19/20 14:16:31 6:31 6873 4966 nxtgenpho APPLE 'PHONES ne 6679 04/19/20 14:18:33 60:00 8156 2804 ims 6680 04/19/20 14:23:01 2:04 5176 6115 nxtgenpho APPLE 'PHONES ne 6681 04/19/20 14:23:02 2:04 6115 4888 nxtgenpho APPLE 'PHONES ne 6682 04/19/20 14:25:06 6:51 6873 4966 nxtgenpho APPLE 'PHONES ne 6683 04/19/20 14:31:56 2:19 5117 6055 nxtgenpho APPLE 'PHONES ne 6684 04/19/20 14:31:58 2:18 6055 4829 nxtgenpho APPLE 'PHONES ne 6685 04/19/20 14:34:15 6:24 5118 6055 nxtgenpho APPLE 'PHONES ne 6686 04/19/20 14:34:16 6:24 6055 4830 nxtgenpho APPLE 'PHONES ne 6687 04/19/20 14:40:39 6:03 5117 6107 nxtgenpho APPLE 'PHONES ne 6688 04/19/20 14:40:40 6:03 6107 4829 nxtgenpho APPLE 'PHONES ne 6689 04/19/20 14:46:43 60:00 7990 6333 nxtgenpho APPLE 'PHONES ne 6690 04/19/20 15:18:33 60:00 10036 3284 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 274 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GAt00171194 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343252 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in t,7 0.0 AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Slid= Item Conn. Conn. Originating ET Bytes Bytes Apn =RI INSI MAKE MODEL Date Time Number Up Dn (OTC) 6691 04/19/20 15:46:43 60:00 4913 6693 nxtgenpho APPLE 'PHONES ne 6692 04/19/20 16:18:33 8:19 0 0 isms 6693 04/19/20 16:31:29 60:00 14817 8098 isms 6694 04/19/20 16:46:43 60:00 346 210 nxtgenpho APPLE 'PHONES ne 6695 04/19/20 17:31:29 60:00 11688 4112 isms 6696 04/19/20 17:46:43 10:04 173 105 nxtgonpho APPLE 'PHONES no 6697 04/19/20 17:56:46 2:10 5284 6873 nxtgonpho APPLE 'PHONES no 6698 04/19/20 17:56:47 2:10 6873 4996 nxtgonpho APPLE 'PHONES no 6699 04/19/20 17:58:57 8:25 15000 26609 nxtgonpho APPLE 'PHONES no 6700 04/19/20 18:07:21 4:56 5754 6357 nxtgonpho APPLE 'PHONES ne 6701 04/19/20 18:07:22 4:56 6357 5466 nxtgenpho APPLE 'PHONES ne 6702 04/19/20 18:12:18 0:06 0 0 nxtgonpho APPLE 'PHONES no 6703 04/19/20 18:12:35 1:28 48 0 nxtgonpho APPLE 'PHONES no 6704 04/19/20 18:14:03 10:21 5287 6401 nxtgonpho APPLE 'PHONES no 6705 04/19/20 18:14:04 10:21 6401 4999 nxtgonpho APPLE 'PHONES no 6706 04/19/20 18:24:25 4:32 7589 5130 nxtgonpho APPLE 'PHONES no 6707 04/19/20 18:28:57 14:34 13180 16273 nxtgonpho APPLE 'PHONES no 6708 04/19/20 18:28:57 14:35 16273 12796 nxtgenpho APPLE 'PHONES ne 6709 04/19/20 18:31:29 60:00 6956 2896 isms 6710 04/19/20 18:43:32 3:40 7465 4964 nxtgenpho APPLE 'PHONES ne 6711 04/19/20 18:47:12 4:35 7666 5205 nxtgenpho APPLE 'PHONES no 6712 04/19/20 18:51:47 11:34 5441 7573 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 275 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171195 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343253 MOBILITY ce• PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .‘•- 0• AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ INS! MAKE MODEL Date Time Number Up Dn (OTC) 6713 04/19/20 18:51:48 11:34 7573 6002 nxtgenpho APPLE 'PHONES no 6714 04/19/20 19:03:22 15:35 658 3906 nxtgenpho APPLE 'PHONES no 6715 04/19/20 19:18:57 20:04 24756 26572 nxtgenpho APPLE 'PHONES no 6716 04/19/20 19:18:58 20:04 26572 35880 nxtgenpho APPLE 'PHONES no 6717 04/19/20 19:31:29 29:27 0 0 ims 6718 04/19/20 19:37:13 26:00 8361 6086 ims 6719 04/19/20 19:39:02 0:05 0 0nmtgenpho APPLE 'PHONES no 6720 04/19/20 19:39:21 2:28 8897 5559 nxtgenpho APPLE 'PHONES no 6721 04/19/20 19:41:48 2:04 5216 6053 nxtgenpho APPLE 'PHONES no 6722 04/19/20 19:41:49 2:04 6053 4928 nxtgenpho APPLE 'PHONES no 6723 04/19/20 19:43:53 19:18 16341 13362 nxtgenpho APPLE 'PHONES no 6724 04/19/20 20:00:56 0:46 12442 11624 ims APPLE 'PHONES 6725 04/19/20 20:01:42 3:47 3316 1340 ims APPLE 'PHONES 6726 04/19/20 20:03:10 8:49 5582 7720 nxtgenpho APPLE 'PHONES no 6727 04/19/20 20:03:11 8:49 7720 5294 nxtgenpho APPLE 'PHONES no 6728 04/19/20 20:03:12 4:54 6338 6674 ims APPLE 'PHONES 6729 04/19/20 20:03:13 4:54 6674 6074 ims APPLE 'PHONES 6730 04/19/20 20:05:29 3:25 8269 6000 ims 6731 04/19/20 20:08:05 1:08 6242 6670 ims APPLE 'PHONES 6732 04/19/20 20:08:06 1:08 6670 5978 ims APPLE 'PHONES 6733 04/19/20 20:08:53 1:24 5775 3504 ims 6734 04/19/20 20:09:13 2:46 6244 6670 ims APPLE 'PHONES 6735 04/19/20 20:09:14 2:46 6670 5980 ims APPLE 'PHONES 6736 04/19/20 20:10:17 60:00 15545 9144 ims 6737 04/19/20 20:12:00 8:13 61552 8616 nxtgenpho APPLE 'PHONES ne 6738 04/19/20 20:20:12 0:38 5285 6208 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 276 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171196 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343254 MOBILITY e s, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytos Bytes Apn DOLT IIRI MAN *DDSS Date Time Number Up Dn (UTC) 6739 04/19/20 20:20:13 0:38 6208 4997 nxtgonpho APPLE 'PEONES ne 6740 04/19/20 20:20:51 5:49 18007 16801 nxtgonpho APPLE 'PEONES ne 6741 04/19/20 20:26:39 8:14 11490 13258 nxtgonpho APPLE 'PEONES no 6742 04/19/20 20:26:40 8:14 13258 11106 nxtgonpho APPLE 'PEONES no 6743 04/19/20 20:34:54 4:30 7465 4964 nxtgonpho APPLE !PHONES no 6744 04/19/20 20:39:23 16:17 6721 7412 nxtgonpho APPLE 'PHONES no 6745 04/19/20 20:39:24 16:16 7412 6433 nxtgonpho APPLE !PHONES no 6746 04/19/20 20:55:41 9:18 9428 6778 nxtgonpho APPLE !PHONES no 6747 04/19/20 21:04:58 2:10 5221 6055 nxtgonpho APPLE !PHONES no 6748 04/19/20 21:04:59 2:10 6055 4933 nxtgonpho APPLE !PHONES no 6749 04/19/20 21:07:09 3:36 7465 4965 nxtgonpho APPLE !PHONES ne 6750 04/19/20 21:10:17 53:55 6956 2804 ims 6751 04/19/20 21:10:44 1:47 5221 6055 nxtgonpho APPLE !PHONES no 6752 04/19/20 21:10:45 1:47 6055 4933 nxtgonpho APPLE !PHONES no 6753 04/19/20 21:12:32 0:05 0 0 nxtgonpho APPLE !PHONES ne 6754 04/19/20 21:13:03 3:27 14656 7150 nxtgonpho APPLE !PHONES ne 6755 04/19/20 21:16:30 24:47 82235 98400 nxtgonpho APPLE !PHONES ne 6756 04/19/20 21:16:31 24:47 98400 83435 nxtgonpho APPLE !PHONES ne 6757 04/19/20 21:41:18 11:57 7527 6010 nxtgonpho APPLE !PHONES ne 6758 04/19/20 21:53:15 26:39 10351 12357 nxtgonpho APPLE !PHONES ne 6759 04/19/20 21:53:16 26:39 12357 11122 nxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 277 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171197 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343255 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in t,rwis AT&T UTZ. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ INSI MAKE MODEL Date Tame Numbor Up Dn (UTC) 6760 04/19/20 22:07:24 60:00 15000 7958 ims 6761 04/19/20 22:19:55 49:39 21210 16798 nxtgonpho APPLE 'PHONES no 6762 04/19/20 23:07:24 60:00 12152 4484 ims 6763 04/19/20 23:09:34 14:45 5326 6228 nxtgonpho APPLE 'PHONES ne 6764 04/19/20 23:09:35 14:45 6228 5038 nxtgonpho APPLE 'PHONES ne 6765 04/19/20 23:24:20 5:42 12767 12563 nxtgonpho APPLE 'PHONES ne 6766 04/19/20 23:30:01 14:18 11826 7256 nxtgonpho APPLE 'PHONES no 6767 04/19/20 23:30:02 14:18 7256 11538 nxtgonpho APPLE 'PHONES no 6768 04/19/20 23:44:20 45:47 53575 44122 nxtgonpho APPLE 'PHONES no 6769 04/20/20 00:07:24 60:00 6848 2756 ims 6770 04/20/20 00:30:06 8:02 23877 30655 nxtgonpho APPLE 'PHONES ne 6771 04/20/20 00:30:07 8:02 30655 23589 nxtgonpho APPLE 'PHONES ne 6772 04/20/20 00:38:09 1:09 11325 5640 nxtgonpho APPLE 'PHONES ne 6773 04/20/20 00:39:17 1:37 5217 6105 nxtgonpho APPLE 'PHONES ne 6774 04/20/20 00:39:18 1:37 6105 4929 nxtgonpho APPLE 'PHONES no 6775 04/20/20 00:40:55 1:35 8722 5271 nxtgonpho APPLE 'PHONES no 6776 04/20/20 00:42:29 4:53 5113 6053 nxtgonpho APPLE 'PHONES no 6777 04/20/20 00:42:30 4:53 6053 4825 nxtgonpho APPLE 'PHONES no 6778 04/20/20 00:47:23 8:37 48 0 nxtgonpho APPLE 'PHONES no 6779 04/20/20 00:55:59 19:07 10897 13836 nxtgonpho APPLE 'PHONES no 6780 04/20/20 00:56:00 19:07 13836 10513 nxtgonpho APPLE 'PHONES no 6781 04/20/20 01:07:24 60:00 10036 3160 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 278 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171198 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343256 MOBILITY P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ..77,4 1,/4 00 AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ST Bytes Bytes Apn EMS! INSI MAKE MODEL Date Time Number Up Dn (OTC) 6782 04/20/20 01:15:07 3:59 7529 5071 nxtgonpho APPLE !PHONES no 6783 04/20/20 01:19:06 32:44 6060 6761 nxtgonpho APPLE !PHONES no 6784 04/20/20 01:19:07 32:44 6761 5772 nxtgonpho APPLE !PHONES no 6785 04/20/20 01:51:51 19:42 14835 10664 nxtgonpho APPLE !PHONES no 6786 04/20/20 02:07:24 60:00 12028 4268 ims 6787 04/20/20 02:11:32 2:26 5118 6055 nxtgonpho APPLE !PHONES no 6788 04/20/20 02:11:33 2:26 6055 4830 nxtgonpho APPLE !PHONES no 6789 04/20/20 02:13:59 0:30 424 780 nxtgonpho APPLE !PHONES no 6790 04/20/20 02:14:47 80:00 23589 26098 nxtgonpho APPLE !PHONES no 6791 04/20/20 02:14:48 60:00 25809 22794 nxtgonpho APPLE !PHONES no 6792 04/20/20 03:07:24 60:00 10596 4412 ims 6793 04/20/20 03:14:48 60:00 6344 7746 nxtgonpho APPLE !PHONES no 6794 04/20/20 03:34:47 166:47 8691 7320 nxtgonpho APPLE !PHONES no 6795 04/20/20 04:07:24 60:00 7064 2912 ims 6796 04/20/20 04:14:48 60:00 687 630 nxtgonpho APPLE !PHONES ne 6797 04/20/20 05:07:24 60:00 8604 3144 ims 6798 04/20/20 05:14:48 60:00 578 630 nxtgonpho APPLE !PHONES ne 6799 04/20/20 06:07:24 60:00 10380 4144 ims 6800 04/20/20 06:14:48 6:47 0 0 nxtgonpho APPLE !PHONES ne 6801 04/20/20 06:21:35 20:42 0 0 nxtgonpho APPLE !PHONES ne 6802 04/20/20 06:42:16 2:22 5221 6055 nxtgonpho APPLE !PHONES ne 6803 04/20/20 06:42:17 2:22 6055 4933 nxtgonpho APPLE !PHONES ne 6804 04/20/20 06:44:38 6:12 5221 6055 nxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 279 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171199 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343257 MOBILITY cro P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .ai. AT&T ‘•- UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating BT Bytes Bytes Apn EMBI IMSI MARE MODEL Date Time Number Up Dn (OTC) 6805 04/20/20 06:44:39 6:12 6055 4933 nxtgonpho APPLE 'PHONES no 6806 04/20/20 06:50:51 3:00 6067 5712 nxtgonpho APPLE 'PHONES no 6807 04/20/20 06:53:50 49:32 17347 18935 nxtgonphe APPLE 'PHONES no 6808 04/20/20 06:53:51 49:32 18935 19405 nxtgonpho APPLE 'PHONES no 6809 04/20/20 07:07:24 60:00 8388 2820 ims 6810 04/20/20 07:43:22 31:21 12854 13278 nxtgonphe APPLE 'PHONES ne 6811 04/20/20 07:43:23 31:21 13278 14990 nxtgenphe APPLE 'PHONES no 6812 04/20/20 08:07:24 60:00 10488 4520 ims 6813 04/20/20 08:14:44 48:38 23363 22357 nxtgonphe APPLE 'PHONES ne 6814 04/20/20 09:03:21 1:03 5217 6053 nxtgonphe APPLE 'PHONES ne 6815 04/20/20 09:03:23 1:02 6053 4929 nxtgonphe APPLE 'PHONES ne 6816 04/20/20 09:04:25 24:55 15708 12984 nxtgonphe APPLE 'PHONES no 6817 04/20/20 09:07:24 60:00 11920 4484 ims 6818 04/20/20 09:29:19 0:43 5280 6115 nxtgonphe APPLE 'PHONES no 6819 04/20/20 09:29:20 0:43 6115 4992 nxtgonphe APPLE 'PHONES no 6820 04/20/20 09:30:03 3:38 7529 5173 nxtgenphe APPLE 'PHONES ne 6821 04/20/20 09:33:41 60:00 29626 28088 nxtgonphe APPLE 'PHONES ne 6822 04/20/20 10:07:24 60:00 8604 3052 ims 6823 04/20/20 10:33:41 0:15 0 0 nxtgonphe APPLE 'PHONES ne 6824 04/20/20 10:33:56 1:22 6052 4939 nxtgonphe APPLE 'PHONES ne 6825 04/20/20 10:35:18 0:59 5222 6055 nxtgonphe APPLE 'PHONES no 6826 04/20/20 10:35:19 0:59 6055 4934 nxtgonphe APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 280 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171200 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343258 MOBILITY cee ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in `•-••• AT&T OTC. Run Date: 06/17/2020 Run Tine: Data Usage For: Item Conn. Conn. Originating ET Bytos Bytes Apn DMZ INSI MAKE MODEL Date Ti.. Number Up Dn (OTC/ 6827 04/20/20 10:36:18 2:38 6931 5020 nxtgenpho APPLE 'PHONES ne 6828 04/20/20 10:38:55 3:20 5222 6055 nxtgenpho APPLE 'PHONES ne 6829 04/20/20 10:38:57 3:19 6055 4934 nxtgenpho APPLE 'PHONES ne 6830 04/20/20 10:42:16 7:02 9200 6186 nxtgenpho APPLE 'PHONES ne 6831 04/20/20 10:49:17 1:49 5221 6055 nxtgenpho APPLE 'PHONES ne 6832 04/20/20 10:49:19 1:48 6055 4933 nxtgenpho APPLE 'PHONES ne 6833 04/20/20 10:51:07 8:14 7026 5739 nxtgenpho APPLE 'PHONES no 6834 04/20/20 10:59:20 3:29 5984 6383 nxtgenpho APPLE 'PHONES ne 6835 04/20/20 10:59:21 3:29 6383 5696 nxtgenpho APPLE 'PHONES ne 6836 04/20/20 11:02:50 3:17 7529 5070 nxtgenpho APPLE 'PHONES ne 6837 04/20/20 11:06:06 0:45 5221 6055 nxtgenpho APPLE 'PHONES ne 6838 04/20/20 11:06:07 0:45 6055 4933 nxtgenpho APPLE 'PHONES no 6839 04/20/20 11:06:52 5:19 6873 4966 nxtgenpho APPLE 'PHONES ne 6840 04/20/20 11:07:24 60:00 10144 3176 ix:: 6841 04/20/20 11:12:12 3:53 6067 5608 nxtgenpho APPLE 'PHONES ne 6842 04/20/20 11:16:04 2:05 5221 6055 nxtgenpho APPLE 'PHONES ne 6843 04/20/20 11:16:05 2:05 6055 4933 nxtgenpho APPLE 'PHONES ne 6844 04/20/20 11:18:10 7:52 48 0 nxtgenpho APPLE 'PHONES ne 6845 04/20/20 11:26:01 6:12 5796 6383 nxtgenpho APPLE 'PHONES ne 6846 04/20/20 11:26:02 6:12 6383 5508 nxtgenpho APPLE 'PHONES ne 6847 04/20/20 11:32:14 1:07 6873 4964 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 281 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171201 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343259 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in t,rlssioAT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn max IMSI MAKE MODEL Date Time Number Up Dn (OTC) 6848 04/20/20 11:33:20 1:01 5221 6055 nxtgenpho APPLE 'PHONES ne 6849 04/20/20 11:33:21 1:01 6055 4933 nxtgenpho APPLE 'PHONES ne 6850 04/20/20 11:34:22 8:26 7033 5069 nxtgenpho APPLE 'PHONES ne 6851 04/20/20 11:42:48 4:28 7465 4965 nxtgenpho APPLE 'PHONES ne 6852 04/20/20 11:47:15 2:14 5216 6053 nxtgenpho APPLE 'PHONES ne 6853 04/20/20 11:47:17 2:13 6053 4928 nxtgenpho APPLE 'PHONES ne 6854 04/20/20 11:49:30 14:44 15216 12058 nxtgenpho APPLE 'PHONES ne 6855 04/20/20 12:04:13 17:10 9120 8717 nxtgenpho APPLE 'PHONES ne 6856 04/20/20 12:04:14 17:10 8717 10092 nxtgenpho APPLE 'PHONES ne 6857 04/20/20 12:07:24 60:00 18192 6280 ims 6858 04/20/20 12:21:24 1:56 48 0nxtgonpho APPLE 'PHONES ne 6859 04/20/20 12:23:19 8:24 5222 6055 nxtgenpho APPLE 'PHONES ne 6860 04/20/20 12:23:20 8:24 6055 4934 nxtgenpho APPLE 'PHONES ne 6861 04/20/20 12:31:44 1:54 0 0nmtgonpho APPLE 'PHONES ne 6862 04/20/20 12:33:37 6:36 5221 6055 nxtgenpho APPLE 'PHONES ne 6863 04/20/20 12:33:38 6:36 6055 4933 nxtgenpho APPLE 'PHONES ne 6864 04/20/20 12:40:14 55:39 19116 8927 nxtgenpho APPLE 'PHONES ne 6865 04/20/20 13:07:24 60:00 6956 2696 ims 6866 04/20/20 13:35:52 1:26 5220 6107 nxtgenpho APPLE 'PHONES ne 6867 04/20/20 13:35:53 1:26 6107 4932 nxtgenpho APPLE 'PHONES ne 6868 04/20/20 13:37:19 5:38 7591 5170 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 282 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171202 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343260 MOBILITY c to pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:68:58pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn TMBI IISI EASE EOM Date Time Number Up Dn (OTC) 6869 04/20/20 13:42:56 7:44 5703 6457 nxtgenpho APPLE 'PEONES ne 6870 04/20/20 13:42:57 7:44 6457 5415 nxtgonpho APPLE 'PEONES no 6871 04/20/20 13:50:41 14:09 8237 5835 nxtgonpho APPLE 'PEONES no 6872 04/20/20 14:04:49 8:40 5284 6873 nxtgonpho APPLE 'PEONES no 6873 04/20/20 14:04:50 8:40 6873 4996 nxtgonpho APPLE 'PHONES no 6874 04/20/20 14:07:24 60:00 8496 2928 ims 6875 04/20/20 14:13:29 4:28 5554 6997 nxtgonpho APPLE !PHONES ne 6876 04/20/20 14:13:30 4:28 6997 5266 nxtgonpho APPLE !PHONES no 6877 04/20/20 14:17:58 35:32 15296 12314 nxtgonpho APPLE !PHONES no 6878 04/20/20 14:53:30 38:51 6999 6246 nxtgonpho APPLE !PHONES no 6879 04/20/20 15:07:24 60:00 10380 4020 ims 6880 04/20/20 15:32:20 8:28 5753 6305 nxtgenpho APPLE !PHONES ne 6881 04/20/20 15:32:21 8:28 6305 5465 nxtgenpho APPLE !PHONES ne 6882 04/20/20 15:40:49 43:24 50578 36444 nxtgonpho APPLE !PHONES no 6883 04/20/20 16:07:24 60:00 10268 3176 ims 6884 04/20/20 16:24:13 26:03 15438 18285 nxtgonpho APPLE !PHONES no 6885 04/20/20 16:24:14 26:03 18285 16113 nxtgonpho APPLE !PHONES no 6886 04/20/20 16:50:17 22:52 6513 5171 nxtgonpho APPLE !PHONES no 6887 04/20/20 17:07:24 55:20 11920 4536 ims 6888 04/20/20 17:13:08 2:04 5286 6055 nxtgenpho APPLE !PHONES ne 6889 04/20/20 17:13:10 2:03 6055 4998 nxtgenpho APPLE !PHONES ne 6890 04/20/20 17:15:13 9:13 7529 5174 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 283 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171203 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343261 MOBILITY e s, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:38:58pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in e# AT&T / 1 4 UTC. Run Date: 06/17/2020 Run Time: Data Usage For: II'S Item Conn. Conn. Originating ET Bytes Bytes Apn 73MLI IMBI MAKE MODEL Date Tame Numbe Up Dn (OTC) 6891 04/20/20 17:24:25 8:07 7905 7349 nxtgonpho APPLE 'PHONES no 6892 04/20/20 17:24:26 8:07 7349 7617 nxtgonpho APPLE 'PHONES no 6893 04/20/20 17:32:33 6:21 6873 4966 nxtgenpho APPLE 'PHONES ne 6894 04/20/20 17:38:53 2:03 5118 6055 nxtgenpho APPLE 'PHONES ne 6895 04/20/20 17:38:54 2:03 6055 4830 nxtgenpho APPLE 'PHONES ne 6896 04/20/20 17:40:57 14:54 6470 5422 nxtgenpho APPLE 'PHONES ne 6897 04/20/20 17:55:50 24:24 86932 40730 nxtgenpho APPLE 'PHONES ne 6898 04/20/20 17:55:51 24:24 40730 87502 nxtgenpho APPLE 'PHONES ne 6899 04/20/20 18:01:37 2:16 7118 6812 ims APPLE 'PHONES 6900 04/20/20 18:01:38 2:16 6744 6854 ims APPLE 'PHONES 6901 04/20/20 18:02:44 10:31 8377 6106 ims 6902 04/20/20 18:03:53 16:21 6246 6676 ims APPLE 'PHONES 6903 04/20/20 18:03:54 16:21 6676 5982 ims APPLE 'PHONES 6904 04/20/20 18:20:15 21:10 8444 16290 nxtgonpho APPLE 'PHONES 110 6905 04/20/20 18:20:17 21:08 18554 13658 ims APPLE 'PHONES 6906 04/20/20 18:41:24 0:25 7090 7411 nxtgonpho APPLE 'PHONES no 6907 04/20/20 18:41:25 0:24 6350 6672 ims APPLE 'PHONES 6908 04/20/20 18:41:25 0:25 7411 6802 nxtgonpho APPLE 'PHONES no 6909 04/20/20 18:41:26 0:24 6672 5998 ims APPLE 'PHONES 6910 04/20/20 18:41:50 20:42 8099 7071 nxtgenpho APPLE 'PHONES ne 6911 04/20/20 18:41:53 20:39 8146 6924 ims APPLE 'PHONES 6912 04/20/20 19:02:31 1:23 5116 6023 nxtgenpho APPLE 'PHONES ne 6913 04/20/20 19:02:32 1:22 6264 6784 ims APPLE 'PHONES 6914 04/20/20 19:02:32 1:23 6023 4828 nxtgenpho APPLE 'PHONES ne 6915 04/20/20 19:02:33 1:22 6676 6000 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 284 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SONY_GM_00171204 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343262 MOBILITY P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in k..7. •0 0 AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DOLT INSI MAKE MODEL Date Time Numbor Up Dn (UTC) 6916 04/20/20 19:03:55 57:33 22166 75101 nxtgonpho APPLE 'PHONES ne 6917 04/20/20 19:03:58 5:48 8238 7830 imp APPLE 'PHONES 6918 04/20/20 19:09:46 60:00 10812 4204 imp APPLE 'PHONES 6919 04/20/20 20:01:27 2:03 5221 6059 nxtgonpho APPLE 'PHONES ne 6920 04/20/20 20:01:28 2:03 6059 4933 nxtgonpho APPLE 'PHONES no 6921 04/20/20 20:03:31 28:33 6791 5554 nxtgonpho APPLE 'PHONES no 6922 04/20/20 20:09:46 22:27 5072 1572 imp APPLE 'PHONES 6923 04/20/20 20:32:04 10:20 8061 13927 nxtgonpho APPLE 'PHONES no 6924 04/20/20 20:32:04 10:21 13927 7677 nxtgonpho APPLE 'PHONES no 6925 04/20/20 20:32:12 4:42 7266 6796 imp APPLE 'PHONES 6926 04/20/20 20:32:13 4:42 6796 7110 imp APPLE 'PHONES 6927 04/20/20 20:33:14 0:35 20186 20440 imp 6928 04/20/20 20:34:24 3:10 6166 6334 imp APPLE 'PHONES 6929 04/20/20 20:34:25 3:10 6334 5814 imp APPLE 'PHONES 6930 04/20/20 20:36:49 3:05 9888 6212 imp 6931 04/20/20 20:37:33 4:51 6368 7406 imp APPLE 'PHONES 6932 04/20/20 20:37:34 4:51 7406 6212 imp APPLE 'PHONES 6933 04/20/20 20:39:54 60:00 19946 9823 imp 6934 04/20/20 20:42:24 3:27 5217 6021 nxtgonpho APPLE 'PHONES ne 6935 04/20/20 20:42:25 3:27 6021 4929 nxtgonpho APPLE 'PHONES ne 6936 04/20/20 20:45:52 2:36 5422 7216 nxtgonpho APPLE 'PHONES no 6937 04/20/20 20:45:53 2:36 7216 5134 nxtgonpho APPLE 'PHONES no 6938 04/20/20 20:48:29 60:00 7899 5752 nxtgonpho APPLE 'PHONES no 6939 04/20/20 21:39:54 11:46 0 0 imp APPLE 'PHONES 6940 04/20/20 21:48:29 14:48 14781 52147 nxtgonpho APPLE 'PHONES ne 6941 04/20/20 21:51:40 11:28 3624 2324 imp APPLE 'PHONES 6942 04/20/20 21:51:40 11:28 3560 2324 imp APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 285 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171205 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343263 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ei.AT&T ‘s OTC. Run Date: 06/17/2020 Run Tine: Data Usage For: IS= Item Conn. Conn. Originating ET Bytes Bytes Apn nizx INSI MAKE MODEL Date Time Number Up Dn (UTC) 6943 04/20/20 22:03:08 9:58 3424 1324 ims APPLE !PHONES 6944 04/20/20 22:03:16 2:03 5116 6023 nxtgonphe APPLE !PHONES no 6945 04/20/20 22:03:17 2:03 6023 4828 nxtgonphe APPLE !PHONES no 6946 04/20/20 22:05:20 22:51 28862 15687 nxtgonphe APPLE !PHONES no 6947 04/20/20 22:22:52 1:07 7994 6106 ims APPLE !PHONES 6948 04/20/20 22:23:59 2:33 3316 1216 ims APPLE !PHONES 6949 04/20/20 22:26:32 1:39 2876 1432 ims APPLE !PHONES 6950 04/20/20 22:28:10 16:02 29688 69117 nxtgonphe APPLE !PHONES no 6951 04/20/20 22:28:11 16:01 7140 28630 ims APPLE !PHONES 6952 04/20/20 22:28:11 16:02 69117 29829 nxtgonphe APPLE !PHONES no 6953 04/20/20 22:28:12 16:01 6754 6876 ims APPLE !PHONES 6954 04/20/20 22:44:13 4:57 8969 5236 nxtgonphe APPLE !PHONES no 6955 04/20/20 22:44:15 4:55 9154 6282 ims APPLE !PHONES 6956 04/20/20 22:49:09 2:17 5350 7204 nxtgonphe APPLE !PHONES no 6957 04/20/20 22:49:10 2:16 6244 6782 ims APPLE !PHONES 6958 04/20/20 22:49:10 2:17 7204 5062 nxtgonphe APPLE !PHONES no 6959 04/20/20 22:49:11 2:16 6674 5980 ims APPLE !PHONES 6960 04/20/20 22:51:27 2:58 7639 5224 nxtgonphe APPLE !PHONES no 6961 04/20/20 22:51:29 2:56 8346 8080 ims APPLE !PHONES 6962 04/20/20 22:54:24 7:33 30216 11112 nxtgonphe APPLE !PHONES no 6963 04/20/20 22:54:25 7:32 6262 6668 ims APPLE !PHONES 6964 04/20/20 22:54:25 7:33 11112 29928 nxtgonphe APPLE !PHONES no 6965 04/20/20 22:54:26 7:32 6668 6106 ims APPLE !PHONES 6966 04/20/20 22:57:21 21:14 11404 6546 ims APPLE !PHONES 6967 04/20/20 23:01:58 7:04 144 Onmtgonphe APPLE !PHONES no 6968 04/20/20 23:09:01 2:28 5222 6023 nxtgonphe APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 286 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171206 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343264 MOBILITY P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in t,rzs ioAT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn DOLT IMSI NAM MODEL Date Tam. Number Up Dn (UTC) 6969 04/20/20 23:09:03 2:27 6023 4934 nxtgonpho APPLE !PHONES no 6970 04/20/20 23:11:30 1:49 6593 5565 nxtgonpho APPLE !PHONES no 6971 04/20/20 23:13:18 0:38 5220 6023 nxtgonpho APPLE !PHONES no 6972 04/20/20 23:13:19 0:38 6023 4932 nxtgonpho APPLE !PHONES no 6973 04/20/20 23:13:57 0:05 0 0 nxtgonpho APPLE !PHONES no 6974 04/20/20 23:14:34 28:33 23060 65583 nxtgonpho APPLE !PHONES no 6975 04/20/20 23:18:35 24:32 3500 1464 ims APPLE !PHONES 6976 04/20/20 23:18:35 24:32 3436 1464 ims APPLE !PHONES 6977 04/20/20 23:43:06 2:04 5220 6023 nxtgonpho APPLE !PHONES no 6978 04/20/20 23:43:08 2:03 6023 4932 nxtgonpho APPLE !PHONES no 6979 04/20/20 23:43:10 12:40 8209 5998 ims APPLE !PHONES 6980 04/20/20 23:45:11 16:07 7990 7760 nxtgonpho APPLE !PHONES ne 6981 04/20/20 23:55:50 1:02 3500 1464 ims APPLE !PHONES 6982 04/20/20 23:55:50 1:02 3436 1464 ims APPLE !PHONES 6983 04/20/20 23:56:52 14:13 3748 1448 ims APPLE !PHONES 6984 04/21/20 00:01:18 2:08 5116 6023 nxtgonpho APPLE !PHONES no 6985 04/21/20 00:01:19 2:09 6023 4828 nxtgonpho APPLE !PHONES no 6986 04/21/20 00:03:27 41:50 103606 116687 nxtgonpho APPLE !PHONES no 6987 04/21/20 00:11:05 4:38 3392 1464 ims APPLE !PHONES 6988 04/21/20 00:11:05 4:38 3328 1464 ims APPLE !PHONES 6989 04/21/20 00:15:43 20:39 3640 1556 ims APPLE !PHONES 6990 04/21/20 00:36:21 8:56 3392 1464 ims APPLE !PHONES 6991 04/21/20 00:36:22 8:55 3328 1464 ims APPLE !PHONES 6992 04/21/20 00:45:16 10:21 474245 415469 nxtgonpho APPLE !PHONES no 6993 04/21/20 00:45:17 4:48 6184 6666 ims APPLE !PHONES 6994 04/21/20 00:45:17 10:21 414029 473957 nxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 287 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171207 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343265 MOBILITY ce• PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating AT Bytes Bytes Apn IMSI MARE MODEL Date Time Number Up Dn (OTC) 6995 04/21/20 00:45:18 4:48 6666 5920 ims APPLE 'PHONES 6996 04/21/20 00:49:16 10:32 12157 15378 ims 6997 04/21/20 00:50:00 0:08 0 0 ims 6998 04/21/20 00:50:04 5:33 19964 20963 ims APPLE 'PHONES 6999 04/21/20 00:50:06 5:32 20848 29632 ims APPLE 'PHONES 7000 04/21/20 00:50:17 0:57 88418 90197 ims APPLE 'PHONES 7001 04/21/20 00:50:18 0:57 90197 88418 ims APPLE 'PHONES 7002 04/21/20 00:55:38 141:47 270650 41894 nxtgenpho APPLE 'PHONES ne 7003 04/21/20 00:55:39 60:00 13957 11771 nxtgenpho APPLE 'PHONES ne 7004 04/21/20 00:55:42 141:43 14192 13604 ims APPLE 'PHONES 7005 04/21/20 00:55:43 60:00 13496 13948 ims APPLE 'PHONES 7006 04/21/20 01:55:01 10:30 0 0 ims 7007 04/21/20 01:55:39 60:00 7867 10774 nxtgenpho APPLE 'PHONES ne 7008 04/21/20 01:55:43 60:00 0 108 ims APPLE 'PHONES 7009 04/21/20 02:51:08 26:17 9500 9468 ims APPLE 'PHONES 7010 04/21/20 02:51:09 26:17 9468 23404 ims APPLE 'PHONES 7011 04/21/20 02:55:39 21:47 20070 254933 nxtgenpho APPLE 'PHONES ne 7012 04/21/20 02:55:43 21:43 0 0 ims APPLE 'PHONES 7013 04/21/20 03:17:26 7:00 16739 25220 nxtgenpho APPLE 'PHONES ne 7014 04/21/20 03:17:28 6:58 11434 8322 ims APPLE 'PHONES 7015 04/21/20 03:18:09 0:16 64 60 nxtgenpho ne 7016 04/21/20 03:24:25 0:24 192 Onmtgonpho APPLE 'PHONES ne 7017 04/21/20 03:24:26 0:23 9439 8671 nxtgenpho APPLE 'PHONES ne 7018 04/21/20 03:24:27 0:23 8671 9151 nxtgenpho APPLE 'PHONES ne 7019 04/21/20 03:24:27 0:23 0 0 nxtgenpho APPLE 'PHONES ne 7020 04/21/20 03:24:36 5:34 0 0 ims 7021 04/21/20 03:24:50 1:39 0 0 nxtgenpho APPLE 'PHONES ne 7022 04/21/20 03:24:53 1:36 18702 17695 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 288 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171208 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343266 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. k..70 .0 AT&T Run Date: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn MEI IM9I MAKE MODEL Date Time Number Up Dn (UTC) 7023 04/21/20 03:26:28 7:00 192 0 nxtgenpho APPLE 'PHONES ne 7024 04/21/20 03:26:29 6:59 5316 6071 nxtgenpho APPLE 'PHONES ne 7025 04/21/20 03:26:29 6:59 6367 6994 ims APPLE 'PHONES 7026 04/21/20 03:26:29 7:00 0 0 nxtgenpho APPLE 'PHONES ne 7027 04/21/20 03:26:30 6:59 6071 4932 nxtgenpho APPLE 'PHONES ne 7028 04/21/20 03:26:31 6:58 6886 6103 ims APPLE 'PHONES 7029 04/21/20 03:33:29 10:00 11438 10098 nxtgenpho APPLE 'PHONES ne 7030 04/21/20 03:33:30 27:33 10098 11150 nxtgenpho APPLE 'PHONES ne 7031 04/21/20 03:33:30 10:00 6262 6784 ims APPLE 'PHONES 7032 04/21/20 03:33:31 27:32 6676 5998 ims APPLE 'PHONES 7033 04/21/20 04:01:03 2:06 5221 6023 nxtgenpho APPLE 'PHONES ne 7034 04/21/20 04:01:04 2:05 8080 6640 ims APPLE 'PHONES 7035 04/21/20 04:01:04 2:06 6023 4933 nxtgenpho APPLE 'PHONES ne 7036 04/21/20 04:01:05 2:05 6532 7728 ims APPLE 'PHONES 7037 04/21/20 04:03:10 1:57 8751 5608 nxtgenpho APPLE 'PHONES ne 7038 04/21/20 04:03:14 1:53 20370 14726 ims APPLE 'PHONES 7039 04/21/20 04:05:06 160:02 23259 25362 nxtgenpho APPLE 'PHONES ne 7040 04/21/20 04:05:07 60:00 16156 14907 nxtgenpho APPLE 'PHONES ne 7041 04/21/20 04:05:07 160:01 7676 9326 ims APPLE 'PHONES 7042 04/21/20 04:05:08 60:00 9266 7412 ims APPLE 'PHONES 7043 04/21/20 04:39:52 60:00 18237 9824 ims 7044 04/21/20 05:05:07 60:00 8168 7350 nxtgenpho APPLE 'PHONES ne 7045 04/21/20 05:05:08 60:00 0 0 ims APPLE 'PHONES 7046 04/21/20 05:39:52 60:00 8496 3004 ims 7047 04/21/20 06:05:07 40:02 1038 1239 nxtgenpho APPLE 'PHONES ne 7048 04/21/20 06:05:08 40:01 0 0 ims APPLE 'PHONES 7049 04/21/20 06:39:52 15:08 0 0 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 289 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171209 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343267 MOBILITY cro pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ./14•- 0 AT&T Run Dato: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn =RI INSI MAKE MODEL Date Time Number Up Dn (OTC) 7050 04/21/20 06:45:09 7:45 6809 4964 nxtgonpho APPLE 'PHONES no 7051 04/21/20 06:52:53 2:03 5217 6073 nxtgonpho APPLE 'PHONES no 7052 04/21/20 06:52:54 2:03 6073 4929 nxtgonpho APPLE 'PHONES no 7053 04/21/20 06:54:57 6:25 7495 5067 nxtgonpho APPLE 'PHONES no 7054 04/21/20 06:55:00 6:22 3500 1464 ims APPLE 'PHONES 7055 04/21/20 06:55:00 6:22 3436 1464 ims APPLE 'PHONES 7056 04/21/20 07:01:21 2:04 5221 6023 nxtgonpho APPLE 'PHONES no 7057 04/21/20 07:01:22 2:04 6023 4933 nxtgonpho APPLE 'PHONES ne 7058 04/21/20 07:01:27 60:00 15117 8909 ims 7059 04/21/20 07:03:26 1:51 0 0 nxtgonpho APPLE 'PHONES ne 7060 04/21/20 07:05:17 37:34 20358 15743 nxtgonpho APPLE 'PHONES ne 7061 04/21/20 07:05:18 37:34 15743 20070 nxtgonpho APPLE 'PHONES ne 7062 04/21/20 07:42:51 6:04 192 0 nxtgonpho APPLE 'PHONES no 7063 04/21/20 07:42:52 6:03 5218 6073 nxtgonpho APPLE 'PHONES ne 7064 04/21/20 07:42:52 6:04 0 0 nxtgonpho APPLE 'PHONES ne 7065 04/21/20 07:42:54 6:02 6073 4930 nxtgonpho APPLE 'PHONES no 7066 04/21/20 07:48:56 0:54 6870 5062 nxtgonpho APPLE 'PHONES no 7067 04/21/20 07:49:49 176:20 53195 55623 nxtgonpho APPLE 'PHONES no 7068 04/21/20 07:49:50 60:00 22624 20745 nxtgonpho APPLE 'PHONES no 7069 04/21/20 08:01:27 60:00 11488 4564 ims 7070 04/21/20 08:49:50 60:00 32018 34682 nxtgonpho APPLE 'PHONES no 7071 04/21/20 09:01:27 60:00 7080 3004 ims 7072 04/21/20 09:49:50 56:20 981 735 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 290 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171210 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343268 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: IS= Item Conn. Conn. Originating ET Bytes Bytes Apn IMMIX I0031 MAKE MODEL Date Time Number Up Dn (OTC) 7073 04/21/20 10:01:27 60:00 9032 3532 ims 7074 04/21/20 10:46:10 1:36 6035 5608 nxtgenpho APPLE !PHONES ne 7075 04/21/20 10:47:45 2:10 5281 6083 nxtgenpho APPLE !PHONES ne 7076 04/21/20 10:47:46 2:10 6083 4993 nxtgenpho APPLE !PHONES ne 7077 04/21/20 10:49:56 2:48 7601 5234 nxtgenpho APPLE !PHONES ne 7078 04/21/20 10:52:43 2:03 5282 6083 nxtgenpho APPLE !PHONES ne 7079 04/21/20 10:52:44 2:03 6083 4994 nxtgenpho APPLE !PHONES ne 7080 04/21/20 10:54:47 0:41 7495 5170 nxtgenpho APPLE !PHONES ne 7081 04/21/20 10:55:27 2:04 5217 6021 nxtgenpho APPLE !PHONES ne 7082 04/21/20 10:55:28 2:04 6021 4929 nxtgenpho APPLE !PHONES ne 7083 04/21/20 10:57:32 1:31 8690 5272 nxtgenpho APPLE !PHONES ne 7084 04/21/20 10:59:02 8:43 5820 6337 nxtgenpho APPLE !PHONES ne 7085 04/21/20 10:59:03 8:43 6337 5532 nxtgenpho APPLE !PHONES ne 7086 04/21/20 11:01:27 57:28 6848 2788 ims 7087 04/21/20 11:07:47 1:52 6093 5666 nxtgenpho APPLE !PHONES ne 7088 04/21/20 11:09:38 2:16 5281 6135 nxtgenpho APPLE !PHONES ne 7089 04/21/20 11:09:39 2:16 6135 4993 nxtgenpho APPLE !PHONES ne 7090 04/21/20 11:11:54 6:04 5221 6023 nxtgenpho APPLE !PHONES ne 7091 04/21/20 11:11:55 6:04 6023 4933 nxtgenpho APPLE !PHONES ne 7092 04/21/20 11:17:58 1:22 7492 5162 nxtgenpho APPLE !PHONES ne 7093 04/21/20 11:19:19 2:11 5177 6083 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 291 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171211 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343269 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. t,rlssioAT&T Run Date: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn L@1 IMSI MAKE MODEL Date Time Number Up Dn (UTC) 7094 04/21/20 11:19:20 2:11 6083 4889 nxtgenpho APPLE 'PHONES ne 7095 04/21/20 11:21:31 0:46 0 0nstgenpho APPLE 'PHONES ne 7096 04/21/20 11:22:16 8:25 5221 6023 nxtgenpho APPLE 'PHONES ne 7097 04/21/20 11:22:18 8:24 6023 4933 nxtgenpho APPLE 'PHONES ne 7098 04/21/20 11:30:42 0:05 0 0nstgenpho APPLE 'PHONES ne 7099 04/21/20 11:31:13 1:07 48 0nstgenpho APPLE 'PHONES ne 7100 04/21/20 11:32:19 2:04 5117 6023 nxtgenpho APPLE 'PHONES ne 7101 04/21/20 11:32:20 2:04 6023 4829 nxtgenpho APPLE 'PHONES ne 7102 04/21/20 11:34:24 2:24 6809 4964 nxtgenpho APPLE 'PHONES ne 7103 04/21/20 11:36:47 2:04 5217 6021 nxtgenpho APPLE 'PHONES ne 7104 04/21/20 11:36:49 2:03 6021 4929 nxtgenpho APPLE 'PHONES ne 7105 04/21/20 11:38:52 4:31 7561 5175 nxtgenpho APPLE 'PHONES ne 7106 04/21/20 11:43:23 22:19 1568156 186287 nxtgenpho APPLE 'PHONES ne 7107 04/21/20 11:43:24 22:19 186287 1567868 nxtgenpho APPLE 'PHONES ne 7108 04/21/20 11:55:39 10:03 6262 6668 ims APPLE 'PHONES 7109 04/21/20 11:55:40 10:03 6668 5998 ims APPLE 'PHONES 7110 04/21/20 12:01:30 15:33 8205 5982 ims 7111 04/21/20 12:05:43 8:19 8843 5002 nxtgenpho APPLE 'PHONES ne 7112 04/21/20 12:14:01 8:46 5221 6023 nxtgenpho APPLE 'PHONES ne 7113 04/21/20 12:14:02 8:46 6023 4933 nxtgenpho APPLE 'PHONES ne 7114 04/21/20 12:19:08 3:39 6093 6332 ims APPLE 'PHONES 7115 04/21/20 12:19:09 3:39 6332 5829 ims APPLE 'PHONES 7116 04/21/20 12:22:48 10:13 7942 5558 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 292 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171212 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343270 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: IS= Item Conn. Conn. Originating AT Bytes Bytes Apn flat IIB3I MAKE MODEL Date Time imml-s..- Up Dn (OTC/ 7117 04/21/20 12:22:55 0:01 0 0 ims APPLE 'PROMS 7118 04/21/20 12:23:03 60:00 16813 9127 ims 7119 04/21/20 12:33:00 2:31 5218 6021 nxtgenpho APPLE IPROR6 ne 7120 04/21/20 12:33:01 2:31 6021 4930 nxtgenpho APPLE IPROR6 ne 7121 04/21/20 12:35:32 39:47 7786 6621 nxtgenpho APPLE IPROR6 ne 7122 04/21/20 13:15:18 2:09 5220 6023 nxtgenpho APPLE IPHONE8 ne 7123 04/21/20 13:15:19 2:09 6023 4932 nxtgenpho APPLE 'PHONES ne 7124 04/21/20 13:17:28 0:35 0 Onmtgonpho APPLE 'PHONES ne 7125 04/21/20 13:18:03 14:37 5327 6196 nxtgenpho APPLE 'PHONES ne 7126 04/21/20 13:18:03 14:38 6196 5039 nxtgenpho APPLE 'PHONES ne 7127 04/21/20 13:23:03 60:00 8496 3020 ims 7128 04/21/20 13:32:41 60:00 21223 22862 nxtgenpho APPLE 'PHONES ne 7129 04/21/20 14:23:03 60:00 6956 2664 ims 7130 04/21/20 14:32:41 25:36 173 105 nxtgenpho APPLE 'PHONES ne 7131 04/21/20 14:58:16 12:05 5220 6023 nxtgenpho APPLE 'PHONES ne 7132 04/21/20 14:58:17 12:05 6023 4932 nxtgenpho APPLE 'PHONES ne 7133 04/21/20 15:10:22 42:02 7915 6132 nxtgenpho APPLE !PHONES ne 7134 04/21/20 15:23:03 60:00 6956 2788 ims 7135 04/21/20 15:52:23 0:44 5222 6007 nxtgenpho APPLE !PHONES ne 7136 04/21/20 15:52:24 0:44 6007 4934 nxtgenpho APPLE !PHONES ne 7137 04/21/20 15:53:08 5:29 2311 4584 nxtgenpho APPLE !PHONES ne 7138 04/21/20 15:58:37 15:43 12797 23917 nxtgenpho APPLE !PHONES ne 7139 04/21/20 15:58:38 15:43 23917 12413 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 293 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171213 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343271 MOBILITY ce. ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn EBB! IMSI Mae MODEL Date Time utiehe," Up Dn (OTC) 7140 04/21/20 16:14:21 59:09 19503 23564 nxtgonpho APPLR IPROMEM no 7141 04/21/20 16:23:03 60:00 15344 6000 ims 7142 04/21/20 17:13:30 0:59 6023 4902 nxtgonpho APPLR IPROMTA no 7143 04/21/20 17:14:28 2:03 5221 6023 nxtgonpho APPLR 'PROMS no 7144 04/21/20 17:14:29 2:03 6023 4933 nxtgonpho APPLR 'PROMS no 7145 04/21/20 17:16:32 32:06 25581 20789 nxtgonpho APPLR 'PROMS no 7146 04/21/20 17:23:03 60:00 10144 3176 ims 7147 04/21/20 17:48:37 2:15 5216 6073 nxtgonpho APPLE 'PHONES no 7148 04/21/20 17:48:38 2:15 6073 4928 nxtgonpho APPLE 'PHONES no 7149 04/21/20 17:50:53 2:58 48 0 nxtgonpho APPLE 'PHONES no 7150 04/21/20 17:53:50 8:59 4504 5791 nxtgonpho APPLE 'PHONES ne 7151 04/21/20 17:53:51 8:59 5791 4216 nxtgenpho APPLE 'PHONES ne 7152 04/21/20 18:02:50 8:07 7147 5493 nxtgonpho APPLE 'PHONES no 7153 04/21/20 18:10:57 16:08 6689 6838 nxtgonpho APPLE 'PHONES ne 7154 04/21/20 18:10:58 16:08 6838 6401 nxtgonpho APPLE 'PHONES ne 7155 04/21/20 18:23:03 38:57 10144 3284 ims 7156 04/21/20 18:27:06 0:05 0 Onxtgenpho APPLE !PHONES no 7157 04/21/20 18:27:22 1:02 2036 3240 nxtgonpho APPLE !PHONES no 7158 04/21/20 18:28:23 46:18 1559996 248939 nxtgonpho APPLE !PHONES no 7159 04/21/20 18:28:24 46:18 248939 1566448 nxtgonpho APPLE !PHONES no 7160 04/21/20 19:01:16 13:25 6334 6754 ims APPLE !PHONES 7161 04/21/20 19:01:17 13:25 6686 6090 ims APPLE !PHONES 7162 04/21/20 19:02:00 60:00 16881 9125 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 294 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171214 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343272 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: IS= Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ INS! NAPS Mori. Date Time number Up Dn (OTC) 7163 04/21/20 19:14:42 20:30 6694 5931 nxtgenpho APPLE 'PEONES ne 7164 04/21/20 19:35:12 42:08 25369 14841 nxtgenpho APPLE 'PEONES ne 7165 04/21/20 19:35:13 42:08 14841 24889 nxtgenpho APPLE 'PEONES ne 7166 04/21/20 20:02:00 60:00 8496 2912 ims 7167 04/21/20 20:17:21 0:05 0 0 nxtgenpho APPLE 'PEONES ne 7168 04/21/20 20:17:54 0:05 0 0 nxtgenpho APPLE 'PEONES ne 7169 04/21/20 20:18:24 2:18 5221 6075 nxtgenpho APPLE IPHONE8 ne 7170 04/21/20 20:18:25 2:18 6075 4933 nxtgenpho APPLE !PHONES ne 7171 04/21/20 20:20:43 6:28 192 0 nxtgenpho APPLE !PHONES ne 7172 04/21/20 20:20:43 6:28 5281 6083 nxtgenpho APPLE !PHONES ne 7173 04/21/20 20:20:44 6:28 0 0 nxtgenpho APPLE !PHONES ne 7174 04/21/20 20:20:45 6:27 6083 4993 nxtgenpho APPLE !PHONES ne 7175 04/21/20 20:27:12 36:27 9304 14415 nxtgenpho APPLE !PHONES ne 7176 04/21/20 21:02:00 60:00 8852 3020 ims 7177 04/21/20 21:03:38 2:05 5221 6075 nxtgenpho APPLE !PHONES ne 7178 04/21/20 21:03:39 2:05 6075 4933 nxtgenpho APPLE !PHONES ne 7179 04/21/20 21:05:44 0:05 0 0 nxtgenpho APPLE !PHONES ne 7180 04/21/20 21:06:06 19:18 192 0 nxtgenpho APPLE !PHONES ne 7181 04/21/20 21:06:07 19:17 5537 6364 nxtgenpho APPLE !PHONES ne 7182 04/21/20 21:06:07 19:18 0 0 nxtgenpho APPLE !PHONES ne 7183 04/21/20 21:06:08 19:17 6364 5249 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 295 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171215 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343273 MOBILITY e s, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .a° AT&T /14•-. OTC. Run Date: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn L@I INSI MAKE MODEL Date Time Malabar Up Dn (OTC) 7184 04/21/20 21:25:24 8:46 5221 6023 nxtgonpho APPLE !PHONES ne 7185 04/21/20 21:25:26 8:45 6023 4933 nxtgonpho APPLE !PHONES ne 7186 04/21/20 21:34:10 2:04 192 0 nxtgonpho APPLE !PHONES ne 7187 04/21/20 21:34:11 2:03 5222 6023 nxtgonpho APPLE !PHONES ne 7188 04/21/20 21:34:11 2:04 0 0 nxtgonpho APPLE !PHONES ne 7189 04/21/20 21:34:12 2:03 6023 4934 nxtgonpho APPLE !PHONES no 7190 04/21/20 21:36:16 13:01 6754 5943 nxtgonpho APPLE !PHONES no 7191 04/21/20 21:49:17 22:23 17270 18831 nxtgonpho APPLE !PHONES ne 7192 04/21/20 21:49:17 22:24 18831 18032 nxtgonpho APPLE !PHONES no 7193 04/21/20 22:02:00 60:00 7528 3144 ims 7194 04/21/20 22:11:41 3:33 6255 5722 nxtgonpho APPLE !PHONES no 7195 04/21/20 22:15:14 2:09 5117 6075 nxtgonpho APPLE !PHONES no 7196 04/21/20 22:15:15 2:09 6075 4829 nxtgonpho APPLE !PHONES no 7197 04/21/20 22:17:24 0:52 7433 4966 nxtgonpho APPLE !PHONES ne 7198 04/21/20 22:18:16 104:40 192 0 nxtgonpho APPLE !PHONES ne 7199 04/21/20 22:18:16 104:40 37239 50217 nxtgonpho APPLE !PHONES ne 7200 04/21/20 22:18:17 60:00 40853 28204 nxtgonpho APPLE !PHONES ne 7201 04/21/20 22:18:17 60:00 0 0 nxtgonpho APPLE !PHONES ne 7202 04/21/20 23:02:00 60:00 23032 7208 ims 7203 04/21/20 23:18:17 44:40 9269 9746 nxtgonpho APPLE !PHONES no 7204 04/21/20 23:18:17 44:40 0 0 nxtgonpho APPLE !PHONES ne 7205 04/22/20 00:02:00 60:00 8604 3036 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 296 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171216 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343274 MOBILITY e s, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Midi= Item Conn. Conn. Originating ET Bytes Bytes Apn LaI II I MAKE MODEL Date Time Up Dn (OTC) 7206 04/22/20 00:02:57 0:41 7497 5070 nxtgenpho APPLE 'PHONES ne 7207 04/22/20 00:03:38 8:33 5222 6023 nxtgenpho APPLE 'PHONES ne 7208 04/22/20 00:03:39 8:33 6023 4934 nxtgenpho APPLE 'PHONES ne 7209 04/22/20 00:12:12 27:55 6665 5532 nxtgenpho APPLE 'PHONES ne 7210 04/22/20 00:40:06 8:26 5221 6023 nxtgenpho APPLE 'PHONES ne 7211 04/22/20 00:40:07 8:26 6023 4933 nxtgenpho APPLE 'PHONES ne 7212 04/22/20 00:48:33 7:12 19635 16024 nxtgenpho APPLE 'PHONES ne 7213 04/22/20 00:55:45 23:18 13394 14918 nxtgenpho APPLE 'PHONES ne 7214 04/22/20 00:55:46 23:18 14918 14375 nxtgenpho APPLE 'PHONES ne 7215 04/22/20 01:02:00 60:00 7188 2912 ims 7216 04/22/20 01:19:04 7:10 36476 30247 nxtgenpho APPLE 'PHONES ne 7217 04/22/20 01:26:14 15:18 381115 345938 nxtgenpho APPLE 'PHONES ne 7218 04/22/20 01:26:15 15:18 345938 380731 nxtgenpho APPLE 'PHONES ne 7219 04/22/20 01:41:33 0:03 0 0 nxtgenpho APPLE 'PHONES ne 7220 04/22/20 01:41:48 4:19 6809 4965 nxtgenpho APPLE 'PHONES ne 7221 04/22/20 01:46:06 2:03 5117 6075 nxtgenpho APPLE 'PHONES ne 7222 04/22/20 01:46:07 2:03 6075 4829 nxtgenpho APPLE 'PHONES ne 7223 04/22/20 01:48:10 5:08 6020 4788 nxtgenpho APPLE 'PHONES ne 7224 04/22/20 01:53:17 2:04 5221 6075 nxtgenpho APPLE 'PHONES ne 7225 04/22/20 01:53:19 2:03 6075 4933 nxtgenpho APPLE 'PHONES ne 7226 04/22/20 01:55:22 60:00 50667 9205 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 297 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171217 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343275 MOBILITY e s, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .a° AT&T ••- OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn =MI IMBI MEE MODEL Date Time Number Up Dn (OTC) 7227 04/22/20 02:02:00 60:00 6956 2896 ims 7228 04/22/20 02:55:22 46:56 39285 10733 nxtgenpho APPLE 'PHONES ne 7229 04/22/20 03:02:00 60:00 11580 4252 ims 7230 04/22/20 03:42:17 1:16 5217 6021 nxtgenpho APPLE 'PHONES ne 7231 04/22/20 03:42:18 1:16 6021 4929 nxtgenpho APPLE 'PHONES ne 7232 04/22/20 03:43:34 31:00 18389 13398 nxtgenpho APPLE 'PHONES ne 7233 04/22/20 04:02:00 60:00 13676 5140 ims 7234 04/22/20 04:14:33 15:09 8218 8151 nxtgenpho APPLE 'PHONES ne 7235 04/22/20 04:14:34 15:10 8151 9190 nxtgenpho APPLE 'PHONES ne 7236 04/22/20 04:29:44 3:24 48 0 nxtgenpho APPLE 'PHONES ne 7237 04/22/20 04:33:07 4:04 5281 6807 nxtgenpho APPLE 'PHONES ne 7238 04/22/20 04:33:08 4:04 6807 4993 nxtgenpho APPLE 'PHONES ne 7239 04/22/20 04:37:12 16:34 30213 21080 nxtgenpho APPLE 'PHONES ne 7240 04/22/20 04:53:45 5:04 14635 15378 nxtgenpho APPLE 'PHONES ne 7241 04/22/20 04:53:46 5:04 15378 14251 nxtgenpho APPLE 'PHONES ne 7242 04/22/20 04:58:50 5:24 7557 5130 nxtgenpho APPLE 'PHONES ne 7243 04/22/20 05:02:00 60:00 9928 3176 ims 7244 04/22/20 05:04:13 8:14 7911 8679 nxtgenpho APPLE 'PHONES ne 7245 04/22/20 05:04:15 8:13 8679 7431 nxtgenpho APPLE 'PHONES ne 7246 04/22/20 05:12:28 10:59 7290 5648 nxtgenpho APPLE 'PHONES ne 7247 04/22/20 05:23:26 8:35 10407 12126 nxtgenpho APPLE 'PHONES ne 7248 04/22/20 05:23:27 8:35 12126 10023 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 298 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171218 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343276 MOBILITY P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .al. AT&T ‘ft UTE. Run Date: 06/17/2020 Run Time: Data Usage Tor: Iliill= Item Conn. Conn. Originating ET Bytes Bytes Apn US! IM9I MARE MODEL Date T1100 Numbor Up Dn (OTC) 7249 04/22/20 05:32:02 60:00 7270 6421 nxtgonpho APPLE 'PHONES ne 7250 04/22/20 06:02:00 60:00 8480 2928 ims 7251 04/22/20 06:32:02 60:00 17683 13218 nxtgonpho APPLE 'PHONES ne 7252 04/22/20 07:02:00 60:00 13352 4516 ims 7253 04/22/20 07:32:02 60:00 3789 1259 nxtgonpho APPLE 'PHONES no 7254 04/22/20 08:02:00 60:00 6848 2680 ims 7255 04/22/20 08:32:02 60:00 675 630 nxtgonpho APPLE 'PHONES ne 7256 04/22/20 09:02:00 60:00 10364 4180 ims 7257 04/22/20 09:32:02 60:00 21131 24456 nxtgonpho APPLE 'PHONES no 7258 04/22/20 10:02:00 60:00 11920 4376 ims 7259 04/22/20 10:32:02 60:00 21427 22163 nxtgonpho APPLE 'PHONES no 7260 04/22/20 11:02:00 60:00 8496 3144 ims 7261 04/22/20 11:32:02 8:02 2942 314 nxtgonpho APPLE 'PHONES no 7262 04/22/20 11:40:03 2:03 5220 6055 nxtgonpho APPLE 'PHONES no 7263 04/22/20 11:40:04 2:03 6055 4932 nxtgonpho APPLE 'PHONES ne 7264 04/22/20 11:42:08 60:00 7401 6164 nxtgonpho APPLE 'PHONES ne 7265 04/22/20 12:02:00 60:00 6956 2788 ims 7266 04/22/20 12:42:08 60:00 95868 7797 nxtgonpho APPLE 'PHONES ne 7267 04/22/20 13:02:00 60:00 11720 5160 ims 7268 04/22/20 13:42:08 54:19 4328 10723 nxtgonpho APPLE 'PHONES ne 7269 04/22/20 14:02:00 60:00 14216 5464 ims 7270 04/22/20 14:36:26 2:03 5117 6107 nxtgonpho APPLE 'PHONES ne 7271 04/22/20 14:36:27 2:03 6107 4829 nxtgonpho APPLE 'PHONES ne 7272 04/22/20 14:38:30 60:00 8661 8450 nxtgonpho APPLE 'PHONES ne 7273 04/22/20 15:02:00 60:00 8388 3144 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 299 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171219 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343277 MOBILITY 45, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:50:60pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T Inc. Run Date: 06/17/2020 Run Tine: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn IMRE IMSI MAKE MODEL Date Time Nunbar Up Dn (OTC) 7274 04/22/20 15:38:30 18:29 0 0 nxtgonpho APPLE 'PHONES no 7275 04/22/20 16:02:00 60:00 8388 2928 ism 7276 04/22/20 16:08:23 36:04 8488 6102 nxtgonpho APPLE 'PHONES no 7277 04/22/20 16:44:26 2:03 5220 6055 nxtgonpho APPLE 'PHONES no 7278 04/22/20 16:44:27 2:03 6055 4932 nxtgenpho APPLE 'PHONES no 7279 04/22/20 16:46:30 0:26 144 0 nxtgonpho APPLE 'PHONES ne 7280 04/22/20 16:50:17 8:27 6641 4385 nxtgonpho APPLE 'PHONES ne 7281 04/22/20 16:58:43 59:18 6522 6807 nxtgenpho APPLE 'PHONES no 7282 04/22/20 16:58:44 59:18 6807 7923 nxtgenpho APPLE 'PHONES no 7283 04/22/20 17:02:00 60:00 13460 4516 ism 7284 04/22/20 17:58:02 20:23 13334 5774 nxtgenpho APPLE 'PHONES no 7285 04/22/20 18:02:00 11:01 0 0 ism APPLE 'PHONES 7286 04/22/20 18:13:01 5:24 80212 2332 ism APPLE 'PHONES 7287 04/22/20 18:13:01 5:24 7756 2332 ism APPLE 'PHONES 7288 04/22/20 18:18:24 8:21 7433 6977 nxtgenpho APPLE 'PHONES no 7289 04/22/20 18:18:25 8:20 6372 6668 ism APPLE 'PHONES 7290 04/22/20 18:18:25 8:21 6977 7145 nxtgenpho APPLE 'PHONES no 7291 04/22/20 18:18:26 8:20 6668 6108 ism APPLE 'PHONES 7292 04/22/20 18:20:53 12:15 8209 6046 ism 7293 04/22/20 18:26:46 1:06 6107 4902 nxtgenpho APPLE 'PHONES no 7294 04/22/20 18:27:51 2:03 5221 6055 nxtgenpho APPLE 'PHONES no 7295 04/22/20 18:27:52 2:03 6055 4933 nxtgonpho APPLE 'PHONES no 7296 04/22/20 18:27:57 1:57 8248 6868 ism APPLE 'PHONES 7297 04/22/20 18:27:59 1:56 6868 7896 ism APPLE 'PHONES 7298 04/22/20 18:29:55 0:42 6135 5976 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 300 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171220 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343278 MOBILITY cre ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating BT Bytes Bytes Apn IN/LI IMSI MANE MODEL Date Time Number Up Dn (OTC/ 7299 04/22/20 18:29:57 0:40 10638 10574 ims APPLE 'PEONES 7300 04/22/20 18:30:36 2:08 6692 6447 nxtgonpho APPLE 'PEONES no 7301 04/22/20 18:30:37 2:07 7114 6848 ims APPLE 'PEONES 7302 04/22/20 18:30:37 2:08 6447 6404 nxtgonpho APPLE 'PEONES no 7303 04/22/20 18:30:38 2:07 6740 6850 ims APPLE 'PEONES 7304 04/22/20 18:32:44 22:37 5537 6408 nxtgonpho APPLE 'PEONES no 7305 04/22/20 18:32:45 22:36 7218 6902 ims APPLE 'PEONES 7306 04/22/20 18:32:45 22:37 6408 5249 nxtgonpho APPLE IPHOME8 no 7307 04/22/20 18:32:46 22:36 6794 6954 ims APPLE 'PHONES 7308 04/22/20 18:55:22 35:30 7297 6364 nxtgenpho APPLE 'PHONES ne 7309 04/22/20 18:55:26 35:26 9268 7338 ims APPLE 'PHONES 7310 04/22/20 19:30:51 8:39 5870 10352 nxtgonpho APPLE 'PHONES no 7311 04/22/20 19:30:52 8:39 10352 5582 nxtgonpho APPLE 'PHONES no 7312 04/22/20 19:30:55 8:35 6387 7984 ims APPLE 'PHONES 7313 04/22/20 19:30:56 8:35 7984 6123 ims APPLE 'PHONES 7314 04/22/20 19:39:30 2:21 5359 7196 nxtgonpho APPLE 'PHONES no 7315 04/22/20 19:39:31 2:21 7196 5071 nxtgonpho APPLE 'PHONES no 7316 04/22/20 19:39:32 2:19 6264 6664 ims APPLE 'PHONES 7317 04/22/20 19:39:33 2:19 6664 6000 ims APPLE 'PHONES 7318 04/22/20 19:41:52 60:00 8453 5962 nxtgonpho APPLE 'PHONES no 7319 04/22/20 19:41:57 60:00 17230 11140 ims APPLE 'PHONES 7320 04/22/20 20:41:52 18:06 578 630 nxtgonpho APPLE 'PHONES no 7321 04/22/20 20:41:57 18:01 10584 7848 ims APPLE 'PHONES 7322 04/22/20 20:59:13 0:15 0 1306 ims APPLE 'PHONES 7323 04/22/20 20:59:57 2:04 5598 10407 nxtgonpho APPLE 'PHONES no 7324 04/22/20 20:59:58 2:04 10407 5310 nxtgonpho APPLE 'PHONES no 7325 04/22/20 21:00:00 2:01 6332 6774 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 301 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171221 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343279 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INEZ IMSI MAKE MODEL Date Time Number Up Dn (UTC) 7326 04/22/20 21:00:01 2:01 6774 6068 ims APPLE IPROMTA 7327 04/22/20 21:02:02 23:53 7160 12640 nxtgonpho APPLE IPROMTA ne 7328 04/22/20 21:02:06 23:49 6670 5980 ims APPLE IPROMTA 7329 04/22/20 21:25:54 3:30 15456 18300 nxtgonpho APPLE IPROMTA ne 7330 04/22/20 21:25:55 3:30 18300 15168 nxtgonpho APPLE IPROMIDI ne 7331 04/22/20 21:25:57 3:27 6263 24564 ims APPLE IPEONE8 7332 04/22/20 21:25:58 3:27 6672 5999 ims APPLE !PHONES 7333 04/22/20 21:29:25 25:21 7251 7012 nxtgonpho APPLE !PHONES ne 7334 04/22/20 21:32:40 22:06 28836 28318 ims APPLE !PHONES 7335 04/22/20 21:49:23 0:31 26902 63297 ims APPLE !PHONES 7336 04/22/20 21:51:27 0:11 14864 15631 ims APPLE !PHONES 7337 04/22/20 21:54:45 2:04 5118 6107 nxtgonpho APPLE !PHONES no 7338 04/22/20 21:54:46 2:04 6107 4830 nxtgonpho APPLE !PHONES no 7339 04/22/20 21:54:49 2:00 6264 6676 ims APPLE !PHONES 7340 04/22/20 21:54:50 2:00 6676 6000 ims APPLE !PHONES 7341 04/22/20 21:56:50 7:14 16547 25461 nxtgonpho APPLE IPHONE8 ne 7342 04/22/20 21:56:54 7:10 7404 6124 ims APPLE !PHONES 7343 04/22/20 22:04:03 2:03 5281 6115 nxtgenpho APPLE !PHONES no 7344 04/22/20 22:04:04 2:03 6115 4993 nxtgonpho APPLE !PHONES ne 7345 04/22/20 22:04:07 1:59 6458 6998 ims APPLE !PHONES 7346 04/22/20 22:04:08 1:59 6998 6106 ims APPLE !PHONES 7347 04/22/20 22:06:07 1:02 7527 5066 nxtgonpho APPLE !PHONES ne 7348 04/22/20 22:06:12 0:57 6676 6000 ims APPLE !PHONES 7349 04/22/20 22:07:08 2:04 5218 6105 nxtgonpho APPLE !PHONES ne 7350 04/22/20 22:07:09 2:04 6105 4930 nxtgonpho APPLE !PHONES ne 7351 04/22/20 22:07:12 2:00 6168 6672 ims APPLE !PHONES 7352 04/22/20 22:07:13 2:00 6672 5904 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 302 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171222 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343280 MOBILITY / 1 44r. PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTZ. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn ZNE2 IISI MAKE MODEL Date Time Number Up Dn (OTC) 7353 04/22/20 22:09:13 5:21 7529 5071 nxtgonphe APPLE 'PEONES no 7354 04/22/20 22:09:17 5:17 8060 8276 ims APPLE 'PEONES 7355 04/22/20 22:14:33 17:14 11932 13817 nxtgonphe APPLE 'PEONES no 7356 04/22/20 22:14:34 17:13 8367 9810 ims APPLE 'PHONES 7357 04/22/20 22:14:34 17:14 13817 11548 nxtgonphe APPLE !PHONES no 7358 04/22/20 22:14:35 17:13 9750 8103 ims APPLE !PHONES 7359 04/22/20 22:31:48 1:07 0 0 nxtgonphe APPLE !PHONES ne 7360 04/22/20 22:32:54 2:03 5116 6055 nxtgonphe APPLE !PHONES no 7361 04/22/20 22:32:55 2:03 6055 4828 nxtgonphe APPLE !PHONES no 7362 04/22/20 22:34:58 6:06 7421 5208 nxtgonphe APPLE !PHONES no 7363 04/22/20 22:35:00 6:04 7976 6088 ims APPLE !PHONES 7364 04/22/20 22:41:03 2:03 5118 6055 nxtgonphe APPLE !PHONES no 7365 04/22/20 22:41:04 2:03 6055 4830 nxtgonphe APPLE !PHONES no 7366 04/22/20 22:41:06 2:00 6334 6672 ims APPLE !PHONES 7367 04/22/20 22:41:07 2:00 6672 5982 ims APPLE !PHONES 7368 04/22/20 22:43:07 16:38 16053 56139 nxtgonphe APPLE !PHONES no 7369 04/22/20 22:43:11 16:34 6670 5980 ims APPLE !PHONES 7370 04/22/20 22:59:44 8:28 5117 6055 nxtgonphe APPLE !PHONES no 7371 04/22/20 22:59:45 8:28 6055 4829 nxtgonphe APPLE !PHONES no 7372 04/22/20 22:59:47 8:25 6262 6676 ims APPLE !PHONES 7373 04/22/20 22:59:48 8:25 6676 5998 ims APPLE !PHONES 7374 04/22/20 23:08:13 60:00 209353 269383 nxtgonphe APPLE !PHONES ne 7375 04/22/20 23:08:17 60:00 11846 8716 ims APPLE !PHONES 7376 04/23/20 00:08:13 20:53 398 315 nxtgonphe APPLE !PHONES ne 7377 04/23/20 00:08:17 20:49 0 0 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 303 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171223 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343281 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: NS= Item Conn. Conn. Originating ET Bytes Bytes Apn DOLT ISIS! NAPS MUCCI. Data Time Number Up Dn (nit) 7378 04/23/20 00:29:05 19:12 12239 13884 nxtgonpho APPLE 'PEONES no 7379 04/23/20 00:29:06 19:12 13884 12599 nxtgonpho APPLE 'PEONES no 7380 04/23/20 00:29:09 19:08 6244 6674 ims APPLE !PEONES 7381 04/23/20 00:29:10 19:08 6674 5980 ims APPLE !PHONES 7382 04/23/20 00:48:18 0:47 0 0 nxtgonpho APPLE !PHONES ne 7383 04/23/20 00:48:22 0:43 14108 8448 ims APPLE !PHONES 7384 04/23/20 00:49:05 13:02 12608 14848 nxtgonpho APPLE !PHONES ne 7385 04/23/20 00:49:05 13:03 14848 21850 nxtgonpho APPLE !PHONES no 7386 04/23/20 00:49:08 12:59 7102 7940 ims APPLE !PHONES 7387 04/23/20 00:49:09 12:59 7940 6838 ims APPLE !PHONES 7388 04/23/20 01:02:08 1:37 6055 4902 nxtgonpho APPLE !PHONES no 7389 04/23/20 01:02:12 1:33 7980 6028 ims APPLE !PHONES 7390 04/23/20 01:03:44 2:04 5285 7517 nxtgonpho APPLE !PHONES no 7391 04/23/20 01:03:45 2:04 7517 4997 nxtgonpho APPLE !PHONES no 7392 04/23/20 01:03:48 2:00 7352 6852 ims APPLE !PHONES 7393 04/23/20 01:03:49 2:00 6852 7000 ims APPLE !PHONES 7394 04/23/20 01:05:49 60:00 80856 10957 nxtgonpho APPLE !PHONES no 7395 04/23/20 01:05:53 60:00 11846 8720 ims APPLE !PHONES 7396 04/23/20 02:05:49 8:40 742 1615 nxtgonpho APPLE !PHONES ne 7397 04/23/20 02:05:53 8:36 0 0 ims APPLE !PHONES 7398 04/23/20 02:14:28 2:10 5163 6052 nxtgonpho APPLE !PHONES ne 7399 04/23/20 02:14:30 2:09 6052 4875 nxtgonpho APPLE !PHONES ne 7400 04/23/20 02:14:32 2:06 7136 6738 ims APPLE !PHONES 7401 04/23/20 02:14:33 2:06 6738 6872 ims APPLE !PHONES 7402 04/23/20 02:16:39 9:07 6863 5365 nxtgonpho APPLE !PHONES ne 7403 04/23/20 02:16:43 9:03 8884 7068 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 304 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171224 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343282 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ 1162 IOJCIL MODEL Date Time Number Up Dn (OTC/ 7404 04/23/20 02:25:45 8:31 5220 6055 nxtgonpho APPLE !PEONES no 7405 04/23/20 02:25:46 8:31 6055 4932 nxtgonpho APPLE !PEONES no 7406 04/23/20 02:25:48 8:28 6262 6672 ims APPLE !PEONES 7407 04/23/20 02:25:49 8:28 6672 5998 ims APPLE 'PHONES 7408 04/23/20 02:34:17 44:13 1595978 2206159 nxtgenpho APPLE !PHONES no 7409 04/23/20 02:34:21 44:09 9268 7278 ims APPLE !PHONES 7410 04/23/20 03:18:29 2:09 5221 6107 nxtgonpho APPLE !PHONES no 7411 04/23/20 03:18:30 2:09 6107 4933 nxtgonpho APPLE !PHONES no 7412 04/23/20 03:18:32 2:06 7136 6742 ims APPLE !PHONES 7413 04/23/20 03:18:34 2:05 6742 6872 ims APPLE !PHONES 7414 04/23/20 03:20:39 60:00 63502 61017 nxtgonpho APPLE !PHONES no 7415 04/23/20 03:20:43 60:00 12686 9716 ims APPLE !PHONES 7416 04/23/20 04:20:39 60:00 15984 65054 nxtgonpho APPLE !PHONES no 7417 04/23/20 04:20:43 60:00 6484 2772 ims APPLE !PHONES 7418 04/23/20 05:20:39 58:47 10049 43453 nxtgenpho APPLE !PHONES no 7419 04/23/20 05:20:43 58:43 5176 2648 ims APPLE IPHONE8 7420 04/23/20 06:19:25 2:27 7395 6176 nxtgonpho APPLE IPHONE8 no 7421 04/23/20 06:19:26 2:27 6176 7107 nxtgonpho APPLE IPHONE8 no 7422 04/23/20 06:19:29 2:23 6388 7976 ims APPLE IPHONE8 7423 04/23/20 06:19:30 2:23 7976 6124 ims APPLE IPHONE8 7424 04/23/20 06:21:53 21:20 7875 5333 nxtgenpho APPLE IPHONE8 no 7425 04/23/20 06:21:58 21:15 7404 6124 ims APPLE IPHONE8 7426 04/23/20 06:43:12 8:31 5326 6228 nxtgenpho APPLE IPHONE8 no 7427 04/23/20 06:43:14 8:30 6228 5038 nxtgenpho APPLE IPHONE8 no 7428 04/23/20 06:43:16 8:27 6264 6676 ims APPLE !PHONES 7429 04/23/20 06:43:17 8:27 6676 6000 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 305 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171225 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343283 MOBILITY c to pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:58:68pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Data: 06/17/2020 Run Timm: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn MIMI IMSI MAKE MODEL Date Time Number Up Dn (OTC) 7430 04/23/20 06:51:44 0:40 0 Onstgonpho APPLE 'PEONES ne 7431 04/23/20 06:51:47 0:37 8150 6964 ims APPLE 'PEONES 7432 04/23/20 06:52:23 2:04 192 Onstgonpho APPLE 'PEONES ne 7433 04/23/20 06:52:24 2:03 5160 6102 nxtgonpho APPLE 'PEONES no 7434 04/23/20 06:52:24 2:04 0 0 nxtgenpho APPLE 'PEONES ne 7435 04/23/20 06:52:25 2:03 6102 4872 nxtgonpho APPLE 'PEONES ne 7436 04/23/20 06:52:26 2:01 6263 6784 ims APPLE IPHOME8 7437 04/23/20 06:52:28 2:00 6676 5999 ims APPLE 'PHONES 7438 04/23/20 06:54:28 3:09 6157 4957 nxtgonpho APPLE 'PHONES no 7439 04/23/20 06:54:32 3:05 10890 8164 ims APPLE 'PHONES 7440 04/23/20 06:57:36 8:39 5224 6112 nxtgonpho APPLE 'PHONES no 7441 04/23/20 06:57:37 8:40 6112 4936 nxtgonpho APPLE 'PHONES no 7442 04/23/20 06:57:40 8:35 6262 6676 ims APPLE 'PHONES 7443 04/23/20 06:57:41 8:36 6676 5998 ims APPLE 'PHONES 7444 04/23/20 07:06:16 14:31 192 Onstgonpho APPLE 'PHONES no 7445 04/23/20 07:06:17 14:30 5782 6467 nxtgonpho APPLE 'PHONES no 7446 04/23/20 07:06:17 14:31 0 0 nxtgonpho APPLE 'PHONES no 7447 04/23/20 07:06:18 14:30 6467 5398 nxtgonpho APPLE !PHONES no 7448 04/23/20 07:10:51 9:56 6246 6670 ims APPLE 'PHONES 7449 04/23/20 07:10:52 9:56 6670 5982 ims APPLE 'PHONES 7450 04/23/20 07:20:48 0:44 0 Onstgonpho APPLE 'PHONES no 7451 04/23/20 07:20:52 0:40 9630 7210 ims APPLE 'PHONES 7452 04/23/20 07:21:31 8:30 192 Onstgonpho APPLE 'PHONES no 7453 04/23/20 07:21:32 8:29 5318 6103 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 306 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171226 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343284 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating AT Bytos Bytes Apn Ziat IMEI MAKE MODEL Date Time Number Up Dn (OTC) 7454 04/23/20 07:21:33 8:29 0 Onxtgonpho APPLE 'PEONES ne 7455 04/23/20 07:21:33 8:29 6103 4934 nxtgonpho APPLE 'PEONES ne 7456 04/23/20 07:21:35 8:26 7264 7478 ims APPLE 'PEONES 7457 04/23/20 07:21:36 8:26 7478 7000 ims APPLE 'PHONES 7458 04/23/20 07:30:01 2:04 5528 7001 nxtgonpho APPLE 'PHONES ne 7459 04/23/20 07:30:03 2:02 6244 6666 ims APPLE 'PHONES 7460 04/23/20 07:30:03 2:03 7001 5240 nxtgonpho APPLE 'PHONES ne 7461 04/23/20 07:30:04 2:02 6666 5980 ims APPLE 'PHONES 7462 04/23/20 07:32:06 0:43 0 Onmtgonpho APPLE 'PHONES ne 7463 04/23/20 07:32:48 20:32 5641 6460 nxtgonpho APPLE 'PHONES ne 7464 04/23/20 07:32:49 20:32 6460 5353 nxtgonpho APPLE 'PHONES ne 7465 04/23/20 07:32:50 20:30 6263 6672 ims APPLE 'PHONES 7466 04/23/20 07:32:51 20:30 6672 5999 ims APPLE 'PHONES 7467 04/23/20 07:53:21 1:45 7208 5270 nxtgonpho APPLE 'PHONES ne 7468 04/23/20 07:53:25 1:41 8076 6948 ims APPLE 'PHONES 7469 04/23/20 07:55:05 52:06 6655 7416 nxtgonpho APPLE !PHONES no 7470 04/23/20 07:55:06 52:06 7416 6367 nxtgonpho APPLE !PHONES no 7471 04/23/20 07:55:09 52:02 9020 11868 ims APPLE 'PHONES 7472 04/23/20 07:55:10 52:02 11868 8756 ims APPLE 'PHONES 7473 04/23/20 08:47:12 1:09 9476 5198 nxtgonpho APPLE 'PHONES ne 7474 04/23/20 08:47:16 1:05 8108 7126 ims APPLE 'PHONES 7475 04/23/20 08:48:20 2:05 5163 6104 nxtgonpho APPLE !PHONES no 7476 04/23/20 08:48:22 2:04 6104 4875 nxtgonpho APPLE !PHONES no 7477 04/23/20 08:48:24 2:01 6244 6674 ims APPLE 'PHONES 7478 04/23/20 08:48:25 2:01 6674 5980 ims APPLE 'PHONES 7479 04/23/20 08:50:26 0:44 10026 5440 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 307 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171227 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343285 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e# AT&T ‘s Run Date: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating ST Bytes Bytes Apn max IMSI MAKE MODEL Date Time Number Up Dn (DTC) 7480 04/23/20 08:50:30 0:40 8228 7836 ims APPLE !PHONES 7481 04/23/20 08:51:10 45:55 6225 7910nxtgonphe APPLE !PHONES ne 7482 04/23/20 08:51:11 45:55 7910 5937 nxtgenpho APPLE !PHONES ne 7483 04/23/20 08:51:13 45:52 8715 9392 ims APPLE !PHONES 7484 04/23/20 08:51:14 45:52 9392 8451 ims APPLE !PHONES 7485 04/23/20 09:37:06 1:19 12856 5846nxtgonphe APPLE !PHONES ne 7486 04/23/20 09:37:10 1:15 9510 7148 ims APPLE !PHONES 7487 04/23/20 09:38:24 8:26 5165 6052 nxtgenpho APPLE !PHONES ne 7488 04/23/20 09:38:26 8:25 6052 4877 nxtgenpho APPLE !PHONES ne 7489 04/23/20 09:38:28 8:22 7231 6794 ims APPLE !PHONES 7490 04/23/20 09:38:30 8:21 6794 6967 ims APPLE !PHONES 7491 04/23/20 09:46:51 0:41 6873 4965nmtgonphe APPLE !PHONES ne 7492 04/23/20 09:46:55 0:37 8152 6944 ims APPLE !PHONES 7493 04/23/20 09:47:31 20:51 5793 6533nmtgonphe APPLE !PHONES ne 7494 04/23/20 09:47:32 20:51 6533 5505 nxtgenpho APPLE !PHONES ne 7495 04/23/20 09:47:34 20:48 6243 6674 ims APPLE !PHONES 7496 04/23/20 09:47:35 20:48 6674 5979 ims APPLE !PHONES 7497 04/23/20 10:08:23 0:42 6977 5024 nxtgenpho APPLE !PHONES ne 7498 04/23/20 10:08:27 0:38 8152 6942 ims APPLE !PHONES 7499 04/23/20 10:09:04 8:21 5165 6052 nxtgenpho APPLE !PHONES ne 7500 04/23/20 10:09:05 8:21 6052 4877 nxtgenpho APPLE !PHONES ne 7501 04/23/20 10:09:07 8:18 6263 6672 ims APPLE !PHONES 7502 04/23/20 10:09:09 8:17 6672 5999 ims APPLE !PHONES 7503 04/23/20 10:17:26 0:35 0 0 nxtgenpho APPLE !PHONES ne 7504 04/23/20 10:18:00 14:59 5579 6455 nxtgenpho APPLE !PHONES ne 7505 04/23/20 10:18:01 14:59 6455 5291 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 308 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171228 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343286 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run pato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating CT Bytes Bytes Apn DOLT INS! ISAPZIL Mori. Date Time Number Up Dn (OTC) 7506 04/23/20 10:18:10 14:49 6225 6648 ims APPLE 'PEONES 7507 04/23/20 10:18:11 14:49 6648 5961 ims APPLE 'PEONES 7508 04/23/20 10:33:00 27:14 5689 6578 nxtgonpho APPLE 'PEONES no 7509 04/23/20 10:33:01 27:13 7675 9392 ims APPLE 'PEONES 7510 04/23/20 10:33:01 27:14 6578 5401 nxtgonpho APPLE 'PEONES no 7511 04/23/20 10:33:02 27:13 9392 7411 ims APPLE 'PEONES 7512 04/23/20 11:00:15 1:27 7465 5385 nxtgonpho APPLE 'PEONES no 7513 04/23/20 11:00:19 1:23 8086 6962 ims APPLE IPHONE8 7514 04/23/20 11:01:42 2:03 5281 6115 nxtgonpho APPLE 'PHONES ne 7515 04/23/20 11:01:43 2:03 6115 4993 nxtgonpho APPLE 'PHONES ne 7516 04/23/20 11:01:45 2:00 6226 6648 ims APPLE 'PHONES 7517 04/23/20 11:01:47 1:59 6648 5962 ims APPLE 'PHONES 7518 04/23/20 11:03:46 1:27 6387 5126 nxtgonpho APPLE 'PHONES no 7519 04/23/20 11:03:50 1:23 9518 7198 ims APPLE 'PHONES 7520 04/23/20 11:05:12 8:23 5100 6092 nxtgonpho APPLE 'PHONES no 7521 04/23/20 11:05:13 8:23 6092 4812 nxtgonpho APPLE 'PHONES no 7522 04/23/20 11:05:16 8:19 6264 6664 ims APPLE 'PHONES 7523 04/23/20 11:05:17 8:19 6664 6000 ims APPLE 'PHONES 7524 04/23/20 11:13:36 2:51 16063 5896 nxtgonpho APPLE 'PHONES ne 7525 04/23/20 11:13:40 2:47 9004 7178 ims APPLE 'PHONES 7526 04/23/20 11:16:26 8:24 5222 6055 nxtgonpho APPLE 'PHONES no 7527 04/23/20 11:16:28 8:23 6055 4934 nxtgonpho APPLE 'PHONES no 7528 04/23/20 11:16:30 8:20 7200 6806 ims APPLE 'PHONES 7529 04/23/20 11:16:31 8:20 6806 6936 ims APPLE 'PHONES 7530 04/23/20 11:24:51 5:59 7721 5386 nxtgonpho APPLE 'PHONES ne 7531 04/23/20 11:24:55 5:55 8078 6922 ims APPLE 'PHONES 7532 04/23/20 11:30:49 2:03 5163 6052 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 309 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171229 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343287 MOBILITY e s, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .4 1/4-4 AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: IS= Item Conn. Conn. Originating ET Bytes Bytes Apn LE2 MOE MAKE MODEL Date Tame Number Up Dn (OTC/ 7533 04/23/20 11:30:50 2:03 6052 4875 nxtgonpho APPLE !PEONES no 7534 04/23/20 11:30:51 2:01 6166 6668 ims APPLE !PEONES 7535 04/23/20 11:30:52 2:01 6668 5902 ims APPLE !PEONES 7536 04/23/20 11:32:53 12:49 9332 5562 nxtgenpho APPLE !PEONES ne 7537 04/23/20 11:32:58 12:44 8224 7830 ims APPLE !PEONES 7538 04/23/20 11:45:41 2:04 5267 6139 nxtgenpho APPLE !PEONES ne 7539 04/23/20 11:45:43 2:03 6139 4979 nxtgenpho APPLE !PEONES ne 7540 04/23/20 11:45:45 2:00 6262 6676 ims APPLE !PHONES 7541 04/23/20 11:45:46 2:00 6676 5998 ims APPLE !PHONES 7542 04/23/20 11:47:46 10:46 7944 5750 nxtgenpho APPLE !PHONES ne 7543 04/23/20 11:47:58 10:34 8880 7068 ims APPLE !PHONES 7544 04/23/20 11:58:31 2:04 5281 6115 nxtgenpho APPLE !PHONES ne 7545 04/23/20 11:58:32 2:04 6115 4993 nxtgonpho APPLE !PHONES no 7546 04/23/20 11:58:35 2:00 6244 6674 ims APPLE !PHONES 7547 04/23/20 11:58:36 2:00 6674 5980 ims APPLE !PHONES 7548 04/23/20 12:00:36 1:35 0 0 nxtgonpho APPLE !PHONES no 7549 04/23/20 12:00:40 1:31 7408 6124 ims APPLE !PHONES 7550 04/23/20 12:02:10 2:04 192 Onxtgonpho APPLE !PHONES ne 7551 04/23/20 12:02:11 2:03 5165 6052 nxtgenpho APPLE !PHONES ne 7552 04/23/20 12:02:12 2:03 0 0 nxtgonpho APPLE !PHONES ne 7553 04/23/20 12:02:13 2:02 6052 4877 nxtgonpho APPLE !PHONES no 7554 04/23/20 12:02:14 2:00 6245 6674 ims APPLE !PHONES 7555 04/23/20 12:02:15 2:00 6674 5981 ims APPLE !PHONES 7556 04/23/20 12:04:15 28:53 12111 7268 nxtgonpho APPLE !PHONES no 7557 04/23/20 12:04:19 28:49 12248 7623 ims APPLE !PHONES 7558 04/23/20 12:33:07 4:04 5160 6050 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 310 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171230 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343288 MOBILITY cro P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: NM= Item Conn. Conn. Originating ET Bytes Bytes Apn LBSI II SI MAR MODEL Date TIM* Number Up Dn (UTC) 7559 04/23/20 12:33:08 4:04 6050 4872 nxtgonpho APPLE 'PHONES no 7560 04/23/20 12:33:11 4:00 7154 6744 isms APPLE 'PHONES 7561 04/23/20 12:33:12 4:00 6744 6890 isms APPLE 'PHONES 7562 04/23/20 12:37:12 3:14 7527 5065 nxtgonpho APPLE 'PHONES ne 7563 04/23/20 12:37:16 3:10 8078 6924 isms APPLE 'PHONES 7564 04/23/20 12:40:25 0:26 192 0 nxtgonpho APPLE 'PHONES no 7565 04/23/20 12:40:26 0:25 5285 6873 nxtgonpho APPLE 'PHONES ne 7566 04/23/20 12:40:26 0:26 0 0 nxtgonpho APPLE 'PHONES ne 7567 04/23/20 12:40:27 0:24 6262 6672 isms APPLE 'PHONES 7568 04/23/20 12:40:27 0:25 6873 4997 nxtgonpho APPLE 'PHONES no 7569 04/23/20 12:40:28 0:24 6672 5998 isms APPLE 'PHONES 7570 04/23/20 12:40:52 45:24 41055 22785 nxtgonpho APPLE 'PHONES no 7571 04/23/20 12:44:56 41:20 10888 7586 Les APPLE 'PHONES 7572 04/23/20 13:26:15 2:30 5479 8994 nxtgonpho APPLE 'PHONES no 7573 04/23/20 13:26:16 2:30 8994 5191 nxtgonpho APPLE 'PHONES ne 7574 04/23/20 13:26:18 2:27 6264 6672 isms APPLE 'PHONES 7575 04/23/20 13:26:19 2:27 6672 6000 isms APPLE 'PHONES 7576 04/23/20 13:28:46 60:00 18644 7310 nxtgonpho APPLE 'PHONES no 7577 04/23/20 13:28:49 60:00 11992 9790 Les APPLE 'PHONES 7578 04/23/20 14:28:46 60:00 11286 8017 nxtgonpho APPLE 'PHONES no 7579 04/23/20 14:28:49 60:00 5192 2680 Les APPLE 'PHONES 7580 04/23/20 15:28:46 43:56 3890 1154 nxtgonpho APPLE 'PHONES no 7581 04/23/20 15:28:49 43:53 6048 3680 isms APPLE 'PHONES 7582 04/23/20 16:12:41 9:28 210462 82212 nxtgonpho APPLE 'PHONES ne 7583 04/23/20 16:12:42 9:28 82212 210078 nxtgonpho APPLE 'PHONES no 7584 04/23/20 16:12:44 9:25 7136 6746 Les APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 311 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171231 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343289 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Sid= Item Conn. Conn. Originating ET Bytes Bytes Apn LBSS IMSI MARE MODEL Date Time Number Up Dn (OTC) 7585 04/23/20 16:12:46 9:24 6746 6872 ims APPLE 'PHONES 7586 04/23/20 16:22:10 3:05 34175 57099 nxtgonpho APPLE 'PHONES ne 7587 04/23/20 16:22:11 3:04 6674 5982 ims APPLE 'PHONES 7588 04/23/20 16:25:14 2:02 49576 30161 nxtgonpho APPLE 'PHONES ne 7589 04/23/20 16:25:15 2:01 6203 6626 ims APPLE 'PHONES 7590 04/23/20 16:25:15 2:02 30161 49288 nxtgonpho APPLE 'PHONES ne 7591 04/23/20 16:25:17 2:00 6626 5939 ims APPLE 'PHONES 7592 04/23/20 16:27:17 37:35 296827 1005656 nxtgonpho APPLE 'PHONES ne 7593 04/23/20 16:27:18 37:34 17708 12839 ims APPLE 'PHONES 7594 04/23/20 17:04:51 8:57 1874576 290268 nxtgonpho APPLE 'PHONES ne 7595 04/23/20 17:04:52 8:56 6274 6672 ims APPLE 'PHONES 7596 04/23/20 17:04:52 8:57 290268 1881965 nxtgonpho APPLE 'PHONES ne 7597 04/23/20 17:04:53 8:56 6672 6010 ims APPLE 'PHONES 7598 04/23/20 17:10:01 35:05 14519 7816 ims APPLE 'PHONES 7599 04/23/20 17:13:49 60:00 8296 17936 nxtgonpho APPLE 'PHONES no 7600 04/23/20 17:45:06 32:54 3500 1448 ims APPLE 'PHONES 7601 04/23/20 17:45:06 32:54 3436 1448 ims APPLE 'PHONES 7602 04/23/20 18:13:49 4:11 1205 1734 nxtgonpho APPLE 'PHONES no 7603 04/23/20 18:17:59 4:49 12944 21967 nxtgonpho APPLE 'PHONES no 7604 04/23/20 18:18:00 4:49 21967 12656 nxtgonpho APPLE 'PHONES no 7605 04/23/20 18:18:02 4:46 6332 24278 ims APPLE 'PHONES 7606 04/23/20 18:18:03 4:46 6674 5980 ims APPLE 'PHONES 7607 04/23/20 18:22:49 60:00 624911 637944 nxtgonpho APPLE 'PHONES no 7608 04/23/20 18:23:12 1:45 8150 6964 ims APPLE 'PHONES 7609 04/23/20 18:24:57 3:02 5072 1588 ims APPLE 'PHONES 7610 04/23/20 18:28:00 41:00 12358 11340 ims APPLE 'PHONES 7611 04/23/20 19:09:00 0:17 3532 1340 ims APPLE 'PHONES 7612 04/23/20 19:09:17 44:30 5240 2664 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 312 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171232 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343290 MOBILITY ce. PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating BT Bytes Bytes Apn LaI IMSI MAKE MODEL Dato Time Numbor Op Dn (OTC) 7613 04/23/20 19:22:49 30:58 341613 459168 nxtgenpho APPLE 'PEONES ne 7614 04/23/20 19:53:47 2:16 12300 7796 nxtgenpho APPLE 'PEONES ne 7615 04/23/20 19:53:49 2:14 8934 6266 ins APPLE 'PEONES 7616 04/23/20 19:56:02 2:03 5280 6115 nxtgenpho APPLE 'PEONES ne 7617 04/23/20 19:56:03 2:03 6115 4992 nxtgenpho APPLE 'PEONES ne 7618 04/23/20 19:56:09 9:23 8349 6046 ins APPLE 'PEONES 7619 04/23/20 19:58:06 18:44 13659 11398 nxtgenpho APPLE IPEOME8 ne 7620 04/23/20 20:05:32 11:18 2876 1340 ins APPLE 'PHONED 7621 04/23/20 20:05:32 11:18 2704 1340 ins APPLE IPHOt88 7622 04/23/20 20:16:49 2:10 5118 6107 nxtgenpho APPLE 'PHONES ne 7623 04/23/20 20:16:50 2:09 6245 6674 ins APPLE 'PHONES 7624 04/23/20 20:16:50 2:10 6107 4830 nxtgenpho APPLE 'PHONES ne 7625 04/23/20 20:16:52 2:08 6674 5981 ins APPLE 'PHONES 7626 04/23/20 20:17:23 32:05 11629 8019 ins APPLE 'PHONES 7627 04/23/20 20:19:00 19:13 6542 5572 nxtgenpho APPLE 'PHONES ne 7628 04/23/20 20:38:12 2:09 5117 6055 nxtgenpho APPLE IPHONE8 ne 7629 04/23/20 20:38:13 2:09 6055 4829 nxtgenpho APPLE !PHONES ne 7630 04/23/20 20:40:22 60:00 15252 48664 nxtgenpho APPLE !PHONES ne 7631 04/23/20 20:49:26 14:04 3500 1464 ins APPLE IPHONE8 7632 04/23/20 20:49:28 14:02 3436 1464 ins APPLE 'PHONES 7633 04/23/20 21:03:30 10:54 3532 1556 ins APPLE IPHONE8 7634 04/23/20 21:14:46 2:56 8082 6072 ins APPLE IPHONE8 7635 04/23/20 21:17:42 60:00 15216 4948 ins APPLE 'PHONES 7636 04/23/20 21:40:22 29:45 578 630 nxtgenpho APPLE IPHONE8 ne 7637 04/23/20 22:10:07 8:24 13380 7147 nxtgenpho APPLE IPHONE8 ne 7638 04/23/20 22:10:08 8:24 7147 13092 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 313 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SONYGM00171233 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343291 MOBILITY cro pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. .••- 0. AT&T Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn =RI IMSI MAKE MODEL Date Time Dunbar Up Dn (OTC) 7639 04/23/20 22:17:42 60:00 12796 3532 ims APPLE 'PHONES 7640 04/23/20 22:18:32 20:55 7702 5331 nxtgonphe APPLE 'PHONES no 7641 04/23/20 22:39:26 2:04 5484 8997 nxtgonpho APPLE 'PHONES no 7642 04/23/20 22:39:27 2:04 8997 5196 nxtgenpho APPLE 'PHONES no 7643 04/23/20 22:41:31 52:11 7228 5911 nxtgonpho APPLE 'PHONES no 7644 04/23/20 23:17:42 60:00 6848 2772 ims APPLE 'PHONES 7645 04/23/20 23:33:41 2:46 5217 6053 nxtgenpho APPLE 'PHONES no 7646 04/23/20 23:33:42 2:46 6053 4929 nxtgonpho APPLE 'PHONES no 7647 04/23/20 23:36:28 6:09 5221 6055 nxtgonpho APPLE 'PHONES no 7648 04/23/20 23:36:29 6:09 6055 4933 nxtgonpho APPLE 'PHONES no 7649 04/23/20 23:42:38 21:52 6826 6176 nxtgonpho APPLE 'PHONES no 7650 04/24/20 00:04:30 30:04 12112 14535 nxtgenpho APPLE 'PHONES ne 7651 04/24/20 00:04:31 30:04 14535 26285 nxtgenpho APPLE 'PHONES ne 7652 04/24/20 00:17:42 60:00 15108 4872 ims APPLE 'PHONES 7653 04/24/20 00:34:35 7:29 4607 5823 nxtgenpho APPLE 'PHONES ne 7654 04/24/20 00:34:36 7:29 5823 4319 nxtgonpho APPLE 'PHONES no 7655 04/24/20 00:42:04 1:09 5221 6055 nxtgonpho APPLE 'PHONES no 7656 04/24/20 00:42:05 1:09 6055 4933 nxtgonpho APPLE 'PHONES no 7657 04/24/20 00:43:14 1:50 7336 6329 nxtgonpho APPLE 'PHONES no 7658 04/24/20 00:45:03 5:54 6213 7917 nxtgonpho APPLE 'PHONES no 7659 04/24/20 00:45:04 5:54 7917 5925 nxtgonpho APPLE 'PHONES no 7660 04/24/20 00:50:58 0:40 6053 4897 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 314 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171234 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343292 MOBILITY e s, pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. k.:700 4 AT&T Run Date: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn Tlat INSI EASE MODEL Date Time Number Up Dn (OTC) 7661 04/24/20 00:51:37 2:37 5451 7589 nxtgenpho APPLE !PHONES ne 7662 04/24/20 00:51:38 2:37 7589 5163 nxtgenpho APPLE !PHONES ne 7663 04/24/20 00:54:15 2:48 5163 6104 nxtgenpho APPLE !PHONES ne 7664 04/24/20 00:54:16 2:48 6104 4875 nxtgenpho APPLE !PHONES ne 7665 04/24/20 00:57:04 39:45 7935 13375 nxtgenpho APPLE !PHONES ne 7666 04/24/20 01:17:42 60:00 6848 2680 ims APPLE !PHONES 7667 04/24/20 01:36:48 9:54 5345 6933 nxtgenpho APPLE !PHONES ne 7668 04/24/20 01:36:49 9:54 6933 5057 nxtgenpho APPLE !PHONES ne 7669 04/24/20 01:46:43 110:00 27963 27416 nxtgenpho APPLE !PHONES ne 7670 04/24/20 01:46:44 60:00 9737 12706 nxtgenpho APPLE !PHONES ne 7671 04/24/20 02:17:42 60:00 15216 5048 ims APPLE !PHONES 7672 04/24/20 02:46:44 60:00 17679 18165 nxtgenpho APPLE !PHONES ne 7673 04/24/20 03:17:42 60:00 8388 2928 ims APPLE !PHONES 7674 04/24/20 03:46:44 60:00 0 210 nxtgenpho APPLE !PHONES ne 7675 04/24/20 04:17:42 60:00 9928 3176 ims APPLE !PHONES 7676 04/24/20 04:46:44 52:52 0 92 nxtgenpho APPLE !PHONES ne 7677 04/24/20 05:17:42 60:00 8944 3284 ims APPLE !PHONES 7678 04/24/20 06:17:42 60:00 12136 4624 ims APPLE !PHONES 7679 04/24/20 07:17:42 60:00 13352 4676 ims APPLE !PHONES 7680 04/24/20 08:17:42 60:00 6956 2788 ims APPLE !PHONES 7681 04/24/20 09:17:42 60:00 9804 3052 ims APPLE !PHONES 7682 04/24/20 10:17:42 60:00 14892 4764 ims APPLE !PHONES 7683 04/24/20 11:17:42 60:00 8728 3160 ims APPLE !PHONES 7684 04/24/20 12:17:42 60:00 13460 4784 ims APPLE !PHONES 7685 04/24/20 12:40:18 32:00 7700 18927 nxtgenpho APPLE !PHONES ne 7686 04/24/20 12:40:19 32:00 18806 7412 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 315 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171235 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343293 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .ai. AT&T ‘ft OTC. Run Data: 06/17/2020 Run Time: Data Usage For: WM= Item Conn. Conn. Originating ET Bytes Bytes Apn EBSI IMSI MBEE MODEL Date Time Number Up Dn (OTC) 7687 04/24/20 13:12:19 55:15 7615 7449 nxtgonpho APPLE !PHONES ne 7688 04/24/20 13:17:42 60:00 12276 4640 ims APPLE !PHONES 7689 04/24/20 14:07:33 18:32 5325 6280 nxtgonpho APPLE !PHONES ne 7690 04/24/20 14:07:34 18:32 6280 5037 nxtgonpho APPLE !PHONES ne 7691 04/24/20 14:17:42 60:00 10360 3408 ims APPLE !PHONES 7692 04/24/20 14:26:06 0:36 0 Onmtgonpho APPLE !PHONES ne 7693 04/24/20 14:26:41 71:57 13609 8063 nxtgonpho APPLE !PHONES no 7694 04/24/20 14:26:42 60:00 7774 13006 nxtgonpho APPLE !PHONES no 7695 04/24/20 15:17:42 26:55 3532 1340 ims APPLE !PHONES 7696 04/24/20 15:26:42 11:57 289 315 nxtgonpho APPLE !PHONES ne 7697 04/24/20 15:38:39 0:47 8786 5408 nxtgonpho APPLE !PHONES ne 7698 04/24/20 15:39:25 3:19 5222 6055 nxtgonpho APPLE !PHONES ne 7699 04/24/20 15:39:27 3:18 6055 4934 nxtgonpho APPLE !PHONES ne 7700 04/24/20 15:42:45 1:46 6314 5508 nxtgonpho APPLE !PHONES ne 7701 04/24/20 15:44:30 2:04 5220 6055 nxtgonpho APPLE !PHONES no 7702 04/24/20 15:44:31 2:04 6055 4932 nxtgonpho APPLE !PHONES no 7703 04/24/20 15:46:35 0:58 0 0 nxtgonpho APPLE !PHONES no 7704 04/24/20 15:46:37 0:56 4060 1572 ims APPLE !PHONES 7705 04/24/20 15:47:32 8:35 56774 19623 nxtgonpho APPLE !PHONES no 7706 04/24/20 15:47:33 5:05 6496 7408 ims APPLE !PHONES 7707 04/24/20 15:47:34 8:34 19623 56486 nxtgonpho APPLE !PHONES ne 7708 04/24/20 15:47:35 5:04 7408 6232 ims APPLE !PHONES 7709 04/24/20 15:48:45 10:59 8639 6424 ims 7710 04/24/20 15:52:38 3:29 6350 7364 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 316 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171236 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343294 MOBILITY e s, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating KT Bytes Bytes Apn EMBI IMSI DBMS MODEL Date Time Number Up On (OTC/ 7711 04/24/20 15:52:39 3:29 7364 6086 ims APPLE IPBOMTA 7712 04/24/20 15:56:08 1:19 16507 22802 nxtgenpho APPLE IPE060I8 ne 7713 04/24/20 15:56:10 1:17 7722 6228 ims APPLE IPE060I8 7714 04/24/20 15:57:26 2:28 14138 13117 nxtgenpho APPLE IPE060I8 no 7715 04/24/20 15:57:27 2:27 6262 6784 ims APPLE IPE060I8 7716 04/24/20 15:57:27 2:28 13117 13850 nxtgonpho APPLE IPE060I8 no 7717 04/24/20 15:57:28 2:27 6676 5998 ims APPLE 'PROMO 7718 04/24/20 15:59:55 69:17 342170 123308 nxtgonpho APPLE IPHOME8 no 7719 04/24/20 15:59:56 60:00 103690 314951 nxtgonpho APPLE 'PHONES ne 7720 04/24/20 15:59:56 69:16 9050 11972 ims APPLE 'PHONES 7721 04/24/20 15:59:57 60:00 11864 8786 ims APPLE 'PHONES 7722 04/24/20 16:59:56 9:17 19618 36618 nxtgenpho APPLE 'PHONES ne 7723 04/24/20 16:59:57 9:16 0 0 ims APPLE 'PHONES 7724 04/24/20 17:09:13 14:48 271180 73358 nxtgenpho APPLE 'PHONES ne 7725 04/24/20 17:09:14 14:47 6186 6674 ims APPLE 'PHONES 7726 04/24/20 17:09:14 14:48 73358 274721 nxtgonpho APPLE 'PHONES no 7727 04/24/20 17:09:15 14:47 6674 5922 ims APPLE 'PHONES 7728 04/24/20 17:24:02 17:33 192 Onmtgonpho APPLE 'PHONES ne 7729 04/24/20 17:24:03 17:32 375210 34987 nxtgenpho APPLE 'PHONES ne 7730 04/24/20 17:24:03 17:32 6226 6648 ims APPLE !PHONES 7731 04/24/20 17:24:03 17:33 0 Onmtgonpho APPLE !PHONES no 7732 04/24/20 17:24:04 17:32 6648 5962 ims APPLE !PHONES 7733 04/24/20 17:24:04 17:32 34987 381262 nxtgonpho APPLE !PHONES no 7734 04/24/20 17:41:36 2:05 16083 33935 nxtgenpho APPLE !PHONES no 7735 04/24/20 17:41:39 2:02 16798 12516 ims APPLE !PHONES 7736 04/24/20 17:43:40 2:05 192 Onmtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 317 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171237 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343295 MOBILITY c .o PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn MKRI IMSI MIMS MODEL Date Time Number Up Dn (OTC) 7737 04/24/20 17:43:41 2:04 27013 16590 nxtgenphe APPLE 'PEONES ne 7738 04/24/20 17:43:42 2:03 6300 8182 isms APPLE 'PEONES 7739 04/24/20 17:43:42 2:04 16590 26725 nxtgenpho APPLE 'PEONES ne 7740 04/24/20 17:43:42 2:04 0 0 nxtgonpho APPLE IPEONE8 no 7741 04/24/20 17:43:43 2:03 8074 6036 isms APPLE 'PHONES 7742 04/24/20 17:45:46 23:46 26695 51004 nxtgonpho APPLE 'PHONES no 7743 04/24/20 17:45:48 23:44 7396 6088 isms APPLE 'PHONES 7744 04/24/20 18:09:33 7:32 16579 38321 nxtgenpho APPLE 'PHONES ne 7745 04/24/20 18:09:35 7:30 8154 6922 isms APPLE 'PHONES 7746 04/24/20 18:17:04 9:46 31299 20422 nxtgenpho APPLE 'PHONES no 7747 04/24/20 18:17:05 9:45 6316 8184 isms APPLE 'PHONES 7748 04/24/20 18:17:05 9:46 20422 31011 nxtgonpho APPLE 'PHONES no 7749 04/24/20 18:17:07 9:44 8076 6052 isms APPLE 'PHONES 7750 04/24/20 18:26:51 3:39 28350 107693 nxtgonpho APPLE 'PHONES no 7751 04/24/20 18:26:53 3:37 8084 6054 isms APPLE 'PHONES 7752 04/24/20 18:30:29 2:10 20575 16776 nxtgonpho APPLE 'PHONES no 7753 04/24/20 18:30:30 2:09 6369 7406 Las APPLE 'PHONES 7754 04/24/20 18:30:30 2:10 16776 20287 nxtgenpho APPLE 'PHONES ne 7755 04/24/20 18:30:31 2:09 7406 6105 isms APPLE 'PHONES 7756 04/24/20 18:32:40 0:47 0 0 nxtgonpho APPLE 'PHONES no 7757 04/24/20 18:32:42 0:45 7740 5884 isms APPLE 'PHONES 7758 04/24/20 18:33:26 2:04 14593 13724 nxtgonpho APPLE 'PHONES no 7759 04/24/20 18:33:26 2:04 192 0 nxtgonpho APPLE 'PHONES no 7760 04/24/20 18:33:27 2:03 7233 6906 isms APPLE 'PHONES 7761 04/24/20 18:33:27 2:04 13724 14305 nxtgenpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 318 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171238 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343296 MOBILITY 45, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Dato: 06/17/2020 Run Time: Data Usage Tor: M.= Item Conn. Conn. Originating ET Bytes Bytes Apn MBRI IMSI MAKS MODEL Date Time Number Up Dn (OTC/ 7762 04/24/20 18:33:27 2:04 0 0 nxtgenpho APPLE 'PEONES ne 7763 04/24/20 18:33:28 2:03 6798 6969 ims APPLE 'PEONES 7764 04/24/20 18:35:31 1:22 12642 21370 nxtgenpho APPLE 'PEONES ne 7765 04/24/20 18:35:33 1:20 15934 8618 ims APPLE !PHONES 7766 04/24/20 18:36:52 2:04 148347 23453 nxtgenpho APPLE !PHONES ne 7767 04/24/20 18:36:53 2:03 6225 6672 ims APPLE !PHONES 7768 04/24/20 18:36:53 2:04 23453 148059 nxtgenpho APPLE !PHONES ne 7769 04/24/20 18:36:55 2:02 6672 5961 ims APPLE !PHONES 7770 04/24/20 18:38:57 3:49 16575 32609 nxtgenpho APPLE !PHONES ne 7771 04/24/20 18:38:59 3:47 6684 5962 isms APPLE !PHONES 7772 04/24/20 18:42:45 2:12 395637 36713 nxtgenpho APPLE !PHONES ne 7773 04/24/20 18:42:46 2:11 6261 6692 isms APPLE !PHONES 7774 04/24/20 18:42:46 2:12 36713 395349 nxtgenpho APPLE !PHONES ne 7775 04/24/20 18:42:48 2:10 6692 5997 ims APPLE !PEONES 7776 04/24/20 18:44:58 1:43 2792 6469 nxtgenpho APPLE !PEONES ne 7777 04/24/20 18:45:01 1:40 11766 8316 ims APPLE !PEONES 7778 04/24/20 18:46:41 1:11 29108 33590 nxtgenpho APPLE IPEONE8 ne 7779 04/24/20 18:46:41 1:11 124 108 ims APPLE !PEONES 7780 04/24/20 18:47:52 2:40 17499 26142 nxtgenpho APPLE IPEONE8 ne 7781 04/24/20 18:47:54 2:38 8444 8852 ims APPLE !PHONES 7782 04/24/20 18:50:31 8:19 20574 13527 nxtgenpho APPLE !PHONES ne 7783 04/24/20 18:50:32 8:18 7266 6792 ims APPLE !PHONES 7784 04/24/20 18:50:32 8:19 13527 20286 nxtgenpho APPLE !PHONES ne 7785 04/24/20 18:50:33 8:18 6792 7002 ims APPLE !PEONES 7786 04/24/20 18:58:51 3:59 10319 15664 nxtgenpho APPLE IPHOHE8 ne 7787 04/24/20 18:58:54 3:56 7508 6086 ims APPLE !PEONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 319 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SONYGM00171239 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343297 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. / s 1 4zs ioAT&T , Run Dato: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes AP^ DOLL IMSI MAKE MODEL Date Time Number Up Dn (UTC) 7788 04/24/20 19:02:49 9:29 16802 16210 nxtgenpho APPLE 'PHONES ne 7789 04/24/20 19:02:51 8:29 6335 6670 ims APPLE 'PHONES 7790 04/24/20 19:02:51 9:28 16210 16418 nxtgenpho APPLE 'PHONES ne 7791 04/24/20 19:02:52 8:29 6670 6071 ims APPLE 'PHONES 7792 04/24/20 19:05:10 12:05 8437 6393 ims 7793 04/24/20 19:11:20 0:58 6227 6672 ims APPLE 'PHONES 7794 04/24/20 19:11:21 0:58 6672 5963 ims APPLE 'PHONES 7795 04/24/20 19:12:18 2:03 5116 6107 nxtgenpho APPLE 'PHONES ne 7796 04/24/20 19:12:19 2:02 6264 6780 ims APPLE 'PHONES 7797 04/24/20 19:12:19 2:04 6107 4828 nxtgenpho APPLE 'PHONES ne 7798 04/24/20 19:12:20 2:03 6672 6000 ims APPLE 'PHONES 7799 04/24/20 19:14:22 60:00 9276 7939 nxtgenpho APPLE 'PHONES ne 7800 04/24/20 19:14:25 3:32 8156 6930 ims APPLE 'PHONES 7801 04/24/20 19:17:57 60:00 13568 4808 ims APPLE 'PHONES 7802 04/24/20 20:14:22 25:08 635 525 nxtgonpho APPLE 'PHONES no 7803 04/24/20 20:17:57 60:00 10128 3376 ims APPLE 'PHONES 7804 04/24/20 20:39:29 17:37 6761 7524 nxtgenpho APPLE 'PHONES ne 7805 04/24/20 20:39:30 17:37 7524 6473 nxtgenpho APPLE 'PHONES ne 7806 04/24/20 20:57:07 1:29 6871 4961 nxtgenpho APPLE 'PHONES ne 7807 04/24/20 20:58:36 43:25 6061 6813 nxtgenpho APPLE 'PHONES no 7808 04/24/20 20:58:37 43:25 6813 5773 nxtgenpho APPLE 'PHONES no 7809 04/24/20 21:17:57 60:00 8604 3004 ims APPLE 'PHONES 7810 04/24/20 21:42:02 0:47 6802 4737 nxtgenpho APPLE 'PHONES ne 7811 04/24/20 21:42:49 15:02 5741 6470 nxtgenpho APPLE 'PHONES ne 7812 04/24/20 21:42:50 15:02 6470 5453 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 320 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171240 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343298 MOBILITY 45, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .4 1/4-4 AT&T UTC. Run Dato: 06/17/2020 Run Tine: Data Usage For: IS= Item Conn. Conn. Originating ET Bytes Bytes Apn ISIS! ISAPZIL MODZI. Date Time ill=be Up on (U7C) 7813 04/24/20 21:57:52 0:50 6937 5071 nxtgonpho APPLE 'PEONES no 7814 04/24/20 21:58:41 17:34 6588 6965 nxtgonpho APPLE 'PEONES no 7815 04/24/20 21:58:42 17:34 6965 6300 nxtgonpho APPLE !PEONES no 7816 04/24/20 22:16:16 1:59 7319 5298 nxtgonpho APPLE 'PEONES no 7817 04/24/20 22:17:57 17:57 3424 1324 ims APPLE 'PHONES 7818 04/24/20 22:18:14 37:18 13416 8717 nxtgonpho APPLE 'PHONES no 7819 04/24/20 22:18:15 37:18 8717 14073 nxtgonpho APPLE 'PHONES no 7820 04/24/20 22:29:52 25:40 6692 9690 ims APPLE 'PHONES 7821 04/24/20 22:29:53 25:40 9690 6340 ims APPLE 'PHONES 7822 04/24/20 22:55:33 13:17 13460 8904 nxtgonpho APPLE 'PHONES no 7823 04/24/20 22:55:34 13:17 8783 13076 nxtgonpho APPLE 'PHONES no 7824 04/24/20 22:55:35 13:15 6334 9172 ims APPLE 'PHONES 7825 04/24/20 22:55:36 13:15 9172 6070 ims APPLE 'PHONES 7826 04/24/20 23:08:51 3:20 6003 5951 nxtgonpho APPLE 'PHONES no 7827 04/24/20 23:09:01 3:10 1916 5604 ims APPLE 'PHONES 7828 04/24/20 23:12:10 2:04 5281 7463 nxtgonpho APPLE 'PHONES no 7829 04/24/20 23:12:11 2:04 7463 4993 nxtgonpho APPLE 'PHONES no 7830 04/24/20 23:12:13 2:01 6226 6684 ims APPLE 'PHONES 7831 04/24/20 23:12:14 2:01 6684 5962 ims APPLE 'PHONES 7832 04/24/20 23:14:15 20:08 15808 6632 nxtgonpho APPLE 'PHONES no 7833 04/24/20 23:14:20 20:03 8324 7914 ims APPLE 'PHONES 7834 04/24/20 23:34:22 66:27 26341 42841 nxtgonpho APPLE 'PHONES no 7835 04/24/20 23:34:23 60:00 32835 20769 nxtgonpho APPLE 'PHONES no 7836 04/24/20 23:36:17 64:32 10840 11860 ims APPLE !PHONES 7837 04/24/20 23:36:18 60:00 11860 10576 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 321 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171241 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343299 MOBILITY e s, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .a# AT&T ‘•- OTC. Run Onto: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn TERI IASI MAKE MODEL Date Time Number Up Dn (OTC) 7838 04/25/20 00:34:23 6:27 10006 5836 nxtgonpho APPLE !PHONES no 7839 04/25/20 00:36:18 4:32 0 0 ism APPLE !PHONES 7840 04/25/20 00:40:50 60:00 8797 6285 nxtgenpho APPLE !PHONES no 7841 04/25/20 00:41:02 60:00 13288 9676 ism APPLE !PHONES 7842 04/25/20 01:40:50 19:36 7823 6028 nxtgonpho APPLE !PHONES no 7843 04/25/20 01:41:02 19:24 2580 1324 ism APPLE !PHONES 7844 04/25/20 02:00:25 100:00 5798 10671 nxtgonpho APPLE !PHONES no 7845 04/25/20 02:00:26 60:00 10671 7094 nxtgonpho APPLE !PHONES no 7846 04/25/20 02:00:29 100:00 7136 6754 igloo APPLE !PHONES 7847 04/25/20 02:00:30 60:00 6754 6980 igloo APPLE !PHONES 7848 04/25/20 03:00:26 60:00 0 92 nxtgonpho APPLE !PHONES no 7849 04/25/20 03:00:30 60:00 0 0 igloo APPLE !PHONES 7850 04/25/20 04:00:26 53:36 0 0 nxtgonpho APPLE !PHONES no 7851 04/25/20 04:00:30 53:32 0 0 igloo APPLE !PHONES 7852 04/25/20 06:27:30 38:28 27482 31366 nxtgonpho APPLE !PHONES no 7853 04/25/20 06:27:31 38:28 31366 27764 nxtgonpho APPLE !PHONES no 7854 04/25/20 06:27:35 38:23 8450 9178 igloo APPLE !PHONES 7855 04/25/20 06:27:36 38:23 9178 8186 ism APPLE !PHONES 7856 04/25/20 07:05:59 4:24 6125 5662 nxtgonpho APPLE !PHONES no 7857 04/25/20 07:06:12 4:11 9094 6340 ism APPLE !PHONES 7858 04/25/20 07:10:24 2:08 6341 7188 nxtgonpho APPLE !PHONES no 7859 04/25/20 07:10:28 2:04 9626 7914 ism APPLE !PHONES 7860 04/25/20 07:12:32 150:55 60059 63102 nxtgonpho APPLE !PHONES no 7861 04/25/20 07:12:33 60:00 34518 30667 nxtgonpho APPLE !PHONES no 7862 04/25/20 07:12:35 150:52 22692 27729 ism APPLE !PHONES 7863 04/25/20 07:12:36 60:00 19925 18212 igloo APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 322 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171242 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343300 MOBILITY ce. ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .‘•- 1. AT&T UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ INSI MAKE MODEL Date Time Number Up Dn (UTC) 7864 04/25/20 08:12:33 60:00 27496 27376 nxtgonpho APPLE 'PHONES no 7865 04/25/20 08:12:36 60:00 4976 2680 ims APPLE 'PHONES 7866 04/25/20 09:12:33 30:55 1088 1931 nxtgonpho APPLE 'PHONES no 7867 04/25/20 09:12:36 30:52 2828 1448 ims APPLE 'PHONES 7868 04/25/20 09:43:28 7:28 48 0nmtgonpho APPLE 'PHONES no 7869 04/25/20 09:43:32 7:24 9168 6070 ims APPLE 'PHONES 7870 04/25/20 09:50:55 4:02 288 48 nxtgonpho APPLE 'PHONES no 7871 04/25/20 09:50:56 4:02 48 0nxtgonpho APPLE 'PHONES no 7872 04/25/20 09:50:59 3:58 7268 6796 isms APPLE 'PHONES 7873 04/25/20 09:51:00 3:58 6796 7004 isms APPLE 'PHONES 7874 04/25/20 09:54:58 4:41 48 0nmtgonpho APPLE 'PHONES no 7875 04/25/20 09:55:02 4:37 10118 8108 isms APPLE 'PHONES 7876 04/25/20 09:59:38 6:33 288 48 nxtgonpho APPLE 'PHONES no 7877 04/25/20 09:59:39 6:33 48 0nmtgonpho APPLE 'PHONES no 7878 04/25/20 09:59:41 6:30 6316 6854 isms APPLE 'PHONES 7879 04/25/20 09:59:42 6:30 6854 6052 isms APPLE 'PHONES 7880 04/25/20 10:06:12 60:00 192 0nmtgonpho APPLE 'PHONES no 7881 04/25/20 10:06:12 161:32 1536 672 nxtgonpho APPLE 'PHONES no 7882 04/25/20 10:06:13 161:31 26464 30113 ims APPLE 'PHONES 7883 04/25/20 10:06:14 60:00 16692 14346 ims APPLE 'PHONES 7884 04/25/20 11:06:12 60:00 288 0nmtgonpho APPLE 'PHONES no 7885 04/25/20 11:06:14 60:00 6626 6090 ims APPLE 'PHONES 7886 04/25/20 12:06:12 41:33 192 0nxtgonpho APPLE 'PHONES ne 7887 04/25/20 12:06:14 41:31 6795 6088 Las APPLE 'PHONES 7888 04/25/20 12:47:45 2:23 48 0nxtgonpho APPLE 'PHONES ne 7889 04/25/20 12:47:48 2:20 27152 17294 Las APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 323 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171243 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343301 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:68:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Sim Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ 1162 10212 Ian Date Time Number Up Dn (UTC) 7890 04/25/20 12:50:07 5:26 288 48 nxtgonpho APPLE IPHOB6B ne 7891 04/25/20 12:50:08 5:26 48 0 nxtgonpho APPLE 'PHONED ne 7892 04/25/20 12:50:10 5:23 6440 7574 ims APPLE 'PHONED 7893 04/25/20 12:50:11 5:23 7574 6176 ims APPLE 'PHONES 7894 04/25/20 12:55:34 0:05 0 0 nxtgonpho APPLE 'PHONES ne 7895 04/25/20 12:55:50 2:51 48 0 nxtgonpho APPLE 'PHONES no 7896 04/25/20 12:55:52 2:49 8940 8054 ims APPLE 'PHONES 7897 04/25/20 12:58:40 2:12 288 48 nxtgonpho APPLE 'PHONES ne 7898 04/25/20 12:58:41 2:12 48 0 nxtgonpho APPLE 'PHONES ne 7899 04/25/20 12:58:44 2:08 6262 6668 ims APPLE 'PHONES 7900 04/25/20 12:58:45 2:08 6668 5998 ims APPLE 'PHONES 7901 04/25/20 13:00:54 46:37 48 0 nxtgonpho APPLE 'PHONES no 7902 04/25/20 13:00:59 46:32 21006 13844 ims APPLE 'PHONES 7903 04/25/20 13:47:32 1:53 48 0 nxtgonpho APPLE 'PHONES no 7904 04/25/20 13:49:24 0:13 288 48 nxtgonpho APPLE 'PHONES no 7905 04/25/20 13:49:25 0:13 48 0 nxtgonpho APPLE 'PHONES no 7906 04/25/20 13:49:38 13:12 144 Onmtgonpho APPLE 'PHONES no 7907 04/25/20 13:55:32 7:18 8896 7966 isms APPLE 'PHONES 7908 04/25/20 14:02:49 9:14 384 96 nxtgonpho APPLE 'PHONES no 7909 04/25/20 14:02:51 9:13 96 0 nxtgonpho APPLE 'PHONES no 7910 04/25/20 14:02:53 9:10 6264 6668 isms APPLE 'PHONES 7911 04/25/20 14:02:54 9:10 6668 6000 isms APPLE 'PHONES 7912 04/25/20 14:12:04 1:29 48 0 nxtgonpho APPLE 'PHONES no 7913 04/25/20 14:12:13 1:20 16294 15902 isms APPLE 'PHONES 7914 04/25/20 14:13:32 2:03 288 48 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 324 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171244 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343302 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn 1:1012 1162 late MOBIL Date Tam. Number Up Dn (OTC) 7915 04/25/20 14:13:33 2:03 48 0 nxtgonpho APPLE !PEONES ne 7916 04/25/20 14:13:35 2:00 18647 25322 ims APPLE !PEONES 7917 04/25/20 14:13:36 2:00 24220 18383 ims APPLE !PEONES 7918 04/25/20 14:13:46 0:06 16875 10748 ims APPLE !PEONES 7919 04/25/20 14:13:47 0:06 10190 16875 ims APPLE !PEONES 7920 04/25/20 14:14:06 0:16 32620 10457 ims APPLE !PEONES 7921 04/25/20 14:14:07 0:16 10457 32620 ims APPLE !PEONES 7922 04/25/20 14:15:36 33:27 6456 5426 nxtgonpho APPLE !PEONES no 7923 04/25/20 14:15:40 33:23 9268 7285 ims APPLE 'PHONES 7924 04/25/20 14:49:02 2:03 5220 6055 nxtgenpho APPLE !PHONES ne 7925 04/25/20 14:49:03 2:03 6055 4932 nxtgenpho APPLE !PHONES ne 7926 04/25/20 14:49:06 1:59 7231 6798 ims APPLE !PHONES 7927 04/25/20 14:49:07 1:59 6798 6967 ims APPLE !PHONES 7928 04/25/20 14:51:06 60:00 6927 6791 nxtgonpho APPLE !PHONES no 7929 04/25/20 14:51:10 60:00 9268 7446 ims APPLE !PHONES 7930 04/25/20 15:51:06 36:36 25083 34184 nxtgonpho APPLE !PHONES no 7931 04/25/20 15:51:10 36:32 9541 9175 ims APPLE !PHONES 7932 04/25/20 16:27:41 2:04 61107 24350 nxtgonpho APPLE !PHONES ne 7933 04/25/20 16:27:43 2:02 6226 6648 ims APPLE !PHONES 7934 04/25/20 16:27:43 2:03 24350 60819 nxtgenpho APPLE !PHONES ne 7935 04/25/20 16:27:44 2:02 6648 5962 ims APPLE !PHONES 7936 04/25/20 16:29:46 15:25 26075 50443 nxtgonpho APPLE !PHONES no 7937 04/25/20 16:29:47 15:24 8224 8130 ims APPLE !PHONES 7938 04/25/20 16:45:10 2:18 35103 19005 nxtgenpho APPLE !PHONES no 7939 04/25/20 16:45:11 2:18 18953 36726 nxtgonpho APPLE !PHONES no 7940 04/25/20 16:47:29 2:50 69923 56277 nxtgonpho APPLE !PHONES ne 7941 04/25/20 16:47:31 2:48 7416 6088 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 325 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171245 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343303 MOBILITY cee ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn EBBE IMSI MAKE MODEL Date Time Up Dn (OTC) 7942 04/25/20 16:50:18 28:40 21214 20760 nxtgenpho APPLE !PHONES ne 7943 04/25/20 16:50:19 28:39 22967 19106 ims APPLE !PHONES 7944 04/25/20 16:50:19 28:40 20760 21436 nxtgenpho APPLE !PHONES ne 7945 04/25/20 16:50:20 28:39 18998 25667 ims APPLE !PHONES 7946 04/25/20 17:18:59 9:03 7068 18667 nxtgonpho APPLE !PHONES no 7947 04/25/20 17:19:01 0:05 0 0 ims APPLE !PHONES 7948 04/25/20 17:19:09 0:01 0 0 ims APPLE !PHONES 7949 04/25/20 17:19:25 13:37 8317 6106 ims 7950 04/25/20 17:28:01 2:05 5221 6055 nxtgenpho APPLE !PHONES no 7951 04/25/20 17:28:02 2:04 7268 6800 ims APPLE !PHONES 7952 04/25/20 17:28:02 2:05 6055 4933 nxtgonpho APPLE !PHONES no 7953 04/25/20 17:28:04 2:03 6800 7004 ims APPLE !PHONES 7954 04/25/20 17:30:07 60:00 18683 10813 nxtgenpho APPLE !PHONES ne 7955 04/25/20 17:30:11 33:47 10572 7410 ims APPLE !PHONES 7956 04/25/20 18:03:58 28:35 3888 1804 ims APPLE !PHONES 7957 04/25/20 18:30:07 60:00 19698 23328 nxtgenpho APPLE !PHONES ne 7958 04/25/20 18:32:33 60:00 10672 5156 ims APPLE !PHONES 7959 04/25/20 19:30:07 60:00 15612 146374 nxtgonpho APPLE !PHONES no 7960 04/25/20 19:32:33 46:16 2596 1324 ims APPLE !PHONES 7961 04/25/20 20:18:49 60:00 13552 4468 ims APPLE !PHONES 7962 04/25/20 20:30:07 12:31 173 105 nxtgonpho APPLE !PHONES no 7963 04/25/20 20:42:37 2:03 5117 6055 nxtgenpho APPLE !PHONES ne 7964 04/25/20 20:42:39 2:03 6055 4829 nxtgenpho APPLE !PHONES no 7965 04/25/20 20:44:42 60:00 25099 15911 nxtgonpho APPLE !PHONES no 7966 04/25/20 21:18:49 29:43 10268 6424 ims APPLE !PHONES 7967 04/25/20 21:44:42 19:54 0 0 nxtgonpho APPLE !PHONES no 7968 04/25/20 23:44:42 60:00 19669 9960 ins AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 326 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171246 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343304 MOBILITY ce• pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/17/2020 Run Tine: Data Usage For: Ma= Item Conn. Conn. Originating ET Bytes Bytes Apn flax INSI MAKE MODEL Date Time Number Up Dn MC) 7969 04/26/20 00:44:42 60:00 7156 2928 ism 7970 04/26/20 01:44:42 60:00 10300 3408 ism 7971 04/26/20 02:44:42 60:00 10224 4004 ism 7972 04/26/20 02:49:59 0:05 0 Onstgenpho APPLE !PHONES ne 7973 04/26/20 02:50:37 6:40 7449 4966 nxtgenpho APPLE !PHONES ne 7974 04/26/20 02:57:16 2:55 5217 6053 nxtgenpho APPLE !PHONES ne 7975 04/26/20 02:57:17 2:55 6053 4929 nxtgenpho APPLE !PHONES ne 7976 04/26/20 03:00:12 60:00 7307 6641 nxtgenpho APPLE !PHONES ne 7977 04/26/20 03:44:42 60:00 7280 2928 ism 7978 04/26/20 04:00:12 60:00 924 840 nxtgenpho APPLE !PHONES ne 7979 04/26/20 04:44:42 60:00 11904 4428 ism 7980 04/26/20 05:00:12 60:00 687 630 nxtgenpho APPLE !PHONES ne 7981 04/26/20 05:44:42 60:00 7140 2928 ism 7982 04/26/20 06:00:12 60:00 808 630 nxtgenpho APPLE !PHONES ne 7983 04/26/20 06:44:42 60:00 15048 4764 isms 7984 04/26/20 07:00:12 60:00 687 630 nxtgenpho APPLE !PHONES ne 7985 04/26/20 07:44:42 60:00 8388 3036 ism 7986 04/26/20 08:00:12 60:00 635 525 nxtgenpho APPLE !PHONES ne 7987 04/26/20 08:44:42 60:00 8496 3144 ism 7988 04/26/20 09:00:12 60:00 5735 7987 nxtgenpho APPLE !PHONES ne 7989 04/26/20 09:44:42 60:00 12012 4536 ism 7990 04/26/20 10:00:12 60:00 808 630 nxtgenpho APPLE !PHONES ne 7991 04/26/20 10:44:42 60:00 7032 2912 ism 7992 04/26/20 11:00:12 60:00 578 630 nxtgenpho APPLE !PHONES ne 7993 04/26/20 11:44:42 60:00 10224 4360 ism 7994 04/26/20 12:00:12 57:31 346 735 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 327 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171247 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343305 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. k..70 .0 AT&T Run Date: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn DOLT INSI MAKE MODEL Date Tina Up Dn (OTC) 7995 04/26/20 12:44:42 60:00 8820 3268 ism 7996 04/26/20 12:57:43 76:35 21513 31808 nxtgonpho APPLE 'PHONES ne 7997 04/26/20 12:57:44 60:00 29884 31851 nxtgonpho APPLE 'PHONES ne 7998 04/26/20 13:44:42 60:00 10176 3176 ism 7999 04/26/20 13:57:44 16:35 1924 5167 nxtgonpho APPLE 'PHONES ne 8000 04/26/20 14:14:19 7:48 8015 6051 nxtgonpho APPLE 'PHONES no 8001 04/26/20 14:22:06 2:13 5221 6055 nxtgonpho APPLE 'PHONES no 8002 04/26/20 14:22:07 2:13 6055 4933 nxtgonpho APPLE 'PHONES no 8003 04/26/20 14:24:20 49:52 9559 11255 nxtgonpho APPLE 'PHONES no 8004 04/26/20 14:44:42 60:00 13956 5752 ism 8005 04/26/20 15:14:11 0:51 5059 6052 nxtgonpho APPLE 'PHONES no 8006 04/26/20 15:14:12 0:51 6052 4771 nxtgonpho APPLE 'PHONES ne 8007 04/26/20 15:15:03 0:05 0 0 nxtgonpho APPLE 'PHONES ne 8008 04/26/20 15:19:04 14:51 12005 12178 nxtgonpho APPLE 'PHONES ne 8009 04/26/20 15:33:54 0:59 5220 6055 nxtgonpho APPLE 'PHONES no 8010 04/26/20 15:33:55 0:59 6055 4932 nxtgonpho APPLE 'PHONES no 8011 04/26/20 15:34:54 3:35 7529 5070 nxtgonpho APPLE 'PHONES no 8012 04/26/20 15:38:28 2:04 5276 6113 nxtgonpho APPLE 'PHONES no 8013 04/26/20 15:38:29 2:04 6113 4988 nxtgonpho APPLE 'PHONES no 8014 04/26/20 15:40:33 4:16 6337 5770 nxtgonpho APPLE 'PHONES no 8015 04/26/20 15:44:42 60:00 7032 2804 ism 8016 04/26/20 15:44:48 2:04 5281 6115 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 328 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171248 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343306 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. / s 1 4zs ioAT&T , Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn L@2 IMSI HAKE MODEL DACE Time Number Up Dn (OTC) 8017 04/26/20 15:44:49 2:04 6115 4993 nxtgonpho APPLE !PHONES ne 8018 04/26/20 15:46:53 0:42 0 0nmtgonpho APPLE !PHONES ne 8019 04/26/20 15:47:34 2:04 5222 6055 nxtgonpho APPLE !PHONES no 8020 04/26/20 15:47:35 2:04 6055 4934 nxtgonpho APPLE !PHONES no 8021 04/26/20 15:49:39 4:28 8656 5161 nxtgonpho APPLE !PHONES no 8022 04/26/20 15:54:06 2:10 5159 6050 nxtgonpho APPLE !PHONES no 8023 04/26/20 15:54:07 2:10 6050 4871 nxtgonpho APPLE !PHONES no 8024 04/26/20 15:56:17 5:28 27986 13479 nxtgonpho APPLE !PHONES no 8025 04/26/20 16:01:45 33:40 18289 8597 nxtgonpho APPLE !PHONES no 8026 04/26/20 16:01:46 33:40 8597 18001 nxtgonpho APPLE !PHONES no 8027 04/26/20 16:35:26 18:12 6747 5587 nxtgonpho APPLE !PHONES no 8028 04/26/20 16:44:42 60:00 9960 3176 ims 8029 04/26/20 16:53:37 5:21 7594 8345 nxtgonpho APPLE !PHONES no 8030 04/26/20 16:53:38 5:22 8345 7306 nxtgonpho APPLE !PHONES ne 8031 04/26/20 16:59:00 34:52 7390 5329 nxtgonpho APPLE !PHONES no 8032 04/26/20 17:33:51 8:14 7930 30283 nxtgonpho APPLE !PHONES no 8033 04/26/20 17:33:52 8:14 30283 7642 nxtgonpho APPLE !PHONES no 8034 04/26/20 17:42:06 4:50 6871 4961 nxtgonpho APPLE !PHONES no 8035 04/26/20 17:44:42 60:00 8496 3144 ims 8036 04/26/20 17:46:55 21:18 5951 9348 nxtgonpho APPLE !PHONES no 8037 04/26/20 17:46:56 21:18 9348 5663 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 329 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171249 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343307 MOBILITY cro P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ;tea AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn =RI IMBI MAKE MODEL Date Time Number Up Dn (OTC) 8038 04/26/20 18:08:14 20:14 6342 5738 nxtgonpho APPLE !PHONES no 8039 04/26/20 18:28:27 9:31 7559 7179 nxtgonpho APPLE !PHONES no 8040 04/26/20 18:28:28 9:31 7179 7271 nxtgonpho APPLE !PHONES no 8041 04/26/20 18:37:59 19:47 6556 6061 nxtgonpho APPLE !PHONES no 8042 04/26/20 18:44:42 60:00 12012 4252 imn 8043 04/26/20 18:57:45 8:20 5217 6037 nxtgonpho APPLE !PHONES ne 8044 04/26/20 18:57:46 8:20 6037 4929 nxtgonpho APPLE !PHONES ne 8045 04/26/20 19:06:06 60:00 97819 37299 nxtgonpho APPLE !PHONES ne 8046 04/26/20 19:44:42 60:00 13244 4552 imn 8047 04/26/20 20:06:06 31:19 28510 23846 nxtgonpho APPLE !PHONES no 8048 04/26/20 20:37:24 2:34 5222 6055 nxtgonpho APPLE !PHONES no 8049 04/26/20 20:37:25 2:34 6055 4934 nxtgonpho APPLE !PHONES no 8050 04/26/20 20:39:59 9:44 14916 12117 nxtgonpho APPLE !PHONES no 8051 04/26/20 20:44:42 60:00 8604 3052 imn 8052 04/26/20 20:49:42 2:29 5165 6052 nxtgonpho APPLE !PHONES no 8053 04/26/20 20:49:43 2:29 6052 4877 nxtgonpho APPLE !PHONES no 8054 04/26/20 20:52:11 3:46 10854 13876 nxtgonpho APPLE !PHONES no 8055 04/26/20 20:52:12 3:46 13876 10470 nxtgonpho APPLE !PHONES no 8056 04/26/20 20:55:58 2:26 6055 4901 nxtgonpho APPLE !PHONES no 8057 04/26/20 20:58:24 2:04 5280 6871 nxtgonpho APPLE !PHONES no 8058 04/26/20 20:58:25 2:04 6871 4992 nxtgonpho APPLE !PHONES no 8059 04/26/20 21:00:29 13:00 7046 5122 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 330 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171250 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343308 MOBILITY ce. PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:50:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn EMBI IIEI EASE EOM Date Time Number Up Dn (OTC) 8060 04/26/20 21:13:29 2:32 5221 6107 nxtgonpho APPLE 'PHONES no 8061 04/26/20 21:13:30 2:32 6107 4933 nxtgenpho APPLE 'PEONES no 8062 04/26/20 21:16:02 18:54 6228 5006 nxtgonpho APPLE 'PEONES no 8063 04/26/20 21:34:55 15:01 13187 14540 nxtgonpho APPLE 'PEONES no 8064 04/26/20 21:34:56 15:01 14540 12803 nxtgonpho APPLE 'PEONES no 8065 04/26/20 21:44:42 60:00 7032 2788 ims 8066 04/26/20 21:49:57 21:06 5431 6401 nxtgonpho APPLE 'PHONES no 8067 04/26/20 21:49:58 21:06 6401 5143 nxtgonpho APPLE !PHONES no 8068 04/26/20 22:11:04 0:42 0 0 nxtgonpho APPLE !PHONES no 8069 04/26/20 22:11:45 39:45 6004 6919 nxtgonpho APPLE 'PHONES no 8070 04/26/20 22:11:46 39:45 6919 5716 nxtgonpho APPLE 'PHONES no 8071 04/26/20 22:44:42 60:00 15280 5012 ims 8072 04/26/20 22:51:31 2:34 8133 6305 nxtgonpho APPLE 'PHONES ne 8073 04/26/20 22:54:04 2:03 5281 6115 nxtgonpho APPLE 'PHONES ne 8074 04/26/20 22:54:05 2:03 6115 4993 nxtgonpho APPLE 'PHONES no 8075 04/26/20 22:56:08 20:51 16172 11212 nxtgonpho APPLE 'PHONES no 8076 04/26/20 23:16:58 14:41 5382 6286 nxtgonpho APPLE 'PHONES no 8077 04/26/20 23:16:59 14:41 6286 5094 nxtgonpho APPLE 'PHONES no 8078 04/26/20 23:31:40 2:09 7556 5288 nxtgonpho APPLE 'PHONES no 8079 04/26/20 23:33:48 2:09 5222 6055 nxtgonpho APPLE 'PHONES no 8080 04/26/20 23:33:49 2:09 6055 4934 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 331 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171251 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343309 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Tine: Data Usage For: IS= Item Conn. Conn. Originating ET Bytos Bytes Apn ffi I INSI MAKE MODEL Date Time Number Up Dn (OTC) 8081 04/26/20 23:35:58 8:43 8798 13403 nxtgonpho APPLE 'PHONES no 8082 04/26/20 23:44:40 8:20 5220 6055 nxtgonpho APPLE 'PHONES no 8083 04/26/20 23:44:41 8:20 6055 4932 nxtgonpho APPLE 'PHONES no 8084 04/26/20 23:44:42 60:00 8604 3052 ims 8085 04/26/20 23:53:01 14:58 8074 5858 nxtgenpho APPLE 'PHONES ne 8086 04/27/20 00:07:59 2:09 5221 6055 nxtgenpho APPLE 'PHONES ne 8087 04/27/20 00:08:00 2:09 6055 4933 nxtgonpho APPLE 'PHONES no 8088 04/27/20 00:10:09 0:46 6055 4901 nxtgonpho APPLE 'PHONES no 8089 04/27/20 00:10:54 2:04 5177 6115 nxtgonpho APPLE 'PHONES no 8090 04/27/20 00:10:55 2:04 6115 4889 nxtgonpho APPLE 'PHONES no 8091 04/27/20 00:12:59 4:32 6461 6074 nxtgonpho APPLE 'PHONES no 8092 04/27/20 00:17:30 2:09 5118 6055 nxtgonpho APPLE 'PHONES no 8093 04/27/20 00:17:31 2:09 6055 4830 nxtgonpho APPLE 'PHONES no 8094 04/27/20 00:19:40 2:32 6067 5608 nxtgonpho APPLE 'PHONES no 8095 04/27/20 00:22:11 5:45 5060 6052 nxtgonpho APPLE 'PHONES no 8096 04/27/20 00:22:12 5:46 6052 4772 nxtgonpho APPLE 'PHONES no 8097 04/27/20 00:27:57 31:21 39563 23706 nxtgonpho APPLE 'PHONES no 8098 04/27/20 00:44:42 60:00 13908 4924 ims 8099 04/27/20 00:59:17 0:57 5285 6208 nxtgonpho APPLE 'PHONES no 8100 04/27/20 00:59:19 0:56 6208 4997 nxtgenpho APPLE 'PHONES ne 8101 04/27/20 01:00:15 27:12 27970 20340 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 332 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171252 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343310 MOBILITY cro P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .ai. AT&T ‘•- OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Ma= Item Conn. Conn. Originating BT Bytes Bytes Apn INKS II I MaEZ MODEL Date Time Number Op Dn (OTC) 8102 04/27/20 01:27:26 1:25 4608 5823 nxtgenpho APPLE 'PHONES ne 8103 04/27/20 01:27:27 1:26 5823 4320 nxtgenpho APPLE 'PHONES ne 8104 04/27/20 01:28:52 0:42 8838 5512 nxtgenpho APPLE 'PHONES ne 8105 04/27/20 01:29:33 3:15 5221 6055 nxtgenpho APPLE 'PHONES ne 8106 04/27/20 01:29:34 3:15 6055 4933 nxtgenpho APPLE 'PHONES ne 8107 04/27/20 01:32:49 8:22 7625 5071 nxtgenpho APPLE 'PHONES ne 8108 04/27/20 01:41:10 2:53 5222 6055 nxtgenpho APPLE 'PHONES ne 8109 04/27/20 01:41:11 2:53 6055 4934 nxtgenpho APPLE 'PHONES ne 8110 04/27/20 01:44:04 8:35 12708 10420 nxtgenpho APPLE 'PHONES ne 8111 04/27/20 01:44:42 60:00 8604 2928 ims 8112 04/27/20 01:52:39 1:33 5603 6331 nxtgenpho APPLE 'PHONES ne 8113 04/27/20 01:52:40 1:33 6331 5315 nxtgenpho APPLE 'PHONES ne 8114 04/27/20 01:54:13 2:12 7633 5131 nxtgenpho APPLE 'PHONES ne 8115 04/27/20 01:56:25 2:47 6067 5610 nxtgenpho APPLE 'PHONES ne 8116 04/27/20 01:59:11 3:08 11488 13852 nxtgenpho APPLE 'PHONES ne 8117 04/27/20 01:59:12 3:08 13852 11104 nxtgenpho APPLE 'PHONES ne 8118 04/27/20 02:02:21 1:26 8883 5609 nxtgenpho APPLE 'PHONES ne 8119 04/27/20 02:03:46 7:15 11538 15609 nxtgenpho APPLE 'PHONES ne 8120 04/27/20 02:03:47 7:15 15609 11154 nxtgenpho APPLE 'PHONES ne 8121 04/27/20 02:11:02 2:23 5285 6873 nxtgenpho APPLE 'PHONES ne 8122 04/27/20 02:11:03 2:23 6873 4997 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 333 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171253 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343311 MOBILITY e• PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in / 1 4e.-s AT&T UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: IS= Item Conn. Conn. Originating ET Bytes Bytes Apn EMI INSI MAKE MODEL Date TIM* Number Up Dn (UTt) 8123 04/27/20 02:13:26 10:47 12789 6422 nxtgonpho APPLE 'PHONES no 8124 04/27/20 02:24:12 15:34 5587 6441 nxtgonpho APPLE 'PHONES no 8125 04/27/20 02:24:13 15:35 6441 6367 nxtgonpho APPLE 'PHONES ne 8126 04/27/20 02:39:48 5:29 7223 5502 nxtgonpho APPLE 'PHONES ne 8127 04/27/20 02:44:42 60:00 13352 4392 ims 8128 04/27/20 02:45:17 27:28 13416 17593 nxtgonpho APPLE 'PHONES no 8129 04/27/20 02:45:17 27:29 17593 13032 nxtgonpho APPLE 'PHONES no 8130 04/27/20 03:12:46 0:56 7631 5230 nxtgonpho APPLE 'PHONES no 8131 04/27/20 03:13:41 1:12 5165 6052 nxtgonpho APPLE 'PHONES no 8132 04/27/20 03:13:42 1:12 6052 4877 nxtgonpho APPLE 'PHONES no 8133 04/27/20 03:14:54 2:15 9110 5736 nxtgonpho APPLE 'PHONES no 8134 04/27/20 03:17:09 20:00 5280 6871 nxtgonpho APPLE 'PHONES no 8135 04/27/20 03:17:10 60:00 6871 6777 nxtgonpho APPLE 'PHONES no 8136 04/27/20 03:44:42 60:00 9960 3176 ims 8137 04/27/20 04:17:10 60:00 0 92 nxtgonpho APPLE 'PHONES ne 8138 04/27/20 04:44:42 60:00 8712 3052 ims 8139 04/27/20 05:17:10 10:16 0 0 nxtgonpho APPLE 'PHONES ne 8140 04/27/20 05:44:42 60:00 12228 4660 ims 8141 04/27/20 06:44:42 60:00 10176 3176 ims 8142 04/27/20 07:44:42 60:00 11904 4268 ims 8143 04/27/20 08:44:42 14:27 0 0 ims 8144 04/27/20 10:46:30 4:46 6540 7537 nxtgonpho APPLE 'PHONES ne 8145 04/27/20 10:51:15 2:25 5160 6103 nxtgonpho APPLE 'PHONES no 8146 04/27/20 10:51:16 2:25 6103 4872 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 334 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171254 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343312 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .a# AT&T ‘•- UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ INSI HAKE MODEL Data Time Numbor Up Dn (UTC) 8147 04/27/20 10:53:41 34:20 18447 10350 nxtgenpho APPLE 'PHONES ne 8148 04/27/20 10:56:40 0:05 0 0 ims APPLE 'PHONES 8149 04/27/20 11:09:19 18:42 8902 7048 ims APPLE 'PHONES 8150 04/27/20 11:28:01 2:09 5318 6165 nxtgenpho APPLE 'PHONES ne 8151 04/27/20 11:28:02 2:09 6165 5030 nxtgenpho APPLE 'PHONES ne 8152 04/27/20 11:29:01 1:09 7232 6794 ims APPLE 'PHONES 8153 04/27/20 11:29:02 1:09 6794 6968 ims APPLE 'PHONES 8154 04/27/20 11:30:11 5:51 6158 4956 nxtgonpho APPLE 'PHONES no 8155 04/27/20 11:31:12 0:05 0 0 ims APPLE 'PHONES 8156 04/27/20 11:36:01 8:45 5419 6306 nxtgonpho APPLE 'PHONES no 8157 04/27/20 11:36:03 8:45 6306 5131 nxtgonpho APPLE 'PHONES no 8158 04/27/20 11:36:33 8:13 6184 6670 ims APPLE 'PHONES 8159 04/27/20 11:36:34 8:14 6670 5920 ims APPLE 'PHONES 8160 04/27/20 11:44:47 8:30 5421 6256 nxtgenpho APPLE 'PHONES ne 8161 04/27/20 11:44:48 8:30 6256 5133 nxtgenpho APPLE 'PHONES no 8162 04/27/20 11:45:30 7:47 7214 6792 ims APPLE 'PHONES 8163 04/27/20 11:45:31 7:47 6792 6950 ims APPLE 'PHONES 8164 04/27/20 11:53:18 0:44 0 0nmtgonpho APPLE 'PHONES no 8165 04/27/20 11:54:01 9:04 8242 6826 nxtgonpho APPLE 'PHONES no 8166 04/27/20 11:54:02 9:05 6826 7954 nxtgonpho APPLE 'PHONES no 8167 04/27/20 11:54:18 8:47 6246 6670 ims APPLE 'PHONES 8168 04/27/20 11:54:20 8:47 6670 5982 ims APPLE 'PHONES 8169 04/27/20 12:03:07 1:31 48 0nmtgonpho APPLE 'PHONES no 8170 04/27/20 12:04:37 81:57 13847 17829 nxtgonpho APPLE 'PHONES no 8171 04/27/20 12:04:38 60:00 7095 6132 nxtgonpho APPLE 'PHONES no 8172 04/27/20 12:04:50 60:00 17261 9332 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 335 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171255 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343313 MOBILITY e• PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in / 1 4-iss AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn EBBS IMSI MBEE MODEL Date Timo Number Up Dn (UTC) 8173 04/27/20 13:04:38 21:57 10734 7427 nxtgonpho APPLE !PHONES no 8174 04/27/20 13:04:50 60:00 7440 3144 ims 8175 04/27/20 13:26:35 6:30 15595 13871 nxtgonpho APPLE !PHONES ne 8176 04/27/20 13:33:05 2:10 5216 6105 nxtgonpho APPLE !PHONES no 8177 04/27/20 13:33:06 2:10 6105 4928 nxtgonpho APPLE !PHONES no 8178 04/27/20 13:35:16 5:02 6659 5991 nxtgonpho APPLE !PHONES no 8179 04/27/20 13:40:18 21:03 9057 17059 nxtgonpho APPLE !PHONES no 8180 04/27/20 13:40:19 21:03 17059 8769 nxtgonpho APPLE !PHONES no 8181 04/27/20 14:01:22 29:36 7655 7291 nxtgonpho APPLE !PHONES no 8182 04/27/20 14:04:50 60:00 8604 3052 ims 8183 04/27/20 14:30:57 12:47 11153 12667 nxtgonpho APPLE !PHONES no 8184 04/27/20 14:30:58 12:47 12667 10769 nxtgonpho APPLE !PHONES no 8185 04/27/20 14:43:45 12:32 5703 6418 nxtgonpho APPLE !PHONES no 8186 04/27/20 14:43:46 12:32 6418 6465 nxtgonpho APPLE !PHONES no 8187 04/27/20 14:56:18 5:46 1900 1621 nxtgonpho APPLE !PHONES no 8188 04/27/20 15:02:03 11:26 10315 12642 nxtgonpho APPLE !PHONES no 8189 04/27/20 15:02:04 11:26 12642 10027 nxtgonpho APPLE !PHONES ne 8190 04/27/20 15:04:50 23:08 12480 6780 ims 8191 04/27/20 15:13:30 1:39 0 0 nxtgonpho APPLE !PHONES no 8192 04/27/20 15:15:08 2:10 5222 6107 nxtgonpho APPLE !PHONES no 8193 04/27/20 15:15:09 2:10 6107 4934 nxtgonpho APPLE !PHONES no 8194 04/27/20 15:17:19 0:46 0 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 336 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171256 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343314 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Midi= Item Conn. Conn. Originating ET Bytes Bytes AP^ MOM 2162 MAZE Won. Date Time Number Up Dn (UTC) 8195 04/27/20 15:18:04 19:59 35886 45090 nxtgenpho APPLE 'PHONES ne 8196 04/27/20 15:18:05 31:56 67782 49157 nxtgenpho APPLE 'PHONES ne 8197 04/27/20 15:28:03 60:00 17197 9546 ims 8198 04/27/20 15:38:03 65:48 69065 90159 nxtgenpho APPLE 'PHONES ne 8199 04/27/20 15:50:01 53:51 67467 55869 nxtgenpho APPLE 'PHONES ne 8200 04/27/20 16:28:03 60:00 11300 3316 ims 8201 04/27/20 16:43:52 1:57 48 0 nxtgonpho APPLE 'PHONES no 8202 04/27/20 16:45:48 2:03 4671 7285 nxtgonpho APPLE 'PHONES no 8203 04/27/20 16:45:49 2:03 7285 4383 nxtgonpho APPLE 'PHONES no 8204 04/27/20 16:47:52 0:35 7465 4965 nxtgonpho APPLE 'PHONES no 8205 04/27/20 16:48:26 2:38 5220 6055 nxtgonpho APPLE 'PHONES no 8206 04/27/20 16:48:28 2:37 6055 4932 nxtgonpho APPLE 'PHONES no 8207 04/27/20 16:51:05 20:54 18804 20778 nxtgonpho APPLE 'PHONES no 8208 04/27/20 16:51:06 20:54 20778 18228 nxtgonpho APPLE 'PHONES no 8209 04/27/20 17:11:59 2:21 5221 6055 nxtgenpho APPLE 'PHONES ne 8210 04/27/20 17:12:00 2:21 6055 4933 nxtgenpho APPLE 'PHONES no 8211 04/27/20 17:14:21 19:05 5536 6344 nxtgonpho APPLE 'PHONES no 8212 04/27/20 17:14:22 19:05 6344 5248 nxtgonpho APPLE 'PHONES no 8213 04/27/20 17:28:03 60:00 8604 2912 ims 8214 04/27/20 17:33:27 13:44 5221 6107 nxtgonpho APPLE 'PHONES no 8215 04/27/20 17:33:28 13:44 6107 6088 nxtgonpho APPLE 'PHONES no 8216 04/27/20 17:47:12 14:26 13033 14401 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 337 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171257 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343315 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in 1/4-.rns AT&T UTZ. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn LOSS IMBI MAKE MCOEI. Date Time Number Up Dn (uTC) 8217 04/27/20 17:47:13 14:26 14401 12649 nxtgenpho APPLE 'PHONES ne 8218 04/27/20 18:01:39 10:26 48 0 nxtgenpho APPLE 'PHONES ne 8219 04/27/20 18:12:04 14:56 11810 12573 nxtgenpho APPLE 'PHONES ne 8220 04/27/20 18:12:05 14:56 12573 11522 nxtgenpho APPLE 'PHONES ne 8221 04/27/20 18:27:01 9:08 32139 15840 nxtgenpho APPLE 'PHONES ne 8222 04/27/20 18:28:03 60:00 13584 4516 ims 8223 04/27/20 18:36:08 2:04 5221 6055 nxtgenpho APPLE 'PHONES ne 8224 04/27/20 18:36:09 2:04 6055 4933 nxtgenpho APPLE 'PHONES ne 8225 04/27/20 18:38:13 1:38 6055 4901 nxtgenpho APPLE 'PHONES ne 8226 04/27/20 18:39:50 8:23 5113 6053 nxtgenpho APPLE 'PHONES ne 8227 04/27/20 18:39:51 8:23 6053 4825 nxtgenpho APPLE 'PHONES ne 8228 04/27/20 18:48:14 2:24 8784 5372 nxtgenpho APPLE 'PHONES ne 8229 04/27/20 18:50:37 2:04 5222 6107 nxtgenpho APPLE 'PHONES ne 8230 04/27/20 18:50:38 2:04 6107 4934 nxtgenpho APPLE 'PHONES ne 8231 04/27/20 18:52:42 12:15 8947 5532 nxtgenpho APPLE 'PHONES ne 8232 04/27/20 19:04:56 2:04 5221 6055 nxtgenpho APPLE 'PHONES ne 8233 04/27/20 19:04:57 2:04 6055 4933 nxtgenpho APPLE 'PHONES ne 8234 04/27/20 19:07:01 0:57 7529 5070 nxtgenpho APPLE 'PHONES ne 8235 04/27/20 19:07:57 2:05 5222 6107 nxtgenpho APPLE 'PHONES ne 8236 04/27/20 19:07:59 2:04 6107 4934 nxtgenpho APPLE 'PHONES ne 8237 04/27/20 19:10:03 10:01 7593 5176 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 338 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171258 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343316 MOBILITY „two PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn neer 1162 MAXIL MODZI. Date Time Number Up Dn (UTC) 8238 04/27/20 19:20:03 2:04 5221 6055 nxtgenpho APPLE !PEONES ne 8239 04/27/20 19:20:04 2:04 6055 4933 nxtgenpho APPLE !PEONES ne 8240 04/27/20 19:22:08 1:05 0 Onxtgonpho APPLE !PEONES ne 8241 04/27/20 19:23:12 8:32 5532 8995 nxtgenpho APPLE !PEONES ne 8242 04/27/20 19:23:13 8:32 8995 5244 nxtgenpho APPLE !PEONES ne 8243 04/27/20 19:28:03 22:26 5088 1588 ims 8244 04/27/20 19:31:45 2:35 7465 5070 nxtgenpho APPLE IPHONE8 ne 8245 04/27/20 19:34:19 10:47 6406 7123 nxtgenpho APPLE !PHONES no 8246 04/27/20 19:34:20 10:47 7123 6958 nxtgenpho APPLE !PHONES no 8247 04/27/20 19:45:07 3:11 7529 5280 nxtgenpho APPLE !PHONES no 8248 04/27/20 19:48:18 13:01 27566 39307 nxtgenpho APPLE !PHONES ne 8249 04/27/20 19:48:19 13:01 39307 27182 nxtgenpho APPLE !PHONES ne 8250 04/27/20 19:48:21 6:55 7248 6810 ims APPLE !PHONES 8251 04/27/20 19:48:22 6:55 6742 6984 ims APPLE !PHONES 8252 04/27/20 19:50:29 8:34 9844 6664 ims 8253 04/27/20 19:55:16 6:03 6230 6666 ims APPLE !PHONES 8254 04/27/20 19:55:17 6:03 6666 5966 ims APPLE !PHONES 8255 04/27/20 20:01:20 107:32 55017 62639 nxtgenpho APPLE !PHONES ne 8256 04/27/20 20:01:21 60:00 38098 30186 nxtgenpho APPLE !PHONES ne 8257 04/27/20 20:01:21 107:31 6546 8324 ims APPLE !PHONES 8258 04/27/20 20:01:22 60:00 8216 6282 ims APPLE !PHONES 8259 04/27/20 20:08:19 60:00 16915 9114 ims 8260 04/27/20 21:01:21 47:32 24541 25980 nxtgenpho APPLE !PHONES no 8261 04/27/20 21:01:22 47:31 0 0 ims APPLE !PHONES 8262 04/27/20 21:08:19 60:00 8836 3020 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 339 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171259 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343317 MOBILITY 4III, pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. tte `-a. s AT&T %i.e....? Run Data: 06/17/2020 Run Time: Data Usage For: Sidi= Item Conn. Conn. Originating ET Bytes Bytes Apn =RI INSI MAKE MODEL Date Time Number Up Dn (OTC) 8263 04/27/20 21:48:53 9:42 8690 5271 nxtgenpho APPLE !PHONES ne 8264 04/27/20 21:58:35 21:47 20696 24770 nxtgenpho APPLE !PHONES ne 8265 04/27/20 21:58:36 21:47 24770 21047 nxtgenpho APPLE !PHONES ne 8266 04/27/20 22:08:19 60:00 10036 3252 ims 8267 04/27/20 22:20:23 53:26 8772 7758 nxtgenpho APPLE !PHONES ne 8268 04/27/20 23:08:19 60:00 17976 5072 ims 8269 04/27/20 23:13:48 17:10 7762 7376 nxtgenpho APPLE !PHONES ne 8270 04/27/20 23:13:49 17:10 7376 7282 nxtgenpho APPLE !PHONES ne 8271 04/27/20 23:30:59 31:18 8299 6068 nxtgenpho APPLE !PHONES ne 8272 04/28/20 00:02:16 8:22 5536 9049 nxtgenpho APPLE !PHONES ne 8273 04/28/20 00:02:17 8:22 9049 5248 nxtgenpho APPLE !PHONES ne 8274 04/28/20 00:08:19 60:00 7064 2864 ims 8275 04/28/20 00:10:39 0:39 0 0 nxtgenpho APPLE !PHONES ne 8276 04/28/20 00:11:16 27:05 12466 25753 nxtgenpho APPLE !PHONES ne 8277 04/28/20 00:11:18 27:05 25753 12082 nxtgenpho APPLE !PHONES ne 8278 04/28/20 00:38:23 12:40 7697 5339 nxtgenpho APPLE !PHONES ne 8279 04/28/20 00:51:02 59:48 14424 8293 nxtgenpho APPLE !PHONES ne 8280 04/28/20 00:51:03 59:48 8293 14040 nxtgenpho APPLE !PHONES ne 8281 04/28/20 01:08:19 60:00 12352 4644 ims 8282 04/28/20 01:50:49 33:25 5117 6107 nxtgenpho APPLE !PHONES ne 8283 04/28/20 01:50:51 33:25 6107 6614 nxtgenpho APPLE !PHONES ne 8284 04/28/20 02:08:19 60:00 8372 2896 ims 8285 04/28/20 02:24:16 0:44 0 0 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 340 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171260 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343318 MOBILITY e s, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .4 h•- AT&T OTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating BT Bytes Bytes Apn EMU IIB1I MAKE MODEL Date Time Number Up Dn (UTC) 8286 04/28/20 02:25:00 14:51 5326 6212 nxtgonpho APPLE 'PEONES no 8287 04/28/20 02:25:00 14:53 6212 5038 nxtgonpho APPLE 'PEONES no 8288 04/28/20 02:39:53 1:47 6115 4962 nxtgonpho APPLE 'PEONES no 8289 04/28/20 02:41:39 8:20 5702 6470 nxtgenpho APPLE 'PEONES no 8290 04/28/20 02:41:40 8:20 6470 5414 nxtgenpho APPLE !PHONES ne 8291 04/28/20 02:50:00 2:41 48 0 nxtgonpho APPLE 'PHONES no 8292 04/28/20 02:52:41 50:00 33652 30345 nxtgonpho APPLE !PHONES no 8293 04/28/20 02:52:42 60:00 30518 33373 nxtgenpho APPLE 'PHONES no 8294 04/28/20 03:08:19 60:00 8620 3128 ims 8295 04/28/20 03:42:41 510:07 15287 26603 nxtgenpho APPLE !PHONES no 8296 04/28/20 03:52:42 60:00 1386 1260 nxtgenpho APPLE !PHONES no 8297 04/28/20 04:08:19 60:00 8388 3004 ims 8298 04/28/20 04:52:42 60:00 1033 840 nxtgenpho APPLE !PHONES no 8299 04/28/20 05:08:19 60:00 13460 4468 ims 8300 04/28/20 05:52:42 60:00 17054 8716 nxtgonpho APPLE !PHONES no 8301 04/28/20 06:08:19 60:00 12152 4412 ims 8302 04/28/20 06:52:42 60:00 937 1235 nxtgenpho APPLE !PHONES no 8303 04/28/20 07:08:19 60:00 8388 2896 ims 8304 04/28/20 07:52:42 60:00 763 735 nxtgenpho APPLE !PHONES ne 8305 04/28/20 08:08:19 60:00 8496 3128 ims 8306 04/28/20 08:52:42 60:00 519 315 nxtgenpho APPLE IPHONE8 ne 8307 04/28/20 09:08:19 60:00 12152 4684 ims 8308 04/28/20 09:52:42 60:00 808 630 nxtgenpho APPLE !PHONES ne 8309 04/28/20 10:08:19 60:00 9928 3144 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 341 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171261 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343319 MOBILITY cro P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytos Bytes Apn EMU MBE MAKE MODEL Data Time Number Up Dn (OTC) 8310 04/28/20 10:52:42 60:00 815 840 nxtgonpho APPLE !PEONES no 8311 04/28/20 11:08:19 60:00 11920 4612 ims 8312 04/28/20 11:52:42 20:07 3115 419 nxtgonpho APPLE !PEONES no 8313 04/28/20 12:08:19 53:27 9928 3144 ims APPLE IPHONE8 8314 04/28/20 12:12:49 60:00 20596 18003 nxtgonpho APPLE !PHONES no 8315 04/28/20 13:01:46 0:00 0 0 ims APPLE !PHONES 8316 04/28/20 13:01:46 0:00 0 0 ims APPLE !PHONES 8317 04/28/20 13:01:55 60:00 18409 9570 ims 8318 04/28/20 13:12:49 24:06 571 420 nxtgonpho APPLE !PHONES no 8319 04/28/20 13:36:54 39:05 80581 564466 nxtgonpho APPLE !PHONES no 8320 04/28/20 13:36:55 39:05 564466 80863 nxtgonpho APPLE !PHONES no 8321 04/28/20 14:01:55 60:00 7172 2912 ims 8322 04/28/20 14:16:00 0:05 0 0 nxtgonpho APPLE !PHONES no 8323 04/28/20 14:16:17 24:31 9059 5638 nxtgonpho APPLE !PHONES no 8324 04/28/20 14:40:47 1:54 5220 6055 nxtgenpho APPLE 'PHONES no 8325 04/28/20 14:40:48 1:54 6055 4932 nxtgonpho APPLE 'PHONES no 8326 04/28/20 14:42:42 1:33 48 0 nxtgonpho APPLE 'PHONES no 8327 04/28/20 14:44:14 3:08 4608 5823 nxtgonpho APPLE 'PHONES no 8328 04/28/20 14:44:15 3:08 5823 4320 nxtgonpho APPLE !PHONES no 8329 04/28/20 14:47:23 1:03 0 0 nxtgenpho APPLE !PHONES no 8330 04/28/20 14:48:25 2:39 5286 6925 nxtgenpho APPLE 'PHONES no 8331 04/28/20 14:48:26 2:39 6925 4998 nxtgonpho APPLE 'PHONES no 8332 04/28/20 14:51:05 4:00 5222 6055 nxtgenpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 342 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171262 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343320 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:57:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. .a# AT&T ‘•- Run mato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn flat IMSI HAKE MODEL Date Time Number Up Dn (UTZ) 8333 04/28/20 14:51:06 4:00 6055 4934 nxtgenpho APPLE 'PHONES ne 8334 04/28/20 14:55:05 12:37 12830 18281 nxtgenpho APPLE 'PHONES ne 8335 04/28/20 14:55:07 12:36 18281 12446 nxtgenpho APPLE 'PHONES ne 8336 04/28/20 15:01:55 60:00 10144 3160 ims 8337 04/28/20 15:07:44 34:39 21403 56492 nxtgenpho APPLE 'PHONES ne 8338 04/28/20 15:07:44 34:40 56492 20827 nxtgenpho APPLE 'PHONES ne 8339 04/28/20 15:42:24 26:25 25350 30879 nxtgenpho APPLE 'PHONES ne 8340 04/28/20 16:01:55 60:00 6956 2680 ims 8341 04/28/20 16:08:49 30:04 14228 18903 nxtgenpho APPLE 'PHONES ne 8342 04/28/20 16:08:49 30:05 18903 14999 nxtgenpho APPLE 'PHONES ne 8343 04/28/20 16:38:54 4:23 7465 4964 nxtgenpho APPLE 'PHONES ne 8344 04/28/20 16:43:16 2:09 5221 6107 nxtgenpho APPLE 'PHONES ne 8345 04/28/20 16:43:17 2:09 6107 4933 nxtgenpho APPLE 'PHONES ne 8346 04/28/20 16:45:26 32:37 14617 14079 nxtgenpho APPLE 'PHONES ne 8347 04/28/20 17:01:55 60:00 8388 3036 ims 8348 04/28/20 17:18:02 2:10 5164 6036 nxtgenpho APPLE 'PHONES ne 8349 04/28/20 17:18:03 2:10 6036 4876 nxtgenpho APPLE 'PHONES ne 8350 04/28/20 17:20:13 0:06 0 0 nxtgenpho APPLE 'PHONES ne 8351 04/28/20 17:20:29 60:00 19583 8262 nxtgenpho APPLE 'PHONES ne 8352 04/28/20 18:01:55 60:00 17100 6140 ims 8353 04/28/20 18:20:29 23:50 462 420 nxtgenpho APPLE 'PHONES ne 8354 04/28/20 18:44:19 12:56 9562 6992 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 343 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171263 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343321 MOBILITY dab pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. ..,,-- `'s amd es AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DOLZ IMSI MAKE MODEL Date Tame Number Up Dn (OTC) 8355 04/28/20 18:57:14 2:22 4608 5875 nxtgonpho APPLE 'PHONES no 8356 04/28/20 18:57:15 2:22 5875 4320 nxtgonpho APPLE 'PHONES no 8357 04/28/20 18:59:37 7:56 6531 5311 nxtgonpho APPLE 'PHONES no 8358 04/28/20 19:01:55 60:00 33348 19308 ims 8359 04/28/20 19:07:32 2:38 5221 6055 nxtgonpho APPLE 'PHONES no 8360 04/28/20 19:07:34 2:37 6055 4933 nxtgonpho APPLE 'PHONES no 8361 04/28/20 19:10:11 19:21 6618 6266 nxtgonpho APPLE 'PHONES no 8362 04/28/20 19:16:18 0:28 1858 13557 ims 8363 04/28/20 19:29:31 2:04 5220 6055 nxtgonpho APPLE 'PHONES no 8364 04/28/20 19:29:32 2:04 6055 4932 nxtgonpho APPLE 'PHONES no 8365 04/28/20 19:31:36 14:15 7476 5808 nxtgonpho APPLE 'PHONES no 8366 04/28/20 19:44:11 45:06 5949075 6909390 ims 8367 04/28/20 19:45:51 8:08 5986 6551 nxtgonpho APPLE 'PHONES no 8368 04/28/20 19:45:52 8:08 6551 5698 nxtgonpho APPLE 'PHONES no 8369 04/28/20 19:54:00 4:02 7593 5175 nxtgonpho APPLE 'PHONES no 8370 04/28/20 19:58:02 2:03 5114 6053 nxtgonpho APPLE 'PHONES no 8371 04/28/20 19:58:03 2:03 6053 4826 nxtgonpho APPLE 'PHONES no 8372 04/28/20 20:00:06 11:39 6208 6013 nxtgonpho APPLE 'PHONES no 8373 04/28/20 20:01:55 60:00 9612 4088 ims 8374 04/28/20 20:11:44 9:03 6103 6795 nxtgonpho APPLE 'PHONES no 8375 04/28/20 20:11:45 9:03 6795 5719 nxtgonpho APPLE 'PHONES no 8376 04/28/20 20:20:48 1:17 6055 4901 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 344 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171264 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343322 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in el° AT&T ‘s UTE. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn ZIOLI INSI MAKE MODEL Date Time Number Up Dn (OTC) 8377 04/28/20 20:22:04 2:09 5220 6055 nxtgonpho APPLE !PHONES ne 8378 04/28/20 20:22:05 2:09 6055 4932 nxtgonpho APPLE !PHONES no 8379 04/28/20 20:24:14 8:41 6055 4796 nxtgonpho APPLE !PHONES no 8380 04/28/20 20:32:54 19:52 26433 36898 nxtgonpho APPLE !PHONES no 8381 04/28/20 20:32:55 19:52 36771 26145 nxtgonpho APPLE !PHONES ne 8382 04/28/20 20:52:47 1:57 6055 4996 nxtgonpho APPLE !PHONES no 8383 04/28/20 20:54:43 28:23 23320 24246 nxtgonpho APPLE !PHONES no 8384 04/28/20 20:54:44 28:23 24246 22840 nxtgonpho APPLE !PHONES no 8385 04/28/20 21:01:55 60:00 23124 10972 isms 8386 04/28/20 21:02:53 37:06 6409331 4816403 isms 8387 04/28/20 21:23:07 6:00 6053 4792 nxtgonpho APPLE !PHONES no 8388 04/28/20 21:29:06 14:48 5536 6344 nxtgonpho APPLE !PHONES no 8389 04/28/20 21:29:07 14:48 6344 5248 nxtgonpho APPLE !PHONES no 8390 04/28/20 21:43:55 0:26 144 0 nxtgonpho APPLE !PHONES no 8391 04/28/20 21:47:37 6:55 334016 413565 nxtgonpho APPLE !PHONES no 8392 04/28/20 21:54:31 0:23 5221 6055 nxtgonpho APPLE !PHONES ne 8393 04/28/20 21:54:32 0:23 6055 4933 nxtgonpho APPLE !PHONES ne 8394 04/28/20 21:54:55 1:13 48 0 nxtgonpho APPLE !PHONES no 8395 04/28/20 21:56:07 11:04 11475 14618 nxtgonpho APPLE !PHONES no 8396 04/28/20 21:56:08 11:04 14618 11091 nxtgonpho APPLE !PHONES ne 8397 04/28/20 22:01:55 60:00 10596 4144 isms 8398 04/28/20 22:07:12 3:57 23909 9143 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 345 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171265 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343323 MOBILITY ce• ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating RI Bytes Bytes Apn LBSI IMSI MAKS MODEL Date Time Number Up Dn (OTC/ 8399 04/28/20 22:11:08 2:43 5702 6457 nxtgenpho APPLE 'PHONES ne 8400 04/28/20 22:11:09 2:43 6457 5414 nxtgenpho APPLE 'PHONES ne 8401 04/28/20 22:13:52 60:00 13499 9959 nxtgenpho APPLE 'PHONES ne 8402 04/28/20 23:01:55 60:00 40620 28376 isms 8403 04/28/20 23:13:52 45:19 20487 14215 nxtgenpho APPLE 'PHONES ne 8404 04/28/20 23:39:28 1:07 101010 79485 isms 8405 04/28/20 23:45:11 0:30 3623 21763 isms 8406 04/28/20 23:59:10 19:23 27710 32158 nxtgenpho APPLE 'PHONES ne 8407 04/28/20 23:59:11 19:23 32158 27230 nxtgenpho APPLE 'PHONES ne 8408 04/29/20 00:01:55 60:00 27544 13260 isms 8409 04/29/20 00:06:49 0:28 1481 11935 isms 8410 04/29/20 00:18:34 3:15 6055 4901 nxtgenpho APPLE 'PHONES ne 8411 04/29/20 00:21:48 2:04 5221 6055 nxtgenpho APPLE 'PHONES ne 8412 04/29/20 00:21:49 2:04 6055 4933 nxtgenpho APPLE 'PHONES ne 8413 04/29/20 00:23:53 0:33 6055 4901 nxtgenpho APPLE 'PHONES ne 8414 04/29/20 00:24:25 8:58 22483 41892 nxtgenpho APPLE 'PHONES ne 8415 04/29/20 00:24:26 8:58 41892 22195 nxtgenpho APPLE 'PHONES ne 8416 04/29/20 00:33:24 1:33 7511 5066 nxtgenpho APPLE 'PHONES ne 8417 04/29/20 00:34:56 2:10 5221 6055 nxtgenpho APPLE 'PHONES ne 8418 04/29/20 00:34:57 2:10 6055 4933 nxtgenpho APPLE 'PHONES ne 8419 04/29/20 00:37:07 53:20 58644 59667 nxtgenpho APPLE 'PHONES ne 8420 04/29/20 01:01:55 60:00 7528 3144 isms 8421 04/29/20 01:30:27 2:03 5220 6039 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 346 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171266 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343324 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Data: 06/17/2020 Run Tim: Data usage For: Item Conn. conn. Originating BT Bytes Bytes Apn nom IIS! WA= MOD= Date Time Number up Dn (OTC) 8422 04/29/20 01:30:28 2:03 6039 4932 nxtgenpho APPLE IPECUIS ne 8423 04/29/20 01:32:31 11:53 7978 5577 nxtgenpho APPLE IPE.OIES ne 8424 04/29/20 01:44:23 2:10 7538 7247 nxtgenpho APPLE IPE.OIES ne 8425 04/29/20 01:44:24 2:10 7247 7250 nxtgenpho APPLE IPE.OIES ne 8426 04/29/20 01:46:34 4:23 6871 4961 nxtgenpho APPLE 'PHONES ne 8427 04/29/20 01:50:56 8:34 5221 6055 nxtgenpho APPLE 'PHONES ne 8428 04/29/20 01:50:57 8:34 6055 4933 nxtgenpho APPLE 'PHONES ne 8429 04/29/20 01:59:31 2:41 7463 4962 nxtgenpho APPLE 'PHONES ne 8430 04/29/20 02:01:55 60:00 12152 4392 ims 8431 04/29/20 02:02:11 4:21 29913 36978 nxtgenpho APPLE 'PHONES ne 8432 04/29/20 02:02:13 4:20 36978 29893 nxtgenpho APPLE 'PHONES ne 8433 04/29/20 02:06:33 37:17 39591 20727 nxtgenpho APPLE 'PHONES ne 8434 04/29/20 02:43:50 21:18 5807 6641 nxtgenpho APPLE IPHONE8 ne 8435 04/29/20 02:43:51 21:18 6641 5519 nxtgenpho APPLE 'PHONES ne 8436 04/29/20 03:01:55 60:00 6848 2896 ims 8437 04/29/20 03:05:09 37:04 8100 5542 nxtgenpho APPLE IPHONE8 ne 8438 04/29/20 03:42:12 7:35 12973 13789 nxtgenpho APPLE IPHONE8 ne 8439 04/29/20 03:42:13 7:36 13789 12589 nxtgenpho APPLE IPHONE8 ne 8440 04/29/20 03:49:49 10:02 7529 5069 nxtgenpho APPLE IPHONE8 ne 8441 04/29/20 03:59:50 2:25 5117 6055 nxtgenpho APPLE IPHONE8 ne 8442 04/29/20 03:59:51 2:25 6055 4829 nxtgenpho APPLE IPHONE8 ne 8443 04/29/20 04:01:55 60:00 6956 2912 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 347 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171267 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343325 MOBILITY ci sto pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:58:58pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn EMI Ian MAKE MODEL Date Time Number Up Dn (OTC) 8444 04/29/20 04:02:16 9:51 26996 13968 nxtgonpho APPLE IPECEEM ne 8445 04/29/20 04:12:07 8:14 5222 6055 nxtgonpho APPLE IPECEEM ne 8446 04/29/20 04:12:08 8:14 6055 4934 nxtgonpho APPLE IPECEEM ne 8447 04/29/20 04:20:22 13:53 63361 58086 nxtgonpho APPLE IPECEEM ne 8448 04/29/20 04:34:14 7:35 10575 13233 nxtgonpho APPLE 'PHONES no 8449 04/29/20 04:34:15 7:35 13233 10191 nxtgonpho APPLE !PHONES no 8450 04/29/20 04:41:50 11:00 18032 20059 nxtgonpho APPLE !PHONES no 8451 04/29/20 04:41:50 11:02 20059 17552 nxtgonpho APPLE !PHONES no 8452 04/29/20 04:52:51 40:31 17966 22231 nxtgonpho APPLE !PHONES no 8453 04/29/20 04:52:52 40:31 22231 18440 nxtgonpho APPLE 'PHONES no 8454 04/29/20 05:01:55 60:00 16544 6016 ims 8455 04/29/20 05:33:23 14:10 7700 5327 nxtgonpho APPLE 'PHONES no 8456 04/29/20 05:47:33 212:13 7950 9377 nxtgonpho APPLE 'PHONES no 8457 04/29/20 05:47:34 60:00 7275 6192 nxtgonpho APPLE 'PHONES ne 8458 04/29/20 06:01:55 60:00 7280 2804 ims 8459 04/29/20 06:47:34 60:00 692 420 nxtgonpho APPLE !PHONES ne 8460 04/29/20 07:01:55 60:00 7080 2912 ims 8461 04/29/20 07:47:34 60:00 751 735 nxtgonpho APPLE 'PHONES ne 8462 04/29/20 08:01:55 60:00 8496 3284 ims 8463 04/29/20 08:47:34 32:13 640 315 nxtgonpho APPLE 'PHONES ne 8464 04/29/20 09:01:55 60:00 8388 3036 ims 8465 04/29/20 09:19:47 60:00 26430 30864 nxtgonpho APPLE !PHONES ne 8466 04/29/20 10:01:55 60:00 10488 4520 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 348 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171268 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343326 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in el.AT&T ‘s UTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn L@I INSI MAKE MODEL Date Time Number Up Dn (OTC/ 8467 04/29/20 10:19:47 60:00 37927 42913 nxtgenpho APPLE !PHONES ne 8468 04/29/20 11:01:55 60:00 11920 4376 ism 8469 04/29/20 11:19:47 9:54 0 945 nxtgenpho APPLE !PHONES ne 8470 04/29/20 11:29:40 3:52 288 48 nxtgonpho APPLE !PHONES no 8471 04/29/20 11:29:41 3:52 48 0 nxtgonphe APPLE !PHONES no 8472 04/29/20 11:33:33 37:35 20478 32567 nxtgonpho APPLE !PHONES no 8473 04/29/20 11:33:33 37:36 32567 21345 nxtgonpho APPLE !PHONES ne 8474 04/29/20 12:01:55 60:00 6848 2788 ism 8475 04/29/20 12:11:09 60:00 47298 34467 nxtgonpho APPLE !PHONES no 8476 04/29/20 13:01:55 60:00 6956 2680 ism 8477 04/29/20 13:11:09 0:24 0 0 nxtgenpho APPLE !PHONES ne 8478 04/29/20 13:11:32 2:03 5221 6055 nxtgenpho APPLE !PHONES ne 8479 04/29/20 13:11:34 2:03 6055 4933 nxtgonpho APPLE !PHONES no 8480 04/29/20 13:13:37 3:53 6909 9126 nxtgonpho APPLE !PHONES no 8481 04/29/20 13:17:29 2:04 5221 6055 nxtgenpho APPLE !PHONES ne 8482 04/29/20 13:17:30 2:04 6055 4933 nxtgonpho APPLE !PHONES ne 8483 04/29/20 13:19:34 2:18 0 0 nxtgonpho APPLE !PHONES ne 8484 04/29/20 13:21:51 2:09 5163 6052 nxtgenpho APPLE !PHONES no 8485 04/29/20 13:21:52 2:09 6052 4875 nxtgonpho APPLE !PHONES no 8486 04/29/20 13:24:01 1:46 0 0 nxtgonpho APPLE !PHONES no 8487 04/29/20 13:25:46 2:04 5220 6055 nxtgonpho APPLE !PHONES no 8488 04/29/20 13:25:47 2:04 6055 4932 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 349 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171269 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343327 MOBILITY 4111, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tras `'s AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn =AI IMSI MAKE MODEL Date Time Number Up Dn (UTC) 8489 04/29/20 13:27:51 0:34 0 0nstgenpho APPLE 'PHONES ne 8490 04/29/20 13:28:24 14:50 5442 7690 nxtgenpho APPLE 'PHONES no 8491 04/29/20 13:28:25 14:50 7690 5154 nxtgenpho APPLE 'PHONES no 8492 04/29/20 13:43:15 0:32 7529 5070 nxtgenphe APPLE 'PHONES ne 8493 04/29/20 13:43:46 2:09 5224 6112 nxtgenphe APPLE 'PHONES no 8494 04/29/20 13:43:47 2:09 6112 4936 nxtgenpho APPLE 'PHONES no 8495 04/29/20 13:45:56 0:34 0 0nstgenphe APPLE 'PHONES ne 8496 04/29/20 13:46:29 2:09 192 0nstgenpho APPLE 'PHONES no 8497 04/29/20 13:46:30 2:08 12921 7106 nxtgenpho APPLE 'PHONES no 8498 04/29/20 13:46:30 2:09 0 0nstgenpho APPLE 'PHONES no 8499 04/29/20 13:46:31 2:08 7106 12633 nxtgenphe APPLE 'PHONES ne 8500 04/29/20 13:48:39 1:16 0 0nstgenphe APPLE 'PHONES ne 8501 04/29/20 13:49:54 2:26 5256 6098 nxtgenphe APPLE 'PHONES no 8502 04/29/20 13:49:55 2:26 6098 4872 nxtgenpho APPLE 'PHONES no 8503 04/29/20 13:52:21 1:10 13551 5828 nxtgenpho APPLE 'PHONES no 8504 04/29/20 13:53:30 9:03 6415 6743 nxtgenpho APPLE 'PHONES no 8505 04/29/20 13:53:31 9:03 6743 6127 nxtgenphe APPLE 'PHONES no 8506 04/29/20 14:01:55 60:00 6956 2896 ims 8507 04/29/20 14:02:33 2:05 5220 6107 nxtgenphe APPLE 'PHONES no 8508 04/29/20 14:02:34 2:05 6107 4932 nxtgenphe APPLE 'PHONES ne 8509 04/29/20 14:04:39 0:05 0 0nstgenphe APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 350 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171270 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343328 MOBILITY illir PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tars ""`s te 6 AT&T OTC. Run Dato: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn EMS! IMSI MAKE MODEL Date Time Numbor Up Dn (OTC) 8510 04/29/20 14:05:08 8:47 12010 22627 nxtgonpho APPLE !PHONES no 8511 04/29/20 14:05:09 8:47 22627 11722 nxtgonpho APPLE !PHONES no 8512 04/29/20 14:13:56 1:13 0 0 nxtgonpho APPLE !PHONES no 8513 04/29/20 14:15:08 23:30 10514 12459 nxtgonpho APPLE !PHONES no 8514 04/29/20 14:15:09 23:30 12459 11285 nxtgonpho APPLE !PHONES ne 8515 04/29/20 14:38:39 40:38 44472 50191 nxtgonpho APPLE !PHONES no 8516 04/29/20 15:01:55 60:00 18532 6248 ims 8517 04/29/20 15:19:16 9:49 6204 7547 nxtgonpho APPLE !PHONES no 8518 04/29/20 15:19:18 9:48 7547 5916 nxtgonpho APPLE !PHONES no 8519 04/29/20 15:29:06 48:38 10205 9123 nxtgonpho APPLE !PHONES ne 8520 04/29/20 16:01:55 60:00 30100 16380 ims 8521 04/29/20 16:17:43 8:21 10299 12188 nxtgonpho APPLE !PHONES no 8522 04/29/20 16:17:45 8:20 12188 9915 nxtgonpho APPLE !PHONES no 8523 04/29/20 16:26:05 43:12 8300 6121 nxtgonpho APPLE !PHONES no 8524 04/29/20 16:53:17 0:06 0 0 ims 8525 04/29/20 16:53:43 0:27 1632 11096 ims 8526 04/29/20 17:01:55 60:00 8496 2928 ims 8527 04/29/20 17:09:16 27:04 5793 6630 nxtgonpho APPLE !PHONES ne 8528 04/29/20 17:09:17 27:04 6630 5505 nxtgonpho APPLE !PHONES ne 8529 04/29/20 17:36:21 2:41 6055 4901 nxtgonpho APPLE !PHONES ne 8530 04/29/20 17:39:01 2:04 5220 6107 nxtgonpho APPLE !PHONES ne 8531 04/29/20 17:39:02 2:05 6107 4932 nxtgonpho APPLE !PHONES ne 8532 04/29/20 17:41:07 6:33 6055 4901 nxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 351 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171271 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343329 MOBILITY c wo PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage For: Sidi= Item Conn. Conn. Originating ET Bytes Bytes Apn EMBI IMSI MAKS MODEL Date Time Number Up Dn (OTC) 8533 04/29/20 17:47:39 8:23 5222 6023 nxtgenpho APPLE 'PEONES no 8534 04/29/20 17:47:40 6:23 6023 4934 nxtgenpho APPLE 'PEONES no 8535 04/29/20 17:56:03 35:58 9466 5525 nxtgenpho APPLE 'PEONES no 8536 04/29/20 18:01:55 60:00 10736 5036 ims 8537 04/29/20 18:32:00 8:27 7411 37583 nxtgenpho APPLE IPHOtIEB ne 8538 04/29/20 18:32:01 8:27 37583 7123 nxtgenpho APPLE !PHONES ne 8539 04/29/20 18:40:28 2:04 0 0 nxtgenpho APPLE !PHONES ne 8540 04/29/20 18:42:31 2:03 4505 5791 nxtgenpho APPLE !PHONES ne 8541 04/29/20 18:42:32 2:03 5791 4217 nxtgonpho APPLE !PHONES no 8542 04/29/20 18:44:35 2:38 7493 5026 nxtgonpho APPLE !PHONES no 8543 04/29/20 18:47:13 20:47 318222 41011 nxtgonpho APPLE !PHONES no 8544 04/29/20 18:47:14 20:47 41011 317934 nxtgonpho APPLE !PHONES no 8545 04/29/20 19:01:55 60:00 22276 11676 ims 8546 04/29/20 19:08:01 3:16 7497 5070 nxtgonpho APPLE IPHONE8 no 8547 04/29/20 19:11:16 2:03 5282 6083 nxtgenpho APPLE !PHONES no 8548 04/29/20 19:11:17 2:03 6083 4994 nxtgonpho APPLE !PHONES no 8549 04/29/20 19:13:20 14:38 6194 5002 nxtgonpho APPLE !PHONES ne 8550 04/29/20 19:27:57 2:06 7211 8037 nxtgenpho APPLE !PHONES ne 8551 04/29/20 19:27:58 2:06 8037 6923 nxtgenpho APPLE !PHONES ne 8552 04/29/20 19:29:49 1:04 107732 131604 ims 8553 04/29/20 19:30:04 0:49 7497 5071 nxtgenpho APPLE !PHONES ne 8554 04/29/20 19:30:52 2:09 5181 6023 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 352 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171272 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343330 MOBILITY ce. ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .‘•- a. ° AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn L@1 IMSI MAKE MODEL Date Tam Numbor Up Dn (OTC) 8555 04/29/20 19:30:53 2:09 6023 4893 nxtgonpho APPLE !PHONES no 8556 04/29/20 19:33:02 1:40 6023 4797 nxtgonpho APPLE !PHONES no 8557 04/29/20 19:34:41 6:16 5387 6923 nxtgonpho APPLE !PHONES no 8558 04/29/20 19:34:42 6:16 6923 5099 nxtgonpho APPLE !PHONES no 8559 04/29/20 19:40:58 28:47 15758 11439 nxtgenpho APPLE !PHONES no 8560 04/29/20 20:01:55 31:27 5072 1588 ims APPLE !PHONES 8561 04/29/20 20:09:44 11:22 5178 6083 nxtgonpho APPLE !PHONES no 8562 04/29/20 20:09:45 11:22 6083 5835 nxtgonpho APPLE !PHONES no 8563 04/29/20 20:21:07 51:08 8016 7012 nxtgonpho APPLE !PHONES no 8564 04/29/20 20:33:22 0:24 89576 868 isms APPLE !PHONES 8565 04/29/20 20:33:22 0:24 496 868 isms APPLE !PHONES 8566 04/29/20 20:33:46 60:00 28900 16976 isms APPLE !PHONES 8567 04/29/20 20:52:03 19:55 2746121 3948268 ims APPLE !PHONES 8568 04/29/20 21:12:14 2:03 5220 6075 nxtgonpho APPLE !PHONES no 8569 04/29/20 21:12:15 2:03 6075 4932 nxtgonpho APPLE !PHONES no 8570 04/29/20 21:14:18 30:24 35302 20840 nxtgonpho APPLE !PHONES ne 8571 04/29/20 21:33:46 60:00 13460 4516 ims APPLE !PHONES 8572 04/29/20 21:44:41 2:04 5221 6023 nxtgonpho APPLE !PHONES ne 8573 04/29/20 21:44:42 2:04 6023 4933 nxtgonpho APPLE !PHONES ne 8574 04/29/20 21:46:46 60:00 10896 6329 nxtgonpho APPLE !PHONES ne 8575 04/29/20 22:33:46 60:00 8496 3036 ims APPLE !PHONES 8576 04/29/20 22:46:46 60:00 1270 1050 nxtgonpho APPLE !PHONES ne 8577 04/29/20 23:33:46 60:00 6848 2680 ims APPLE !PHONES 8578 04/29/20 23:46:46 3:27 24661 17455 nxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 353 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171273 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343331 MOBILITY e s, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .a# AT&T ••-. OTC. Run Date,: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn MISBI ISM Man MODEL Date Time Number Up Dn (UTC) 8579 04/29/20 23:50:12 2:36 7211 8037 nxtgonpho APPLE !PHONES no 8580 04/29/20 23:50:13 2:36 8037 6923 nxtgonpho APPLE !PHONES no 8581 04/29/20 23:52:49 0:33 6023 4900 nxtgonpho APPLE !PHONES no 8582 04/29/20 23:53:21 2:03 5118 6075 nxtgonpho APPLE !PHONES no 8583 04/29/20 23:53:22 2:04 6075 4830 nxtgonpho APPLE !PHONES no 8584 04/29/20 23:55:26 6:58 7433 4965 nxtgonpho APPLE !PHONES no 8585 04/30/20 00:02:23 54:14 11158 26233 nxtgonpho APPLE !PHONES no 8586 04/30/20 00:02:24 54:14 26233 10774 nxtgonpho APPLE !PHONES no 8587 04/30/20 00:33:46 60:00 8496 3160 ims APPLE !PHONES 8588 04/30/20 00:56:38 49:47 12569 10638 nxtgonpho APPLE !PHONES ne 8589 04/30/20 01:33:46 60:00 14252 5876 ims APPLE !PHONES 8590 04/30/20 01:46:24 2:15 5222 6075 nxtgonpho APPLE !PHONES no 8591 04/30/20 01:46:25 2:15 6075 4934 nxtgonpho APPLE !PHONES no 8592 04/30/20 01:48:40 60:00 7305 6056 nxtgonpho APPLE !PHONES no 8593 04/30/20 02:33:46 47:32 3424 1340 ims APPLE !PHONES 8594 04/30/20 02:48:40 3:50 0 315 nxtgonpho APPLE !PHONES no 8595 04/30/20 02:52:29 2:09 5218 6021 nxtgonpho APPLE !PHONES no 8596 04/30/20 02:52:30 2:09 6021 4930 nxtgonpho APPLE !PHONES no 8597 04/30/20 02:54:39 12:16 7606 5122 nxtgonpho APPLE !PHONES no 8598 04/30/20 03:06:54 14:30 7293 11701 nxtgonpho APPLE !PHONES ne 8599 04/30/20 03:06:55 14:30 11701 7005 nxtgonpho APPLE !PHONES ne 8600 04/30/20 03:15:57 60:00 12077 7785 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 354 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171274 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343332 MOBILITY „lee PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ST Bytes Bytes Apn INKS INS! SOME MODEL Date Ti.. Number Up Dn (07C) 8601 04/30/20 03:21:25 2:04 6023 4902 nxtgonpho APPLE IPEONTA no 8602 04/30/20 03:23:28 2:04 5117 6023 nxtgonpho APPLE IPEONTA no 8603 04/30/20 03:23:30 2:03 6023 4829 nxtgonpho APPLE IPEONTA no 8604 04/30/20 03:25:33 50:04 6959 5961 nxtgonpho APPLE IPEONTA no 8605 04/30/20 04:15:36 2:10 5116 6059 nxtgonpho APPLE !PHONES no 8606 04/30/20 04:15:37 2:10 6059 4828 nxtgonpho APPLE !PHONES no 8607 04/30/20 04:15:57 60:00 12152 4516 ims 8608 04/30/20 04:17:47 40:48 8421 5961 nxtgonpho APPLE !PHONES no 8609 04/30/20 04:58:35 457:36 100637 117159 nxtgonpho APPLE !PHONES no 8610 04/30/20 04:58:36 60:00 56732 45729 nxtgonpho APPLE !PHONES no 8611 04/30/20 05:15:57 60:00 7188 2804 isms 8612 04/30/20 05:58:36 60:00 6023 6507 nxtgonpho APPLE !PHONES no 8613 04/30/20 06:09:27 60:00 18029 9207 ims 8614 04/30/20 06:15:57 60:00 0 0 ims 8615 04/30/20 06:58:36 60:00 12895 13053 nxtgonpho APPLE !PHONES no 8616 04/30/20 07:09:27 60:00 8388 3036 ims 8617 04/30/20 07:15:57 60:00 0 0 ims 8618 04/30/20 07:58:36 60:00 1096 1685 nxtgonpho APPLE !PHONES no 8619 04/30/20 08:09:27 60:00 6924 2680 ims 8620 04/30/20 08:15:57 60:00 0 0 ism 8621 04/30/20 08:58:36 60:00 225 210 nxtgonpho APPLE !PHONES no 8622 04/30/20 09:09:27 60:00 6924 2788 ism 8623 04/30/20 09:15:57 51:47 0 0 ism 8624 04/30/20 09:58:36 60:00 13430 11118 nxtgonpho APPLE !PHONES no 8625 04/30/20 10:09:27 60:00 11904 4408 ism AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 355 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171275 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343333 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn flax IMSI MAKE MODEL Date Time Number Up Dn (OTC) 8626 04/30/20 10:58:36 60:00 8085 8384 nxtgonpho APPLE !PEONES ne 8627 04/30/20 11:09:27 60:00 12228 4752 ims 8628 04/30/20 11:58:36 37:36 18673 31685 nxtgonpho APPLE !PEONES ne 8629 04/30/20 12:09:27 60:00 0 0 ims 8630 04/30/20 12:21:46 60:00 16705 9046 ims 8631 04/30/20 12:36:12 8:51 6482 5132 nxtgonpho APPLE !PEONES no 8632 04/30/20 12:45:02 8:27 5117 6107 nxtgonpho APPLE !PEONES ne 8633 04/30/20 12:45:03 8:27 6107 4829 nxtgonpho APPLE !PEONES ne 8634 04/30/20 12:53:30 10:09 1247 1833 nxtgonpho APPLE IPEOt88 ne 8635 04/30/20 13:03:38 27:22 5746 6645 nxtgonpho APPLE 'PHONES ne 8636 04/30/20 13:03:39 27:22 6645 5458 nxtgonpho APPLE 'PHONES ne 8637 04/30/20 13:09:27 60:00 0 0 ims 8638 04/30/20 13:21:46 60:00 8604 2928 ims 8639 04/30/20 13:31:01 24:04 7875 5332 nxtgonpho APPLE 'PHONES no 8640 04/30/20 13:55:05 42:29 14952 17362 nxtgonpho APPLE 'PHONES no 8641 04/30/20 13:55:06 42:29 17362 14568 nxtgonpho APPLE !PHONES no 8642 04/30/20 14:09:27 60:00 0 0 ims 8643 04/30/20 14:21:46 60:00 10176 3160 ims 8644 04/30/20 14:37:35 3:57 5218 6105 nxtgonpho APPLE !PHONES no 8645 04/30/20 14:37:36 3:57 6105 4930 nxtgonpho APPLE !PHONES no 8646 04/30/20 14:41:32 5:41 5220 6055 nxtgonpho APPLE !PHONES no 8647 04/30/20 14:41:34 5:40 6055 4932 nxtgonpho APPLE !PHONES ne 8648 04/30/20 14:47:14 25:25 5219 6055 nxtgonpho APPLE !PHONES no 8649 04/30/20 14:47:15 25:25 6055 6716 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 356 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171276 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343334 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ktrzs ioAT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn ENE! INSI MAKE MODEL Date Time Number Up Dn (07C) 8650 04/30/20 15:09:27 48:43 0 0 ims 8651 04/30/20 15:12:40 4:55 6122 5805 nxtgonpho APPLE !PHONES ne 8652 04/30/20 15:17:34 2:32 5222 6055 nxtgonpho APPLE !PHONES ne 8653 04/30/20 15:17:35 2:32 6055 4934 nxtgonpho APPLE !PHONES ne 8654 04/30/20 15:20:06 20:00 6921 10297 nxtgonpho APPLE !PHONES ne 8655 04/30/20 15:20:07 25:33 10297 6633 nxtgonpho APPLE !PHONES ne 8656 04/30/20 15:21:46 60:00 13136 3796 ims 8657 04/30/20 15:45:40 17:03 12587 13399 nxtgonpho APPLE !PHONES ne 8658 04/30/20 16:02:42 2:10 5181 6107 nxtgonpho APPLE !PHONES ne 8659 04/30/20 16:02:43 2:10 6107 4893 nxtgonpho APPLE !PHONES ne 8660 04/30/20 16:04:53 1:09 0 0 nxtgonpho APPLE !PHONES ne 8661 04/30/20 16:06:01 2:29 5217 6105 nxtgonpho APPLE !PHONES ne 8662 04/30/20 16:06:02 2:29 6105 4929 nxtgonpho APPLE !PHONES ne 8663 04/30/20 16:08:30 6:11 192 0 nxtgonpho APPLE !PHONES ne 8664 04/30/20 16:08:31 6:10 5221 6107 nxtgonpho APPLE !PHONES ne 8665 04/30/20 16:08:32 6:10 0 0 nxtgonpho APPLE !PHONES ne 8666 04/30/20 16:08:32 6:10 6107 4933 nxtgonpho APPLE !PHONES ne 8667 04/30/20 16:14:42 0:40 0 0 nxtgonpho APPLE !PHONES no 8668 04/30/20 16:15:22 2:21 4609 5823 nxtgonpho APPLE !PHONES no 8669 04/30/20 16:15:23 2:21 5823 4321 nxtgonpho APPLE !PHONES no 8670 04/30/20 16:17:44 1:06 48 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 357 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171277 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343335 MOBILITY / 1 44ro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn 1:1012 IMBI Moe Mori. Data Time Number Up Dn (UTC) 8671 04/30/20 16:18:49 8:57 10354 6921 nxtgonpho APPLE 'PAMPA no 8672 04/30/20 16:18:50 8:57 6921 10066 nxtgonpho APPLE 'PAMPA no 8673 04/30/20 16:21:46 60:00 15528 5892 ims 8674 04/30/20 16:27:47 1:34 7522 5043 nxtgenpho APPLE 'PEONES ne 8675 04/30/20 16:29:20 2:04 5217 6053 nxtgenpho APPLE 'PEONES ne 8676 04/30/20 16:29:22 2:03 6053 4929 nxtgenpho APPLE 'PEONES ne 8677 04/30/20 16:31:25 5:52 6268 5026 nxtgenpho APPLE IPNONE8 ne 8678 04/30/20 16:37:16 2:19 5112 6053 nxtgenpho APPLE 'PHONES no 8679 04/30/20 16:37:17 2:19 6053 4824 nxtgenpho APPLE 'PHONES no 8680 04/30/20 16:39:35 6:28 5117 6055 nxtgenpho APPLE 'PHONES no 8681 04/30/20 16:39:36 6:28 6055 4829 nxtgenpho APPLE 'PHONES no 8682 04/30/20 16:46:04 18:53 14215 10250 nxtgenpho APPLE 'PHONES no 8683 04/30/20 16:46:05 18:53 10250 13927 nxtgenpho APPLE 'PHONES no 8684 04/30/20 17:04:58 60:00 11239 6359 nxtgenpho APPLE 'PHONES no 8685 04/30/20 17:21:46 60:00 9052 3284 ims 8686 04/30/20 18:04:58 50:10 924 840 nxtgonpho APPLE 'PHONES no 8687 04/30/20 18:21:46 60:00 7048 2912 ims 8688 04/30/20 18:55:07 2:04 5221 6107 nxtgonpho APPLE !PHONES no 8689 04/30/20 18:55:08 2:04 6107 4933 nxtgonpho APPLE !PHONES no 8690 04/30/20 18:57:12 36:35 7875 5332 nxtgenpho APPLE !PHONES ne 8691 04/30/20 19:21:46 60:00 21328 11708 ims 8692 04/30/20 19:33:47 17:53 11444 10611 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 358 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171278 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343336 MOBILITY a. 4III, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in •3/4`---s AT&T \ 'AT&T UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating CT Bytes Bytes Apn DEBI INSI MAKE MODEL Date TIM* Number Up Dn (UTC) 8693 04/30/20 19:33:47 17:54 10611 11156 nxtgonpho APPLE 'PHONES no 8694 04/30/20 19:51:41 9:22 7593 5280 nxtgonpho APPLE 'PHONES no 8695 04/30/20 20:01:03 20:51 23752 19077 nxtgonpho APPLE 'PHONES no 8696 04/30/20 20:01:04 20:51 19077 23272 nxtgonpho APPLE 'PHONES 110 8697 04/30/20 20:13:47 0:31 5348 27765 Las 8698 04/30/20 20:21:46 16:23 4980 1588 Las 8699 04/30/20 20:21:56 1:45 119 197 nxtgenpho APPLE 'PHONES ne 8700 04/30/20 20:23:39 36:44 38816 45759 nxtgenpho APPLE 'PHONES ne 8701 04/30/20 20:23:41 36:43 45759 45998 nxtgenpho APPLE 'PHONES ne 8702 04/30/20 20:41:03 22:10 18426 12711 Las 8703 04/30/20 21:00:24 0:38 6208 4965 nxtgenpho APPLE 'PHONES ne 8704 04/30/20 21:01:01 7:28 5286 7465 nxtgenpho APPLE 'PHONES ne 8705 04/30/20 21:01:03 7:28 7465 4998 nxtgenpho APPLE 'PHONES 110 8706 04/30/20 21:03:23 60:00 39179 25972 Las 8707 04/30/20 21:08:30 12:11 24451 41082 nxtgonpho APPLE 'PHONES ne 8708 04/30/20 21:08:31 12:11 41082 24163 nxtgenpho APPLE 'PHONES ne 8709 04/30/20 21:11:20 0:29 1456 13339 Las 8710 04/30/20 21:20:41 23:43 19197 32236 nxtgonpho APPLE 'PHONES no 8711 04/30/20 21:20:42 23:43 32236 18717 nxtgonpho APPLE 'PHONES 110 8712 04/30/20 21:26:42 28:14 5044085 3644470 Las 8713 04/30/20 21:44:25 29:09 192 0nmtgonpho APPLE 'PHONES no 8714 04/30/20 21:44:26 29:08 30856 37574 nxtgonpho APPLE 'PHONES no 8715 04/30/20 21:44:26 29:09 0 0nmtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 359 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171279 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343337 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Dato: 06/17/2020 Run Time: Data Usage For: Sidi= Item Conn. Conn. Originating ET Bytes Bytes Apn MBRI IMSI NUM NODAL Date Time Number Up Dn (OTC) 8716 04/30/20 21:44:27 29:08 37574 30472 nxtgonpho APPLE IPHONE8 ne 8717 04/30/20 22:03:23 60:00 8496 3052 ims 8718 04/30/20 22:13:35 8:53 7590 5270 nxtgonpho APPLE 'PHONES ne 8719 04/30/20 22:22:28 2:09 5113 6053 nxtgonpho APPLE 'PHONES ne 8720 04/30/20 22:22:29 2:09 6053 4825 nxtgonpho APPLE 'PHONES no 8721 04/30/20 22:24:38 5:25 7670 5777 nxtgonpho APPLE 'PHONES no 8722 04/30/20 22:30:02 34:33 7639 7278 nxtgonpho APPLE 'PHONES no 8723 04/30/20 22:30:03 34:33 7278 7351 nxtgonpho APPLE 'PHONES no 8724 04/30/20 23:03:23 60:00 19632 10580 ims 8725 04/30/20 23:04:35 90:47 34969 51308 nxtgonpho APPLE 'PHONES ne 8726 04/30/20 23:04:36 60:00 50132 33877 nxtgonpho APPLE 'PHONES ne 8727 04/30/20 23:47:34 5:14 1182018 675854 ims 8728 05/01/20 00:03:23 60:00 20448 12472 ims 8729 05/01/20 00:04:36 30:47 1176 804 nxtgonpho APPLE 'PHONES ne 8730 05/01/20 00:19:24 0:28 3472 11505 ims 8731 05/01/20 00:35:23 2:05 11855 13446 nxtgonpho APPLE 'PHONES ne 8732 05/01/20 00:35:24 2:05 13446 11471 nxtgonpho APPLE 'PHONES ne 8733 05/01/20 00:37:29 1:06 7526 5108 nxtgonpho APPLE 'PHONES ne 8734 05/01/20 00:38:35 2:04 5217 6105 nxtgonpho APPLE 'PHONES ne 8735 05/01/20 00:38:36 2:04 6105 4929 nxtgonpho APPLE 'PHONES ne 8736 05/01/20 00:40:40 6:08 12565 5600 nxtgonpho APPLE 'PHONES no 8737 05/01/20 00:46:48 31:09 14597 7609 nxtgonpho APPLE 'PHONES no 8738 05/01/20 00:46:49 31:09 7609 14309 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 360 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171280 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343338 MOBILITY ce. pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn EMBI IMSI MAKS MODEL Date Tame Number Up Dn (OTC) 8739 05/01/20 01:03:23 60:00 29728 15244 ims 8740 05/01/20 01:17:58 37:16 13485 25952 nxtgonpho APPLE !PEONES ne 8741 05/01/20 01:17:58 37:16 192 0 nxtgonpho APPLE !PEONES ne 8742 05/01/20 01:17:59 37:16 0 0 nxtgonpho APPLE !PEONES no 8743 05/01/20 01:17:59 37:16 25952 13197 nxtgonpho APPLE !PEONES no 8744 05/01/20 01:27:21 22:28 4535360 3427868 ims 8745 05/01/20 01:55:15 0:47 6053 4898 nxtgonpho APPLE !PEONES no 8746 05/01/20 01:56:01 92:50 6770501 6650759 nxtgonpho APPLE !PEONES no 8747 05/01/20 01:56:02 60:00 4709751 4757090 nxtgonpho APPLE !PEONES no 8748 05/01/20 02:03:23 60:00 8388 2820 ims 8749 05/01/20 02:56:02 32:50 1941008 2015811 nxtgonpho APPLE 'PHONES no 8750 05/01/20 03:03:23 60:00 8388 2820 ims 8751 05/01/20 03:28:52 1:47 11189 9418 nxtgonpho APPLE 'PHONES ne 8752 05/01/20 03:30:38 1:34 5587 8688 nxtgonpho APPLE 'PHONES ne 8753 05/01/20 03:30:39 1:34 8688 5299 nxtgonpho APPLE 'PHONES ne 8754 05/01/20 03:32:13 0:06 0 0 nxtgonpho APPLE 'PHONES ne 8755 05/01/20 03:34:16 0:42 1130 4551 nxtgonpho APPLE !PHONES ne 8756 05/01/20 03:34:57 9:21 5604 6331 nxtgonpho APPLE !PHONES no 8757 05/01/20 03:34:58 9:21 6331 5316 nxtgonpho APPLE !PHONES no 8758 05/01/20 03:44:19 4:21 2261 5958 nxtgonpho APPLE !PHONES no 8759 05/01/20 03:48:39 2:04 4672 6625 nxtgonpho APPLE !PHONES no 8760 05/01/20 03:48:40 2:05 6625 4384 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 361 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171281 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343339 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTZ. Run Date: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn L@3 IMSI MS= MODEL Date Time Number Up Dn (UTC) 8761 05/01/20 03:50:45 1:47 7465 5070 nxtgenpho APPLE 'PEONES ne 8762 05/01/20 03:52:31 66:48 54129 259765 nxtgenpho APPLE 'PEONES ne 8763 05/01/20 03:52:32 60:00 259765 54813 nxtgenpho APPLE 'PEONES no 8764 05/01/20 04:03:23 60:00 8496 2820 ims 8765 05/01/20 04:52:32 6:48 0 0 nxtgenpho APPLE 'PEONES ne 8766 05/01/20 04:59:20 14:07 7226 5437 nxtgenpho APPLE 'PEONES ne 8767 05/01/20 05:03:23 23:50 9728 6456 ims 8768 05/01/20 05:13:26 142:26 5954 9382 nxtgenpho APPLE !PHONES ne 8769 05/01/20 05:13:27 60:00 9382 7241 nxtgenpho APPLE !PHONES ne 8770 05/01/20 06:13:27 60:00 0 92 nxtgenpho APPLE !PHONES ne 8771 05/01/20 07:13:27 22:26 0 0 nxtgenpho APPLE 'PHONES ne 8772 05/01/20 12:46:09 2:58 452896 99158 nxtgenpho APPLE !PHONES ne 8773 05/01/20 12:46:11 2:57 99158 452608 nxtgenpho APPLE !PHONES ne 8774 05/01/20 12:46:12 2:55 6438 7400 ims APPLE !PHONES 8775 05/01/20 12:46:13 2:55 7400 6086 isms APPLE 'PHONES 8776 05/01/20 12:49:08 169:59 151257 92000 nxtgenpho APPLE 'PHONES ne 8777 05/01/20 12:49:09 169:58 6226 6776 isms APPLE 'PHONES 8778 05/01/20 12:49:09 60:00 61736 124963 nxtgenpho APPLE 'PHONES ne 8779 05/01/20 12:49:10 60:00 6668 6070 ims APPLE !PHONES 8780 05/01/20 12:51:28 60:00 19793 9764 ims 8781 05/01/20 13:49:09 60:00 22784 21696 nxtgenpho APPLE !PHONES ne 8782 05/01/20 13:49:10 60:00 0 0 ims APPLE !PHONES 8783 05/01/20 13:51:28 60:00 7188 2804 ims 8784 05/01/20 14:49:09 60:00 7480 8661 nxtgenpho APPLE !PHONES ne 8785 05/01/20 14:49:10 60:00 0 0 isms APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 362 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171282 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343340 MOBILITY `~~ PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Tine: Data Usage For: Ma= Item Conn. Conn. Originating ET Bytes Bytes Apn DOLT IMBI MAKE MODEL Date Tine Up Dn (UTC) 8786 05/01/20 14:51:28 60:00 8388 2804 ims 8787 05/01/20 15:39:07 184:19 12350 12924 nxtgenpho APPLE 'PHONES ne 8788 05/01/20 15:49:09 60:00 0 92 nxtgenpho APPLE 'PHONES ne 8789 05/01/20 15:49:10 60:00 0 0 ims APPLE 'PHONES 8790 05/01/20 15:51:28 60:00 13600 4532 ims 8791 05/01/20 16:49:09 60:00 12636 11486 nxtgenpho APPLE 'PHONES ne 8792 05/01/20 16:49:10 4:13 0 0 isms APPLE 'PHONES 8793 05/01/20 16:51:28 60:00 10596 4504 isms 8794 05/01/20 17:49:09 54:18 288 Onxtgonpho APPLE 'PHONES ne 8795 05/01/20 17:51:28 60:00 0 0 isms 8796 05/01/20 18:06:57 44:20 18833 12827 isms 8797 05/01/20 18:43:27 7:59 48 Onxtgonpho APPLE 'PHONES ne 8798 05/01/20 18:51:25 8:39 288 48 nxtgenpho APPLE 'PHONES ne 8799 05/01/20 18:51:27 8:37 6476 7474 isms APPLE 'PHONES 8800 05/01/20 18:51:27 8:38 48 Onxtgonpho APPLE 'PHONES ne 8801 05/01/20 18:51:28 0:17 0 0 isms 8802 05/01/20 18:51:28 8:37 7406 6212 isms APPLE !PHONES 8803 05/01/20 18:51:45 60:00 15697 10074 isms 8804 05/01/20 19:00:05 59:47 48 Onxtgonpho APPLE 'PHONES ne 8805 05/01/20 19:51:45 60:00 10036 3284 isms 8806 05/01/20 19:59:51 9:28 480 144 nxtgenpho APPLE 'PHONES ne 8807 05/01/20 19:59:52 9:28 144 0 nxtgenpho APPLE 'PHONES ne 8808 05/01/20 20:09:21 2:15 48 0 nxtgenpho APPLE 'PHONES ne 8809 05/01/20 20:11:35 8:18 288 48 nxtgenpho APPLE 'PHONES ne 8810 05/01/20 20:11:36 8:18 48 0 nxtgenpho APPLE 'PHONES ne 8811 05/01/20 20:19:54 0:06 0 0 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 363 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171283 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343341 MOBILITY ceo . pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. .a° AT&T ‘•.. Run Date: 06/17/2020 Run Time: Data Usage For: M.= Item Conn. Conn. Originating ET Bytes Bytes Apn 73@I II I MAKE MODEL Date Time Number Up Dn (UTC) 8812 05/01/20 20:20:44 0:06 0 0 nxtgenpho APPLE !PHONES ne 8813 05/01/20 20:22:52 2:25 288 48 nxtgonpho APPLE !PHONES ne 8814 05/01/20 20:22:54 2:24 48 0 nxtgenpho APPLE !PHONES ne 8815 05/01/20 20:25:17 56:47 19296 29244 nxtgenpho APPLE !PHONES ne 8816 05/01/20 20:25:18 56:48 29244 18720 nxtgenpho APPLE !PHONES ne 8817 05/01/20 20:51:45 60:00 22128 13236 ims 8818 05/01/20 20:59:04 0:28 4057 12437 ims 8819 05/01/20 21:22:06 59:08 48 Onmtgenpho APPLE !PHONES ne 8820 05/01/20 21:51:45 60:00 10144 3392 ims 8821 05/01/20 22:21:14 10:57 288 48 nxtgonpho APPLE !PHONES ne 8822 05/01/20 22:21:15 10:57 48 0 nxtgenpho APPLE !PHONES ne 8823 05/01/20 22:32:12 28:11 288 48 nxtgonpho APPLE !PHONES ne 8824 05/01/20 22:32:13 28:11 48 0 nxtgenpho APPLE !PHONES ne 8825 05/01/20 22:51:45 60:00 15792 6124 ims 8826 05/01/20 23:00:24 7:35 48 0 nxtgenpho APPLE !PHONES ne 8827 05/01/20 23:07:58 2:04 288 48 nxtgonpho APPLE !PHONES ne 8828 05/01/20 23:08:00 2:03 48 0 nxtgenpho APPLE !PHONES ne 8829 05/01/20 23:10:03 60:00 48 0 nxtgenpho APPLE !PHONES ne 8830 05/01/20 23:51:45 60:00 8604 2928 ims 8831 05/02/20 00:10:03 60:00 0 0 nxtgonpho APPLE !PHONES ne 8832 05/02/20 00:51:45 60:00 13568 4748 ims 8833 05/02/20 01:10:03 60:00 0 0 nxtgonpho APPLE !PHONES ne 8834 05/02/20 01:51:45 60:00 6956 2788 ims 8835 05/02/20 02:10:03 37:49 0 0 nxtgenpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 364 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNI 00171284 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343342 MOBILITY e t. ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DELI INEZ MAN MODES. Date Time Number Up Dn (OTC/ 8836 05/02/20 02:47:51 29:49 288 48 nxtgenpho APPLE 'PEONES no 8837 05/02/20 02:47:52 29:49 48 0 nxtgonpho APPLE 'PEONES no 8838 05/02/20 02:51:45 60:00 6956 2680 ims 8839 05/02/20 03:17:41 1:05 48 0 nxtgonpho APPLE 'PHONES no 8840 05/02/20 03:18:45 1:50 288 48 nxtgonpho APPLE !PHONES no 8841 05/02/20 03:18:47 1:49 48 0 nxtgonpho APPLE !PHONES no 8842 05/02/20 03:20:36 2:45 48 0 nxtgonpho APPLE !PHONES no 8843 05/02/20 03:23:20 2:34 288 48 nxtgonpho APPLE !PHONES no 8844 05/02/20 03:23:21 2:34 48 0 nxtgonpho APPLE !PHONES no 8845 05/02/20 03:25:55 0:52 48 0 nxtgonpho APPLE !PHONES no 8846 05/02/20 03:26:46 10:00 288 48 nxtgenpho APPLE !PHONES no 8847 05/02/20 03:26:47 27:31 96 0 nxtgonpho APPLE !PHONES no 8848 05/02/20 03:36:46 17:31 96 48 nxtgonpho APPLE !PHONES no 8849 05/02/20 03:51:45 60:00 14788 4748 ims 8850 05/02/20 03:54:18 1:58 96 0 nxtgonpho APPLE !PHONES no 8851 05/02/20 03:56:15 6:09 288 48 nxtgonpho APPLE !PHONES no 8852 05/02/20 03:56:16 6:10 48 0 nxtgonpho APPLE !PHONES no 8853 05/02/20 04:02:26 0:58 48 0 nxtgonpho APPLE !PHONES no 8854 05/02/20 04:03:23 10:02 288 48 nxtgonpho APPLE !PHONES no 8855 05/02/20 04:03:24 10:02 48 0 nxtgonpho APPLE !PHONES no 8856 05/02/20 04:13:26 1:56 288 48 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 365 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171285 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343343 MOBILITY cre PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .‘•..ga AT&T UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn flat IMSI MAKE MODEL Date Time Number Up Dn (OTC) 8857 05/02/20 04:13:27 1:56 48 0 nxtgonpho APPLE 'PHONES no 8858 05/02/20 04:15:23 2:58 48 0 nxtgonpho APPLE 'PHONES no 8859 05/02/20 04:18:20 5:43 288 48 nxtgonpho APPLE 'PHONES no 8860 05/02/20 04:18:22 5:42 48 0 nxtgonpho APPLE 'PHONES ne 8861 05/02/20 04:24:04 0:05 0 0 nxtgonpho APPLE 'PHONES ne 8862 05/02/20 04:24:54 1:08 48 0 nxtgonpho APPLE 'PHONES ne 8863 05/02/20 04:26:02 0:47 48 0 nxtgonpho APPLE 'PHONES ne 8864 05/02/20 04:26:48 2:04 288 48 nxtgonpho APPLE 'PHONES ne 8865 05/02/20 04:26:50 2:03 48 0 nxtgonpho APPLE 'PHONES ne 8866 05/02/20 04:28:53 1:05 0 0 nxtgonpho APPLE 'PHONES no 8867 05/02/20 04:29:58 122:06 768 288 nxtgonpho APPLE 'PHONES no 8868 05/02/20 04:29:59 60:00 144 0 nxtgonpho APPLE 'PHONES no 8869 05/02/20 04:51:45 60:00 17852 5172 ims 8870 05/02/20 05:29:59 60:00 144 0 nxtgonpho APPLE 'PHONES ne 8871 05/02/20 05:51:45 1:31 0 0 ims 8872 05/02/20 06:25:09 6:55 7246 8278 ims APPLE 'PHONES 8873 05/02/20 06:25:10 6:55 8210 6982 ims APPLE 'PHONES 8874 05/02/20 06:29:59 2:06 0 0nmtgonpho APPLE 'PHONES ne 8875 05/02/20 06:31:57 60:00 19711 11048 ims 8876 05/02/20 06:32:05 52:11 48 0 nxtgonpho APPLE 'PHONES ne 8877 05/02/20 07:24:15 2:04 288 48 nxtgonpho APPLE 'PHONES ne 8878 05/02/20 07:24:16 2:04 48 0 nxtgonpho APPLE 'PHONES ne 8879 05/02/20 07:26:20 60:00 48 0 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 366 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171286 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343344 MOBILITY dro pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytos Bytes Apn flat IMSI NAM MODEL Date Time Number Up Dn (OTC) 8880 05/02/20 07:31:57 60:00 8480 3020 ims 8881 05/02/20 08:26:20 60:00 0 0 nxtgenpho APPLE 'PHONES ne 8882 05/02/20 08:31:57 60:00 6940 2648 ims 8883 05/02/20 09:26:20 60:00 0 0 nxtgenpho APPLE 'PHONES ne 8884 05/02/20 09:31:57 60:00 7048 2772 ims 8885 05/02/20 10:26:20 60:00 0 0 nxtgenpho APPLE 'PHONES ne 8886 05/02/20 10:31:57 60:00 16652 6076 ims 8887 05/02/20 11:26:20 2:28 0 0 nxtgenpho APPLE 'PHONES ne 8888 05/02/20 11:28:50 57:24 7511 5065 nxtgenpho APPLE 'PHONES no 8889 05/02/20 11:31:57 60:00 8496 2896 ims 8890 05/02/20 12:26:13 8:23 5164 6052 nxtgonpho APPLE 'PHONES no 8891 05/02/20 12:26:15 8:22 6052 4876 nxtgenpho APPLE 'PHONES no 8892 05/02/20 12:31:57 60:00 8388 2896 ims 8893 05/02/20 12:34:37 30:36 7463 5647 nxtgonpho APPLE 'PHONES no 8894 05/02/20 13:05:12 2:10 5979 9105 nxtgenpho APPLE 'PHONES no 8895 05/02/20 13:05:13 2:10 9105 5691 nxtgonpho APPLE 'PHONES no 8896 05/02/20 13:07:23 7:44 7462 4955 nxtgonpho APPLE 'PHONES no 8897 05/02/20 13:15:06 30:55 24530 15373 nxtgonpho APPLE 'PHONES no 8898 05/02/20 13:15:07 30:55 15373 24242 nxtgonpho APPLE 'PHONES no 8899 05/02/20 13:31:57 60:00 6848 2756 ims 8900 05/02/20 13:46:02 0:36 6055 4902 nxtgonpho APPLE 'PHONES no 8901 05/02/20 13:46:37 7:39 7811 9789 nxtgonpho APPLE 'PHONES no 8902 05/02/20 13:46:38 7:39 9789 7523 nxtgonpho APPLE 'PHONES no 8903 05/02/20 13:54:17 0:54 6845 5237 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 367 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171287 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343345 MOBILITY 45, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytos Bytes Apn neer 1161 IOJCIL MODZI. Date Time Number Up Dn (OTC) 8904 05/02/20 13:55:10 8:29 45144 61190 nxtgonpho APPLE !PEONES no 8905 05/02/20 13:55:11 8:29 61190 44856 nxtgonpho APPLE !PEONES ne 8906 05/02/20 14:03:40 1:07 6873 4966 nxtgonpho APPLE !PEONES ne 8907 05/02/20 14:04:46 10:28 10797 20363 nxtgonpho APPLE !PEONES ne 8908 05/02/20 14:04:47 10:28 20363 10413 nxtgonpho APPLE !PEONES ne 8909 05/02/20 14:15:15 31:30 19727 19412 nxtgonpho APPLE !PEONES ne 8910 05/02/20 14:15:15 31:31 19412 20288 nxtgonpho APPLE !PEONES ne 8911 05/02/20 14:31:57 60:00 10380 4080 ims 8912 05/02/20 14:46:45 17:24 5690 6469 nxtgonpho APPLE !PHONES ne 8913 05/02/20 14:46:46 17:24 6469 5402 nxtgonpho APPLE !PHONES no 8914 05/02/20 15:04:10 10:46 5642 6408 nxtgonpho APPLE !PHONES no 8915 05/02/20 15:04:11 10:46 6408 5354 nxtgonpho APPLE !PHONES ne 8916 05/02/20 15:14:57 1:10 8826 5435 nxtgonpho APPLE !PHONES ne 8917 05/02/20 15:16:07 13:33 12634 16458 nxtgonpho APPLE !PHONES ne 8918 05/02/20 15:16:07 13:34 16458 13186 nxtgonpho APPLE !PHONES no 8919 05/02/20 15:29:41 0:37 6937 5174 nxtgonpho APPLE !PHONES no 8920 05/02/20 15:30:18 10:00 11949 13263 nxtgonpho APPLE !PHONES no 8921 05/02/20 15:30:19 57:33 65096 46501 nxtgonpho APPLE !PHONES ne 8922 05/02/20 15:31:57 60:00 13460 4860 ims 8923 05/02/20 15:40:18 47:33 33631 51833 nxtgonpho APPLE !PHONES ne 8924 05/02/20 16:27:52 5:24 0 0 nxtgonpho APPLE !PHONES ne 8925 05/02/20 16:31:57 60:00 7064 2756 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 368 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171288 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343346 MOBILITY cm. ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: SS= Item Conn. Conn. Originating BT Bytes Bytes Apn MMEI IMSI MAKE MODEL Date Time Numbor Up Dn (UTC) 8926 05/02/20 16:33:15 4:12 5312 6101 nxtgonpho APPLE 'PEONES no 8927 05/02/20 16:33:16 4:12 6101 4928 nxtgonpho APPLE 'PEONES no 8928 05/02/20 16:37:27 6:35 5984 6383 nxtgonpho APPLE 'PEONES no 8929 05/02/20 16:37:28 6:35 6383 5696 nxtgonpho APPLE 'PEONES ne 8930 05/02/20 16:44:03 60:00 9930 20336 nxtgonpho APPLE 'PHONES no 8931 05/02/20 17:31:57 60:00 10036 3144 ims 8932 05/02/20 17:44:03 60:00 10405 9628 nxtgonpho APPLE 'PHONES no 8933 05/02/20 18:31:57 60:00 10036 3252 ims 8934 05/02/20 18:44:03 60:00 1171 874 nxtgonpho APPLE 'PHONES no 8935 05/02/20 19:31:57 60:00 9928 3144 ims 8936 05/02/20 19:44:03 60:00 751 735 nxtgenpho APPLE 'PEONES no 8937 05/02/20 20:31:57 60:00 15000 4716 ims 8938 05/02/20 20:44:03 42:54 15184 13713 nxtgonpho APPLE 'PEONES no 8939 05/02/20 21:26:57 15:58 5326 6212 nxtgonpho APPLE 'PEONES no 8940 05/02/20 21:26:58 15:58 6212 5038 nxtgonpho APPLE 'PEONES ne 8941 05/02/20 21:31:57 60:00 12136 4396 ims 8942 05/02/20 21:42:56 4:04 7463 5065 nxtgonpho APPLE IPEONE8 ne 8943 05/02/20 21:46:59 2:11 5281 6115 nxtgonpho APPLE IPBONE8 ne 8944 05/02/20 21:47:00 2:11 6115 4993 nxtgonpho APPLE IPBONE8 ne 8945 05/02/20 21:49:11 1:14 0 Onxtgonpho APPLE IPBONE8 no 8946 05/02/20 21:50:25 27:50 5862 6786 nxtgonpho APPLE 'PEONES no 8947 05/02/20 21:50:26 27:50 6786 5574 nxtgonpho APPLE !PEONES no 8948 05/02/20 22:18:16 20:45 12004 7372 nxtgonpho APPLE IPBONE8 ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 369 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $ONY_GM_00171289 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343347 MOBILITY cre ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Tame: Data Usage Tor: MI= Item Conn. Conn. Originating BT Bytes Bytes Apn MARI IMSI MAKE MODEL Date Time Numbor Up Dn (UTC) 8949 05/02/20 22:18:17 20:45 7372 11716 nxtgonpho APPLE 'PEONES no 8950 05/02/20 22:31:57 60:00 8496 3004 ims 8951 05/02/20 22:39:01 33:44 5847 6643 nxtgonpho APPLE 'PEONES no 8952 05/02/20 22:39:02 33:45 6643 5559 nxtgonpho APPLE 'PEONES no 8953 05/02/20 23:12:46 1:24 7529 5070 nxtgonpho APPLE 'PEONES no 8954 05/02/20 23:14:09 2:05 5282 6167 nxtgonpho APPLE 'PEONES no 8955 05/02/20 23:14:10 2:05 6167 4994 nxtgonpho APPLE !PHONES no 8956 05/02/20 23:16:15 0:53 0 0 nxtgonpho APPLE !PHONES no 8957 05/02/20 23:17:07 2:03 5220 6055 nxtgonpho APPLE !PHONES no 8958 05/02/20 23:17:08 2:03 6055 4932 nxtgonpho APPLE !PHONES ne 8959 05/02/20 23:19:11 1:23 48 0 nxtgonpho APPLE !PHONES no 8960 05/02/20 23:20:33 2:04 5390 7529 nxtgonpho APPLE !PHONES no 8961 05/02/20 23:20:34 2:04 7529 5102 nxtgonpho APPLE !PHONES no 8962 05/02/20 23:22:38 0:43 6208 4965 nxtgonpho APPLE !PHONES no 8963 05/02/20 23:23:20 8:23 12303 10928 nxtgonpho APPLE !PHONES no 8964 05/02/20 23:23:21 8:23 10928 12015 nxtgonpho APPLE !PHONES no 8965 05/02/20 23:31:44 21:33 7226 5438 nxtgonpho APPLE !PHONES ne 8966 05/02/20 23:31:57 60:00 8496 3004 ims 8967 05/02/20 23:53:16 2:04 5344 6977 nxtgonpho APPLE !PHONES no 8968 05/02/20 23:53:17 2:04 6977 5056 nxtgonpho APPLE !PHONES no 8969 05/02/20 23:55:21 60:00 9134 11383 nxtgonpho APPLE !PHONES no 8970 05/03/20 00:31:57 60:00 17868 5088 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 370 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171290 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343348 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in k,:.7_4 00 AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn MAX INSI MAKE MODEL Date Time Number Up Dn (OTC) 8971 05/03/20 00:55:21 48:58 8255 6904 nxtgenpho APPLE !PHONES ne 8972 05/03/20 01:31:57 60:00 8604 2896 imp 8973 05/03/20 01:44:18 25:25 10415 12148 nxtgonpho APPLE !PHONES no 8974 05/03/20 01:44:19 25:25 12148 11501 nxtgonpho APPLE !PHONES no 8975 05/03/20 02:09:44 1:23 6171 5036 nxtgonpho APPLE !PHONES no 8976 05/03/20 02:11:07 40:18 6109 6822 nxtgenpho APPLE !PHONES ne 8977 05/03/20 02:11:08 40:18 6822 5821 nxtgonpho APPLE !PHONES no 8978 05/03/20 02:31:57 60:00 13568 4752 into 8979 05/03/20 02:51:26 2:01 6873 4964 nxtgonpho APPLE !PHONES no 8980 05/03/20 02:53:26 6:33 5222 6055 nxtgenpho APPLE !PHONES ne 8981 05/03/20 02:53:27 6:33 6055 4934 nxtgonpho APPLE !PHONES ne 8982 05/03/20 03:00:00 6:26 7465 4965 nxtgenpho APPLE !PHONES ne 8983 05/03/20 03:06:25 7:36 5221 6055 nxtgonpho APPLE !PHONES no 8984 05/03/20 03:06:27 7:36 6055 4933 nxtgonpho APPLE !PHONES no 8985 05/03/20 03:14:03 5:25 8722 5271 nxtgonpho APPLE !PHONES ne 8986 05/03/20 03:19:27 20:00 15539 18285 nxtgenpho APPLE !PHONES ne 8987 05/03/20 03:19:28 60:00 32418 29441 nxtgenpho APPLE !PHONES ne 8988 05/03/20 03:31:57 60:00 8604 2896 ism 8989 05/03/20 03:39:27 552:50 78246 81091 nxtgenpho APPLE !PHONES ne 8990 05/03/20 04:19:28 60:00 867 945 nxtgenpho APPLE !PHONES ne 8991 05/03/20 04:31:57 60:00 13336 4468 ism 8992 05/03/20 05:19:28 60:00 16753 18433 nxtgonpho APPLE !PHONES no 8993 05/03/20 05:31:57 60:00 8388 2896 imp AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 371 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171291 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343349 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn LBSS IMSI MAKE MODEL Date Time Number up on (OTC) 8994 05/03/20 06:19:28 60:00 18689 15589 nxtgenpho APPLE 'PHONES ne 8995 05/03/20 06:31:57 60:00 8156 2772 ims 8996 05/03/20 07:19:28 60:00 8577 8827 nxtgenpho APPLE 'PHONES ne 8997 05/03/20 07:31:57 60:00 10380 4272 ims 8998 05/03/20 08:19:28 60:00 1059 1260 nxtgenpho APPLE 'PHONES ne 8999 05/03/20 08:31:57 60:00 11920 4220 ims 9000 05/03/20 09:19:28 60:00 6710 5663 nxtgenpho APPLE 'PHONES ne 9001 05/03/20 09:31:57 60:00 9928 3360 ims 9002 05/03/20 10:19:28 60:00 12620 10542 nxtgenpho APPLE 'PHONES ne 9003 05/03/20 10:31:57 60:00 8496 3004 ims 9004 05/03/20 11:19:28 60:00 578 630 nxtgenpho APPLE 'PHONES ne 9005 05/03/20 11:31:57 60:00 6848 2756 ims 9006 05/03/20 12:19:28 32:50 1105 2731 nxtgenpho APPLE 'PHONES ne 9007 05/03/20 12:31:57 60:00 13460 4752 ims 9008 05/03/20 12:52:18 35:03 9808 11358 nxtgenpho APPLE 'PHONES ne 9009 05/03/20 13:27:21 24:39 12880 14174 nxtgenpho APPLE 'PHONES ne 9010 05/03/20 13:27:22 24:39 14174 12592 nxtgenpho APPLE 'PHONES ne 9011 05/03/20 13:31:57 60:00 8496 3128 ims 9012 05/03/20 13:52:00 15:02 6518 6904 nxtgenpho APPLE 'PHONES ne 9013 05/03/20 13:52:01 15:02 6904 6230 nxtgenpho APPLE 'PHONES ne 9014 05/03/20 14:07:03 1:00 6053 4897 nxtgenpho APPLE 'PHONES ne 9015 05/03/20 14:08:03 18:54 6063 9075 nxtgenpho APPLE 'PHONES ne 9016 05/03/20 14:08:04 18:54 9075 5775 nxtgenpho APPLE 'PHONES ne 9017 05/03/20 14:26:58 2:43 7575 5172 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 372 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171292 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343350 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn MAX INSI MAKE MODEL Date Time Number Up Dn (OTC) 9018 05/03/20 14:29:40 4:59 5276 6113 nxtgenpho APPLE !PHONES ne 9019 05/03/20 14:29:42 4:58 6113 4988 nxtgenpho APPLE IPHONE8 ne 9020 05/03/20 14:31:57 60:00 13444 4468 ims 9021 05/03/20 14:34:40 3:23 6873 4965 nxtgenpho APPLE !PHONES ne 9022 05/03/20 14:38:02 2:03 5164 6052 nxtgenpho APPLE !PHONES ne 9023 05/03/20 14:38:03 2:03 6052 4876 nxtgenpho APPLE !PHONES ne 9024 05/03/20 14:40:06 1:35 6268 5120 nxtgenpho APPLE !PHONES ne 9025 05/03/20 14:41:40 2:10 5222 6055 nxtgenpho APPLE !PHONES ne 9026 05/03/20 14:41:41 2:10 6055 4934 nxtgenpho APPLE !PHONES ne 9027 05/03/20 14:43:51 1:02 6214 5008 nxtgenpho APPLE !PHONES ne 9028 05/03/20 14:44:52 10:48 192 0 nxtgenpho APPLE !PHONES ne 9029 05/03/20 14:44:53 10:47 5222 6055 nxtgenpho APPLE !PHONES ne 9030 05/03/20 14:44:53 10:49 0 0 nxtgenpho APPLE !PHONES ne 9031 05/03/20 14:44:54 10:48 6055 5774 nxtgenpho APPLE !PHONES ne 9032 05/03/20 14:55:41 0:44 5221 6055 nxtgenpho APPLE !PHONES ne 9033 05/03/20 14:55:42 0:44 6055 4933 nxtgenpho APPLE !PHONES ne 9034 05/03/20 14:56:26 2:03 6933 5025 nxtgenpho APPLE !PHONES ne 9035 05/03/20 14:58:28 2:03 5222 6055 nxtgenpho APPLE !PHONES ne 9036 05/03/20 14:58:29 2:03 6055 4934 nxtgenpho APPLE !PHONES ne 9037 05/03/20 15:00:32 2:25 6873 4965 nxtgenpho APPLE !PHONES ne 9038 05/03/20 15:02:57 14:20 13328 16186 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 373 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $ONY_GM_00171293 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343351 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .a° AT&T ‘•- OTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn ENE! INSI MAKE MODEL Date Tame Number Up Dn (OTC/ 9039 05/03/20 15:02:57 14:21 16186 13040 nxtgenpho APPLE 'PHONES ne 9040 05/03/20 15:17:18 1:25 6923 4961 nxtgenpho APPLE 'PHONES ne 9041 05/03/20 15:18:42 6:01 7692 7415 nxtgenpho APPLE 'PHONES ne 9042 05/03/20 15:18:44 6:00 7415 7404 nxtgenpho APPLE 'PHONES ne 9043 05/03/20 15:24:44 1:12 6055 4902 nxtgenpho APPLE 'PHONES ne 9044 05/03/20 15:25:55 2:34 8704 6489 nxtgenpho APPLE 'PHONES ne 9045 05/03/20 15:25:56 2:34 6489 8416 nxtgenpho APPLE 'PHONES ne 9046 05/03/20 15:28:30 1:32 6873 4963 nxtgenpho APPLE 'PHONES ne 9047 05/03/20 15:30:02 1:31 6055 4902 nxtgenpho APPLE 'PHONES ne 9048 05/03/20 15:31:32 1:17 5220 6055 nxtgenpho APPLE 'PHONES ne 9049 05/03/20 15:31:34 1:16 6055 4932 nxtgenpho APPLE 'PHONES ne 9050 05/03/20 15:31:57 60:00 6956 2648 ims 9051 05/03/20 15:32:50 1:05 6873 4966 nxtgenpho APPLE 'PHONES ne 9052 05/03/20 15:33:55 0:36 6871 4961 nxtgenpho APPLE 'PHONES ne 9053 05/03/20 15:34:30 8:20 5281 6115 nxtgenpho APPLE 'PHONES ne 9054 05/03/20 15:34:32 8:19 6115 4993 nxtgenpho APPLE 'PHONES ne 9055 05/03/20 15:42:51 3:47 6055 4901 nxtgenpho APPLE 'PHONES ne 9056 05/03/20 15:46:37 6:19 5217 6053 nxtgenpho APPLE 'PHONES ne 9057 05/03/20 15:46:38 6:19 6053 4929 nxtgenpho APPLE 'PHONES ne 9058 05/03/20 15:52:57 2:15 0 Onmtgenpho APPLE 'PHONES ne 9059 05/03/20 15:55:11 16:31 5537 6344 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 374 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171294 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343352 MOBILITY cro P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating AT Bytes Bytes Apn HMI WALE MOD= Date Time Numbor Up Dn (UTC) 9060 05/03/20 15:55:12 16:31 6344 5249 nxtgenpho APPLE 'PEONES ne 9061 05/03/20 16:11:43 51:43 8149 12145 nxtgenpho APPLE 'PEONES ne 9062 05/03/20 16:11:44 51:43 12145 7861 nxtgenpho APPLE 'PEONES ne 9063 05/03/20 16:31:57 60:00 6848 2756 ims 9064 05/03/20 17:03:27 1:07 7529 5069 nxtgenpho APPLE 'PEONES ne 9065 05/03/20 17:04:33 2:03 5282 6871 nxtgenpho APPLE 'PEONES ne 9066 05/03/20 17:04:35 2:03 6871 4994 nxtgenpho APPLE IPHONE8 ne 9067 05/03/20 17:06:37 0:55 7529 5069 nxtgenpho APPLE !PHONES ne 9068 05/03/20 17:07:31 20:50 7299 7461 nxtgenpho APPLE !PHONES ne 9069 05/03/20 17:07:32 20:50 7461 7011 nxtgenpho APPLE IPHONE8 ne 9070 05/03/20 17:28:22 60:00 8039 6274 nxtgenpho APPLE 'PHONES ne 9071 05/03/20 17:31:57 60:00 15324 5124 ims 9072 05/03/20 18:28:22 51:43 751 735 nxtgenpho APPLE IPEONE8 ne 9073 05/03/20 18:31:57 60:00 13444 4560 ims 9074 05/03/20 19:20:04 8:59 7635 7589 nxtgenpho APPLE IPEONE8 ne 9075 05/03/20 19:20:05 8:59 7589 7347 nxtgenpho APPLE IPHONE8 ne 9076 05/03/20 19:29:04 60:00 7285 6862 nxtgenpho APPLE IPHONE8 ne 9077 05/03/20 19:31:57 60:00 8604 3128 ims 9078 05/03/20 20:29:04 36:13 1502 3094 nxtgenpho APPLE IPHONE8 ne 9079 05/03/20 20:31:57 60:00 10144 3268 ims 9080 05/03/20 21:05:16 8:25 4671 6693 nxtgenpho APPLE IPHONE8 ne 9081 05/03/20 21:05:18 8:24 6693 4383 nxtgenpho APPLE 'PHONES ne 9082 05/03/20 21:13:42 60:00 8451 6063 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 375 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SONYGAt00171295 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343353 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Dato: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn TERI IMSI MUM MODEL Date Tame Number Up Dn (OTC) 9083 05/03/20 21:31:57 60:00 19964 6464 ims 9084 05/03/20 22:13:42 38:33 55517 10672 nxtgenpho APPLE 'PROMO no 9085 05/03/20 22:31:57 60:00 6956 2772 ims 9086 05/03/20 22:52:14 3:46 31396 384827 nxtgenpho APPLE 'PEONES ne 9087 05/03/20 22:52:15 3:46 384827 31108 nxtgenpho APPLE 'PEONES ne 9088 05/03/20 22:56:01 60:00 7984 6277 nxtgenpho APPLE !PHONES ne 9089 05/03/20 23:31:57 60:00 6956 2648 ims 9090 05/03/20 23:56:01 2:56 0 0 nxtgenpho APPLE !PHONES ne 9091 05/03/20 23:58:56 32:41 19779 24666 nxtgenpho APPLE !PHONES ne 9092 05/03/20 23:58:57 32:41 24666 20760 nxtgenpho APPLE !PHONES ne 9093 05/04/20 00:31:38 0:06 0 0 nxtgenpho APPLE !PHONES ne 9094 05/04/20 00:31:57 49:07 8388 2896 ims 9095 05/04/20 00:44:34 30:57 25696 19313 nxtgenpho APPLE !PHONES ne 9096 05/04/20 01:15:30 26:38 29723 31790 nxtgenpho APPLE !PHONES ne 9097 05/04/20 01:15:31 26:38 31790 30704 nxtgenpho APPLE !PHONES no 9098 05/04/20 01:15:43 26:25 7296 6524 ims APPLE !PHONES 9099 05/04/20 01:15:44 26:25 6456 6944 ims APPLE IPHOKE0 9100 05/04/20 01:33:16 60:00 14695 11263 ims 9101 05/04/20 01:42:10 60:00 41207 28246 nxtgenpho APPLE !PHONES ne 9102 05/04/20 01:42:16 24:56 8150 6924 ims APPLE !PHONES 9103 05/04/20 02:07:13 4:21 8158 6176 ims APPLE !PHONES 9104 05/04/20 02:11:34 0:22 3532 1448 ims APPLE !PHONES 9105 05/04/20 02:12:04 0:01 0 0 ims APPLE !PHONES 9106 05/04/20 02:12:15 60:00 16976 9162 ims 9107 05/04/20 02:33:16 60:00 0 0 ims 9108 05/04/20 02:42:10 60:00 9551 11880 nxtgenpho APPLE !PHONES ne 9109 05/04/20 03:12:15 60:00 8496 2928 ins AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 376 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SONY_GM_00171296 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343354 MOBILITY e• ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytos Bytes Apn LBSI IMSI NA= MODEL Date Time Number Up Dn (OTC) 9110 05/04/20 03:33:16 60:00 0 0 ims 9111 05/04/20 03:42:10 12:50 0 Onmtgonpho APPLE 'PHONES ne 9112 05/04/20 04:12:15 60:00 13352 4624 ims 9113 05/04/20 04:33:16 60:00 0 0 ims 9114 05/04/20 05:12:15 60:00 9928 3284 ims 9115 05/04/20 05:33:16 5:16 0 0 ims 9116 05/04/20 06:12:15 60:00 8496 3036 ims 9117 05/04/20 07:12:15 60:00 13568 4784 ims 9118 05/04/20 07:25:07 14:29 7930 5646 nxtgonpho APPLE 'PHONES no 9119 05/04/20 07:39:36 2:21 5165 6104 nxtgonpho APPLE 'PHONES no 9120 05/04/20 07:39:37 2:21 6104 4877 nxtgonpho APPLE 'PHONES no 9121 05/04/20 07:41:58 1:07 6052 4940 nxtgonpho APPLE 'PHONES no 9122 05/04/20 07:43:05 2:37 5225 6112 nxtgonpho APPLE 'PHONES no 9123 05/04/20 07:43:06 2:37 6112 4937 nxtgonpho APPLE 'PHONES no 9124 05/04/20 07:45:42 5:09 192 0 nxtgonpho APPLE 'PHONES ne 9125 05/04/20 07:45:43 5:08 5164 6104 nxtgonpho APPLE 'PHONES no 9126 05/04/20 07:45:43 5:09 0 0 nxtgonpho APPLE 'PHONES no 9127 05/04/20 07:45:44 5:08 6104 4876 nxtgonpho APPLE 'PHONES no 9128 05/04/20 07:50:52 60:00 7625 6751 nxtgonpho APPLE 'PHONES ne 9129 05/04/20 08:12:15 60:00 11688 4484 ims 9130 05/04/20 08:50:52 11:05 0 0 nxtgonpho APPLE 'PHONES ne 9131 05/04/20 09:12:15 60:00 8620 3052 ims 9132 05/04/20 10:12:15 60:00 6848 2680 ims 9133 05/04/20 10:13:52 33:49 8031 10613 nxtgonpho APPLE 'PHONES no 9134 05/04/20 10:47:40 2:10 5165 6052 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 377 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171297 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343355 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .‘•- 1. AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn flat DMZ HAKE MODEL Date Time Number Up Dn (OTC) 9135 05/04/20 10:47:41 2:10 6052 4877 nxtgenpho APPLE 'PHONES no 9136 05/04/20 10:49:51 1:16 6873 4964 nxtgenpho APPLE 'PHONES no 9137 05/04/20 10:51:06 8:25 5224 6112 nxtgenpho APPLE 'PHONES no 9138 05/04/20 10:51:07 8:25 6112 4936 nxtgenpho APPLE 'PHONES no 9139 05/04/20 10:59:32 20:39 6873 6225 nxtgenpho APPLE 'PHONES ne 9140 05/04/20 11:12:15 2:37 5088 4728 ims 9141 05/04/20 11:14:58 60:00 16867 9216 ims 9142 05/04/20 11:20:10 12:36 6215 7230 nxtgenpho APPLE 'PHONES no 9143 05/04/20 11:20:11 12:36 7230 5831 nxtgenpho APPLE 'PHONES ne 9144 05/04/20 11:32:47 4:33 0 0nstgenpho APPLE 'PHONES no 9145 05/04/20 11:37:21 19:55 6873 6436 nxtgenpho APPLE 'PHONES no 9146 05/04/20 11:57:15 11:11 5221 6055 nxtgenpho APPLE 'PHONES no 9147 05/04/20 11:57:16 11:11 6055 5878 nxtgenpho APPLE 'PHONES no 9148 05/04/20 12:08:27 1:40 6961 5130 nxtgenpho APPLE 'PHONES no 9149 05/04/20 12:10:06 1:17 5164 6104 nxtgenpho APPLE 'PHONES no 9150 05/04/20 12:10:08 1:16 6104 4876 nxtgenpho APPLE 'PHONES no 9151 05/04/20 12:11:24 5:40 6873 4965 nxtgenpho APPLE 'PHONES no 9152 05/04/20 12:14:58 60:00 8496 3020 ims 9153 05/04/20 12:17:03 2:27 5060 6052 nxtgenpho APPLE 'PHONES no 9154 05/04/20 12:17:04 2:27 6052 4772 nxtgenpho APPLE 'PHONES ne 9155 05/04/20 12:19:31 4:27 48 0nstgenpho APPLE 'PHONES ne 9156 05/04/20 12:23:58 2:24 5112 6053 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 378 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171298 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343356 MOBILITY e t. pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytos Bytes Apn LESS INSI MAKE MODEL Date T1100 Number Up Dn (OTC) 9157 05/04/20 12:23:59 2:24 6053 4824 nxtgonpho APPLE !PHONES no 9158 05/04/20 12:26:23 7:15 6873 4965 nxtgonpho APPLE !PHONES no 9159 05/04/20 12:33:37 2:19 5118 6055 nxtgonpho APPLE !PHONES ne 9160 05/04/20 12:33:38 2:19 6055 4830 nxtgonpho APPLE !PHONES ne 9161 05/04/20 12:35:57 31:52 6119 17605 nxtgonpho APPLE !PHONES no 9162 05/04/20 13:07:48 6:43 5222 6197 nxtgonpho APPLE !PHONES no 9163 05/04/20 13:07:49 6:43 6107 4934 nxtgonpho APPLE !PHONES no 9164 05/04/20 13:14:32 8:59 7569 5129 nxtgenpho APPLE !PHONES ne 9165 05/04/20 13:14:58 60:00 7156 2896 ims 9166 05/04/20 13:23:30 29:55 11369 7449 nxtgonpho APPLE !PHONES ne 9167 05/04/20 13:23:31 29:55 7449 11081 nxtgonpho APPLE !PHONES ne 9168 05/04/20 13:53:26 3:09 5133 4692 nxtgonpho APPLE !PHONES no 9169 05/04/20 13:56:34 30:51 17726 17844 nxtgonpho APPLE !PHONES no 9170 05/04/20 13:56:35 30:51 17844 18611 nxtgonpho APPLE !PHONES no 9171 05/04/20 14:14:58 36:55 8696 3020 isms 9172 05/04/20 14:27:26 23:15 37999 30929 nxtgonpho APPLE !PHONES no 9173 05/04/20 14:50:41 32:47 31085 20389 nxtgonpho APPLE !PHONES ne 9174 05/04/20 14:50:42 32:47 20389 30605 nxtgonpho APPLE !PHONES ne 9175 05/04/20 14:51:38 5:26 6422 6736 ims APPLE !PHONES 9176 05/04/20 14:51:39 5:26 6668 6070 ims APPLE !PHONES 9177 05/04/20 14:51:53 0:01 0 0 isms 9178 05/04/20 14:53:58 9:38 6262 6800 ims APPLE !PHONES 9179 05/04/20 14:53:59 9:38 6672 6106 ims APPLE !PHONES 9180 05/04/20 14:56:59 12:03 9761 6496 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 379 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171299 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343357 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. t,rzs ioAT&T Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn MINT /ALQI MAKE MODEL Date Time Number Up Dn (UTC) 9181 05/04/20 15:03:35 19:53 7358 7526 ims APPLE 'PHONES 9182 05/04/20 15:03:36 19:53 7526 7202 ims APPLE 'PHONES 9183 05/04/20 15:11:59 60:00 21324 9800 ims 9184 05/04/20 15:23:29 4:22 7465 4964 nxtgonpho APPLE 'PHONES no 9185 05/04/20 15:27:51 1:05 7529 5069 nxtgonpho APPLE 'PHONES ne 9186 05/04/20 15:28:55 1:25 5222 6055 nxtgonpho APPLE 'PHONES no 9187 05/04/20 15:28:56 1:25 6055 4934 nxtgonpho APPLE 'PHONES no 9188 05/04/20 15:30:21 0:35 6925 4964 nxtgonpho APPLE 'PHONES no 9189 05/04/20 15:30:55 2:42 5221 6055 nxtgonpho APPLE 'PHONES no 9190 05/04/20 15:30:56 2:42 6055 4933 nxtgonpho APPLE 'PHONES ne 9191 05/04/20 15:33:38 0:50 6053 4897 nxtgonpho APPLE 'PHONES ne 9192 05/04/20 15:34:28 12:37 20219 37661 nxtgonpho APPLE 'PHONES ne 9193 05/04/20 15:34:29 12:37 37661 19739 nxtgonpho APPLE 'PHONES ne 9194 05/04/20 15:47:06 2:32 0 0 nxtgonpho APPLE 'PHONES no 9195 05/04/20 15:49:37 9:11 7772 7017 nxtgonpho APPLE 'PHONES no 9196 05/04/20 15:49:38 9:11 7017 7484 nxtgonpho APPLE 'PHONES no 9197 05/04/20 15:58:49 19:47 78050 98861 nxtgonpho APPLE 'PHONES no 9198 05/04/20 16:11:59 60:00 8496 3004 ims 9199 05/04/20 16:18:35 2:21 4504 5859 nxtgonpho APPLE 'PHONES no 9200 05/04/20 16:18:36 2:22 5859 4216 nxtgonpho APPLE 'PHONES no 9201 05/04/20 16:20:57 0:49 5220 6107 nxtgonpho APPLE 'PHONES no 9202 05/04/20 16:20:58 0:49 6107 4932 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 380 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171300 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343358 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in / s 1 4zs ioAT&T , UTE. Run Date: 06/17/2020 Run Tine: Data Usage For: NM= Item Conn. Conn. Originating ET Bytos Bytes Apn =RI INSI MAKE MODEL Date Tame Number Up Dn (Luz) 9203 05/04/20 16:21:47 0:35 6341 5776 nxtgonpho APPLE !PHONES ne 9204 05/04/20 16:22:21 2:14 5220 6107 nxtgonpho APPLE !PHONES ne 9205 05/04/20 16:22:22 2:14 6107 4932 nxtgonpho APPLE !PHONES ne 9206 05/04/20 16:24:36 34:15 8257 6132 nxtgonpho APPLE !PHONES ne 9207 05/04/20 16:58:50 2:03 5222 6055 nxtgonpho APPLE !PHONES ne 9208 05/04/20 16:58:51 2:03 6055 4934 nxtgonpho APPLE !PHONES no 9209 05/04/20 17:00:54 12:41 6228 5006 nxtgonpho APPLE !PHONES no 9210 05/04/20 17:11:59 60:00 8480 3020 isms 9211 05/04/20 17:13:34 2:03 5117 6199 nxtgonpho APPLE !PHONES ne 9212 05/04/20 17:13:35 2:03 6055 4829 nxtgonpho APPLE !PHONES ne 9213 05/04/20 17:15:38 17:22 7754 5228 nxtgonpho APPLE !PHONES no 9214 05/04/20 17:32:59 2:09 5220 6107 nxtgonpho APPLE !PHONES ne 9215 05/04/20 17:33:00 2:09 6107 4932 nxtgonpho APPLE !PHONES ne 9216 05/04/20 17:35:09 8:40 6055 4901 nxtgonpho APPLE !PHONES ne 9217 05/04/20 17:43:48 2:26 5277 6209 nxtgonpho APPLE !PHONES ne 9218 05/04/20 17:43:50 2:25 6209 4989 nxtgonpho APPLE !PHONES ne 9219 05/04/20 17:46:15 3:58 6219 5125 nxtgonpho APPLE !PHONES ne 9220 05/04/20 17:50:12 22:00 13726 24680 nxtgonpho APPLE !PHONES ne 9221 05/04/20 17:50:13 22:00 24680 14077 nxtgonpho APPLE !PHONES ne 9222 05/04/20 18:11:59 60:00 8496 2928 isms 9223 05/04/20 18:12:13 4:40 48 0 nxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 381 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171301 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343359 MOBILITY gut. AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Tine: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn =RI INSI MAKE MODEL Date Time Up Dn (07C1 9224 05/04/20 18:16:52 1:58 4998 11569 nxtgonpho APPLE !PHONES no 9225 05/04/20 18:16:53 1:58 11569 4710 nxtgonpho APPLE !PHONES ne 9226 05/04/20 18:18:51 8:05 6873 4966 nxtgonpho APPLE !PHONES ne 9227 05/04/20 18:26:55 8:44 5221 6055 nxtgonpho APPLE !PHONES no 9228 05/04/20 18:26:56 8:44 6055 4933 nxtgonpho APPLE !PHONES no 9229 05/04/20 18:35:40 3:11 41645 7334 nxtgonpho APPLE !PHONES no 9230 05/04/20 18:38:50 3:02 5218 6037 nxtgonpho APPLE !PHONES no 9231 05/04/20 18:38:51 3:02 6037 4930 nxtgonpho APPLE !PHONES ne 9232 05/04/20 18:41:53 29:10 42701 58145 nxtgonpho APPLE !PHONES ne 9233 05/04/20 18:41:54 29:10 58145 42317 nxtgonpho APPLE !PHONES no 9234 05/04/20 19:11:04 3:23 8690 5512 nxtgonpho APPLE !PHONES no 9235 05/04/20 19:11:59 60:00 7140 2912 ims 9236 05/04/20 19:14:26 9:26 4607 5823 nxtgonpho APPLE !PHONES no 9237 05/04/20 19:14:28 9:25 5823 4319 nxtgonpho APPLE !PHONES no 9238 05/04/20 19:23:53 5:11 192 Onmtgonpho APPLE !PHONES no 9239 05/04/20 19:23:54 5:10 4608 5823 nxtgonpho APPLE !PHONES ne 9240 05/04/20 19:23:54 5:11 0 0 nxtgonpho APPLE !PHONES ne 9241 05/04/20 19:23:55 5:10 5823 4320 nxtgonpho APPLE !PHONES ne 9242 05/04/20 19:29:06 1:05 6055 4796 nxtgonpho APPLE !PHONES no 9243 05/04/20 19:30:10 0:46 5221 6107 nxtgonpho APPLE !PHONES no 9244 05/04/20 19:30:12 0:45 6107 4933 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 382 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171302 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343360 MOBILITY cro pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. .4 AT&T ‘•- Run Date: 06/17/2020 Run Time: Data Usage For: Sidi= Item Conn. Conn. Originating BT Bytes Bytes Apn nom IMSI MAKS MODEL Date Tame /lumbar Up Dn (UTC) 9245 05/04/20 19:30:57 0:38 6873 4965 nxtgonpho APPLE 'PEONES ne 9246 05/04/20 19:31:34 10:11 5285 6873 nxtgonpho APPLE 'PEONES ne 9247 05/04/20 19:31:35 10:11 6873 5627 nxtgonpho APPLE 'PEONES ne 9248 05/04/20 19:41:46 60:00 24906 29683 nxtgonpho APPLE 'PEONES ne 9249 05/04/20 20:11:59 60:00 17192 6264 ims 9250 05/04/20 20:41:46 12:35 0 1365 nxtgonpho APPLE 'PEONES ne 9251 05/04/20 20:54:20 2:02 5221 6055 nxtgonpho APPLE IPEOMES ne 9252 05/04/20 20:54:21 2:02 6055 4933 nxtgonpho APPLE IPEOMES no 9253 05/04/20 20:56:23 4:09 6107 4902 nxtgonpho APPLE 'PEONES ne 9254 05/04/20 21:00:31 3:13 5118 6055 nxtgonpho APPLE !PHONES ne 9255 05/04/20 21:00:32 3:13 6055 4830 nxtgonpho APPLE !PHONES ne 9256 05/04/20 21:03:45 2:21 6857 4966 nxtgonpho APPLE !PHONES ne 9257 05/04/20 21:06:05 2:33 5220 6055 nxtgonpho APPLE !PHONES no 9258 05/04/20 21:06:06 2:33 6055 4932 nxtgonpho APPLE !PHONES no 9259 05/04/20 21:08:38 2:43 5117 6107 nxtgonpho APPLE !PHONES no 9260 05/04/20 21:08:39 2:43 6107 4829 nxtgonpho APPLE !PHONES no 9261 05/04/20 21:11:21 9:02 5217 6105 nxtgonpho APPLE !PHONES no 9262 05/04/20 21:11:22 9:02 6105 4929 nxtgonpho APPLE !PHONES no 9263 05/04/20 21:11:59 60:00 15388 9692 ims 9264 05/04/20 21:20:24 3:02 9728 9803 nxtgonpho APPLE !PHONES no 9265 05/04/20 21:20:25 3:02 9803 9440 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 383 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171303 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343361 MOBILITY cro pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: 06/17/2020 Run Tine: Data Usage For: NM= Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ IMSI MAKE MODEL Date Time Number Up Dn (07C) 9266 05/04/20 21:23:27 11:15 7820 8864 nxtgonpho APPLE 'PHONES no 9267 05/04/20 21:23:28 11:15 8864 7532 nxtgonpho APPLE 'PHONES no 9268 05/04/20 21:34:43 1:08 0 0 nxtgonpho APPLE 'PHONES no 9269 05/04/20 21:35:50 4:12 288 48 nxtgonpho APPLE 'PHONES no 9270 05/04/20 21:35:52 4:11 48 0 nxtgonpho APPLE 'PHONES no 9271 05/04/20 21:40:03 3:01 6873 4966 nxtgonpho APPLE 'PHONES no 9272 05/04/20 21:43:03 2:07 5216 6105 nxtgonpho APPLE 'PHONES ne 9273 05/04/20 21:43:04 2:07 6105 4928 nxtgonpho APPLE 'PHONES ne 9274 05/04/20 21:45:11 0:56 7581 5070 nxtgonpho APPLE 'PHONES ne 9275 05/04/20 21:46:06 2:20 192 0 nxtgonpho APPLE 'PHONES ne 9276 05/04/20 21:46:07 2:19 5388 6329 nxtgonpho APPLE 'PHONES ne 9277 05/04/20 21:46:08 2:19 6329 5100 nxtgonpho APPLE 'PHONES ne 9278 05/04/20 21:46:08 2:19 0 0 nxtgonpho APPLE 'PHONES no 9279 05/04/20 21:48:27 1:14 8722 5271 nxtgonpho APPLE 'PHONES no 9280 05/04/20 21:49:40 2:17 5285 6873 nxtgonpho APPLE 'PHONES no 9281 05/04/20 21:49:41 2:17 6873 4997 nxtgonpho APPLE 'PHONES no 9282 05/04/20 21:51:58 1:19 7465 4966 nxtgonpho APPLE 'PHONES ne 9283 05/04/20 21:53:17 2:22 5216 6105 nxtgonpho APPLE 'PHONES ne 9284 05/04/20 21:53:18 2:22 6105 4928 nxtgonpho APPLE 'PHONES no 9285 05/04/20 21:55:40 1:26 6871 4960 nxtgonpho APPLE 'PHONES ne 9286 05/04/20 21:57:05 2:26 5281 7463 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 384 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171304 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343362 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in 1/4-.rns AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating AT Bytes Bytes Apn MMAI IMSI MAKE MOD= Date Time Number Up Dn (OTC) 9287 05/04/20 21:57:06 2:26 7463 4993 nxtgenpho APPLE 'PROMO ne 9288 05/04/20 21:59:32 1:43 6055 4900 nxtgenpho APPLE 'PROMO ne 9289 05/04/20 22:01:14 2:30 5220 6055 nxtgenpho APPLE 'PROMO ne 9290 05/04/20 22:01:15 2:30 6055 4932 nxtgenpho APPLE 'PROMO ne 9291 05/04/20 22:03:45 2:18 48 0 nxtgenpho APPLE !PHONES ne 9292 05/04/20 22:06:02 14:31 5221 6107 nxtgenpho APPLE !PHONES ne 9293 05/04/20 22:06:03 14:31 6107 17893 nxtgenpho APPLE !PHONES ne 9294 05/04/20 22:10:14 17:47 2503984 3457584 ims 9295 05/04/20 22:11:59 60:00 22572 13164 ims 9296 05/04/20 22:20:34 0:53 7447 4960 nxtgenpho APPLE !PHONES ne 9297 05/04/20 22:21:26 2:58 7997 9247 nxtgenpho APPLE !PHONES ne 9298 05/04/20 22:21:27 2:58 9247 7709 nxtgenpho APPLE !PHONES no 9299 05/04/20 22:24:25 3:03 48 0 nxtgonpho APPLE !PHONES no 9300 05/04/20 22:27:27 2:43 288 48 nxtgonpho APPLE !PHONES no 9301 05/04/20 22:27:28 2:43 48 0 nxtgonpho APPLE !PHONES no 9302 05/04/20 22:30:12 1:13 6067 5610 nxtgenpho APPLE !PHONES ne 9303 05/04/20 22:31:24 4:21 5116 6055 nxtgenpho APPLE !PHONES ne 9304 05/04/20 22:31:25 4:21 6055 4828 nxtgonpho APPLE !PHONES no 9305 05/04/20 22:35:46 5:27 6055 4797 nxtgonpho APPLE !PHONES no 9306 05/04/20 22:41:13 2:32 5113 6105 nxtgenpho APPLE !PHONES ne 9307 05/04/20 22:41:14 2:32 6105 4825 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 385 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171305 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343363 MOBILITY `s PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in / ...:7•1,;•AT&T 1 4 UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating CT Bytes Bytes Apn L@1 INS! MAKE MODEL Date Time Number Up Dn (UTC) 9308 05/04/20 22:43:46 1:19 6067 5608 nxtgenpho APPLE 'PHONES ne 9309 05/04/20 22:45:04 6:29 5112 6105 nxtgenpho APPLE 'PHONES ne 9310 05/04/20 22:45:05 6:29 6105 4824 nxtgenpho APPLE 'PHONES ne 9311 05/04/20 22:48:38 0:29 1950 12442 ims 9312 05/04/20 22:53:34 1:42 6107 4900 nxtgenpho APPLE 'PHONES ne 9313 05/04/20 22:55:15 6:30 5280 6871 nxtgenpho APPLE 'PHONES ne 9314 05/04/20 22:55:16 6:30 6871 4992 nxtgenpho APPLE 'PHONES ne 9315 05/04/20 23:01:46 9:23 6053 4896 nxtgenpho APPLE 'PHONES ne 9316 05/04/20 23:11:09 15:24 5222 6228 nxtgenpho APPLE 'PHONES ne 9317 05/04/20 23:11:10 15:24 6228 4934 nxtgenpho APPLE 'PHONES ne 9318 05/04/20 23:11:59 60:00 22312 11460 ims 9319 05/04/20 23:22:32 0:28 2176 13538 ims 9320 05/04/20 23:26:34 1:25 48 0nmtgonpho APPLE 'PHONES ne 9321 05/04/20 23:27:58 14:28 17147 18838 nxtgenpho APPLE 'PHONES ne 9322 05/04/20 23:27:59 14:28 18838 17699 nxtgenpho APPLE 'PHONES ne 9323 05/04/20 23:42:27 0:59 6055 4901 nxtgenpho APPLE 'PHONES ne 9324 05/04/20 23:43:25 8:32 5284 6208 nxtgenpho APPLE 'PHONES ne 9325 05/04/20 23:43:27 8:31 6208 4996 nxtgenpho APPLE 'PHONES ne 9326 05/04/20 23:51:58 0:49 7899 5600 nxtgenpho APPLE 'PHONES ne 9327 05/04/20 23:52:46 2:24 5116 6055 nxtgenpho APPLE 'PHONES ne 9328 05/04/20 23:52:47 2:24 6055 4828 nxtgenpho APPLE 'PHONES ne 9329 05/04/20 23:55:11 5:25 6873 4966 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 386 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171306 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343364 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in •-•.0 AT&T UTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn nom naz MBE MCOEI. Date Time Number Up Dn (OTC) 9330 05/05/20 00:00:35 8:52 5117 6091 nxtgonpho APPLE 'PHONES no 9331 05/05/20 00:00:36 8:52 6091 4829 nxtgonpho APPLE 'PHONES no 9332 05/05/20 00:09:27 1:06 5220 6055 nxtgonpho APPLE 'PHONES no 9333 05/05/20 00:09:29 1:05 6055 4932 nxtgonpho APPLE 'PHONES no 9334 05/05/20 00:10:34 3:29 7184 4965 nxtgonpho APPLE 'PHONES no 9335 05/05/20 00:11:59 60:00 11904 4484 ims 9336 05/05/20 00:14:02 5:57 5221 6107 nxtgonpho APPLE 'PHONES no 9337 05/05/20 00:14:04 5:56 6107 4933 nxtgonpho APPLE 'PHONES no 9338 05/05/20 00:20:00 2:14 6052 4892 nxtgonpho APPLE 'PHONES no 9339 05/05/20 00:22:14 33:28 16485 14579 nxtgonpho APPLE 'PHONES no 9340 05/05/20 00:22:15 33:28 14579 16680 nxtgonpho APPLE 'PHONES ne 9341 05/05/20 00:55:43 2:29 192 0 nxtgonpho APPLE 'PHONES ne 9342 05/05/20 00:55:44 2:28 5117 6039 nxtgonpho APPLE 'PHONES ne 9343 05/05/20 00:55:44 2:29 0 0 nxtgonpho APPLE 'PHONES no 9344 05/05/20 00:55:45 2:28 6039 4829 nxtgonpho APPLE 'PHONES no 9345 05/05/20 00:58:13 2:02 48 0 nxtgonpho APPLE 'PHONES ne 9346 05/05/20 01:00:14 2:18 5113 6105 nxtgonpho APPLE 'PHONES no 9347 05/05/20 01:00:16 2:17 6105 4825 nxtgonpho APPLE 'PHONES no 9348 05/05/20 01:02:33 0:59 7463 4961 nxtgonpho APPLE 'PHONES no 9349 05/05/20 01:03:31 2:39 5116 6055 nxtgonpho APPLE 'PHONES no 9350 05/05/20 01:03:32 2:39 6055 4828 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 387 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171307 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343365 MOBILITY ro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .s.AT&T ‘•- OTC. Run Data: 06/17/2020 Run Time: Data Usage For: SS= Item Conn. Conn. Originating ET Bytes Bytes Apn !MST MAKE MODEL Date Time Number Up Dn (OTC) 9351 05/05/20 01:06:10 2:19 5112 6053 nxtgonpho APPLE 'PHONES no 9352 05/05/20 01:06:12 2:19 6053 4824 nxtgonpho APPLE 'PHONES no 9353 05/05/20 01:08:31 1:32 7526 5061 nxtgonpho APPLE 'PHONES no 9354 05/05/20 01:10:03 15:12 5537 6408 nxtgonpho APPLE 'PHONES ne 9355 05/05/20 01:10:04 15:12 6408 5249 nxtgonpho APPLE 'PHONES ne 9356 05/05/20 01:11:59 60:00 12012 4752 ims 9357 05/05/20 01:25:16 0:58 7529 5070 nxtgonpho APPLE 'PHONES no 9358 05/05/20 01:26:13 2:20 5113 6053 nxtgonpho APPLE 'PHONES no 9359 05/05/20 01:26:14 2:20 6053 4825 nxtgonpho APPLE 'PHONES no 9360 05/05/20 01:28:34 0:41 48 0 nxtgonpho APPLE 'PHONES no 9361 05/05/20 01:29:14 2:32 5118 6055 nxtgonpho APPLE 'PHONES ne 9362 05/05/20 01:29:15 2:32 6055 4830 nxtgonpho APPLE 'PHONES ne 9363 05/05/20 01:31:47 6:04 7593 5175 nxtgonpho APPLE 'PHONES no 9364 05/05/20 01:37:50 2:25 5117 6107 nxtgonpho APPLE 'PHONES no 9365 05/05/20 01:37:51 2:25 6107 4829 nxtgonpho APPLE 'PHONES no 9366 05/05/20 01:40:16 11:51 7465 6016 nxtgonpho APPLE 'PHONES no 9367 05/05/20 01:52:06 0:42 5164 6052 nxtgonpho APPLE 'PHONES no 9368 05/05/20 01:52:07 0:43 6052 4876 nxtgonpho APPLE 'PHONES no 9369 05/05/20 01:52:49 0:39 7465 4966 nxtgonpho APPLE 'PHONES no 9370 05/05/20 01:53:28 110:00 31037 35443 nxtgonpho APPLE 'PHONES no 9371 05/05/20 01:53:29 60:00 27646 27453 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 388 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171308 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343366 MOBILITY 45, pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating CT Bytes Bytes Apn LBSI IMSI MAKE MODEL Date Tame Number Up Dn (UTC) 9372 05/05/20 02:11:59 60:00 7264 2912 ism 9373 05/05/20 02:53:29 60:00 7797 7097 nxtgenpho APPLE 'PEONES ne 9374 05/05/20 03:11:59 60:00 8712 3068 ism 9375 05/05/20 03:43:28 132:53 117220 102461 nxtgenpho APPLE 'PEONES ne 9376 05/05/20 03:53:29 60:00 36703 51546 nxtgenpho APPLE 'PEONES ne 9377 05/05/20 04:11:59 60:00 7156 2804 ims 9378 05/05/20 04:53:29 60:00 65758 65845 nxtgenpho APPLE 'PROMO ne 9379 05/05/20 05:11:59 60:00 13708 4872 ims 9380 05/05/20 05:53:29 2:53 0 0 nxtgenphe APPLE 'PHONES ne 9381 05/05/20 05:56:21 9:18 5222 6055 nxtgenpho APPLE 'PHONES ne 9382 05/05/20 05:56:22 9:19 6055 4934 nxtgenpho APPLE 'PHONES ne 9383 05/05/20 06:05:41 3:44 7529 5069 nxtgenpho APPLE 'PHONES ne 9384 05/05/20 06:09:24 3:59 5218 6053 nxtgenpho APPLE 'PHONES ne 9385 05/05/20 06:09:26 3:58 6053 4930 nxtgenpho APPLE !PHONES ne 9386 05/05/20 06:11:59 60:00 10440 4196 ims 9387 05/05/20 06:13:23 3:00 192 0 nxtgenpho APPLE !PHONES ne 9388 05/05/20 06:13:24 2:59 5221 6055 nxtgenpho APPLE !PHONES ne 9389 05/05/20 06:13:25 3:00 0 0 nxtgenpho APPLE !PHONES ne 9390 05/05/20 06:13:26 2:59 6055 4933 nxtgenpho APPLE !PHONES ne 9391 05/05/20 06:16:24 6:48 6668 10323 nxtgenpho APPLE !PHONES ne 9392 05/05/20 06:16:25 6:48 10323 6380 nxtgenpho APPLE !PHONES ne 9393 05/05/20 06:23:13 2:14 7593 5175 nxtgenpho APPLE !PHONES ne 9394 05/05/20 06:25:26 3:28 5221 6107 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 389 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171309 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343367 MOBILITY cre ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Sidi= Item Conn. Conn. Originating ET Bytes Bytes Apn TIORT /AMY MAKE MODEL Date Time Number Up Dn (OTC) 9395 05/05/20 06:25:27 3:28 6107 4933 nxtgonpho APPLE !PHONES no 9396 05/05/20 06:28:54 7:35 7727 8683 nxtgonpho APPLE !PHONES no 9397 05/05/20 06:28:55 7:35 8683 7343 nxtgonpho APPLE !PHONES no 9398 05/05/20 06:36:30 1:35 6067 5606 nxtgonpho APPLE !PHONES no 9399 05/05/20 06:38:04 4:51 5220 6107 nxtgonpho APPLE !PHONES no 9400 05/05/20 06:38:05 4:51 6107 4932 nxtgonpho APPLE !PHONES no 9401 05/05/20 06:42:55 7:48 5112 6053 nxtgonpho APPLE !PHONES no 9402 05/05/20 06:42:56 7:48 6053 4824 nxtgonpho APPLE !PHONES no 9403 05/05/20 06:50:44 2:11 5228 6205 nxtgonpho APPLE !PHONES no 9404 05/05/20 06:50:45 2:11 6205 4940 nxtgonpho APPLE !PHONES no 9405 05/05/20 06:52:56 1:33 7527 5065 nxtgonpho APPLE !PHONES no 9406 05/05/20 06:54:28 7:45 5222 6107 nxtgonpho APPLE !PHONES no 9407 05/05/20 06:54:29 7:46 6107 4934 nxtgonpho APPLE !PHONES no 9408 05/05/20 07:02:14 2:11 5221 6055 nxtgonpho APPLE !PHONES no 9409 05/05/20 07:02:15 2:11 6055 4933 nxtgonpho APPLE !PHONES no 9410 05/05/20 07:04:26 0:46 6933 5026 nxtgonpho APPLE !PHONES no 9411 05/05/20 07:05:11 1:29 5221 6055 nxtgenpho APPLE !PHONES ne 9412 05/05/20 07:05:12 1:29 6055 4933 nxtgonpho APPLE !PHONES ne 9413 05/05/20 07:06:41 0:50 48 0 nxtgonpho APPLE !PHONES no 9414 05/05/20 07:07:31 3:34 5217 6105 nxtgonpho APPLE !PHONES no 9415 05/05/20 07:07:32 3:34 6105 4929 nxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 390 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171310 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343368 MOBILITY „so pm. AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ST Bytes Bytes Apn Tlat INSI BABE NOVEL Date Timo Numbor Up Dn (OTC) 9416 05/05/20 07:11:05 2:53 5163 6104 nxtgonpho APPLE 'PHONES no 9417 05/05/20 07:11:06 2:53 6104 4875 nxtgonpho APPLE 'PHONES no 9418 05/05/20 07:11:59 60:00 3408 1340 ims 9419 05/05/20 07:13:59 4:41 5216 6053 nxtgonpho APPLE 'PHONES no 9420 05/05/20 07:14:00 4:41 6053 4928 nxtgonpho APPLE 'PHONES no 9421 05/05/20 07:18:41 1:20 48 0 nxtgonpho APPLE 'PHONES no 9422 05/05/20 07:20:00 2:11 5221 6107 nxtgonpho APPLE 'PHONES no 9423 05/05/20 07:20:02 2:11 6107 4933 nxtgonpho APPLE 'PHONES no 9424 05/05/20 07:22:12 17:38 15311 17941 nxtgonpho APPLE 'PHONES no 9425 05/05/20 07:22:13 17:38 17941 15968 nxtgonpho APPLE 'PHONES no 9426 05/05/20 07:37:17 60:00 16811 9968 ims 9427 05/05/20 07:39:51 2:28 7567 5231 nxtgonpho APPLE 'PHONES ne 9428 05/05/20 07:42:18 8:46 5165 6052 nxtgonpho APPLE 'PHONES ne 9429 05/05/20 07:42:19 8:46 6052 4877 nxtgonpho APPLE 'PHONES ne 9430 05/05/20 07:51:04 6:33 192 0 nxtgonpho APPLE 'PHONES no 9431 05/05/20 07:51:06 6:31 288 48 nxtgonpho APPLE 'PHONES no 9432 05/05/20 07:51:06 6:32 0 0 nxtgonpho APPLE 'PHONES no 9433 05/05/20 07:51:07 6:31 48 0 nxtgonpho APPLE 'PHONES no 9434 05/05/20 07:57:38 7:11 4608 5823 nxtgonpho APPLE 'PHONES no 9435 05/05/20 07:57:39 7:11 5823 4320 nxtgonpho APPLE 'PHONES no 9436 05/05/20 08:04:50 1:37 6873 4965 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 391 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171311 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343369 BIBMILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in 'AT&T AT&T UTC. Run DEGO: 06/17/2020 Run Tine: Data Usage For: Item Conn. Conn. Originating BT Bytos Bytes Apn INELI IM9I MAKE MODEL Data Time Number Up Dn (OTC) 9437 05/05/20 C 2:20 288 48 nxtgonpho APPLE 'PHONES no 9438 05/05/20 C 2:20 48 0 nxtgonpho APPLE 'PHONES no 9439 05/05/20 C 0:34 302 425 nxtgonpho APPLE 'PHONES no 9440 05/05/20 C 1:54 288 48 nxtgonpho APPLE 'PHONES DO 9441 05/05/20 C 1:53 48 0 nxtgonpho APPLE 'PHONES DO 9442 05/05/20 C 1:03 48 0 nxtgonpho APPLE 'PHONES DO 9443 05/05/20 C 60:00 0 0 ims 9444 05/05/20 C 18:04 2528 1768 nxtgonpho APPLE 'PHONES no 9445 05/05/20 C 18:04 1768 1952 nxtgonpho APPLE 'PHONES no 9446 05/05/20 C 138:31 192 0 nxtgonpho APPLE 'PHONES DO 9447 05/05/20 C 60:00 0 0 nxtgonpho APPLE 'PHONES ne 9448 05/05/20 C 138:30 7281 7109 nxtgonpho APPLE 'PHONES DO 9449 05/05/20 C 60:00 7109 8682 nxtgonpho APPLE 'PHONES DO 9450 05/05/20 C 60:00 6816 2648 ims 9451 05/05/20 C 60:00 0 0 ims 9452 05/05/20 C 60:00 0 0 nxtgonpho APPLE 'PHONES DO 9453 05/05/20 C 60:00 0 92 nxtgonpho APPLE 'PHONES DO 9454 05/05/20 C 60:00 6908 2880 ims 9455 05/05/20 1 60:00 0 0 ims 9456 05/05/20 1 18:32 0 0 nxtgonpho APPLE 'PHONES DO 9457 05/05/20 1 18:31 0 0 nxtgonpho APPLE 'PHONES DO 9458 05/05/20 1 60:00 7048 2664 ims 9459 05/05/20 1 19:44 0 0 ims 9460 05/05/20 1 60:00 10564 4328 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 392 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171312 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343370 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: IS= Item Conn. Conn. Originating ET Bytes Bytes Apn ISIS! WA= MOWS. Date Tame Number Up Dn (OTC) 9461 05/05/20 12:37:17 60:00 12012 4396 ims -1 9462 05/05/20 13:37:17 60:00 7048 2772 ims -1 9463 05/05/20 14:37:17 60:00 8604 3144 ims -1 9464 05/05/20 15:37:17 60:00 13584 4700 ims -1 9465 05/05/20 16:37:17 60:00 6816 2756 ims -1 9466 05/05/20 17:37:17 60:00 12012 4612 ims -1 9467 05/05/20 18:37:17 60:00 8604 2896 ims -1 9468 05/05/20 19:37:17 60:00 8156 2988 ims -1 9469 05/05/20 20:37:17 60:00 48516 33388 ims -1 9470 05/05/20 20:48:56 0:28 1816 13698 ims -1 9471 05/05/20 21:24:53 0:31 2905 26521 ims -1 9472 05/05/20 21:36:36 0:42 10886 16120 ims -1 9473 05/05/20 21:37:17 60:00 13732 5964 ims -1 9474 05/05/20 22:37:17 60:00 10580 4272 ims -1 9475 05/05/20 23:37:17 60:00 7264 2772 ims -1 9476 05/06/20 00:37:17 60:00 46876 28300 ims -1 9477 05/06/20 00:40:44 0:30 2586 15456 ims -1 9478 05/06/20 00:41:32 0:01 0 0 ims -1 9479 05/06/20 00:41:36 0:08 3097 5761 ims -1 9480 05/06/20 00:41:47 0:09 5571 18807 ims -1 9481 05/06/20 01:37:17 20:07 216 108 ims -1 9482 05/06/20 01:52:03 60:00 15221 9018 ims -1 9483 05/06/20 02:52:03 60:00 10176 3300 ims -1 9484 05/06/20 03:52:03 60:00 8496 3036 ims -1 9485 05/06/20 04:52:03 60:00 8496 2928 ims -1 9486 05/06/20 05:29:39 60:00 15001 8566 ims -1 9487 05/06/20 05:52:03 60:00 0 0 ims -1 9488 05/06/20 06:29:39 60:00 7048 2772 ims -1 9489 05/06/20 06:52:03 60:00 0 0 ims -1 9490 05/06/20 07:29:39 60:00 6816 2648 ims -1 9491 05/06/20 07:52:03 27:06 0 0 ims -1 9492 05/06/20 08:19:09 60:00 16823 11964 ims -1 9493 05/06/20 08:29:39 60:00 0 0 ims -1 9494 05/06/20 09:19:09 60:00 8388 2896 ims -1 9495 05/06/20 09:29:39 60:00 0 0 ims -1 9496 05/06/20 10:19:09 60:00 7000 2756 ims -1 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 393 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171313 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343371 MOBILITY e s, pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn MIMI INS! WANE MOMS Date Time et, ..1-0.," Up Dn (OTC/ 9497 05/06/20 10:29:39 60:00 0 0 ims —1 9498 05/06/20 11:19:09 60:00 10332 4188 ims —1 9499 05/06/20 11:29:39 41:51 0 0 ims —1 9500 05/06/20 12:19:09 60:00 10904 4396 ims —1 9501 05/06/20 13:19:09 60:00 10176 3144 ims —1 9502 05/06/20 14:19:09 60:00 10224 4204 ims —1 9503 05/06/20 15:19:09 60:00 10284 3252 ims —1 9504 05/06/20 16:19:09 60:00 8944 3252 ims —1 9505 05/06/20 17:19:09 60:00 15420 6060 ims —1 9506 05/06/20 18:19:09 48:38 8000 5480 ims —1 9507 05/06/20 18:58:46 3:12 13897 10790 ims —1 9508 05/06/20 19:02:39 60:00 16399 10236 ims —1 9509 05/06/20 20:02:39 60:00 8480 2896 ims —1 9510 05/06/20 21:02:39 60:00 10008 3972 ims —1 9511 05/06/20 22:02:39 60:00 8712 3112 ims —1 9512 05/06/20 23:02:39 60:00 0 0 ims —1 9513 05/06/20 23:15:42 60:00 18753 9868 ims —1 9514 05/07/20 00:02:39 60:00 0 0 ims —1 9515 05/07/20 00:15:42 60:00 6924 2756 ims —1 9516 05/07/20 01:02:39 60:00 0 0 ims —1 9517 05/07/20 01:15:42 60:00 8604 2928 ims —1 9518 05/07/20 02:02:39 52:29 0 0 ims —1 9519 05/07/20 02:15:42 60:00 6924 2588 ims —1 9520 05/07/20 03:15:42 60:00 18564 6264 ims —1 9521 05/07/20 04:15:42 60:00 10176 3284 ims —1 9522 05/07/20 05:15:42 60:00 10240 4360 ims —1 9523 05/07/20 06:15:42 60:00 8944 3268 ims —1 9524 05/07/20 07:15:42 60:00 6924 2896 ims —1 9525 05/07/20 08:15:42 60:00 15096 5660 ims —1 9526 05/07/20 09:15:42 60:00 8928 3268 ims —1 9527 05/07/20 10:15:42 60:00 9960 3176 ims —1 9528 05/07/20 11:15:42 34:25 3516 1232 ims —1 9529 05/07/20 11:47:06 34:37 11893 7738 ims —1 9530 05/07/20 12:21:54 60:00 15463 9040 ims —1 9531 05/07/20 13:21:54 60:00 10068 3144 ims —1 9532 05/07/20 14:21:54 60:00 21356 15812 ims —1 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 394 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171314 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343372 MOBILITY / 1 44e. pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating AT Bytes Bytes Apn MIMI IIa7I 14AltE MODEL Date Time Number Up Dn (UTC) 9533 05/07/20 14:49:09 0:32 2536 14379 ims 9534 05/07/20 15:21:54 60:00 7220 3004 ims 9535 05/07/20 16:21:54 60:00 28200 18868 ims 9536 05/07/20 17:02:53 0:35 2394 14527 ims 9537 05/07/20 17:21:54 41:35 22984 17548 ims 9538 05/07/20 17:47:52 0:33 4501 16129 ims 9539 05/07/20 18:05:33 60:00 15313 9310 ims 9540 05/07/20 19:05:33 60:00 27184 17864 ims 9541 05/07/20 19:11:56 0:30 2653 13920 ims 9542 05/07/20 19:16:15 0:07 0 104 ims 9543 05/07/20 20:05:33 40:01 3532 1836 ims 9544 05/07/20 23:13:14 1:05 13325 11049 ims 9545 05/07/20 23:32:34 60:00 77325 44204 ims 9546 05/07/20 23:32:43 0:58 6037 4896 nxtgenpho APPLE 'PHONES ne 9547 05/07/20 23:32:47 0:29 4810 15192 ims 9548 05/07/20 23:33:41 15:43 30800 40459 nxtgenpho APPLE 'PHONES ne 9549 05/07/20 23:33:41 15:44 40459 31256 nxtgenpho APPLE 'PHONES no 9550 05/07/20 23:33:45 0:02 0 0 ims 9551 05/07/20 23:33:54 0:41 8915 16172 ims 9552 05/07/20 23:49:25 15:19 8198 15512 nxtgenpho APPLE 'PHONES ne 9553 05/07/20 23:49:26 15:19 15512 7910 nxtgenpho APPLE 'PHONES ne 9554 05/08/20 00:04:44 17:37 21748 37123 nxtgenpho APPLE 'PHONES ne 9555 05/08/20 00:04:45 17:37 37123 21268 nxtgenpho APPLE 'PHONES ne 9556 05/08/20 00:18:57 0:28 1942 18297 ims 9557 05/08/20 00:22:22 4:28 7529 5070 nxtgenpho APPLE 'PHONES ne 9558 05/08/20 00:26:49 24:56 5851 6536 nxtgenpho APPLE 'PHONES ne 9559 05/08/20 00:26:50 24:56 6536 5563 nxtgenpho APPLE 'PHONES ne 9560 05/08/20 00:32:34 60:00 10160 3176 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 395 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171315 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343373 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: dal= Item Conn. Conn. Originating 8C Bytes Bytes Apn ZOOM INSI MAKE MODEL Date Time Up Dn (OTC( 9561 05/08/20 00:51:46 4:14 5875 4321 nxtgonpho APPLE !PHONES no 9562 05/08/20 00:56:00 1:47 5221 6107 nxtgonpho APPLE !PHONES no 9563 05/08/20 00:56:01 1:47 6107 4933 nxtgonpho APPLE !PHONES no 9564 05/08/20 00:57:48 38:44 10174 11093 nxtgonpho APPLE !PHONES no 9565 05/08/20 01:32:34 60:00 6924 2680 ims 9566 05/08/20 01:36:31 1:57 5285 6925 nxtgonpho APPLE !PHONES no 9567 05/08/20 01:36:32 1:57 6925 4997 nxtgonpho APPLE !PHONES no 9568 05/08/20 01:38:29 6:27 7529 5070 nxtgonpho APPLE !PHONES no 9569 05/08/20 01:44:55 2:03 6072 6437 nxtgonpho APPLE !PHONES no 9570 05/08/20 01:44:56 2:03 6437 5784 nxtgonpho APPLE !PHONES no 9571 05/08/20 01:46:59 5:21 35763 29661 nxtgonpho APPLE !PHONES no 9572 05/08/20 01:52:19 2:03 5221 6055 nxtgonpho APPLE !PHONES no 9573 05/08/20 01:52:20 2:03 6055 4933 nxtgonpho APPLE !PHONES no 9574 05/08/20 01:54:23 12:08 29799 21807 nxtgonpho APPLE !PHONES no 9575 05/08/20 02:06:30 2:16 5756 10555 nxtgonpho APPLE !PHONES no 9576 05/08/20 02:06:32 2:15 10555 5468 nxtgonpho APPLE !PHONES no 9577 05/08/20 02:08:47 18:24 68368 11439 nxtgonpho APPLE !PHONES no 9578 05/08/20 02:27:10 0:58 5222 6023 nxtgonpho APPLE !PHONES no 9579 05/08/20 02:27:12 0:57 6023 4934 nxtgonpho APPLE !PHONES no 9580 05/08/20 02:28:09 2:10 5390 6809 nxtgonpho APPLE !PHONES no 9581 05/08/20 02:28:10 2:10 6809 5102 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 396 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171316 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343374 MOBILITY e• pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. •--ss AT&T Run Date: 06/17/2020 Run Ti..: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn =MI INSI MAKE MODEL Date Ti.. Number Up Dn (OTC) 9582 05/08/20 02:30:20 24:25 10926 15007 nxtgonphe APPLE !PHONES ne 9583 05/08/20 02:32:34 14:39 5212 1712 ims APPLE !PHONES 9584 05/08/20 02:47:12 0:46 81196 4612 ims APPLE !PHONES 9585 05/08/20 02:47:13 0:45 12268 4612 ims APPLE !PHONES 9586 05/08/20 02:47:58 60:00 13476 4516 ims APPLE !PHONES 9587 05/08/20 02:54:44 2:04 5116 6023nxtgonphe APPLE !PHONES ne 9588 05/08/20 02:54:46 2:03 6023 4828 nxtgonphe APPLE !PHONES ne 9589 05/08/20 02:56:49 11:48 6438 5421 nxtgonphe APPLE !PHONES ne 9590 05/08/20 03:08:37 30:00 19917 31074 nxtgonphe APPLE !PHONES ne 9591 05/08/20 03:08:38 60:00 60066 41117 nxtgonphe APPLE !PHONES ne 9592 05/08/20 03:38:37 34:47 20279 28992 nxtgonphe APPLE !PHONES ne 9593 05/08/20 03:47:58 60:00 10440 4396 ims APPLE !PHONES 9594 05/08/20 04:08:38 4:47 0 0 nxtgonphe APPLE !PHONES ne 9595 05/08/20 04:13:25 0:05 0 0 nxtgonphe APPLE !PHONES ne 9596 05/08/20 04:14:06 31:48 12865 13586 nxtgonphe APPLE !PHONES ne 9597 05/08/20 04:14:07 31:48 13586 13207 nxtgonphe APPLE !PHONES ne 9598 05/08/20 04:45:55 8:47 5218 6021 nxtgonphe APPLE !PHONES ne 9599 05/08/20 04:45:56 8:47 6021 4930 nxtgonphe APPLE !PHONES ne 9600 05/08/20 04:47:58 60:00 6816 2788 ims APPLE !PHONES 9601 05/08/20 04:54:42 2:13 5221 6023nxtgonphe APPLE !PHONES ne 9602 05/08/20 04:54:43 2:13 6023 4933 nxtgonphe APPLE !PHONES ne 9603 05/08/20 04:56:56 1:09 0 0 nxtgonphe APPLE !PHONES ne 9604 05/08/20 04:58:04 8:22 5693 6287 nxtgonphe APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 397 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171317 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343375 MOBILITY cro pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. .a# AT&T ••-. Run Dato: 06/17/2020 Run Tine: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn nom INSI MAKE MODEL Date Time Number Up Dn lu7C1 9605 05/08/20 04:58:05 8:22 6287 5309 nxtgonpho APPLE 'PHONES no 9606 05/08/20 05:06:27 0:05 0 Onmtgonpho APPLE 'PHONES no 9607 05/08/20 05:06:35 7:56 7497 5174 nxtgonpho APPLE 'PHONES no 9608 05/08/20 05:14:30 2:05 5281 6135 nxtgonpho APPLE 'PHONES no 9609 05/08/20 05:14:31 2:05 6135 4993 nxtgonpho APPLE 'PHONES no 9610 05/08/20 05:16:36 11:35 6280 5129 nxtgonpho APPLE 'PHONES no 9611 05/08/20 05:28:10 21:08 7354 7176 nxtgonpho APPLE 'PHONES no 9612 05/08/20 05:28:11 21:08 7176 7066 nxtgenpho APPLE 'PHONES ne 9613 05/08/20 05:47:58 60:00 8388 2928 ims APPLE 'PHONES 9614 05/08/20 05:49:19 1:18 48 0 nxtgonpho APPLE 'PHONES no 9615 05/08/20 05:50:37 31:28 5763 6786 nxtgonpho APPLE 'PHONES no 9616 05/08/20 05:50:38 31:28 6786 5475 nxtgonpho APPLE 'PHONES no 9617 05/08/20 06:22:06 1:37 6127 4961 nxtgonpho APPLE 'PHONES no 9618 05/08/20 06:23:42 5:38 5281 6083 nxtgonpho APPLE 'PHONES no 9619 05/08/20 06:23:44 5:37 6083 4993 nxtgonpho APPLE 'PHONES no 9620 05/08/20 06:29:21 1:05 0 0 nxtgonpho APPLE 'PHONES no 9621 05/08/20 06:30:26 2:09 5220 6023 nxtgonpho APPLE 'PHONES ne 9622 05/08/20 06:30:27 2:09 6023 4932 nxtgonpho APPLE 'PHONES ne 9623 05/08/20 06:32:36 4:27 7561 5279 nxtgonpho APPLE 'PHONES ne 9624 05/08/20 06:37:02 7:25 5218 6073 nxtgonpho APPLE 'PHONES ne 9625 05/08/20 06:37:03 7:25 6073 4930 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 398 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171318 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343376 MOBILITY 45, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn DOOM IMSI MEE MODEL Date Time Up Dn (OTC) 9626 05/08/20 06:42:35 60:00 16895 9156 isms 9627 05/08/20 06:44:28 2:03 7497 5071 nxtgonpho APPLE 'PEONES no 9628 05/08/20 06:46:30 62:49 31824 36266 nxtgonpho APPLE 'PEONES no 9629 05/08/20 06:46:31 60:00 36266 33759 nxtgonpho APPLE !PEONES no 9630 05/08/20 06:47:58 60:00 0 0 ims APPLE 'PROM 9631 05/08/20 07:42:35 60:00 6924 2864 isms 9632 05/08/20 07:46:31 2:49 0 Onxtgonpho APPLE 'PHONES no 9633 05/08/20 07:47:58 60:00 0 0 ims APPLE 'PHONES 9634 05/08/20 07:49:20 0:41 0 Onxtgonpho APPLE 'PHONES no 9635 05/08/20 07:50:01 167:40 10826 10753 nxtgonpho APPLE 'PHONES no 9636 05/08/20 07:50:02 60:00 7500 6508 nxtgonpho APPLE 'PHONES ne 9637 05/08/20 08:42:35 60:00 6816 2648 ims 9638 05/08/20 08:47:58 60:00 0 0 ims APPLE 'PHONES 9639 05/08/20 08:50:02 60:00 1936 2665 nxtgonpho APPLE 'PHONES ne 9640 05/08/20 09:42:35 60:00 15048 4716 ims 9641 05/08/20 09:47:58 39:56 0 0 ims APPLE !PHONES 9642 05/08/20 09:50:02 47:40 1317 1365 nxtgonpho APPLE !PHONES ne 9643 05/08/20 10:37:42 1:45 0 0 nxtgonpho APPLE !PHONES ne 9644 05/08/20 10:39:27 31:40 8578 7724 nxtgonpho APPLE !PHONES ne 9645 05/08/20 10:39:28 31:40 7724 8290 nxtgonpho APPLE !PHONES no 9646 05/08/20 10:42:35 60:00 10332 4364 ims 9647 05/08/20 11:11:08 1:34 10196 5575 nxtgonpho APPLE !PHONES no 9648 05/08/20 11:12:42 1:21 5280 6115 nxtgonpho APPLE !PHONES no 9649 05/08/20 11:12:43 1:21 6115 4992 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 399 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171319 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343377 MOBILITY e s, pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. .4 1/4-4 AT&T Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating BT Bytos Bytes Apn MMRI IMSI MAKE MODEL Date Tine Number Up Dn (OTC) 9650 05/08/20 11:14:04 34:04 13305 14294 nxtgonpho APPLE 'PROMO no 9651 05/08/20 11:14:05 34:04 14294 12921 nxtgonpho APPLE 'PEONES ne 9652 05/08/20 11:42:35 60:00 8496 2896 ims 9653 05/08/20 11:48:09 1:31 48 0 nxtgonpho APPLE 'PEONES ne 9654 05/08/20 11:49:40 19:07 10373 11970 nxtgonpho APPLE 'PEONES ne 9655 05/08/20 11:49:41 19:07 11970 9989 nxtgonpho APPLE 'PEONES ne 9656 05/08/20 12:08:48 1:33 6055 4901 nxtgonpho APPLE IPHONE8 ne 9657 05/08/20 12:10:20 9:02 11593 25083 nxtgenpho APPLE 'PHONES no 9658 05/08/20 12:10:22 9:01 25083 11305 nxtgenpho APPLE 'PHONES no 9659 05/08/20 12:19:23 0:53 6873 4965 nxtgonpho APPLE 'PHONES no 9660 05/08/20 12:20:16 11:32 5222 6055 nxtgenpho APPLE 'PHONES no 9661 05/08/20 12:20:17 11:32 6055 5879 nxtgonpho APPLE 'PHONES no 9662 05/08/20 12:31:48 2:10 14672 7357 nxtgonpho APPLE 'PHONES no 9663 05/08/20 12:31:50 2:10 7357 14384 nxtgonpho APPLE 'PHONES no 9664 05/08/20 12:33:59 1:04 0 0 nxtgonpho APPLE 'PHONES no 9665 05/08/20 12:35:02 2:29 5317 6103 nxtgonpho APPLE 'PHONES ne 9666 05/08/20 12:35:03 2:29 6103 4933 nxtgonpho APPLE 'PHONES no 9667 05/08/20 12:37:32 28:47 8821 7077 nxtgonpho APPLE 'PHONES no 9668 05/08/20 12:42:35 60:00 7032 2896 ims 9669 05/08/20 13:06:18 2:05 5284 6873 nxtgonpho APPLE 'PHONES no 9670 05/08/20 13:06:20 2:04 6873 4996 nxtgenpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 400 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171320 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343378 MOBILITY P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ST Bytes Bytes Apn ffiI IMSI MAKE MODEL Data Tame Dunbar Up Dn (OTC/ 9671 05/08/20 13:08:24 6:21 7593 5278 nxtgenpho APPLE EPROM ne 9672 05/08/20 13:14:44 2:03 5221 6107 nxtgenpho APPLE 'PEONES ne 9673 05/08/20 13:14:45 2:04 6107 4933 nxtgenpho APPLE 'PEONES ne 9674 05/08/20 13:16:48 6:55 7529 5070 nxtgenpho APPLE 'PEONES ne 9675 05/08/20 13:23:42 2:04 5220 6055 nxtgenpho APPLE !PHONES ne 9676 05/08/20 13:23:44 2:03 6055 4932 nxtgenpho APPLE 'PHONES ne 9677 05/08/20 13:25:47 40:34 10151 10282 nxtgenpho APPLE 'PHONES ne 9678 05/08/20 13:42:35 60:00 18996 8952 ims 9679 05/08/20 14:06:20 13:50 5547 7806 nxtgenpho APPLE 'PHONES ne 9680 05/08/20 14:06:21 13:50 7806 5259 nxtgenpho APPLE 'PHONES ne 9681 05/08/20 14:20:11 0:59 7527 5172 nxtgenpho APPLE !PHONES ne 9682 05/08/20 14:21:09 8:19 12360 13253 nxtgenpho APPLE !PHONES ne 9683 05/08/20 14:21:10 8:19 13253 11976 nxtgenpho APPLE !PHONES ne 9684 05/08/20 14:29:25 60:00 7851347 10301018 ims 9685 05/08/20 14:29:29 0:57 7465 5279 nxtgenpho APPLE 'PHONES ne 9686 05/08/20 14:30:25 2:04 5220 6107 nxtgenpho APPLE 'PHONES ne 9687 05/08/20 14:30:26 2:04 6107 4932 nxtgenpho APPLE 'PHONES ne 9688 05/08/20 14:32:30 6:00 6873 4965 nxtgenpho APPLE !PHONES ne 9689 05/08/20 14:38:29 2:04 5222 6055 nxtgenpho APPLE !PHONES ne 9690 05/08/20 14:38:30 2:04 6055 4934 nxtgenpho APPLE !PHONES ne 9691 05/08/20 14:40:34 4:43 8279 5598 nxtgenpho APPLE !PHONES ne 9692 05/08/20 14:42:35 60:00 6816 2648 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 401 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171321 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343379 MOBILITY „so pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn flax IIEI MAKE MODEL Date T1100 Number Up Dn (UTC) 9693 05/08/20 14:45:16 0:23 5221 6055 nxtgenpho APPLE 'PEONES ne 9694 05/08/20 14:45:17 0:23 6055 4933 nxtgonpho APPLE 'PEONES no 9695 05/08/20 14:45:40 4:32 9812 7503 nxtgonpho APPLE 'PEONES no 9696 05/08/20 14:50:11 3:29 12904 13820 nxtgonpho APPLE 'PEONES no 9697 05/08/20 14:50:12 3:29 13820 12520 nxtgenpho APPLE 'PHONES no 9698 05/08/20 14:53:40 2:12 5877 6567 nxtgonpho APPLE !PHONES no 9699 05/08/20 14:53:41 2:12 6567 5589 nxtgonpho APPLE !PHONES no 9700 05/08/20 14:55:53 4:15 7191 7008 nxtgonpho APPLE !PHONES no 9701 05/08/20 15:00:07 2:01 288 48 nxtgonpho APPLE !PHONES no 9702 05/08/20 15:00:08 2:01 48 0 nxtgenpho APPLE 'PHONES no 9703 05/08/20 15:02:09 5:44 96 0 nxtgenpho APPLE !PHONES ne 9704 05/08/20 15:07:52 18:05 13088 13852 nxtgenpho APPLE !PHONES ne 9705 05/08/20 15:07:53 18:05 13852 12608 nxtgonpho APPLE !PHONES no 9706 05/08/20 15:25:58 2:00 6053 4897 nxtgonpho APPLE !PHONES no 9707 05/08/20 15:27:57 8:31 5220 6055 nxtgonpho APPLE !PHONES no 9708 05/08/20 15:27:58 8:31 6055 4932 nxtgonpho APPLE 'PHONES ne 9709 05/08/20 15:29:25 14:15 1809911 2356871 isms 9710 05/08/20 15:36:29 60:00 7209 9021 nxtgonpho APPLE 'PHONES no 9711 05/08/20 15:42:35 60:00 10888 4504 isms 9712 05/08/20 16:36:29 2:43 0 0 nxtgenphe APPLE 'PHONES ne 9713 05/08/20 16:42:35 60:00 15528 5860 isms 9714 05/08/20 17:42:35 18:48 17980 11860 isms 9715 05/08/20 17:49:12 0:35 44326 50691 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 402 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNV_GM_00171322 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343380 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Data: 06/17/2020 Run Tine: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn MISBI 1616 MOIL Date Time Number Up Dn (OTC) 9716 05/06/20 17:58:01 0:45 50425 84329 ims -1 9717 05/08/20 18:03:11 50:57 12884 8789 ims -1 9718 05/08/20 18:49:47 12:20 8547 6445 ims -1 9719 05/08/20 18:57:20 11:41 11453 10143 ims -1 9720 05/08/20 19:35:24 0:01 0 0 ims -1 9721 05/08/20 21:51:29 2:45 14858 9244 imp -1 9722 05/08/20 22:38:15 60:00 8331 6300 ims -1 9723 05/08/20 22:50:07 0:39 756 0 isms -1 9724 05/08/20 23:22:59 47:09 13525 8033 ins -1 9725 05/08/20 23:38:15 39:43 0 0 ins -1 9726 05/09/20 00:10:35 10:15 8313 6829 ins -1 9727 05/09/20 00:17:58 60:00 16443 9470 isms -1 9728 05/09/20 01:17:58 60:00 8496 3004 ims -1 9729 05/09/20 02:17:58 60:00 6924 2756 ims -1 9730 05/09/20 03:17:58 60:00 10176 3252 ims -1 9731 05/09/20 04:17:58 60:00 17008 6200 ims -1 9732 05/09/20 05:17:58 60:00 8820 3112 ims -1 9733 05/09/20 06:17:58 60:00 8496 3112 ims -1 9734 05/09/20 07:17:58 60:00 8620 3128 ims -1 9735 05/09/20 08:17:58 60:00 10332 4080 ims -1 9736 05/09/20 09:17:58 60:00 12120 4484 ims -1 9737 05/09/20 10:17:58 60:00 7140 2772 ims -1 9738 05/09/20 11:17:58 60:00 7032 2988 ims -1 9739 05/09/20 12:17:58 60:00 12904 3716 ims -1 9740 05/09/20 13:17:58 41:31 10068 3252 ims -1 9741 05/09/20 13:50:07 60:00 20336 10029 ims -1 9742 05/09/20 14:50:07 60:00 8620 3036 ims -1 9743 05/09/20 15:50:07 60:00 10284 3300 ims -1 9744 05/09/20 16:50:07 60:00 38404 17840 ims -1 9745 05/09/20 17:19:20 0:23 0 1548 ims -1 9746 05/09/20 17:21:04 60:00 6009 24664 nxtgenpho -1 ne 9747 05/09/20 17:23:56 2:24 0 0 nxtgonpho -1 ne 9748 05/09/20 17:50:07 60:00 7032 2896 ims -1 9749 05/09/20 18:21:04 60:00 0 0 nxtgonpho -1 ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 403 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171323 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343381 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: WM= Item Conn. Conn. Originating ET Bytes Bytes Apn 1161 11188 MOBIL Date Time Number Up Dn (OTC/ 9750 05/09/20 18:50:07 60:00 10548 4288 ims -1 9751 05/09/20 19:21:04 60:00 0 0 nxtgonpho -1 ne 9752 05/09/20 19:50:07 60:00 7140 2912 ims —1 9753 05/09/20 20:21:04 60:00 0 Onxtgonpho —1 ne 9754 05/09/20 20:50:07 60:00 13584 4964 ims —1 9755 05/09/20 21:21:04 0:38 0 Onmtgonpho —1 ne 9756 05/09/20 21:50:07 60:00 8512 3820 ims —1 9757 05/09/20 22:50:07 60:00 8496 3036 ims —1 9758 05/09/20 23:50:07 60:00 11904 4536 ims —1 9759 05/10/20 00:50:07 60:00 8200 2944 ims —1 9760 05/10/20 01:50:07 60:00 15048 4872 ims —1 9761 05/10/20 02:50:07 60:00 8496 3036 ims —1 9762 05/10/20 03:50:07 60:00 6816 2572 ims —1 9763 05/10/20 04:50:07 60:00 13584 4568 ims —1 9764 05/10/20 05:50:07 60:00 13568 4624 ims —1 9765 05/10/20 06:50:07 60:00 8496 3036 ims —1 9766 05/10/20 07:50:07 23:31 0 0 ims —1 9767 05/10/20 08:22:53 60:00 16863 10279 ims —1 9768 05/10/20 09:22:53 60:00 6924 2648 ims —1 9769 05/10/20 10:22:53 60:00 10068 3144 ims —1 9770 05/10/20 11:22:53 60:00 10688 4096 ims —1 9771 05/10/20 12:22:53 60:00 10224 4256 ims —1 9772 05/10/20 13:22:53 60:00 8928 3344 ims —1 9773 05/10/20 14:22:53 60:00 6924 2648 ims —1 9774 05/10/20 15:22:53 60:00 4980 1572 ims —1 9775 05/10/20 15:36:40 60:00 16705 9482 ims —1 9776 05/10/20 16:22:53 60:00 0 0 ims —1 9777 05/10/20 16:36:40 60:00 10192 3176 ims —1 9778 05/10/20 17:22:53 60:00 0 0 isms —1 9779 05/10/20 17:36:40 60:00 8712 3160 isms —1 9780 05/10/20 18:22:53 60:00 0 0 ims —1 9781 05/10/20 18:36:40 60:00 10548 4128 ims —1 9782 05/10/20 19:22:53 3:10 0 0 ims —1 9783 05/10/20 19:36:40 60:00 9960 3284 ims —1 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 404 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171324 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343382 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn US! WAPI2L -fly. Date Time Number Up Dn (OTC) 9784 05/10/20 20:36:40 60:00 13800 4784 ims -1 9785 05/10/20 21:36:40 60:00 9960 3176 isms -1 9786 05/10/20 22:36:40 60:00 13616 4764 isms -1 9787 05/10/20 23:36:40 60:00 8604 3036 isms -1 9788 05/11/20 00:36:40 60:00 10284 3316 isms -1 9789 05/11/20 01:36:40 60:00 13584 4784 isms -1 9790 05/11/20 02:36:40 60:00 15156 4980 isms -1 9791 05/11/20 03:36:40 60:00 8728 3052 isms -1 9792 05/11/20 04:36:40 60:00 8604 3052 isms -1 9793 05/11/20 05:36:40 60:00 11796 4160 isms -1 9794 05/11/20 06:36:40 60:00 10440 4412 isms -1 9795 05/11/20 07:36:40 60:00 7048 2804 isms -1 9796 05/11/20 08:36:40 60:00 6924 2788 isms -1 9797 05/11/20 09:36:40 60:00 13476 4640 ims -1 9798 05/11/20 10:36:40 60:00 8620 3052 ims -1 9799 05/11/20 11:36:40 60:00 12012 4536 ims -1 9800 05/11/20 12:36:40 60:00 10068 3176 ims -1 9801 05/11/20 13:36:40 60:00 48464 27052 ims -1 9802 05/11/20 13:49:35 1:11 145669 197339 ims -1 9803 05/11/20 13:52:12 3:23 239229 740490 ims -1 9804 05/11/20 13:55:40 15:58 2164944 3609137 ims -1 9805 05/11/20 14:36:40 60:00 7048 2804 ims -1 9806 05/11/20 15:36:40 60:00 6816 2680 ims -1 9807 05/11/20 16:36:40 60:00 17116 6248 ims -1 9808 05/11/20 17:36:40 60:00 19144 8356 ims -1 9809 05/11/20 17:47:51 0:16 2771 9322 ims -1 9810 05/11/20 18:36:40 21:04 3500 1340 ims -1 9811 05/11/20 18:57:44 60:00 16779 9324 ims -1 9812 05/11/20 19:57:44 60:00 22580 12624 ims -1 9813 05/11/20 20:27:47 0:34 72748 73285 ims -1 9814 05/11/20 20:57:44 60:00 44500 28904 ims -1 9815 05/11/20 21:18:10 0:36 107625 75049 ims -1 9816 05/11/20 21:38:52 1:23 195183 210003 ims -1 9817 05/11/20 21:51:49 0:33 52635 82246 ims -1 9818 05/11/20 21:57:44 60:00 8496 3004 ims -1 9819 05/11/20 22:57:44 60:00 29488 17128 ims -1 AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 405 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171325 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343383 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTZ. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating CT Bytes Bytes Apn EMBI INS! ISMS MOMS Date Tame Number Up Dn (OTC) 9820 05/11/20 23:14:43 0:01 0 0 ims -1 9821 05/11/20 23:14:55 34:02 5303342 7174148 ims -1 9822 05/11/20 23:57:44 60:00 7140 2880 ims -1 9823 05/12/20 00:57:44 60:00 8388 2896 ims —1 9824 05/12/20 01:57:44 60:00 7032 2772 ims -1 9825 05/12/20 02:57:44 60:00 13476 4576 ims —1 9826 05/12/20 03:57:44 60:00 11904 4504 ims —1 9827 05/12/20 04:57:44 60:00 6816 2648 ims —1 9828 05/12/20 05:57:44 60:00 11904 4328 ims —1 9829 05/12/20 06:57:44 60:00 10084 3252 ims —1 9830 05/12/20 07:57:44 60:00 9960 3144 ims —1 9831 05/12/20 08:57:44 60:00 8388 3112 ims —1 9832 05/12/20 09:57:44 60:00 14864 5380 ims —1 9833 05/12/20 10:57:44 60:00 8944 3236 ims —1 9834 05/12/20 11:57:44 60:00 9944 3252 ims —1 9835 05/12/20 12:57:44 60:00 18296 8056 ims —1 9836 05/12/20 13:53:12 0:17 6689 32998 ims —1 9837 05/12/20 13:57:44 60:00 8388 2896 ims —1 9838 05/12/20 14:57:14 60:00 39933 26910 ims —1 9839 05/12/20 14:57:44 3:34 0 0 ims —1 9840 05/12/20 15:01:36 31:03 4731971 5734935 ims —1 9841 05/12/20 15:32:50 20:00 3562355 2678994 ims —1 9842 05/12/20 15:57:14 60:00 29404 16584 ims —1 9843 05/12/20 16:50:26 0:39 3465 25823 ims —1 9844 05/12/20 16:57:14 60:00 10068 3360 ims —1 9845 05/12/20 17:57:14 35:26 16480 10092 ims —1 9846 05/12/20 18:18:43 9:04 1443138 1576561 ims —1 9847 05/12/20 19:10:47 60:00 47016 29960 ims —1 9848 05/12/20 19:13:21 7:37 1221325 1245961 ims —1 9849 05/12/20 19:28:52 0:35 2520 24318 ims —1 9850 05/12/20 20:10:47 60:00 7140 2696 ims —1 9851 05/12/20 21:10:47 60:00 18252 9048 ims —1 9852 05/12/20 22:00:26 28:39 5163431 5326429 ims —1 9853 05/12/20 22:10:47 60:00 9620 3828 ims —1 9854 05/12/20 23:10:47 60:00 8388 2928 ims —1 9855 05/13/20 00:10:47 60:00 16884 6124 ims —1 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 406 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171326 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343384 MOBILITY / 1 44ro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTZ. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Aprt DEBI nen MANZ MOD= Date Time Number Up Dn (OTC) 9856 05/13/20 01:10:47 60:00 8820 3376 ims 9857 05/13/20 02:10:47 60:00 8604 3160 ims 9858 05/13/20 03:10:47 60:00 8264 3036 ims 9859 05/13/20 04:10:47 60:00 8388 2928 ims 9860 05/13/20 05:10:47 60:00 10332 4180 ims 9861 05/13/20 06:10:47 60:00 6816 2788 ims 9862 05/13/20 07:10:47 60:00 13476 4516 ims 9863 05/13/20 08:10:47 60:00 9960 3176 ims 9864 05/13/20 09:10:47 60:00 9960 3176 ims 9865 05/13/20 10:10:47 60:00 13600 4800 ims 9866 05/13/20 11:10:47 60:00 11904 4376 ims 9867 05/13/20 12:10:47 35:07 4980 1588 ims 9868 05/13/20 12:52:00 60:00 8499 3130 ims 9869 05/13/20 12:53:18 6:34 12706 7464 ims 9870 05/13/20 13:18:35 42:26 22025 13226 ims 9871 05/13/20 13:52:00 9:42 0 0 isms 9872 05/13/20 14:01:42 60:00 9627 6820 ims 9873 05/13/20 14:18:58 3:27 8813 6685 ims 9874 05/13/20 14:25:33 15:55 9972 6620 ims 9875 05/13/20 15:01:42 60:00 0 0 ims 9876 05/13/20 15:35:00 10:31 10083 8691 ims 9877 05/13/20 15:56:38 45:32 393500 1834028 nxtgenpho APPLE 'PEONES ne 9878 05/13/20 15:56:39 45:31 9362 7137 ims APPLE 'PHONES 9879 05/13/20 16:01:42 60:00 0 0 ims 9880 05/13/20 16:42:11 12:09 65205 164586 nxtgenpho APPLE 'PHONES ne 9881 05/13/20 16:42:15 12:05 9498 6268 ims APPLE 'PHONES 9882 05/13/20 16:54:20 7:20 49260 52602 nxtgenpho APPLE 'PHONES ne 9883 05/13/20 16:54:24 7:16 8458 8094 ims APPLE 'PHONES 9884 05/13/20 17:01:39 2:03 606547 71250 nxtgenpho APPLE 'PHONES ne 9885 05/13/20 17:01:40 2:02 6264 6672 ims APPLE 'PHONES 9886 05/13/20 17:01:40 2:03 71250 606259 nxtgenpho APPLE 'PHONES ne 9887 05/13/20 17:01:41 2:02 6672 6000 ims APPLE 'PHONES 9888 05/13/20 17:01:42 60:00 0 0 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 407 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171327 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343385 MOBILITY P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tt-Lso AT&T UTC. Run Data: 06/17/2020 Run Tine: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INEZ IM9I MAKE MODEL Date Time Number Up Dn (UTC) 9889 05/13/20 17:03:43 1:56 13179 28968 nxtgenpho APPLE 'PHONES ne 9890 05/13/20 17:03:45 1:54 6672 5961 ims APPLE 'PHONES 9891 05/13/20 17:05:38 2:11 100510 20424 nxtgenpho APPLE 'PHONES ne 9892 05/13/20 17:05:40 2:10 20424 100222 nxtgenpho APPLE 'PHONES ne 9893 05/13/20 17:05:40 0:33 6264 6672 ims APPLE 'PHONES 9894 05/13/20 17:05:41 0:33 6672 6000 ims APPLE 'PHONES 9895 05/13/20 17:06:14 60:00 12600 4624 ims APPLE 'PHONES 9896 05/13/20 17:07:50 59:37 22875 21541 nxtgenpho APPLE 'PHONES ne 9897 05/13/20 18:01:42 20:04 0 0 ims 9898 05/13/20 18:06:14 60:00 43900 30796 ims APPLE 'PHONES 9899 05/13/20 18:06:34 0:41 8561 16265 ims APPLE 'PHONES 9900 05/13/20 18:07:26 1:22 17957 25429 nxtgenpho APPLE 'PHONES ne 9901 05/13/20 18:07:27 1:22 25429 17669 nxtgenpho APPLE 'PHONES ne 9902 05/13/20 18:08:11 0:33 2955 21751 ims APPLE 'PHONES 9903 05/13/20 18:08:49 8:23 60185 38597 nxtgenpho APPLE 'PHONES no 9904 05/13/20 18:17:12 15:31 47009 58353 nxtgenpho APPLE 'PHONES no 9905 05/13/20 18:17:13 15:31 58353 48193 nxtgenpho APPLE 'PHONES ne 9906 05/13/20 18:32:44 1:40 8690 5271 nxtgenpho APPLE 'PHONES ne 9907 05/13/20 18:34:24 2:21 5220 6023 nxtgenpho APPLE 'PHONES ne 9908 05/13/20 18:34:25 2:21 6023 4932 nxtgenpho APPLE 'PHONES ne 9909 05/13/20 18:36:46 25:53 23000 20545 nxtgenpho APPLE 'PHONES ne 9910 05/13/20 19:00:07 15:59 2783683 3628299 ims APPLE 'PHONES 9911 05/13/20 19:02:38 3:44 5221 6023 nxtgenpho APPLE 'PHONES ne 9912 05/13/20 19:02:39 3:44 6023 4933 nxtgenpho APPLE 'PHONES ne 9913 05/13/20 19:06:14 60:00 45444 30068 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 408 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171328 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343386 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .a° AT&T ‘•- OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn MBE! INSI MARS MODEL Date Time Number Up Dn (OTC) 9914 05/13/20 19:06:23 4:26 7427 7721 nxtgonphe APPLE !PHONES no 9915 05/13/20 19:10:48 2:46 5285 7485 nxtgonpho APPLE !PHONES no 9916 05/13/20 19:10:50 2:45 7485 4997 nxtgonpho APPLE !PHONES ne 9917 05/13/20 19:13:35 5:07 24911 22059 nxtgonphe APPLE !PHONES ne 9918 05/13/20 19:18:41 9:54 9332 12593 nxtgonphe APPLE !PHONES no 9919 05/13/20 19:18:42 9:54 12593 8948 nxtgonpho APPLE !PHONES no 9920 05/13/20 19:28:36 4:24 48 0 nxtgonpho APPLE !PHONES no 9921 05/13/20 19:33:00 8:20 15805 11150 nxtgonphe APPLE !PHONES no 9922 05/13/20 19:41:19 14:58 7943 7512 nxtgonpho APPLE !PHONES no 9923 05/13/20 19:41:20 14:58 7512 7655 nxtgonphe APPLE !PHONES no 9924 05/13/20 19:52:14 0:35 7654 18341 ims APPLE !PHONES 9925 05/13/20 19:53:00 1:43 347300 148451 ims APPLE !PHONES 9926 05/13/20 19:54:53 4:42 715393 657093 ims APPLE !PHONES 9927 05/13/20 19:56:18 1:02 6023 4900 nxtgonphe APPLE !PHONES no 9928 05/13/20 19:57:19 2:04 6829 7761 nxtgonpho APPLE !PHONES no 9929 05/13/20 19:57:20 2:04 7761 6541 nxtgonpho APPLE !PHONES no 9930 05/13/20 19:59:24 4:50 6023 4902 nxtgonpho APPLE !PHONES no 9931 05/13/20 20:04:13 8:33 5285 6861 nxtgonpho APPLE !PHONES no 9932 05/13/20 20:04:14 8:33 6861 4997 nxtgonpho APPLE !PHONES no 9933 05/13/20 20:06:14 60:00 24416 10216 ims APPLE !PHONES 9934 05/13/20 20:12:47 17:25 7000 6737 nxtgonpho APPLE !PHONES no 9935 05/13/20 20:30:11 2:03 5221 6023 nxtgonphe APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 409 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171329 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343387 MOBILITY cre ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn DEBI IMSI WAKE MODEL Date TIM* Belabor Up Dn lu7C) 9936 05/13/20 20:30:12 2:04 6023 4933 nxtgonpho APPLE !PEONES no 9937 05/13/20 20:32:16 25:01 7880 10949 nxtgonpho APPLE !PEONES no 9938 05/13/20 20:57:16 27:33 5747 6549 nxtgonpho APPLE !PEONES no 9939 05/13/20 20:57:17 27:34 6549 5459 nxtgenpho APPLE !PEONES no 9940 05/13/20 21:06:14 60:00 23964 12932 ims APPLE 'PHONES 9941 05/13/20 21:24:50 2:03 5221 6075 nxtgonpho APPLE 'PHONES no 9942 05/13/20 21:24:51 2:04 6075 4933 nxtgenpho APPLE 'PHONES no 9943 05/13/20 21:26:54 0:41 0 0 nxtgonpho APPLE 'PHONES no 9944 05/13/20 21:27:35 22:07 14282 21429 nxtgonpho APPLE 'PHONES no 9945 05/13/20 21:27:35 22:08 21429 14432 nxtgonpho APPLE !PHONES no 9946 05/13/20 21:35:43 13:54 1755685 2808041 ims APPLE !PHONES 9947 05/13/20 21:49:43 13:36 7609 5581 nxtgonpho APPLE !PHONES no 9948 05/13/20 22:03:18 2:32 5217 6021 nxtgonpho APPLE !PHONES no 9949 05/13/20 22:03:19 2:32 6021 4929 nxtgenpho APPLE !PHONES no 9950 05/13/20 22:05:51 2:48 6023 4902 nxtgonpho APPLE !PHONES no 9951 05/13/20 22:06:14 60:00 21468 14844 ims APPLE !PHONES 9952 05/13/20 22:08:38 9:43 15469 23664 nxtgonpho APPLE !PHONES no 9953 05/13/20 22:08:39 9:43 23664 15085 nxtgonpho APPLE !PHONES no 9954 05/13/20 22:14:27 0:31 1716 13333 ims APPLE !PHONES 9955 05/13/20 22:18:22 9:39 6023 4901 nxtgonpho APPLE !PHONES ne 9956 05/13/20 22:28:00 2:04 5281 6083 nxtgonpho APPLE !PHONES ne 9957 05/13/20 22:28:02 2:03 6083 4993 nxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 410 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171330 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343388 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating BT Bytes Bytes Apn Tl@I IMSI MUM MODEL Date Time Number Up On (OTC/ 9958 05/13/20 22:30:05 10:06 6023 5426 nxtgonpho APPLE 'PEONES no 9959 05/13/20 22:40:10 9:15 11579 12144 nxtgonpho APPLE 'PEONES no 9960 05/13/20 22:40:11 9:15 12144 23142 nxtgonpho APPLE 'PEONES no 9961 05/13/20 22:49:26 13:19 9791 10331 nxtgenpho APPLE 'PEONES ne 9962 05/13/20 23:02:44 1:28 5222 6023 nxtgonpho APPLE 'PHONES no 9963 05/13/20 23:02:45 1:28 6023 4934 nxtgonpho APPLE 'PHONES no 9964 05/13/20 23:04:13 0:58 7497 5069 nxtgonpho APPLE 'PHONES no 9965 05/13/20 23:05:10 1:28 5281 6083 nxtgonpho APPLE 'PHONES no 9966 05/13/20 23:05:11 1:28 6083 4993 nxtgonpho APPLE 'PHONES no 9967 05/13/20 23:06:14 60:00 36632 24340 ims APPLE 'PHONES 9968 05/13/20 23:06:39 1:54 5221 6023 nxtgonpho APPLE 'PHONES no 9969 05/13/20 23:06:40 1:54 6023 4933 nxtgenpho APPLE 'PHONES no 9970 05/13/20 23:08:34 4:12 0 0 nxtgonpho APPLE 'PHONES no 9971 05/13/20 23:12:45 44:14 21498 20865 nxtgenpho APPLE 'PHONES ne 9972 05/13/20 23:12:46 44:14 20865 22350 nxtgenpho APPLE 'PHONES ne 9973 05/13/20 23:53:50 0:21 0 320 ims APPLE 'PHONES 9974 05/13/20 23:54:25 17:49 3771531 2831879 ims APPLE 'PHONES 9975 05/13/20 23:57:00 1:16 144 Onxtgonpho APPLE 'PHONES ne 9976 05/13/20 23:58:15 8:27 5655 6277 nxtgenpho APPLE 'PHONES no 9977 05/13/20 23:58:16 8:27 6277 5367 nxtgonpho APPLE !PHONES no 9978 05/14/20 00:06:14 60:00 11388 4816 ims APPLE !PHONES 9979 05/14/20 00:06:43 10:00 7433 4862 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 411 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171331 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343389 MOBILITY e• PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in / 1 4-iss AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn L@1 IMSI MAKE MODEL Date Time Number Up Dn (OTC) 9980 05/14/20 00:16:43 18:20 21067 27689nxtgonphe APPLE !PHONES ne 9981 05/14/20 00:16:44 18:20 27689 20395nxtgonphe APPLE !PHONES ne 9982 05/14/20 00:35:04 13:48 11671 8396nxtgonphe APPLE !PHONES ne 9983 05/14/20 00:48:51 5:26 5221 6023 nxtgenpho APPLE !PHONES ne 9984 05/14/20 00:48:52 5:26 6023 4933 nxtgenpho APPLE !PHONES ne 9985 05/14/20 00:54:18 8:51 20350 15479 nxtgenpho APPLE !PHONES ne 9986 05/14/20 01:03:09 16:50 17565 25729 nxtgenpho APPLE !PHONES ne 9987 05/14/20 01:03:10 16:51 25729 18921 nxtgenpho APPLE !PHONES ne 9988 05/14/20 01:06:14 60:00 6848 2788 ims APPLE !PHONES 9989 05/14/20 01:20:01 52:26 8594 6951 nxtgenpho APPLE !PHONES ne 9990 05/14/20 02:06:14 60:00 7296 2804 ims APPLE !PHONES 9991 05/14/20 02:12:26 5:08 4667 6279nmtgonphe APPLE !PHONES ne 9992 05/14/20 02:12:27 5:09 6279 4379 nxtgenpho APPLE !PHONES ne 9993 05/14/20 02:17:35 6:25 7561 5386 nxtgenpho APPLE !PHONES ne 9994 05/14/20 02:24:00 11:37 20803 21713nmtgonphe APPLE !PHONES ne 9995 05/14/20 02:24:01 11:37 21713 21460nxtgonphe APPLE !PHONES ne 9996 05/14/20 02:35:38 44:50 6786 6370 nxtgenpho APPLE !PHONES ne 9997 05/14/20 03:06:14 60:00 12136 4876 ims APPLE !PHONES 9998 05/14/20 03:20:27 2:04 5220 6007 nxtgenpho APPLE !PHONES ne 9999 05/14/20 03:20:29 2:03 6007 4932 nxtgenpho APPLE !PHONES ne 10000 05/14/20 03:22:32 5:23 7557 5130 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 412 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171332 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343390 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in k.:7,04 AT&T UTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn ENE! INSI MAKE MODEL Date TIM* Number Up Dn (UTC) 10001 05/14/20 03:27:54 2:04 5222 6023 nxtgonpho APPLE !PHONES no 10002 05/14/20 03:27:56 2:03 6023 4934 nxtgonpho APPLE !PHONES no 10003 05/14/20 03:29:59 50:20 13313 13297 nxtgonpho APPLE !PHONES no 10004 05/14/20 04:06:14 60:00 12724 5088 ims APPLE !PHONES 10005 05/14/20 04:20:20 7:37 12722 10767 nxtgonpho APPLE !PHONES no 10006 05/14/20 04:27:56 29:08 6790 7051 nxtgonpho APPLE !PHONES no 10007 05/14/20 04:27:57 29:08 7051 6502 nxtgonpho APPLE !PHONES no 10008 05/14/20 04:57:05 46:49 6705 7317 nxtgonpho APPLE !PHONES no 10009 05/14/20 04:57:06 46:49 7317 6417 nxtgonpho APPLE !PHONES no 10010 05/14/20 05:06:14 60:00 6848 2896 ims APPLE !PHONES 10011 05/14/20 05:43:55 14:31 12748 10885 nxtgonpho APPLE !PHONES no 10012 05/14/20 05:58:25 8:29 5216 6021 nxtgonpho APPLE !PHONES no 10013 05/14/20 05:58:26 8:29 6021 4928 nxtgonpho APPLE !PHONES no 10014 05/14/20 06:06:14 60:00 6956 2804 ims APPLE !PHONES 10015 05/14/20 06:06:55 16:01 12408 10814 nxtgonpho APPLE !PHONES no 10016 05/14/20 06:22:55 8:31 5216 6021 nxtgonpho APPLE !PHONES no 10017 05/14/20 06:22:57 8:31 6021 4928 nxtgonpho APPLE !PHONES no 10018 05/14/20 06:31:27 60:00 7369 5962 nxtgonpho APPLE !PHONES no 10019 05/14/20 07:06:14 60:00 6848 2788 ims APPLE !PHONES 10020 05/14/20 07:31:27 15:12 6897 6806 nxtgonpho APPLE !PHONES no 10021 05/14/20 07:46:38 2:06 5221 6023 nxtgenpho APPLE !PHONES no 10022 05/14/20 07:46:39 2:06 6023 4933 nxtgenpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 413 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171333 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343391 MOBILITY P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ INSI MAKE MODEL Date Time Numbor Up Dn (OTC) 10023 05/14/20 07:48:45 60:00 7445 6573 nxtgonpho APPLE 'PHONES ne 10024 05/14/20 08:06:14 60:00 13804 5628 ims APPLE 'PHONES 10025 05/14/20 08:48:45 60:00 578 630 nxtgonpho APPLE 'PHONES ne 10026 05/14/20 09:06:14 60:00 13884 10376 ims APPLE 'PHONES 10027 05/14/20 09:48:45 60:00 462 420 nxtgonpho APPLE 'PHONES ne 10028 05/14/20 10:06:14 60:00 11596 4268 ims APPLE 'PHONES 10029 05/14/20 10:48:45 60:00 462 420 nxtgonpho APPLE 'PHONES ne 10030 05/14/20 11:06:14 60:00 8712 3252 ims APPLE 'PHONES 10031 05/14/20 11:48:45 3:48 4336 430 nxtgonpho APPLE 'PHONES ne 10032 05/14/20 11:52:32 2:34 5220 6023 nxtgonpho APPLE 'PHONES ne 10033 05/14/20 11:52:34 2:33 6023 4932 nxtgonpho APPLE 'PHONES no 10034 05/14/20 11:55:07 14:25 8624 5163 nxtgonpho APPLE 'PHONES ne 10035 05/14/20 12:06:14 60:00 8496 3036 ims APPLE 'PHONES 10036 05/14/20 12:09:31 113:12 50089 60693 nxtgonpho APPLE 'PHONES ne 10037 05/14/20 12:09:32 60:00 45066 34789 nxtgonpho APPLE 'PHONES ne 10038 05/14/20 13:06:14 60:00 15560 6092 ims APPLE 'PHONES 10039 05/14/20 13:09:32 53:12 15627 14820 nxtgonpho APPLE 'PHONES no 10040 05/14/20 14:02:44 2:57 6083 4962 nxtgonpho APPLE 'PHONES ne 10041 05/14/20 14:05:41 1:51 7497 5070 nxtgonpho APPLE 'PHONES ne 10042 05/14/20 14:06:14 51:24 33888 22164 ims APPLE 'PHONES 10043 05/14/20 14:07:31 8:46 5220 6023 nxtgonpho APPLE 'PHONES ne 10044 05/14/20 14:07:33 8:45 6023 4932 nxtgonpho APPLE 'PHONES ne 10045 05/14/20 14:16:18 7:00 7433 4966 nxtgonpho APPLE 'PHONES ne 10046 05/14/20 14:23:17 2:21 5216 6073 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 414 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171334 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343392 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .‘•- 1. AT&T UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn ZIOLI INSI MAKE MODEL Date Time Number Up Dn (OTC) 10047 05/14/20 14:23:19 2:20 6073 4928 nxtgenpho APPLE !PHONES ne 10048 05/14/20 14:25:39 14:20 6246 5001 nxtgenpho APPLE !PHONES ne 10049 05/14/20 14:39:07 0:32 8014 14652 ims APPLE !PHONES 10050 05/14/20 14:39:40 0:09 0 0 ims APPLE !PHONES 10051 05/14/20 14:40:00 1:36 7561 5175 nxtgenpho APPLE !PHONES ne 10052 05/14/20 14:41:36 2:04 5221 6023 nxtgonpho APPLE !PHONES no 10053 05/14/20 14:41:37 2:04 6023 4933 nxtgonpho APPLE !PHONES ne 10054 05/14/20 14:43:41 1:37 6809 4965 nxtgonpho APPLE !PHONES no 10055 05/14/20 14:45:17 3:32 5221 6023 nxtgonpho APPLE !PHONES no 10056 05/14/20 14:45:19 3:31 6023 4933 nxtgonpho APPLE !PHONES no 10057 05/14/20 14:48:50 1:23 6075 4901 nxtgonpho APPLE !PHONES no 10058 05/14/20 14:50:12 2:27 5286 6809 nxtgonpho APPLE !PHONES no 10059 05/14/20 14:50:13 2:27 6809 4998 nxtgonpho APPLE !PHONES ne 10060 05/14/20 14:52:40 12:20 6113 6930 nxtgonpho APPLE !PHONES no 10061 05/14/20 14:52:41 12:20 6930 5825 nxtgonpho APPLE !PHONES no 10062 05/14/20 14:55:12 9:48 6333 6716 ims APPLE !PHONES 10063 05/14/20 14:55:13 9:48 6648 6069 ims APPLE !PHONES 10064 05/14/20 14:58:25 60:00 30734 16158 ims 10065 05/14/20 15:05:01 13:57 6930 6517 nxtgenpho APPLE !PHONES ne 10066 05/14/20 15:18:57 2:04 5220 6075 nxtgenpho APPLE !PHONES no 10067 05/14/20 15:18:58 2:04 6075 4932 nxtgonpho APPLE !PHONES no 10068 05/14/20 15:21:02 2:05 7495 5067 nxtgonpho APPLE !PHONES no 10069 05/14/20 15:23:06 2:03 5221 6023 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 415 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171335 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343393 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:58:58pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .a° AT&T ‘•- OTC. Run Date: 06/17/2020 Run Tine: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn L@I INSI MAKE MODEL Date Timm Number Up Dn (OTC) 10070 05/14/20 15:23:07 2:03 6023 4933 nxtgonpho APPLE !PHONES no 10071 05/14/20 15:25:10 13:32 6376 5321 nxtgonpho APPLE !PHONES no 10072 05/14/20 15:38:41 9:28 10473 13600 nxtgonpho APPLE !PHONES no 10073 05/14/20 15:38:42 9:28 13600 10089 nxtgonpho APPLE !PHONES no 10074 05/14/20 15:48:10 3:28 96 0 nxtgonpho APPLE !PHONES no 10075 05/14/20 15:51:37 0:58 4609 5791 nxtgonpho APPLE !PHONES no 10076 05/14/20 15:51:38 0:58 5791 4321 nxtgonpho APPLE !PHONES no 10077 05/14/20 15:52:36 1:05 6023 4901 nxtgonpho APPLE !PHONES no 10078 05/14/20 15:52:36 1:16 226451 122799 imp 10079 05/14/20 15:53:40 1:25 5344 6897 nxtgonpho APPLE !PHONES ne 10080 05/14/20 15:53:42 1:25 6897 5056 nxtgonpho APPLE !PHONES no 10081 05/14/20 15:55:06 6:11 22403 27200 nxtgonpho APPLE !PHONES no 10082 05/14/20 15:55:07 6:11 27200 22115 nxtgonpho APPLE !PHONES no 10083 05/14/20 15:58:25 60:00 16828 10328 imp 10084 05/14/20 16:01:18 1:33 48 0 nxtgonpho APPLE !PHONES ne 10085 05/14/20 16:02:50 2:08 5218 6005 nxtgonpho APPLE !PHONES ne 10086 05/14/20 16:02:52 2:07 6005 4930 nxtgonpho APPLE !PHONES ne 10087 05/14/20 16:04:59 10:57 7722 5332 nxtgonpho APPLE !PHONES no 10088 05/14/20 16:15:04 1:04 119248 182985 imp 10089 05/14/20 16:15:55 2:03 5116 6023 nxtgonpho APPLE !PHONES no 10090 05/14/20 16:15:56 2:03 6023 4828 nxtgonpho APPLE !PHONES no 10091 05/14/20 16:17:59 60:00 15324 19803 nxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 416 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171336 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343394 MOBILITY dr, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn EMBI IMSI MAKE MODEL Date Time Number Up Dn (OTC) 10092 05/14/20 16:58:25 60:00 24724 20656 ims 10093 05/14/20 17:17:59 3:26 0 0 nxtgenpho APPLE 'PROMO ne 10094 05/14/20 17:20:39 8:52 2110819 1091819 ims 10095 05/14/20 17:21:25 6:26 6809 4964 nxtgenpho APPLE 'PROMO ne 10096 05/14/20 17:27:50 2:17 5118 6023 nxtgenpho APPLE 'PROMO ne 10097 05/14/20 17:27:51 2:17 6023 4830 nxtgenpho APPLE !PHONES ne 10098 05/14/20 17:30:08 0:43 0 0 nxtgonpho APPLE !PHONES no 10099 05/14/20 17:30:50 27:31 18508 17937 nxtgenpho APPLE !PHONES no 10100 05/14/20 17:30:51 27:31 17937 18124 nxtgonpho APPLE !PHONES ne 10101 05/14/20 17:58:22 17:27 7046 5226 nxtgenpho APPLE !PHONES ne 10102 05/14/20 17:58:25 60:00 18260 9032 ims 10103 05/14/20 18:14:41 1:36 331361 211069 ims 10104 05/14/20 18:15:48 2:10 5217 6005 nxtgenpho APPLE !PHONES ne 10105 05/14/20 18:15:49 2:10 6005 4929 nxtgenpho APPLE !PHONES ne 10106 05/14/20 18:17:59 60:00 7833 7427 nxtgenpho APPLE !PHONES ne 10107 05/14/20 18:58:25 60:00 20208 10192 ims 10108 05/14/20 19:17:59 60:00 2345 1382 nxtgenpho APPLE !PHONES ne 10109 05/14/20 19:40:52 0:22 0 4126 ims 10110 05/14/20 19:58:25 60:00 13676 4752 ims 10111 05/14/20 20:17:59 21:44 223028 308863 nxtgenpho APPLE !PHONES ne 10112 05/14/20 20:39:43 9:06 6162 6461 nxtgenpho APPLE !PHONES ne 10113 05/14/20 20:39:44 9:06 6461 5874 nxtgenpho APPLE !PHONES ne 10114 05/14/20 20:48:50 15:56 8459 6466 nxtgenpho APPLE !PHONES ne 10115 05/14/20 20:58:25 60:00 6832 2648 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 417 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171337 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343395 MOBILITY c r. PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .s# AT&T ‘•- OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ST Bytes Bytes Apn EBBS IMSI MAKE MODEL Date Time Number Op Dn (OTC) 10116 05/14/20 21:04:45 2:04 5222 6023 nxtgonpho APPLE !PHONES ne 10117 05/14/20 21:04:46 2:04 6023 4934 nxtgonpho APPLE !PHONES no 10118 05/14/20 21:06:50 23:54 8201 5670 nxtgonpho APPLE !PHONES no 10119 05/14/20 21:30:43 3:11 288 48 nxtgonpho APPLE !PHONES no 10120 05/14/20 21:30:45 3:10 48 0 nxtgonpho APPLE !PHONES no 10121 05/14/20 21:33:55 5:59 6023 4900 nxtgonpho APPLE !PHONES no 10122 05/14/20 21:39:53 2:03 5116 6075 nxtgonpho APPLE !PHONES no 10123 05/14/20 21:39:54 2:03 6075 4828 nxtgonpho APPLE !PHONES no 10124 05/14/20 21:41:57 60:00 7988 11134 nxtgonpho APPLE !PHONES no 10125 05/14/20 21:58:25 60:00 11920 4560 ims 10126 05/14/20 22:41:57 56:13 1033 840 nxtgonpho APPLE !PHONES no 10127 05/14/20 22:58:25 60:00 7064 2864 ims 10128 05/14/20 23:38:09 2:03 5117 6023 nxtgonpho APPLE !PHONES ne 10129 05/14/20 23:38:10 2:03 6023 4829 nxtgonpho APPLE !PHONES ne 10130 05/14/20 23:40:13 60:00 12030 11587 nxtgonpho APPLE !PHONES ne 10131 05/14/20 23:58:25 60:00 6848 2756 ims 10132 05/15/20 00:40:13 60:00 2207 8559 nxtgonpho APPLE !PHONES no 10133 05/15/20 00:58:25 60:00 10164 3268 ims 10134 05/15/20 01:40:13 28:34 462 420 nxtgonpho APPLE !PHONES no 10135 05/15/20 01:58:25 60:00 16992 6400 ims 10136 05/15/20 02:08:46 90:00 6944 8254 nxtgonpho APPLE !PHONES no 10137 05/15/20 02:08:47 60:00 7965 6341 nxtgonpho APPLE !PHONES no 10138 05/15/20 02:58:25 60:00 8604 2896 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 418 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171338 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343396 MOBILITY P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Time: Data Usage For: Ma= Item Conn. Conn. Originating ET Bytes Bytes Apn INRI IMSI WARR MOD= Date Time Number Up Dn (OTC) 10139 05/15/20 03:08:47 60:00 578 630 nxtgonpho APPLR 'PROMO no 10140 05/15/20 03:38:46 155:54 5970 2590 nxtgonpho APPLR 'PACERS no 10141 05/15/20 03:58:25 60:00 6956 2648 ims 10142 05/15/20 04:08:47 60:00 578 630 nxtgonpho APPLR 'PACERS no 10143 05/15/20 04:58:25 60:00 11920 4436 ims 10144 05/15/20 05:08:47 60:00 1591 4868 nxtgonpho APPLR 'PACERS ne 10145 05/15/20 05:58:25 16:16 4748 2084 ims 10146 05/15/20 06:08:47 5:54 132 157 nxtgonpho APPLE 'PHONES ne 10147 05/15/20 06:20:04 2:14 14047 25126 nxtgonpho APPLE 'PHONES ne 10148 05/15/20 06:20:04 0:03 2382 192 ims 10149 05/15/20 06:20:05 2:14 25126 13759 nxtgonpho APPLE 'PHONES ne 10150 05/15/20 06:20:05 0:22 6324 6669 ims APPLE 'PHONES 10151 05/15/20 06:20:07 0:22 6669 6060 ims APPLE 'PHONES 10152 05/15/20 06:20:24 0:04 2526 1159 ims 10153 05/15/20 06:20:27 0:38 8330 8619 ims APPLE 'PHONES 10154 05/15/20 06:20:28 0:38 8619 8066 ims APPLE 'PHONES 10155 05/15/20 06:20:44 0:01 0 0 ims 10156 05/15/20 06:20:49 0:20 6264 6737 ims APPLE 'PHONES 10157 05/15/20 06:20:50 0:20 6673 6000 ims APPLE 'PHONES 10158 05/15/20 06:21:06 0:04 2382 132 ims 10159 05/15/20 06:21:08 0:41 7312 6741 ims APPLE !PHONES 10160 05/15/20 06:21:09 0:42 6741 7048 ims APPLE !PHONES 10161 05/15/20 06:21:25 60:00 5838 3212 ims 10162 05/15/20 06:21:44 60:00 18030 9144 ims 10163 05/15/20 06:22:19 347:54 23390 19206 nxtgonpho APPLE !PHONES no 10164 05/15/20 06:22:20 60:00 6533 5193 nxtgonpho APPLE 'PHONES ne 10165 05/15/20 07:21:25 60:00 0 0 ims 10166 05/15/20 07:21:44 60:00 8496 2912 ims 10167 05/15/20 07:22:20 60:00 225 210 nxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 419 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171339 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343397 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in / ..., 1 4 ""-,s ri AT&T UTZ. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INEZ INSI MAKE MODEL Date Time Numb. Up Dn (OTC) 10168 05/15/20 08:21:25 60:00 0 0 ims 10169 05/15/20 08:21:44 60:00 6924 2772 ims 10170 05/15/20 08:22:20 60:00 225 210 nxtgenpho APPLE 'PHONES ne 10171 05/15/20 09:21:25 60:00 0 0 ims 10172 05/15/20 09:21:44 60:00 13584 4608 ims 10173 05/15/20 09:22:20 60:00 642 735 nxtgenpho APPLE 'PHONES ne 10174 05/15/20 10:21:25 0:16 0 0 ims 10175 05/15/20 10:21:44 60:00 12120 4428 ims 10176 05/15/20 10:22:20 60:00 6688 5473 nxtgenpho APPLE 'PHONES ne 10177 05/15/20 11:21:44 60:00 9728 3052 ims 10178 05/15/20 11:22:20 47:54 4893 11281 nxtgenpho APPLE 'PHONES ne 10179 05/15/20 12:10:14 1:45 5229 6296 nxtgenpho APPLE 'PHONES ne 10180 05/15/20 12:10:15 1:45 6296 4941 nxtgenpho APPLE 'PHONES ne 10181 05/15/20 12:12:00 13:39 48 0nmtgonpho APPLE 'PHONES ne 10182 05/15/20 12:21:44 60:00 6924 2804 ims 10183 05/15/20 12:25:40 10:27 12965 11226 nxtgenpho APPLE 'PHONES ne 10184 05/15/20 12:36:06 28:45 5799 6820 nxtgenpho APPLE 'PHONES ne 10185 05/15/20 12:36:07 28:45 6820 5511 nxtgenpho APPLE 'PHONES ne 10186 05/15/20 13:04:52 14:36 5168 6230 nxtgenpho APPLE 'PHONES ne 10187 05/15/20 13:04:52 14:37 6230 4880 nxtgenpho APPLE 'PHONES ne 10188 05/15/20 13:19:29 8:17 280 581 nxtgenpho APPLE 'PHONES ne 10189 05/15/20 13:21:44 60:00 10332 4020 ims 10190 05/15/20 13:27:45 2:09 288 48nxtgonpho APPLE 'PHONES ne 10191 05/15/20 13:27:46 2:09 48 0nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 420 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171340 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343398 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Si= Item Conn. Conn. Originating ET Bytos Bytes Apn flax IMSI MAKS MODEL Date Time Nuahor Up Dn (UTC) 10192 05/15/20 13:29:55 11:01 14690 9892 nxtgenpho APPLE IPEOMEB ne 10193 05/15/20 13:40:55 115:52 14738 16163 nxtgenpho APPLE 'PEORIA ne 10194 05/15/20 13:40:56 60:00 14834 12604 nxtgenpho APPLE IPEOMEB ne 10195 05/15/20 14:21:44 60:00 7032 2788 ims 10196 05/15/20 14:40:56 55:53 1329 1558 nxtgenpho APPLE 'PEONES ne 10197 05/15/20 15:21:44 60:00 8140 2804 ims 10198 05/15/20 15:36:48 60:00 11376 6343 nxtgenpho APPLE !PHONES ne 10199 05/15/20 16:21:44 58:44 11904 4536 ims 10200 05/15/20 16:36:48 38:46 952 945 nxtgonpho APPLE !PHONES no 10201 05/15/20 17:15:33 33:23 17926 12685 nxtgenpho APPLE !PHONES no 10202 05/15/20 17:15:34 33:23 12685 17638 nxtgonpho APPLE !PHONES no 10203 05/15/20 17:17:52 2:57 6262 6689 ims APPLE !PHONES 10204 05/15/20 17:17:53 2:57 6689 5998 ims APPLE !PHONES 10205 05/15/20 17:20:28 2:56 8374 6182 ims 10206 05/15/20 17:20:49 28:07 6336 6685 ims APPLE !PHONES 10207 05/15/20 17:20:50 28:07 6685 6072 ims APPLE !PHONES 10208 05/15/20 17:23:24 43:38 12810 8043 ims APPLE !PHONES 10209 05/15/20 17:48:57 12:07 7766 5120 nxtgenpho APPLE !PHONES ne 10210 05/15/20 18:01:03 1:09 5065 6230 nxtgenpho APPLE !PHONES no 10211 05/15/20 18:01:04 1:09 6230 4777 nxtgonpho APPLE 'PHONES no 10212 05/15/20 18:02:13 60:00 9611 9449 nxtgenpho APPLE !PHONES no 10213 05/15/20 18:07:02 1:23 7588 4512 ims APPLE !PHONES 10214 05/15/20 18:07:02 1:23 7524 4512 ims APPLE !PHONES 10215 05/15/20 18:08:25 0:11 16584 7152 ims APPLE !PHONES 10216 05/15/20 18:09:32 2:05 11081 9131 ims APPLE IPHONE8 10217 05/15/20 18:11:37 60:00 13460 4576 ims APPLE !PHONES 10218 05/15/20 19:02:13 0:11 0 105 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 421 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171341 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343399 MOBILITY e s, pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. AT&T Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn nizx IIB3I BAEZ MODEL Date Time Number Up Dn (OTC) 10219 05/15/20 19:02:23 21:01 5905 6936 nxtgenpho APPLE 'PHONES ne 10220 05/15/20 19:02:24 21:02 6936 5617 nxtgenpho APPLE 'PHONES no 10221 05/15/20 19:11:37 60:00 9928 3252 ims APPLE 'PHONES 10222 05/15/20 19:23:26 0:51 280 581 nxtgenpho APPLE 'PHONES ne 10223 05/15/20 19:24:16 21:04 5589 6583 nxtgenpho APPLE 'PHONES ne 10224 05/15/20 19:24:17 21:04 6583 5301 nxtgenpho APPLE 'PHONES ne 10225 05/15/20 19:45:21 5:48 280 581 nxtgenpho APPLE 'PHONES ne 10226 05/15/20 19:51:08 6:26 5060 6280 nxtgenpho APPLE 'PHONES ne 10227 05/15/20 19:51:10 8:25 6280 4772 nxtgenpho APPLE 'PHONES ne 10228 05/15/20 19:59:35 15:46 89863 53822 nxtgenpho APPLE 'PHONES ne 10229 05/15/20 20:11:37 35:47 5072 1572 ims APPLE 'PHONES 10230 05/15/20 20:15:20 9:10 5168 6230 nxtgenpho APPLE 'PHONES ne 10231 05/15/20 20:15:21 9:10 6230 4880 nxtgenpho APPLE 'PHONES ne 10232 05/15/20 20:24:31 10:17 48 0 nxtgenpho APPLE 'PHONES ne 10233 05/15/20 20:34:47 46:36 13435 17056 nxtgenpho APPLE 'PHONES ne 10234 05/15/20 20:34:48 46:36 17056 13051 nxtgenpho APPLE 'PHONES ne 10235 05/15/20 20:49:42 13:38 0 0 ims 10236 05/15/20 21:02:52 18:31 6354 6751 ims APPLE 'PHONES 10237 05/15/20 21:02:53 18:31 6683 6090 ims APPLE 'PHONES 10238 05/15/20 21:03:20 60:00 22729 9614 ims 10239 05/15/20 21:21:24 25:39 7328 14433 nxtgenpho APPLE 'PHONES ne 10240 05/15/20 21:21:25 25:39 14433 7040 nxtgenpho APPLE 'PHONES ne 10241 05/15/20 21:47:04 4:28 7830 5225 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 422 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171342 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343400 MOBILITY e t. ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Time: Data Usage Per: Si= Item Conn. Conn. Originating ET Bytes Bytes Apn flat IIRBI 10IO2 MODEL Date Time Numbar Up Dn (UTC) 10242 05/15/20 21:51:31 22:13 7226 7255 nxtgenpho APPLE IPHONE8 ne 10243 05/15/20 21:51:32 22:13 7255 6938 nxtgenpho APPLE 'PHONES ne 10244 05/15/20 22:03:20 60:00 10036 3176 ims 10245 05/15/20 22:13:45 0:43 6230 4848 nxtgenpho APPLE 'PHONES ne 10246 05/15/20 22:14:27 98:27 115558 120761 nxtgonpho APPLE 'PHONES no 10247 05/15/20 22:14:28 60:00 42979 25548 nxtgonpho APPLE 'PHONES no 10248 05/15/20 23:03:20 50:01 8712 3036 ims 10249 05/15/20 23:14:28 36:27 77782 89722 nxtgenpho APPLE 'PHONES ne 10250 05/15/20 23:52:55 5:38 6660 7602 nxtgenpho APPLE 'PHONES ne 10251 05/15/20 23:56:59 1:34 6693 5997 ims APPLE 'PHONES 10252 05/15/20 23:58:32 8:11 10328 14425 nxtgenpho APPLE 'PHONES ne 10253 05/15/20 23:58:33 8:11 14425 10040 nxtgenpho APPLE 'PHONES ne 10254 05/15/20 23:59:32 7:11 7154 6813 ims APPLE 'PHONES 10255 05/15/20 23:59:33 7:11 6813 6890 ims APPLE 'PHONES 10256 05/16/20 00:05:06 60:00 22545 10229 ims 10257 05/16/20 00:06:44 14:49 6797 8414 nxtgonpho APPLE 'PHONES no 10258 05/16/20 00:21:33 19:16 10248 12498 nxtgonpho APPLE 'PHONES no 10259 05/16/20 00:21:34 19:16 12498 11124 nxtgonpho APPLE 'PHONES no 10260 05/16/20 00:40:50 38:02 7794 7052 nxtgenpho APPLE 'PHONES ne 10261 05/16/20 01:05:06 60:00 7048 2788 ims 10262 05/16/20 01:18:52 3:30 6230 4848 nxtgenpho APPLE 'PHONES ne 10263 05/16/20 01:22:21 8:17 5678 6514 nxtgenpho APPLE 'PHONES ne 10264 05/16/20 01:22:22 8:18 6514 5390 nxtgenpho APPLE 'PHONES ne 10265 05/16/20 01:30:40 31:22 12898 13145 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 423 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171343 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343401 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:58:68pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Dato: 06/17/2020 Run Time: Data Usage For: SS= Item Conn. Conn. Originating ET Bytes Bytes Apn EMBI IMBI MAKE MODEL Date Tame Number Up Dn (OTC) 10266 05/16/20 02:02:02 8:15 288 48 nxtgonpho APPLE 'PHONES ne 10267 05/16/20 02:02:03 8:15 48 Onmtgonpho APPLE 'PHONES ne 10268 05/16/20 02:05:06 60:00 9928 3284 ims 10269 05/16/20 02:10:18 1:20 2121 9933 nxtgonpho APPLE 'PHONES ne 10270 05/16/20 02:11:37 2:07 5286 6436 nxtgonpho APPLE 'PHONES ne 10271 05/16/20 02:11:39 2:06 6436 4998 nxtgonpho APPLE 'PHONES ne 10272 05/16/20 02:13:45 1:13 0 0 nxtgonpho APPLE 'PHONES no 10273 05/16/20 02:14:57 79:59 6934 7616 nxtgonpho APPLE 'PHONES no 10274 05/16/20 02:14:58 60:00 7327 6331 nxtgonpho APPLE 'PHONES ne 10275 05/16/20 03:05:06 60:00 13336 4608 ims 10276 05/16/20 03:14:58 60:00 514 525 nxtgonpho APPLE 'PHONES ne 10277 05/16/20 03:34:56 105:57 2512 1532 nxtgonpho APPLE 'PHONES ne 10278 05/16/20 04:05:06 45:47 5072 1588 ims 10279 05/16/20 04:14:58 60:00 845 1882 nxtgonpho APPLE 'PHONES ne 10280 05/16/20 04:45:27 35:26 6370 6669 ims APPLE 'PHONES 10281 05/16/20 04:45:28 35:26 6669 6106 ims APPLE 'PHONES 10282 05/16/20 04:58:33 60:00 22789 9924 ims 10283 05/16/20 05:14:58 5:56 462 420 nxtgonpho APPLE 'PHONES ne 10284 05/16/20 05:20:54 0:37 0 0 nxtgonpho APPLE 'PHONES ne 10285 05/16/20 05:21:31 48:30 7833 7488 nxtgonpho APPLE 'PHONES ne 10286 05/16/20 05:21:32 48:30 7488 7449 nxtgonpho APPLE 'PHONES no 10287 05/16/20 05:58:33 60:00 9928 3176 ims 10288 05/16/20 06:10:02 0:50 0 0 nxtgonpho APPLE 'PHONES no 10289 05/16/20 06:10:51 1:36 288 48 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 424 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171344 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343402 MOBILITY e• PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ INSI MAKE MODEL Date Time Number Up Dn (OTC/ 10290 05/16/20 06:10:52 1:37 48 Onstgenpho APPLE 'PHONES ne 10291 05/16/20 06:12:28 21:29 576 192 nxtgenpho APPLE 'PHONES ne 10292 05/16/20 06:12:29 21:29 192 0 nxtgenpho APPLE 'PHONES ne 10293 05/16/20 06:33:57 7:10 288 48 nxtgenpho APPLE 'PHONES ne 10294 05/16/20 06:33:59 7:09 48 0 nxtgenpho APPLE 'PHONES ne 10295 05/16/20 06:41:08 1:36 8042 5921 nxtgenpho APPLE 'PHONES ne 10296 05/16/20 06:42:43 0:57 288 48 nxtgenpho APPLE 'PHONES ne 10297 05/16/20 06:42:44 0:57 48 0 nxtgenpho APPLE 'PHONES ne 10298 05/16/20 06:43:41 1:12 48 0 nxtgenpho APPLE 'PHONES ne 10299 05/16/20 06:44:52 2:27 288 48 nxtgenpho APPLE 'PHONES ne 10300 05/16/20 06:44:53 2:27 48 0 nxtgenpho APPLE 'PHONES ne 10301 05/16/20 06:47:20 0:28 0 0 nxtgenpho APPLE 'PHONES ne 10302 05/16/20 06:47:47 12:40 288 48 nxtgenpho APPLE 'PHONES ne 10303 05/16/20 06:47:48 12:40 48 0 nxtgenpho APPLE 'PHONES ne 10304 05/16/20 06:58:33 60:00 10036 3160 ims 10305 05/16/20 07:00:28 0:38 48 0 nxtgenpho APPLE 'PHONES ne 10306 05/16/20 07:01:05 66:40 15290 12603 nxtgenpho APPLE 'PHONES ne 10307 05/16/20 07:01:06 60:00 12603 15002 nxtgenpho APPLE 'PHONES ne 10308 05/16/20 07:58:33 60:00 12028 4484 ims 10309 05/16/20 08:01:06 6:40 0 0 nxtgenpho APPLE 'PHONES ne 10310 05/16/20 08:07:46 0:48 48 0 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 425 AT4T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171345 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343403 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. .a° AT&T ‘•.. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn nom INSI MAKE MODEL Date Tame Numbor Up Dn (OTC) 10311 05/16/20 08:08:33 4:27 288 48 nxtgonpho APPLE !PHONES no 10312 05/16/20 08:08:34 4:27 48 0 nxtgenpho APPLE 'PEONES no 10313 05/16/20 08:13:01 0:37 48 0 nxtgenpho APPLE !PHONES no 10314 05/16/20 08:13:38 21:12 5485 6599 nxtgonpho APPLE !PHONES no 10315 05/16/20 08:13:39 21:13 6599 5197 nxtgonpho APPLE !PHONES no 10316 05/16/20 08:34:51 1:04 280 581 nxtgonpho APPLE !PHONES no 10317 05/16/20 08:35:54 64:09 6211 7068 nxtgonpho APPLE !PHONES no 10318 05/16/20 08:35:55 60:00 7068 5923 nxtgenpho APPLE !PHONES no 10319 05/16/20 08:58:33 60:00 9928 3176 ims 10320 05/16/20 09:35:55 4:09 0 0 nxtgonpho APPLE !PHONES no 10321 05/16/20 09:40:04 5:50 48 0 nxtgenpho APPLE !PHONES no 10322 05/16/20 09:45:53 8:16 288 48 nxtgonpho APPLE !PHONES no 10323 05/16/20 09:45:54 8:16 48 0 nxtgonpho APPLE !PHONES no 10324 05/16/20 09:54:10 1:08 0 0 nxtgonpho APPLE !PHONES ne 10325 05/16/20 09:55:17 8:46 5168 6246 nxtgonpho APPLE !PHONES no 10326 05/16/20 09:55:18 8:46 6246 4880 nxtgonpho APPLE !PHONES no 10327 05/16/20 09:58:33 60:00 11920 4644 ims 10328 05/16/20 10:04:04 3:24 351 778 nxtgonpho APPLE !PHONES no 10329 05/16/20 10:07:27 20:46 5590 6583 nxtgonpho APPLE !PHONES ne 10330 05/16/20 10:07:28 20:46 6583 5302 nxtgonpho APPLE !PHONES ne 10331 05/16/20 10:28:13 4:22 901 280 nxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 426 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171346 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343404 MOBILITY / 1 445, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:30:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .a# AT&T ‘•- UTC. Run Date: 06/17/2020 Run Time: Data Usage For: IS= Item Conn. Conn. Originating ET Bytes Bytes Apn EMI INSI MAKE MODEL Date Time Number Up Dn (UTC) 10332 05/16/20 10:28:14 4:22 280 613 nxtgonpho APPLE 'PHONES no 10333 05/16/20 10:32:35 0:55 288 48 nxtgonpho APPLE 'PHONES no 10334 05/16/20 10:32:37 0:54 48 0nmtgonpho APPLE 'PHONES no 10335 05/16/20 10:33:31 5:34 48 0nmtgonpho APPLE 'PHONES no 10336 05/16/20 10:39:04 3:02 288 48 nxtgonpho APPLE 'PHONES no 10337 05/16/20 10:39:06 3:01 48 0nmtgonpho APPLE 'PHONES no 10338 05/16/20 10:42:07 0:39 288 48 nxtgonpho APPLE 'PHONES no 10339 05/16/20 10:42:08 0:39 48 0nmtgonpho APPLE 'PHONES no 10340 05/16/20 10:42:47 1:47 9083 5335 nxtgonpho APPLE 'PHONES no 10341 05/16/20 10:44:33 0:52 901 280 nxtgonpho APPLE 'PHONES no 10342 05/16/20 10:44:35 0:51 280 613 nxtgonpho APPLE 'PHONES no 10343 05/16/20 10:45:26 18:19 7750 5014 nxtgonpho APPLE 'PHONES no 10344 05/16/20 10:58:33 60:00 13352 4516 ims 10345 05/16/20 11:03:44 2:08 5622 6426 nxtgonpho APPLE 'PHONES no 10346 05/16/20 11:03:45 2:08 6426 5334 nxtgonpho APPLE 'PHONES no 10347 05/16/20 11:05:53 0:05 0 0 nxtgonpho APPLE 'PHONES no 10348 05/16/20 11:06:00 25:13 9103 8034 nxtgonpho APPLE 'PHONES no 10349 05/16/20 11:31:13 30:01 11965 13972 nxtgonpho APPLE 'PHONES no 10350 05/16/20 11:58:33 60:00 9928 3284 ims 10351 05/16/20 12:01:14 14:42 5065 6230 nxtgonpho APPLE 'PHONES no 10352 05/16/20 12:01:15 14:42 6230 5932 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 427 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171347 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343405 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. k..70 ,4 AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DOLT INSI MAKE MODEL Date Tame Number Up Dn (UTC) 10353 05/16/20 12:15:57 16:56 2016 2157 nxtgonpho APPLE !PHONES no 10354 05/16/20 12:32:53 81:38 19337 21791 nxtgonpho APPLE !PHONES no 10355 05/16/20 12:32:54 60:00 21502 19925 nxtgonpho APPLE !PHONES no 10356 05/16/20 12:58:33 60:00 8388 2820 ims 10357 05/16/20 13:32:54 21:38 289 315 nxtgonpho APPLE !PHONES no 10358 05/16/20 13:54:32 30:58 7828 5490 nxtgonpho APPLE !PHONES no 10359 05/16/20 13:58:33 45:42 17880 9156 ims 10360 05/16/20 14:25:29 5:01 288 48 nxtgonpho APPLE !PHONES no 10361 05/16/20 14:25:31 5:00 48 0 nxtgonpho APPLE !PHONES no 10362 05/16/20 14:30:31 2:55 48 0 nxtgenpho APPLE !PHONES ne 10363 05/16/20 14:33:25 14:54 288 48 nxtgonpho APPLE !PHONES ne 10364 05/16/20 14:33:26 14:54 48 0 nxtgonpho APPLE !PHONES ne 10365 05/16/20 14:48:20 60:00 152909 993040 nxtgonpho APPLE !PHONES no 10366 05/16/20 14:48:22 60:00 15325 9124 ims APPLE !PHONES 10367 05/16/20 15:48:20 51:25 0 1522 nxtgonpho APPLE !PHONES no 10368 05/16/20 15:48:22 51:23 0 0 ims APPLE !PHONES 10369 05/16/20 16:46:05 3:44 72646 1108814 nxtgonpho APPLE !PHONES no 10370 05/16/20 16:46:08 3:41 8103 6068 ims APPLE !PHONES 10371 05/16/20 16:48:21 13:59 9534 6095 ims 10372 05/16/20 16:49:48 17:02 37527 47607 nxtgonpho APPLE !PHONES no 10373 05/16/20 16:49:49 17:02 47607 37047 nxtgonpho APPLE !PHONES no 10374 05/16/20 17:01:10 1:28 6334 6771 ims APPLE !PHONES 10375 05/16/20 17:01:11 1:28 6663 5982 ims APPLE !PHONES 10376 05/16/20 17:02:19 0:21 8634 3013 ims 10377 05/16/20 17:02:37 4:13 7674 19605 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 428 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171348 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343406 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. t,rwego AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn ENE! INSI MAKE MODEL Date Tame Number Up Dn (OTC) 10378 05/16/20 17:02:39 4:12 11433 7410 ims APPLE 'PHONES 10379 05/16/20 17:02:55 60:00 20238 9668 ims 10380 05/16/20 17:06:51 60:00 24499 22370 nxtgenpho APPLE 'PHONES ne 10381 05/16/20 18:02:55 60:00 8604 2928 ims 10382 05/16/20 18:06:51 14:24 346 210 nxtgenpho APPLE 'PHONES ne 10383 05/16/20 18:21:15 20:52 54209 72094 nxtgenpho APPLE 'PHONES ne 10384 05/16/20 18:21:16 20:52 72094 55132 nxtgenpho APPLE 'PHONES ne 10385 05/16/20 18:42:08 1:10 8530 5930 nxtgenpho APPLE 'PHONES ne 10386 05/16/20 18:43:18 15:17 9775 7636 nxtgenpho APPLE 'PHONES ne 10387 05/16/20 18:43:18 15:18 7636 9487 nxtgenpho APPLE 'PHONES ne 10388 05/16/20 18:58:36 49:44 9781 14223 nxtgenpho APPLE 'PHONES ne 10389 05/16/20 19:02:55 60:00 8388 2928 ims 10390 05/16/20 19:48:20 32:47 13375 21586 nxtgenpho APPLE 'PHONES ne 10391 05/16/20 19:48:20 32:48 21586 12799 nxtgenpho APPLE 'PHONES ne 10392 05/16/20 20:02:55 60:00 11920 4500 ims 10393 05/16/20 20:21:08 5:56 48 0 nxtgenpho APPLE 'PHONES ne 10394 05/16/20 20:27:03 7:00 4724 7488 nxtgenpho APPLE 'PHONES ne 10395 05/16/20 20:27:05 6:59 7488 4436 nxtgenpho APPLE 'PHONES ne 10396 05/16/20 20:34:04 8:35 6863 5722 nxtgenpho APPLE 'PHONES ne 10397 05/16/20 20:42:38 5:41 5169 6230 nxtgenpho APPLE 'PHONES ne 10398 05/16/20 20:42:39 5:41 6230 4881 nxtgenpho APPLE 'PHONES ne 10399 05/16/20 20:48:20 15:53 7978 6599 nxtgenpho APPLE 'PHONES ne 10400 05/16/20 21:02:55 60:00 6956 2788 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 429 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171349 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343407 MOBILITY 4110. ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ‘/ 1 4 4.7:we ‘4...". ag sf$ AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Siam Item Conn. Conn. Originating ET Bytes Bytes Apn ZOIRZ INSI MAKE MODEL Date TIM* Number Up Dn (OTC/ 10401 05/16/20 21:04:12 9:11 5169 6230 nxtgenpho APPLE 'PHONES ne 10402 05/16/20 21:04:13 9:11 6230 4881 nxtgenpho APPLE 'PHONES ne 10403 05/16/20 21:13:24 44:43 9010 10765 nxtgenpho APPLE 'PHONES ne 10404 05/16/20 21:58:06 1:52 5169 6230 nxtgenpho APPLE 'PHONES ne 10405 05/16/20 21:58:07 1:52 6230 4881 nxtgenpho APPLE 'PHONES ne 10406 05/16/20 21:59:59 4:33 2760 5158 nxtgenpho APPLE 'PHONES ne 10407 05/16/20 22:02:55 60:00 13568 4676 ims 10408 05/16/20 22:04:31 77:10 26551 42184 nxtgenpho APPLE 'PHONES ne 10409 05/16/20 22:04:32 60:00 23907 17378 nxtgenpho APPLE 'PHONES ne 10410 05/16/20 23:02:55 60:00 13012 3424 ims 10411 05/16/20 23:04:32 17:10 18277 8213 nxtgenpho APPLE 'PHONES ne 10412 05/16/20 23:21:42 8:05 7704 5019 nxtgenpho APPLE 'PHONES ne 10413 05/16/20 23:29:46 2:08 5065 6230 nxtgenpho APPLE 'PHONES ne 10414 05/16/20 23:29:47 2:08 6230 4777 nxtgenpho APPLE 'PHONES ne 10415 05/16/20 23:31:55 60:00 45745 114089 nxtgenpho APPLE 'PHONES ne 10416 05/17/20 00:02:55 60:00 13784 4640 ims 10417 05/17/20 00:31:55 7:15 0 6138 nxtgenpho APPLE 'PHONES ne 10418 05/17/20 00:39:10 0:05 0 0 nxtgenpho APPLE 'PHONES ne 10419 05/17/20 00:40:08 0:54 6114 4328 nxtgenpho APPLE 'PHONES ne 10420 05/17/20 00:41:01 130:17 288 48 nxtgenpho APPLE 'PHONES ne 10421 05/17/20 00:41:02 60:00 48 0 nxtgenpho APPLE 'PHONES ne 10422 05/17/20 01:02:55 60:00 10036 3176 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 430 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171350 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343408 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Tim: Data usage For: MS= Item Conn. Conn. Originating BT Bytes Bytes Apn INEZ IMSI MESE MODEL Date TIM* Number up 0n (OTC/ 10423 05/17/20 01:41:02 60:00 0 0 nxtgenpho APPLE 'PEONES ne 10424 05/17/20 02:02:55 60:00 16776 5908 ims 10425 05/17/20 02:41:02 10:17 0 0 nxtgenpho APPLE 'PEONES ne 10426 05/17/20 03:02:55 60:00 10252 3284 ims 10427 05/17/20 03:04:31 40:00 5399 7860 nxtgenpho APPLE 'PEONES ne 10428 05/17/20 03:04:32 60:00 7860 6686 nxtgenpho APPLE IPNONE8 ne 10429 05/17/20 03:44:31 132:48 8553 10174 nxtgenpho APPLE 'PHONES ne 10430 05/17/20 04:02:55 60:00 8388 3036 ims 10431 05/17/20 04:04:32 60:00 9270 7535 nxtgenpho APPLE 'PHONES ne 10432 05/17/20 05:02:55 60:00 6848 2680 ims 10433 05/17/20 05:04:32 52:49 904 630 nxtgenpho APPLE 'PHONES ne 10434 05/17/20 05:57:20 0:51 48 0 nxtgenpho APPLE 'PHONES ne 10435 05/17/20 05:58:10 3:47 288 48 nxtgenpho APPLE 'PHONES ne 10436 05/17/20 05:58:11 3:47 48 0 nxtgenpho APPLE 'PHONES ne 10437 05/17/20 06:01:58 60:00 96 0 nxtgenpho APPLE 'PHONES ne 10438 05/17/20 06:02:55 60:00 9696 3052 ims 10439 05/17/20 07:01:58 60:00 0 0 nxtgenpho APPLE 'PHONES ne 10440 05/17/20 07:02:55 60:00 13460 4732 ims 10441 05/17/20 08:01:58 60:00 0 0 nxtgenpho APPLE 'PHONES ne 10442 05/17/20 08:02:55 60:00 12028 4428 ims 10443 05/17/20 09:01:58 60:00 0 0 nxtgenpho APPLE 'PHONES ne 10444 05/17/20 09:02:55 60:00 9928 3176 ims 10445 05/17/20 10:01:58 12:04 0 0 nxtgenpho APPLE 'PHONES ne 10446 05/17/20 10:02:55 60:00 8496 3036 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 431 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171351 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343409 MOBILITY e s, P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Time: Data usage For: Si= Item Conn. Conn. Originating Br Bytes Bytes Apn BOW IMSI MAKE MODEL Date rams Numbsr up Dn (OTC) 10447 05/17/20 10:14:03 60:00 48 0 nxtgenphe APPLE 'PEONES ne 10448 05/17/20 11:02:55 60:00 11920 4376 ims 10449 05/17/20 11:14:03 43:29 0 0 nxtgenpho APPLE IPEOIRB ne 10450 05/17/20 11:57:31 10:36 288 48 nxtgenpho APPLE IPEOIRB ne 10451 05/17/20 11:57:32 10:36 48 0 nxtgenphe APPLE 'PEONES ne 10452 05/17/20 12:02:55 60:00 8496 2928 ims 10453 05/17/20 12:08:08 2:35 48 0 nxtgenphe APPLE 'PEONES ne 10454 05/17/20 12:10:43 33:05 288 48 nxtgenpho APPLE IPEOMEB ne 10455 05/17/20 12:10:44 33:05 48 0 nxtgenphe APPLE 'PEONES ne 10456 05/17/20 12:43:49 58:16 48 0 nxtgenpho APPLE IPEOIRB ne 10457 05/17/20 13:02:55 22:38 11856 4324 ims 10458 05/17/20 13:23:58 60:00 20044 9695 ims 10459 05/17/20 14:23:58 24:02 10052 3316 ims 10460 05/17/20 14:46:29 60:00 0 0 ims 10461 05/17/20 14:48:00 60:00 18554 9484 ims 10462 05/17/20 15:46:29 60:00 0 0 ims 10463 05/17/20 15:48:00 60:00 8388 2820 ims 10464 05/17/20 15:58:09 7:16 64406 30274 nxtgenpho APPLE 'PHONES ne 10465 05/17/20 16:05:25 3:35 288 48 nxtgenpho APPLE 'PHONES ne 10466 05/17/20 16:05:26 3:35 48 0 nxtgenphe APPLE 'PHONES ne 10467 05/17/20 16:09:01 2:46 48 0 nxtgenphe APPLE !PHONES ne 10468 05/17/20 16:11:47 5:58 6909 5720 nxtgenphe APPLE !PHONES ne 10469 05/17/20 16:17:43 4:04 897 278 nxtgenpho APPLE !PHONES ne 10470 05/17/20 16:17:45 4:03 278 609 nxtgenphe APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 432 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGAt00171352 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343410 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. .s.AT&T ‘•- Run Date: 06/17/2020 Run Time: Data Usage For: Si= Item Conn. Conn. Originating ET Bytes Bytes Apn DOOM IMSI MAKE MODEL Date Time Number Up Dn (OTC) 10471 05/17/20 16:21:48 1:29 48 0nxtgonpho APPLE 'PHONES ne 10472 05/17/20 16:23:17 8:16 5066 6282 nxtgenpho APPLE 'PHONES ne 10473 05/17/20 16:23:18 8:16 6282 4778 nxtgenpho APPLE 'PHONES ne 10474 05/17/20 16:31:34 42:01 8514 6280 nxtgenpho APPLE 'PHONES ne 10475 05/17/20 16:46:29 31:51 0 0 ims 10476 05/17/20 16:48:00 31:00 4980 1588 ims 10477 05/17/20 17:13:34 12:36 4615821 761486 nxtgenpho APPLE 'PHONES ne 10478 05/17/20 17:13:35 12:36 761486 4615437 nxtgenpho APPLE 'PHONES ne 10479 05/17/20 17:18:19 7:51 6358 8187 ims APPLE 'PHONES 10480 05/17/20 17:18:20 7:51 8119 6094 ims APPLE 'PHONES 10481 05/17/20 17:26:11 18:07 36437 46608 nxtgenpho APPLE 'PHONES ne 10482 05/17/20 17:26:14 18:04 11385 9122 ims APPLE 'PHONES 10483 05/17/20 17:44:18 17:17 827111 19205770 nxtgenpho APPLE 'PHONES ne 10484 05/17/20 17:44:20 41:54 9285 7276 ims APPLE 'PHONES 10485 05/17/20 18:01:35 20:41 517789 19510119 nxtgenpho APPLE 'PHONES ne 10486 05/17/20 18:22:16 3:58 66543 1031939 nxtgenpho APPLE 'PHONES ne 10487 05/17/20 18:26:14 2:15 12257 2684 nxtgenpho APPLE 'PHONES ne 10488 05/17/20 18:26:14 2:15 0 0 ims APPLE 'PHONES 10489 05/17/20 18:28:28 1:46 30782 15616 nxtgenpho APPLE 'PHONES ne 10490 05/17/20 18:28:29 1:45 7231 6815 ims APPLE 'PHONES 10491 05/17/20 18:28:29 1:46 15552 30494 nxtgenpho APPLE 'PHONES ne 10492 05/17/20 18:28:30 1:45 6815 6967 ims APPLE 'PHONES 10493 05/17/20 18:30:15 7:50 0 0nmtgonpho APPLE 'PHONES ne 10494 05/17/20 18:38:05 4:59 171964 59546 nxtgenpho APPLE 'PHONES ne 10495 05/17/20 18:38:06 4:58 6226 10501 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 433 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171353 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343411 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ST Bytes Bytes Apn =MI IM9I MAKE MODEL Date Time Number Up Dn (Luz) 10496 05/17/20 18:38:06 4:59 59546 171676 nxtgenpho APPLE !PHONES ne 10497 05/17/20 18:38:07 4:58 6685 5962 ims APPLE !PHONES 10498 05/17/20 18:43:05 5:41 15417 17834 nxtgenpho APPLE !PHONES ne 10499 05/17/20 18:43:07 5:39 7405 6123 ims APPLE !PHONES 10500 05/17/20 18:48:46 14:37 100199 49913 nxtgenpho APPLE !PHONES ne 10501 05/17/20 18:48:47 6:54 6334 6685 ims APPLE !PHONES 10502 05/17/20 18:48:47 14:37 49913 99911 nxtgenpho APPLE !PHONES ne 10503 05/17/20 18:48:48 6:54 6685 6070 ims APPLE !PHONES 10504 05/17/20 18:52:06 8:56 9721 6481 ims 10505 05/17/20 18:55:40 7:43 6246 6687 ims APPLE !PHONES 10506 05/17/20 18:55:42 7:42 6687 5982 ims APPLE !PHONES 10507 05/17/20 19:03:24 55:21 16661 10738 nxtgenpho APPLE !PHONES ne 10508 05/17/20 19:03:26 55:19 9791 7609 ims APPLE !PHONES 10509 05/17/20 19:58:44 2:41 288 48 nxtgenpho APPLE !PHONES ne 10510 05/17/20 19:58:45 2:40 6633 10033 ims APPLE !PHONES 10511 05/17/20 19:58:45 2:42 48 0 nxtgenpho APPLE !PHONES ne 10512 05/17/20 19:58:46 2:40 10033 6369 ims APPLE !PHONES 10513 05/17/20 20:01:26 0:54 48 0 nxtgenpho APPLE !PHONES ne 10514 05/17/20 20:01:29 0:51 10307 8044 ims APPLE !PHONES 10515 05/17/20 20:02:19 2:10 288 48 nxtgenpho APPLE !PHONES ne 10516 05/17/20 20:02:20 2:09 6609 7363 ims APPLE !PHONES 10517 05/17/20 20:02:20 2:10 48 0 nxtgenpho APPLE !PHONES ne 10518 05/17/20 20:02:21 2:09 7255 6345 ims APPLE !PHONES 10519 05/17/20 20:04:30 5:13 48 0 nxtgenpho APPLE !PHONES ne 10520 05/17/20 20:04:32 5:11 8899 7048 ims APPLE !PHONES 10521 05/17/20 20:09:43 8:56 4556 6014 nxtgenpho APPLE !PHONES ne 10522 05/17/20 20:09:44 8:56 6014 4268 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 434 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171354 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343412 MOBILITY 45, pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:58:58pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. / 1 4-01. AT&T Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating AT Bytes Bytes Apn MMAI IASI MARE MODEL Date Tame Number Up Dn (OTC) 10523 05/17/20 20:09:48 8:51 6224 6771 ims APPLE 'PHONES 10524 05/17/20 20:09:49 8:51 6663 5960 ims APPLE 'PHONES 10525 05/17/20 20:18:40 41:19 46289 50120 nxtgonpho APPLE 'PHONES no 10526 05/17/20 20:18:44 9:08 8905 7068 ims APPLE 'PHONES 10527 05/17/20 20:27:52 60:00 13320 4344 ims APPLE 'PHONES 10528 05/17/20 20:59:58 11:35 5065 6230 nxtgonpho APPLE 'PHONES no 10529 05/17/20 20:59:59 11:36 6230 5722 nxtgonpho APPLE 'PHONES no 10530 05/17/20 21:11:35 0:42 7640 5019 nxtgonpho APPLE 'PHONES no 10531 05/17/20 21:12:16 6:40 901 280 nxtgonpho APPLE 'PHONES no 10532 05/17/20 21:12:17 6:40 280 613 nxtgonpho APPLE 'PHONES no 10533 05/17/20 21:18:57 0:05 0 0 nxtgonpho APPLE 'PHONES no 10534 05/17/20 21:19:14 8:41 628 1252 nxtgonpho APPLE 'PHONES no 10535 05/17/20 21:27:52 60:00 16788 8720 ims APPLE 'PHONES 10536 05/17/20 21:27:55 1:35 19101 23254 nxtgonpho APPLE 'PHONES no 10537 05/17/20 21:27:56 1:35 23254 18813 nxtgonpho APPLE 'PHONES no 10538 05/17/20 21:29:31 6:14 19810 18360 nxtgonpho APPLE 'PHONES no 10539 05/17/20 21:35:44 1:22 288 48 nxtgonpho APPLE 'PHONES no 10540 05/17/20 21:35:45 1:22 48 0 nxtgonpho APPLE 'PHONES no 10541 05/17/20 21:37:07 14:26 48 0 nxtgonpho APPLE 'PHONES no 10542 05/17/20 21:51:33 4:13 6230 4746 nxtgonpho APPLE 'PHONES no 10543 05/17/20 21:54:18 3:11 670404 340887 ims APPLE 'PHONES 10544 05/17/20 21:55:46 2:39 4692 3968 nxtgonpho APPLE 'PHONES no 10545 05/17/20 21:58:24 2:09 15875 16224 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 435 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171355 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343413 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTZ. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating CT Bytes Bytes Apn DMZ ISIS! MANZ MUCCI. Date Time Numbor Up Dn (OTC) 10546 05/17/20 21:58:25 2:09 16156 15587 nxtgonpho APPLE 'PEONES no 10547 05/17/20 22:00:34 1:03 280 581 nxtgonpho APPLE 'PEONES no 10548 05/17/20 22:01:36 6:26 5265 6278 nxtgonpho APPLE 'PEONES no 10549 05/17/20 22:01:37 6:26 6278 4881 nxtgonpho APPLE 'PEONES no 10550 05/17/20 22:08:03 2:27 280 581 nxtgonpho APPLE 'PEONES no 10551 05/17/20 22:10:29 22:15 5761 6709 nxtgonpho APPLE 'PEONES no 10552 05/17/20 22:10:30 22:15 6709 5089 nxtgonpho APPLE 'PECKED no 10553 05/17/20 22:27:52 4:01 6568 9748 ims APPLE 'PHONES 10554 05/17/20 22:31:29 11:28 18310 12114 ims 10555 05/17/20 22:32:45 1:20 192 Onmtgonpho APPLE 'PHONES no 10556 05/17/20 22:32:46 1:19 288 48 nxtgonpho APPLE 'PHONES no 10557 05/17/20 22:32:46 1:20 0 0 nxtgonpho APPLE 'PHONES no 10558 05/17/20 22:32:47 1:19 48 0 nxtgonpho APPLE 'PHONES no 10559 05/17/20 22:34:06 0:32 6230 4849 nxtgonpho APPLE 'PHONES no 10560 05/17/20 22:34:37 21:24 6880 7486 nxtgonpho APPLE 'PHONES no 10561 05/17/20 22:34:38 21:25 7486 17723 nxtgonpho APPLE 'PHONES no 10562 05/17/20 22:43:13 60:00 15626 9206 ims 10563 05/17/20 22:56:02 20:12 10234 12648 nxtgonpho APPLE 'PHONES no 10564 05/17/20 22:56:03 20:13 12596 10813 nxtgonpho APPLE 'PHONES no 10565 05/17/20 23:16:15 6:48 7877 5176 nxtgonpho APPLE 'PHONES no 10566 05/17/20 23:23:03 14:27 5060 6228 nxtgonpho APPLE 'PHONES no 10567 05/17/20 23:23:03 14:28 6228 4772 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 436 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171356 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343414 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ST Bytes Bytes Apn L@3 INSI NAM MODEL Date Time Number Up Dn (UTC) 10568 05/17/20 23:37:31 3:06 6426 5270mmtgonphe APPLE 'PHONES ne 10569 05/17/20 23:40:36 1:22 901 280 nxtgenpho APPLE 'PHONES ne 10570 05/17/20 23:40:37 1:23 280 613 nxtgenpho APPLE 'PHONES ne 10571 05/17/20 23:42:00 0:53 48 0 nmtgonphe APPLE 'PHONES ne 10572 05/17/20 23:42:53 1:13 48 Onmtgonpho APPLE 'PHONES ne 10573 05/17/20 23:43:13 60:00 8712 3804 ims 10574 05/17/20 23:44:05 6:26 288 48 nxtgenpho APPLE 'PHONES ne 10575 05/17/20 23:44:06 6:26 48 0 nxtgenpho APPLE 'PHONES ne 10576 05/17/20 23:50:32 0:34 7640 4913 nxtgenpho APPLE 'PHONES ne 10577 05/17/20 23:51:05 2:08 901 280 nxtgenpho APPLE 'PHONES ne 10578 05/17/20 23:51:06 2:08 280 613 nxtgenpho APPLE 'PHONES ne 10579 05/17/20 23:53:14 8:32 48 0 nmtgonphe APPLE 'PHONES ne 10580 05/18/20 00:01:45 2:29 5062 6244 nxtgenpho APPLE 'PHONES ne 10581 05/18/20 00:01:47 2:28 6244 4774 nxtgenpho APPLE 'PHONES ne 10582 05/18/20 00:03:56 7:35 278 577 nxtgenpho APPLE 'PHONES ne 10583 05/18/20 00:11:30 14:49 5235 6576 nxtgenpho APPLE 'PHONES ne 10584 05/18/20 00:11:31 14:49 6576 4947 nxtgenpho APPLE 'PHONES ne 10585 05/18/20 00:26:20 12:15 8075 5601 nxtgenpho APPLE 'PHONES ne 10586 05/18/20 00:38:34 2:29 288 48 nxtgenpho APPLE 'PHONES ne 10587 05/16/20 00:38:35 2:29 48 0 nmtgonphe APPLE 'PHONES ne 10588 05/16/20 00:41:03 6:11 288 48 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 437 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171357 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343415 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. .s.AT&T ‘•- Run Data: 06/17/2020 Run Time: Data Usage For: Ma= Item Conn. Conn. Originating ET Bytes Bytes Apn DOLI INSI MAKE MODEL Data Time Number Up Dn MC/ 10589 05/18/20 00:41:04 6:11 48 Onxtgonpho APPLE 'PHONES ne 10590 05/18/20 00:43:13 60:00 10068 3300 ims 10591 05/18/20 00:47:15 18:30 7409 11148 nxtgonpho APPLE 'PHONES ne 10592 05/18/20 01:05:44 80:04 5491 7927 nxtgonpho APPLE 'PHONES no 10593 05/18/20 01:05:45 60:00 7927 6778 nxtgonpho APPLE 'PHONES ne 10594 05/18/20 01:43:13 60:00 10068 3176 imn 10595 05/18/20 02:05:45 20:05 0 Onmtgonpho APPLE 'PHONES no 10596 05/18/20 02:25:49 14:49 6523 7168 nxtgonpho APPLE 'PHONES no 10597 05/18/20 02:25:50 14:49 7168 6139 nxtgonpho APPLE 'PHONES no 10598 05/18/20 02:40:39 5:37 48 Onmtgonpho APPLE 'PHONES ne 10599 05/18/20 02:43:13 60:00 8604 3036 imn 10600 05/18/20 02:46:15 49:59 13297 8101 nxtgonpho APPLE 'PHONES ne 10601 05/18/20 02:46:16 60:00 8274 13018 nxtgonpho APPLE 'PHONES ne 10602 05/18/20 03:36:14 353:33 117402 109264 nxtgonpho APPLE 'PHONES ne 10603 05/18/20 03:43:13 60:00 13584 4892 imn 10604 05/18/20 03:46:16 60:00 1386 1260 nxtgonpho APPLE 'PHONES ne 10605 05/18/20 04:43:13 60:00 12012 4392 imn 10606 05/18/20 04:46:16 60:00 1727 1680 nxtgonpho APPLE 'PHONES ne 10607 05/18/20 05:43:13 60:00 8388 2928 imn 10608 05/18/20 05:46:16 60:00 95072 105489 nxtgonpho APPLE 'PHONES ne 10609 05/18/20 06:43:13 60:00 13260 4408 imn 10610 05/18/20 06:46:16 60:00 10906 11703 nxtgonpho APPLE 'PHONES ne 10611 05/18/20 07:43:13 60:00 8804 3036 imn 10612 05/18/20 07:46:16 60:00 0 92 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 438 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171358 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343416 MOBILITY 45, pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating AT Bytes Bytes Apn flat IMSI WARR MOLL Date Time Number Up Dn (OTC) 10613 05/18/20 08:43:13 60:00 11796 4536 ims 10614 05/18/20 08:46:16 43:33 0 Onmtgonpho APPIZ 'PROMO ne 10615 05/18/20 09:43:13 60:00 6924 2680 ims 10616 05/18/20 10:43:13 60:00 9852 3316 ims 10617 05/18/20 10:56:06 31:15 5799 6820 nxtgonpho APPLE IPACME8 no 10618 05/18/20 10:56:07 31:15 6820 5511 nxtgonpho APPLE !PHONES no 10619 05/18/20 11:27:22 44:31 16580 12714 nxtgonpho APPLE !PHONES no 10620 05/18/20 11:43:13 60:00 12012 4376 ims 10621 05/18/20 12:11:52 130:16 288 48 nxtgonpho APPLE 'PHONES ne 10622 05/18/20 12:11:53 60:00 48 0 nxtgonpho APPLE 'PHONES ne 10623 05/18/20 12:43:13 60:00 6924 2680 ims 10624 05/18/20 13:11:53 60:00 0 Onxtgonpho APPLE 'PHONES no 10625 05/18/20 13:43:13 37:04 8356 3440 ims 10626 05/18/20 14:11:53 10:17 0 Onxtgonpho APPLE 'PHONES ne 10627 05/18/20 14:20:42 3:53 11322 6726 ims 10628 05/18/20 14:24:57 19:38 13798 12056 ims 10629 05/18/20 14:28:12 0:55 5323 6372 nxtgonpho APPLE 'PHONES ne 10630 05/18/20 14:28:13 0:55 6372 5035 nxtgenpho APPLE 'PHONES ne 10631 05/18/20 14:29:08 3:12 48 0 nxtgonpho APPLE 'PHONES ne 10632 05/18/20 14:32:19 48:45 767044 134635 nxtgenpho APPLE 'PHONES ne 10633 05/18/20 14:32:20 48:45 134635 778311 nxtgonpho APPLE 'PHONES no 10634 05/18/20 14:38:41 0:00 0 0 ims APPLE 'PHONES 10635 05/18/20 14:42:26 2:09 8250 6280 ims 10636 05/18/20 14:44:34 36:30 7352 7205 ims APPLE 'PHONES 10637 05/18/20 14:44:35 36:30 7137 7196 ims APPLE 'PHONES 10638 05/18/20 15:02:51 60:00 17572 9459 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 439 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171359 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343417 MOBILITY ce• ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating AT Bytes Bytes Apn EMBI IMSI MAKE MODEL Date Time Numbor Up Dn (UTC) 10639 05/18/20 15:21:05 60:00 238592 45185 nxtgonpho APPLE 'PROMO ne 10640 05/18/20 16:02:51 60:00 6816 2756 ims 10641 05/18/20 16:21:05 60:00 109591 71979 nxtgonpho APPLE 'PROMO ne 10642 05/18/20 17:02:51 6:41 6196 4316 ims 10643 05/18/20 17:09:35 60:00 18658 10346 ims 10644 05/18/20 17:21:05 60:00 12631 45043 nxtgonpho APPLE 'PROMO ne 10645 05/18/20 18:09:35 3:55 0 0 ims APPLE 'PEONES 10646 05/18/20 18:13:29 0:41 4176 1448 ims APPLE 'PHONES 10647 05/18/20 18:13:30 0:40 4044 1448 ims APPLE 'PHONES 10648 05/18/20 18:14:10 60:00 11796 4468 ims APPLE 'PHONES 10649 05/18/20 18:21:05 60:00 1820 1992 nxtgonpho APPLE 'PHONES ne 10650 05/18/20 19:14:10 60:00 10300 3408 ims APPLE 'PHONES 10651 05/18/20 19:21:05 60:00 35779 21739 nxtgonpho APPLE 'PHONES ne 10652 05/18/20 20:14:10 38:10 4980 1820 ims APPLE 'PHONES 10653 05/18/20 20:21:05 60:00 6848 46191 nxtgonpho APPLE 'PHONES ne 10654 05/18/20 20:52:19 5:09 17752 2340 ims APPLE 'PHONES 10655 05/18/20 20:52:20 5:08 5556 2340 ims APPLE 'PHONES 10656 05/18/20 20:57:28 0:00 0 0 ims APPLE 'PHONES 10657 05/18/20 20:57:36 60:00 24589 10552 ims 10658 05/18/20 21:21:05 60:00 4123 1207 nxtgonpho APPLE 'PHONES ne 10659 05/18/20 21:57:36 60:00 10144 3376 ims 10660 05/18/20 22:21:05 60:00 1877 5801 nxtgonpho APPLE 'PHONES ne 10661 05/18/20 22:57:36 60:00 7296 3880 ims 10662 05/18/20 23:21:05 60:00 1270 1050 nxtgonpho APPLE 'PHONES ne 10663 05/18/20 23:57:36 60:00 8712 3004 ims 10664 05/19/20 00:21:05 60:00 4878 2427 nxtgonpho APPLE !PHONES no 10665 05/19/20 00:57:36 60:00 21144 7016 ims 10666 05/19/20 01:21:05 60:00 981 735 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 440 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171360 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343418 MOBILITY 4 ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tt-_„„s `s -a. AT&T Sr...swirl UTC. Run Date: 06/17/2020 Run Time: Data Usage For: MS= Item Conn. Conn. Originating ET Bytos Bytes Apn LBSI IMSI MAKE MODEL Date Time Number Up Dn (OTC) 10667 05/19/20 01:55:50 0:01 0 0 isms 10668 05/19/20 01:57:36 60:00 13676 4536 isms 10669 05/19/20 02:21:05 60:00 751 735 nxtgonpho APPLE !PHONES ne 10670 05/19/20 02:57:36 60:00 8388 3004 isms 10671 05/19/20 03:21:05 60:00 635 525 nxtgonpho APPLE !PHONES ne 10672 05/19/20 03:57:36 60:00 14676 4716 isms 10673 05/19/20 04:21:05 24:21 173 105 nxtgonpho APPLE !PHONES ne 10674 05/19/20 04:45:26 60:00 7113 5585 nxtgonpho APPLE !PHONES no 10675 05/19/20 04:57:36 60:00 7172 2756 isms 10676 05/19/20 05:45:26 60:00 3276 2205 nxtgonpho APPLE !PHONES ne 10677 05/19/20 05:57:36 60:00 9928 3252 isms 10678 05/19/20 06:45:26 60:00 635 525 nxtgonpho APPLE !PHONES ne 10679 05/19/20 06:57:36 60:00 15668 5936 isms 10680 05/19/20 07:45:26 60:00 519 315 nxtgonpho APPLE !PHONES ne 10681 05/19/20 07:57:36 60:00 10036 3144 isms 10682 05/19/20 08:45:26 60:00 6133 4369 nxtgonpho APPLE !PHONES no 10683 05/19/20 08:57:36 60:00 6956 2756 isms 10684 05/19/20 09:45:26 60:00 11243 6323 nxtgonpho APPLE !PHONES no 10685 05/19/20 09:57:36 60:00 10020 3144 imp 10686 05/19/20 10:45:26 60:00 9722 8482 nxtgonpho APPLE !PHONES no 10687 05/19/20 10:57:36 60:00 6848 2648 imp 10688 05/19/20 11:45:26 45:39 47591 78486 nxtgonpho APPLE !PHONES no 10689 05/19/20 11:57:36 6:47 0 0 imp APPLE !PHONES 10690 05/19/20 12:04:23 12:10 5256 2824 imp APPLE !PHONES 10691 05/19/20 12:04:23 12:10 5192 2824 imp APPLE !PHONES 10692 05/19/20 12:16:33 5:47 3532 1448 imp APPLE !PHONES 10693 05/19/20 12:22:20 1:36 3968 1448 imp APPLE !PHONES 10694 05/19/20 12:22:20 1:36 3904 1448 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 441 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171361 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343419 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:58:68pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage Tor: INS= Item Conn. Conn. Originating ET Bytes Bytes Apn LEI IIB3I MD= MODEL Date Time Numbor Up Dn (OTC) 10695 05/19/20 12:23:56 0:06 3100 2200 ims APPLE 'PEONES 10696 05/19/20 12:24:02 1:53 2768 1324 ims APPLE 'PEONES 10697 05/19/20 12:24:02 1:53 2704 1324 ims APPLE 'PEONES 10698 05/19/20 12:25:55 18:57 8404 3548 ims APPLE 'PEONES 10699 05/19/20 12:31:04 0:35 5166 6228 nxtgenpho APPLE 'PEONES ne 10700 05/19/20 12:31:06 0:34 6228 4878 nxtgenpho APPLE 'PEONES ne 10701 05/19/20 12:31:40 60:00 278 577 nxtgenpho APPLE 'PEONES ne 10702 05/19/20 13:31:40 60:00 48579 431926 nxtgenpho APPLE 'PHONES ne 10703 05/19/20 13:40:26 16:00 10182 6478 ims APPLE IPHONE8 10704 05/19/20 13:56:26 0:17 2752 1340 ims APPLE IPHONE8 10705 05/19/20 13:56:26 0:17 2688 1340 ims APPLE IPHONE8 10706 05/19/20 13:56:43 3:30 3192 1788 ims APPLE IPHONE8 10707 05/19/20 14:00:13 20:04 2644 1340 ims APPLE IPHONE8 10708 05/19/20 14:00:13 20:04 2580 1340 ims APPLE IPHONE8 10709 05/19/20 14:20:17 60:00 11904 4500 ims APPLE IPHONE8 10710 05/19/20 14:31:40 60:00 1294 5333 nxtgenpho APPLE IPHONE8 ne 10711 05/19/20 15:20:17 60:00 6816 2664 ims APPLE IPHONE8 10712 05/19/20 15:31:40 60:00 41304 31357 nxtgenpho APPLE 'PHONES no 10713 05/19/20 16:20:17 46:41 15140 8028 ims APPLE 'PHONES 10714 05/19/20 16:31:40 41:04 42687 29513 nxtgonpho APPLE 'PHONES ne 10715 05/19/20 17:07:02 60:00 18524 9806 ims 10716 05/19/20 17:12:44 60:00 48777 30257 nxtgenpho APPLE 'PHONES ne 10717 05/19/20 18:07:02 60:00 8604 2896 ims 10718 05/19/20 18:12:44 60:00 18506 20803 nxtgenpho APPLE IPHONE8 ne 10719 05/19/20 19:07:02 60:00 7188 2880 ims 10720 05/19/20 19:12:44 60:00 4284 11716 nxtgenpho APPLE IPHONE8 ne 10721 05/19/20 20:07:02 60:00 47520 25436 ims 10722 05/19/20 20:12:44 60:00 116096 92793 nxtgenpho APPLE IPHONE8 ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 442 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171362 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343420 MOBILITY 410. ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:80:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ...,,,,• ••/43 "". -s AT&T UTE. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn IBM IMSI MAKE MODEL Data Time Number Up De (OTC) 10723 05/19/20 20:41:03 8:15 1442730 1301211 ism 10724 05/19/20 20:49:25 2:38 532877 387830 ism 10725 05/19/20 21:07:02 18:16 16916 14228 ism APPLE !PHONES 10726 05/19/20 21:12:44 60:00 169672 316498 nxtgonph APPLE !PHONES no 10727 05/19/20 21:14:35 0:32 2963 20327 Las 10728 05/19/20 21:25:18 40:36 114540 3648 ism APPLE !PHONES 10729 05/19/20 21:25:18 40:36 6140 3648 ism APPLE !PHONES 10730 05/19/20 22:05:54 60:00 50268 31928 ism APPLE !PHONES 10731 05/19/20 22:12:44 60:00 53647 36614 nxtgonph APPLE !PHONES ne 10732 05/19/20 22:29:15 0:32 5388 19273 igloo APPLE !PHONES 10733 05/19/20 23:03:37 0:22 0 0 into APPLE !PHONES 10734 05/19/20 23:04:22 2:19 519759 265795 Las APPLE !PHONES 10735 05/19/20 23:05:54 19:20 4416 1904 Las APPLE !PHONES 10736 05/19/20 23:12:44 60:00 257347 731383 nxtgonph APPLE !PHONES ne 10737 05/19/20 23:25:14 20:35 24596 2308 Las APPLE !PHONES 10738 05/19/20 23:25:14 20:35 5572 2308 Las APPLE !PHONES 10739 05/19/20 23:45:49 5:33 3424 1324 Las APPLE !PHONES 10740 05/19/20 23:51:22 1:48 2660 1324 Las APPLE !PHONES 10741 05/19/20 23:51:22 1:48 2596 1324 Las APPLE !PHONES 10742 05/19/20 23:53:10 60:00 12136 4220 Las APPLE !PHONES 10743 05/20/20 00:12:44 60:00 93211 75998 nxtgonph APPLE !PHONES no 10744 05/20/20 00:53:10 1:09 0 0 Las APPLE !PHONES 10745 05/20/20 00:54:19 0:22 15524 1448 Las APPLE !PHONES 10746 05/20/20 00:54:19 0:22 3328 1448 Las APPLE !PHONES 10747 05/20/20 00:54:41 60:00 10504 4204 Las APPLE !PHONES 10748 05/20/20 01:12:44 60:00 70778 59040 nxtgonph APPLE !PHONES ne 10749 05/20/20 01:54:41 16:51 0 0 Las APPLE !PHONES 10750 05/20/20 02:11:32 60:00 32548 3988 Las APPLE !PHONES 10751 05/20/20 02:11:32 60:00 8112 3988 Las APPLE !PHONES 10752 05/20/20 02:12:44 60:00 3655 1604 nxtgonph APPLE !PHONES ne 10753 05/20/20 03:11:32 60:00 7788 4148 imp APPLE !PHONES 10754 05/20/20 03:11:32 60:00 7788 4148 into APPLE !PHONES AT&T Proprietor The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 443 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171363 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343421 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in •-•io AT&T UTZ. Run Data: 06/17/2020 Run Time: Data Usage For: Sim Item Conn. Conn. Originating ET Bytes Bytes Apn IMMIX IMEI MAKE MODEL Date Time Number Up Dn (UTC) 10755 05/20/20 03:12:44 60:00 751 735 nxtgonpho APPLE 'PHONES ne 10756 05/20/20 04:11:32 60:00 5192 2432 ims APPLE 'PHONES 10757 05/20/20 04:11:32 60:00 5192 2432 ims APPLE 'PHONES 10758 05/20/20 04:12:44 60:00 751 735 nxtgonpho APPLE 'PHONES ne 10759 05/20/20 05:11:32 60:00 5192 2628 ims APPLE 'PHONES 10760 05/20/20 05:11:32 60:00 5192 2540 ims APPLE 'PHONES 10761 05/20/20 05:12:44 60:00 635 525 nxtgonpho APPLE 'PHONES ne 10762 05/20/20 06:11:32 60:00 7788 3864 ims APPLE 'PHONES 10763 05/20/20 06:11:32 60:00 7788 3864 ims APPLE 'PHONES 10764 05/20/20 06:12:44 60:00 578 630 nxtgonpho APPLE 'PHONES no 10765 05/20/20 07:11:32 60:00 5516 2772 ims APPLE 'PHONES 10766 05/20/20 07:11:32 60:00 5516 2772 ims APPLE 'PHONES 10767 05/20/20 07:12:44 60:00 398 315 nxtgonpho APPLE 'PHONES no 10768 05/20/20 08:11:32 60:00 7788 4040 ims APPLE 'PHONES 10769 05/20/20 08:11:32 60:00 7788 4040 ims APPLE 'PHONES 10770 05/20/20 08:12:44 60:00 346 210 nxtgonpho APPLE 'PHONES no 10771 05/20/20 09:11:32 60:00 5192 2540 ims APPLE 'PHONES 10772 05/20/20 09:11:32 60:00 5192 2540 ims APPLE 'PHONES 10773 05/20/20 09:12:44 60:00 462 420 nxtgonpho APPLE 'PHONES no 10774 05/20/20 10:11:32 22:25 2596 1324 ims APPLE 'PHONES 10775 05/20/20 10:11:32 22:25 2596 1324 ims APPLE 'PHONES 10776 05/20/20 10:12:44 60:00 3870 1197 nxtgonpho APPLE 'PHONES ne 10777 05/20/20 10:33:57 60:00 10488 4080 ims APPLE 'PHONES 10778 05/20/20 11:12:44 59:40 24619 15577 nxtgonpho APPLE 'PHONES ne 10779 05/20/20 11:33:57 60:00 7420 3648 ims APPLE 'PHONES 10780 05/20/20 12:12:24 1:47 48 0 nxtgonpho APPLE 'PHONES no 10781 05/20/20 12:14:11 60:00 46707 18829 nxtgonpho APPLE 'PHONES ne 10782 05/20/20 12:33:57 60:00 0 0 ism APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 444 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171364 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343422 MOBILITY / 1 44e. pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INEZ IMSI MAKE MODEL Date Tame Number Up Dn (UTC) 10783 05/20/20 12:38:30 60:00 19197 9043 imn 10784 05/20/20 13:14:11 53:50 111892 197148 nxtgenpho APPLE 'PEONES ne 10785 05/20/20 13:33:57 34:25 0 0 imn APPLE 'PEONES 10786 05/20/20 13:38:30 3:27 108 108 imn APPLE 'PEONES 10787 05/20/20 13:41:57 2:58 33368 1556 imn APPLE 'PEONES 10788 05/20/20 13:41:57 2:58 3136 1556 imn APPLE 'PEONES 10789 05/20/20 13:44:55 28:27 3500 1448 imn APPLE 'PEONES 10790 05/20/20 14:08:00 1:40 5926 6294 nxtgenpho APPLE 'PEONES ne 10791 05/20/20 14:08:01 1:40 6294 5638 nxtgenpho APPLE IPHOtO18 ne 10792 05/20/20 14:08:21 1:19 6227 6733 imn APPLE !PHONES 10793 05/20/20 14:08:22 1:19 6665 5963 imn APPLE !PHONES 10794 05/20/20 14:09:41 60:00 4249469 4633859 nxtgenpho APPLE !PHONES ne 10795 05/20/20 14:09:43 11:21 6671 5982 imn APPLE !PHONES 10796 05/20/20 14:21:04 2:13 3532 1324 imn APPLE !PHONES 10797 05/20/20 14:23:17 19:36 2628 1324 imn APPLE !PHONES 10798 05/20/20 14:42:53 60:00 12152 5436 imn APPLE !PHONES 10799 05/20/20 15:09:41 60:00 1754 1422 nxtgenpho APPLE !PHONES ne 10800 05/20/20 15:42:53 60:00 9928 3144 imn APPLE !PHONES 10801 05/20/20 16:09:41 60:00 27188 15520 nxtgenpho APPLE !PHONES ne 10802 05/20/20 16:42:53 60:00 10268 3268 imn APPLE !PHONES 10803 05/20/20 17:09:41 60:00 9200 8732 nxtgenpho APPLE !PHONES ne 10804 05/20/20 17:42:53 35:00 9712 3036 imn APPLE !PHONES 10805 05/20/20 18:09:41 60:00 97000 619433 nxtgenpho APPLE !PHONES ne 10806 05/20/20 18:17:53 17:39 2860 1432 imn APPLE !PHONES 10807 05/20/20 18:35:32 2:37 3408 1432 imn APPLE !PHONES 10808 05/20/20 18:38:09 2:49 2644 1324 imn APPLE !PHONES 10809 05/20/20 18:40:58 60:00 29328 14628 imn APPLE !PHONES 10810 05/20/20 18:53:48 0:59 153404 129915 imn APPLE !PHONES 10811 05/20/20 19:09:41 60:00 1073 945 nxtgenpho APPLE !PHONES ne 10812 05/20/20 19:40:58 60:00 7172 2880 ins APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 445 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171365 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343423 MOBILITY cre ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn EMBI IEEE MAKE MODEL Date Time Number Up Dn Mot/ 10813 05/20/20 20:09:41 60:00 29856 25365 nxtgenpho APPLE !PEONES ne 10814 05/20/20 20:40:58 60:00 12248 3760 isms APPLE !PROMO 10815 05/20/20 21:09:41 60:00 169811 123321 nxtgenpho APPLE !PROMO ne 10816 05/20/20 21:40:56 0:33 6166 20242 isms APPLE !PHONES 10817 05/20/20 21:40:58 60:00 74996 53644 isms APPLE !PHONES 10818 05/20/20 21:58:02 0:31 2369 17098 isms APPLE !PHONES 10819 05/20/20 21:59:00 0:02 0 0 isms APPLE !PHONES 10820 05/20/20 21:59:04 0:40 5165 17796 isms APPLE !PHONES 10821 05/20/20 21:59:58 0:32 3097 16236 isms APPLE !PHONES 10822 05/20/20 22:09:41 60:00 722458 760111 nxtgenpho APPLE !PHONES ne 10823 05/20/20 22:40:58 35:07 5180 1804 isms APPLE !PHONES 10824 05/20/20 23:09:41 60:00 123570 269139 nxtgenpho APPLE !PHONES ne 10825 05/20/20 23:16:05 59:07 13787 10574 isms APPLE !PHONES 10826 05/21/20 00:09:41 60:00 197570 287167 nxtgenpho APPLE !PHONES ne 10827 05/21/20 00:15:12 1:10 3640 1432 isms APPLE !PHONES 10828 05/21/20 00:16:22 3:12 2644 1324 isms APPLE !PHONES 10829 05/21/20 00:19:34 10:36 3424 1324 isms APPLE !PHONES 10830 05/21/20 00:30:10 0:48 3376 1448 isms APPLE !PHONES 10831 05/21/20 00:30:58 35:40 16708 11852 isms APPLE !PHONES 10832 05/21/20 00:31:06 35:32 6159356 7038910 isms APPLE !PHONES 10833 05/21/20 01:06:38 0:16 5348 2824 isms APPLE !PHONES 10834 05/21/20 01:06:38 0:16 68497 32096 isms APPLE !PHONES 10835 05/21/20 01:06:54 18:19 3268478 3666668 isms APPLE !PHONES 10836 05/21/20 01:06:54 60:00 18824 7732 isms APPLE !PHONES 10837 05/21/20 01:09:41 60:00 92313 43476 nxtgenpho APPLE !PHONES ne 10838 05/21/20 02:06:54 60:00 10144 3284 isms APPLE !PHONES 10839 05/21/20 02:09:41 9:56 0 Onxtgonpho APPLE !PHONES ne 10840 05/21/20 02:19:39 60:00 10408 8185 nxtgenpho APPLE !PHONES ne 10841 05/21/20 03:06:54 60:00 8496 3344 isms APPLE !PHONES 10842 05/21/20 03:19:39 60:00 867 945 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 446 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171366 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343424 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .1 /4.trlsa , # AT&T UTC. Run pato: 06/17/2020 Run Time: Data Usage For: Si= Item Conn. Conn. Originating ET Bytes Bytes Apn MIMI INSI MAKE MODEL Date Time Number Up Dn (OTC) 10843 05/21/20 04:06:54 60:00 13800 4700 ims APPLE !PHONES 10844 05/21/20 04:19:39 60:00 828 915 nxtgenpho APPLE !PHONES ne 10845 05/21/20 05:06:54 60:00 6956 2864 ims APPLE !PHONES 10846 05/21/20 05:19:39 60:00 751 735 nxtgenpho APPLE !PHONES ne 10847 05/21/20 06:06:54 60:00 10596 4380 ims APPLE !PHONES 10848 05/21/20 06:19:39 41:33 514 525 nxtgenpho APPLE !PHONES ne 10849 05/21/20 07:01:12 20:48 384 48 nxtgenpho APPLE !PHONES ne 10850 05/21/20 07:01:13 20:48 48 Onmtgonpho APPLE !PHONES ne 10851 05/21/20 07:06:54 60:00 8388 3236 ims APPLE !PHONES 10852 05/21/20 07:22:01 60:00 10303 6163 nxtgenpho APPLE !PHONES no 10853 05/21/20 08:06:54 60:00 8728 3020 ims APPLE !PHONES 10854 05/21/20 08:22:01 38:19 3493 6127 nxtgenpho APPLE !PHONES ne 10855 05/21/20 09:00:19 8:23 901 280 nxtgenpho APPLE !PHONES ne 10856 05/21/20 09:00:21 8:22 280 613 nxtgenpho APPLE !PHONES ne 10857 05/21/20 09:06:54 60:00 13228 4452 ims APPLE !PHONES 10858 05/21/20 09:08:43 60:00 7090 5839 nxtgenpho APPLE !PHONES ne 10859 05/21/20 10:06:54 60:00 7172 2988 ims APPLE !PHONES 10860 05/21/20 10:08:43 60:00 578 682 nxtgenpho APPLE !PHONES ne 10861 05/21/20 11:06:54 60:00 13584 4768 ims APPLE !PHONES 10862 05/21/20 11:08:43 60:00 24598 14281 nxtgenpho APPLE !PHONES ne 10863 05/21/20 12:06:54 60:00 7188 2772 ims APPLE !PHONES 10864 05/21/20 12:08:43 60:00 4413 5826 nxtgenpho APPLE !PHONES no 10865 05/21/20 13:06:54 60:00 7064 2772 ims APPLE !PHONES 10866 05/21/20 13:08:43 60:00 5130 4237 nxtgenpho APPLE !PHONES ne 10867 05/21/20 14:06:54 60:00 12260 4344 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 447 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171367 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343425 MOBILITY ci ao PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Tim: Data Usage For: Item Conn. Cove. originating Br Bytes Bytes Apn IBEX IMSI MAKE MODEL Data Time Number up Dn (OTC) 10868 05/21/20 14:08:43 29:29 65195 32700 nxtgenpho APPLE 'PEONES ne 10869 05/21/20 14:38:12 60:00 160066 95355 nxtgenpho APPLE 'PEONES ne 10870 05/21/20 15:06:54 6:06 15728 9280 ins APPLE 'PEONES 10871 05/21/20 15:07:02 0:13 7216 25435 ins APPLE 'PHONES 10872 05/21/20 15:13:00 0:41 106012 1412 ins APPLE 'PHONES 10873 05/21/20 15:13:00 0:41 2736 1324 Las APPLE 'PHONES 10874 05/21/20 15:13:41 14:44 3424 1432 Las APPLE 'PHONES 10875 05/21/20 15:28:25 0:44 2644 1412 Las APPLE 'PHONES 10876 05/21/20 15:28:25 0:44 2644 1324 ins APPLE 'PHONES 10877 05/21/20 15:29:09 23:27 3424 1324 ins APPLE 'PHONES 10878 05/21/20 15:38:12 60:00 125739 390337 nxtgenpho APPLE 'PHONES ne 10879 05/21/20 15:52:36 4:36 2692 1412 ins APPLE 'PHONES 10880 05/21/20 15:52:36 4:36 2644 1324 ins APPLE 'PHONES 10881 05/21/20 15:57:12 10:30 0 0 ins APPLE 'PHONES 10882 05/21/20 15:57:16 21:51 6685 5998 ins APPLE 'PHONES 10883 05/21/20 16:19:07 60:00 10488 4020 ins APPLE 'PHONES 10884 05/21/20 16:38:12 60:00 24070 23600 nxtgenpho APPLE 'PHONES ne 10885 05/21/20 17:19:07 60:00 6848 2772 ins APPLE 'PHONES 10886 05/21/20 17:38:12 60:00 9536 52201 nxtgenpho APPLE 'PHONES ne 10887 05/21/20 18:19:07 4:21 0 0 ins APPLE 'PHONES 10888 05/21/20 18:23:28 3:58 3624 3248 ins APPLE 'PHONES 10889 05/21/20 18:27:26 2:34 3424 1448 ins APPLE 'PHONES 10890 05/21/20 18:30:00 49:25 5240 2664 ins APPLE 'PHONES 10891 05/21/20 18:38:12 60:00 22214 126841 nxtgenpho APPLE 'PHONES ne 10892 05/21/20 19:19:25 60:00 10380 4236 ins APPLE 'PHONES 10893 05/21/20 19:38:12 60:00 41781 32225 nxtgenpho APPLE 'PHONES ne 10894 05/21/20 20:19:25 60:00 22572 13908 ins APPLE 'PHONES 10895 05/21/20 20:31:24 0:10 7021 17491 ins APPLE 'PHONES 10896 05/21/20 20:38:12 60:00 1203 582 nxtgenpho APPLE 'PHONES ne 10897 05/21/20 21:19:25 55:10 33544 18284 ins APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 448 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171368 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343426 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. t,rzs ioAT&T Run Date: 06/17/2020 Run Time: Data Usage For: Sidi= Item Conn. Conn. Originating ET Bytes Bytes Aprt DOLT INSI MAKE MODEL Date Time Number Up Dn (OTC) 10898 05/21/20 21:23:45 0:14 0 6272 ims APPLE 'PHONES 10899 05/21/20 21:30:47 27:03 3320968 3864666 ims APPLE 'PHONES 10900 05/21/20 21:38:12 60:00 216793 1386922 nxtgonpho APPLE 'PHONES no 10901 05/21/20 22:14:35 23:46 2752 1340 ims APPLE 'PHONES 10902 05/21/20 22:38:12 60:00 24203 16911 nxtgonpho APPLE 'PHONES no 10903 05/21/20 22:38:21 60:00 11920 4392 ims APPLE 'PHONES 10904 05/21/20 23:38:12 60:00 1968607 1981511 nxtgonpho APPLE 'PHONES no 10905 05/21/20 23:38:21 43:22 28892 17792 ims APPLE 'PHONES 10906 05/22/20 00:17:49 0:21 0 14904 ims APPLE 'PHONES 10907 05/22/20 00:20:30 0:22 0 12635 ims APPLE 'PHONES 10908 05/22/20 00:21:43 5:22 2752 1340 ims APPLE 'PHONES 10909 05/22/20 00:27:05 0:27 3656 2340 ims APPLE 'PHONES 10910 05/22/20 00:27:32 12:45 2644 1340 ims APPLE 'PHONES 10911 05/22/20 00:38:12 60:00 323571 325669 nxtgonpho APPLE 'PHONES no 10912 05/22/20 00:40:17 60:00 15328 5876 ims APPLE 'PHONES 10913 05/22/20 01:38:12 19:08 2438269 2563449 nxtgonpho APPLE 'PHONES no 10914 05/22/20 01:40:17 11:50 0 0 ims APPLE 'PHONES 10915 05/22/20 01:52:07 0:49 3376 1464 ims APPLE 'PHONES 10916 05/22/20 01:52:56 4:24 9944 3688 ims APPLE 'PHONES 10917 05/22/20 02:00:46 60:00 99955 354713 nxtgonpho APPLE 'PHONES ne 10918 05/22/20 02:00:49 20:24 6675 5922 isms APPLE 'PHONES 10919 05/22/20 02:21:13 60:00 13568 4468 ims APPLE 'PHONES 10920 05/22/20 03:00:46 60:00 578 630 nxtgonpho APPLE 'PHONES ne 10921 05/22/20 03:21:13 60:00 10144 3144 isms APPLE 'PHONES 10922 05/22/20 04:00:46 60:00 6258 4115 nxtgonpho APPLE 'PHONES ne 10923 05/22/20 04:21:13 60:00 8496 2896 isms APPLE 'PHONES 10924 05/22/20 05:00:46 60:00 289 315 nxtgonpho APPLE 'PHONES ne 10925 05/22/20 05:21:13 60:00 11596 4112 isms APPLE 'PHONES 10926 05/22/20 06:00:46 60:00 1839 646 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 449 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171369 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343427 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run pato: 06/17/2020 Run Time: Data Usage For: NM= Item Conn. Conn. Originating ET Bytes Bytes Apn =II IMSI MIME MODEL Date Time Number Up on (UTC) 10927 05/22/20 06:21:13 60:00 10704 4596 ims APPLE 'PEONES 10928 05/22/20 07:00:46 60:00 735 1015 nxtgenpho APPLE 'PEONES ne 10929 05/22/20 07:21:13 60:00 8480 3128 ims APPLE 'PEONES 10930 05/22/20 08:00:46 60:00 7317 6162 nxtgenpho APPLE 'PEONES ne 10931 05/22/20 08:21:13 60:00 8604 2912 ims APPLE 'PEONES 10932 05/22/20 09:00:46 60:00 289 315 nxtgenpho APPLE 'PEONES ne 10933 05/22/20 09:21:13 60:00 12152 4344 ims APPLE 'PEONES 10934 05/22/20 10:00:46 60:00 578 630 nxtgenpho APPLE 'PEONES ne 10935 05/22/20 10:21:13 60:00 9912 3268 ims APPLE SPROUSE' 10936 05/22/20 11:00:46 58:35 3315 577 nxtgenpho APPLE 'PHONES ne 10937 05/22/20 11:21:13 60:00 8388 2896 ims APPLE 'PHONES 10938 05/22/20 11:59:20 2:03 5169 6298 nxtgenpho APPLE 'PHONES ne 10939 05/22/20 11:59:21 2:03 6298 4881 nxtgenpho APPLE 'PHONES ne 10940 05/22/20 12:01:24 31:36 6635 5535 nxtgenpho APPLE 'PHONES ne 10941 05/22/20 12:21:13 60:00 18640 6324 ims APPLE 'PHONES 10942 05/22/20 12:33:00 60:00 8022 10825 nxtgenpho APPLE 'PHONES ne 10943 05/22/20 13:21:13 60:00 10144 3144 ims APPLE 'PHONES 10944 05/22/20 13:33:00 38:32 76483 62020 nxtgenpho APPLE 'PHONES ne 10945 05/22/20 14:11:33 37:10 96 0 nxtgenpho APPLE 'PHONES ne 10946 05/22/20 14:21:13 60:00 10144 3252 ims APPLE 'PHONES 10947 05/22/20 14:48:42 2:04 5065 6230 nxtgenpho APPLE !PHONES ne 10948 05/22/20 14:48:43 2:04 6230 4777 nxtgenpho APPLE !PHONES ne 10949 05/22/20 14:50:47 60:00 18274 14179 nxtgenpho APPLE !PHONES ne 10950 05/22/20 15:21:13 60:00 8712 3020 ims APPLE !PHONES 10951 05/22/20 15:50:47 60:00 31465 67761 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 450 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171370 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343428 MOBILITY cito ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DELI MAKE MODEL Date Time Numbor Up Dn (OTC) 10952 05/22/20 16:21:13 8:04 0 496 ism APPLE 'PEONES 10953 05/22/20 16:29:17 28:28 5972 2772 ism APPLE 'PEONES 10954 05/22/20 16:29:17 28:28 38084 2860 ism APPLE !PEONES 10955 05/22/20 16:50:47 60:00 1120886 1403792 nxtgenpho APPLE 'PEONES no 10956 05/22/20 16:57:48 38:33 9281 7286 ism APPLE !PHONES 10957 05/22/20 17:36:21 60:00 56848 36412 ism APPLE !PHONES 10958 05/22/20 17:37:13 22:49 2683566 4485860 ism APPLE !PHONES 10959 05/22/20 17:50:47 60:00 171721 73247 nxtgenpho APPLE !PHONES ne 10960 05/22/20 18:00:15 7:11 1273372 1140381 ism APPLE !PHONES 10961 05/22/20 18:33:36 0:34 4151 16952 ism APPLE !PHONES 10962 05/22/20 18:36:21 5:31 0 0 ism APPLE !PHONES 10963 05/22/20 18:50:47 60:00 1131141 1827889 nxtgenpho APPLE !PHONES ne 10964 05/22/20 19:04:32 0:18 6689 5997 ism APPLE !PHONES 10965 05/22/20 19:04:50 10:55 5088 3744 ism APPLE !PHONES 10966 05/22/20 19:15:45 0:40 3184 1480 ism APPLE !PHONES 10967 05/22/20 19:16:25 1:19 5072 1588 ism APPLE !PHONES 10968 05/22/20 19:17:44 60:00 7836 4020 ism APPLE !PHONES 10969 05/22/20 19:50:47 60:00 111519 1095348 nxtgenpho APPLE !PHONES ne 10970 05/22/20 20:17:44 8:22 0 0 ism APPLE !PHONES 10971 05/22/20 20:26:06 48:08 8604 3144 ism APPLE !PHONES 10972 05/22/20 20:50:47 60:00 80314 80650 nxtgenpho APPLE !PHONES ne 10973 05/22/20 21:14:14 0:19 3952 1464 ism APPLE !PHONES 10974 05/22/20 21:14:33 60:00 38844 26188 ism APPLE !PHONES 10975 05/22/20 21:26:09 0:21 0 320 ism APPLE IPHONE8 10976 05/22/20 21:43:29 0:53 113142 129805 ism APPLE IPHONE8 10977 05/22/20 21:45:37 30:28 3898920 5589939 ism APPLE IPHONE8 10978 05/22/20 21:50:47 60:00 73381 49473 nxtgenpho APPLE IPHONE8 ne 10979 05/22/20 22:14:33 12:47 31636 20604 ism APPLE IPHONE8 10980 05/22/20 22:26:03 0:28 1615 12111 ism APPLE IPHONE8 10981 05/22/20 22:26:32 0:48 123701 100938 ism APPLE IPHONE8 10982 05/22/20 22:27:20 6:11 860476 992457 ism APPLE IPHONE8 10983 05/22/20 22:27:20 6:18 10600 6452 ism APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 451 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171371 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343429 MOBILITY cre PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn IN/LI IMSI MOMS MODEL Date MAO Number Up Dn (OTC) 10984 05/22/20 22:33:38 15:37 17532 9812 isms APPLE IPHONE8 10985 05/22/20 22:45:48 3:27 717501 334437 isms APPLE 'PHONES 10986 05/22/20 22:49:15 0:49 14672 9816 isms APPLE 'PHONES 10987 05/22/20 22:49:15 0:49 57613 192300 isms APPLE 'PHONES 10988 05/22/20 22:50:04 2:57 17120 11032 isms APPLE 'PHONES 10989 05/22/20 22:50:04 2:57 417781 612942 isms APPLE 'PHONES 10990 05/22/20 22:50:47 60:00 101363 51735 nxtgenpho APPLE 'PHONES ne 10991 05/22/20 22:53:01 17:28 2822737 3638181 isms APPLE 'PHONES 10992 05/22/20 22:53:01 17:34 13860 11932 isms APPLE 'PHONES 10993 05/22/20 23:10:35 5:32 5180 1588 isms APPLE 'PHONES 10994 05/22/20 23:16:07 4:28 2644 1340 isms APPLE 'PHONES 10995 05/22/20 23:20:35 60:00 13352 4624 isms APPLE 'PHONES 10996 05/22/20 23:50:47 60:00 65449 46806 nxtgonpho APPLE 'PHONES no 10997 05/23/20 00:20:35 60:00 8604 3268 isms APPLE 'PHONES 10998 05/23/20 00:50:47 60:00 1395 6437 nxtgonpho APPLE 'PHONES no 10999 05/23/20 01:20:35 60:00 8728 3052 isms APPLE 'PHONES 11000 05/23/20 01:50:47 60:00 623 525 nxtgenpho APPLE 'PHONES ne 11001 05/23/20 02:20:35 60:00 8388 2928 isms APPLE 'PHONES 11002 05/23/20 02:50:47 60:00 346 210 nxtgenpho APPLE !PHONES no 11003 05/23/20 03:20:35 60:00 19840 6172 isms APPLE !PHONES 11004 05/23/20 03:50:47 60:00 514 525 nxtgonpho APPLE IPHONE8 no 11005 05/23/20 04:20:35 60:00 10144 3176 isms APPLE 'PHONES 11006 05/23/20 04:50:47 60:00 514 525 nxtgonpho APPLE 'PHONES ne 11007 05/23/20 05:20:35 60:00 10036 3392 isms APPLE !PHONES 11008 05/23/20 05:50:47 60:00 346 210 nxtgenpho APPLE !PHONES ne 11009 05/23/20 06:20:35 60:00 8604 3036 isms APPLE 'PHONES 11010 05/23/20 06:50:47 60:00 519 315 nxtgenpho APPLE 'PHONES ne 11011 05/23/20 07:20:35 60:00 9928 3160 isms APPLE 'PHONES 11012 05/23/20 07:50:47 60:00 462 420 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 452 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171372 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343430 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn EBBS IM9I MAKE MODEL Date TIM* Number Up Dn (OTC) 11013 05/23/20 08:20:35 60:00 13460 4676 ims APPLE 'PHONES 11014 05/23/20 08:50:47 60:00 751 735 nxtgonpho APPLE !PHONES no 11015 05/23/20 09:20:35 60:00 10488 4376 ims APPLE 'PHONES 11016 05/23/20 09:50:47 60:00 462 420 nxtgenpho APPLE 'PHONES no 11017 05/23/20 10:20:35 60:00 8928 3036 ims APPLE 'PHONES 11018 05/23/20 10:50:47 60:00 467 274 nxtgonpho APPLE !PHONES no 11019 05/23/20 11:20:35 60:00 6956 2572 ims APPLE 'PHONES 11020 05/23/20 11:50:47 60:00 126754 9337 nxtgonpho APPLE !PHONES no 11021 05/23/20 12:20:35 60:00 16668 6140 ims APPLE 'PHONES 11022 05/23/20 12:50:47 60:00 5213 6882 nxtgonpho APPLE !PHONES no 11023 05/23/20 13:20:35 60:00 7712 3036 ims APPLE 'PHONES 11024 05/23/20 13:50:47 60:00 462 420 nxtgonpho APPLE 'PHONES no 11025 05/23/20 14:20:35 60:00 7296 2912 ims APPLE 'PHONES 11026 05/23/20 14:50:47 60:00 74064 57167 nxtgonpho APPLE !PHONES no 11027 05/23/20 15:20:35 60:00 10036 3176 ims APPLE !PHONES 11028 05/23/20 15:50:47 60:00 4418 6736 nxtgenpho APPLE !PHONES ne 11029 05/23/20 16:20:35 60:00 15108 4996 ims APPLE !PHONES 11030 05/23/20 16:50:47 60:00 514 525 nxtgenpho APPLE !PHONES ne 11031 05/23/20 17:20:35 60:00 12028 4536 ims APPLE 'PHONES 11032 05/23/20 17:50:47 60:00 346 210 nxtgenpho APPLE 'PHONES no 11033 05/23/20 18:20:35 60:00 8496 3036 ims APPLE 'PHONES 11034 05/23/20 18:50:47 60:00 346 210 nxtgenpho APPLE 'PHONES no 11035 05/23/20 19:20:35 60:00 13800 4888 ims APPLE !PHONES 11036 05/23/20 19:50:47 60:00 346 210 nxtgonpho APPLE !PHONES no 11037 05/23/20 20:20:35 60:00 8496 3144 ims APPLE 'PHONES 11038 05/23/20 20:50:47 60:00 6674 5550 nxtgonpho APPLE !PHONES no 11039 05/23/20 21:20:35 60:00 8388 2928 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 453 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171373 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343431 MOBILITY cro pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. .a# AT&T ••- Run Data: 06/17/2020 Run Time: Data Usage For: Sim Item Conn. Conn. Originating ET Bytes Bytes Apn ENE! INSI MAKE MODEL Date Time Number Up Dn (UTC) 11040 05/23/20 21:50:47 60:00 83025 66455 nxtgenpho APPLE !PHONES ne 11041 05/23/20 22:20:35 60:00 20308 10332 Las APPLE !PHONES 11042 05/23/20 22:50:47 60:00 36629 20088 nxtgenpho APPLE !PHONES ne 11043 05/23/20 22:54:35 30:57 3590137 6247105 Las APPLE !PHONES 11044 05/23/20 23:20:35 60:00 26656 12480 Las APPLE !PHONES 11045 05/23/20 23:25:43 11:48 2306428 1670455 Las APPLE !PHONES 11046 05/23/20 23:50:47 60:00 26531 12418 nxtgenpho APPLE !PHONES ne 11047 05/24/20 00:20:35 60:00 7080 2912 Las APPLE !PHONES 11048 05/24/20 00:50:47 60:00 57330 35698 nxtgenpho APPLE !PHONES ne 11049 05/24/20 01:20:35 60:00 6956 2912 Las APPLE !PHONES 11050 05/24/20 01:50:47 60:00 3633 1003 nxtgenpho APPLE !PHONES ne 11051 05/24/20 02:20:35 60:00 9928 3176 Las APPLE !PHONES 11052 05/24/20 02:50:47 60:00 225 210 nxtgenpho APPLE !PHONES ne 11053 05/24/20 03:20:35 60:00 13804 5860 Las APPLE !PHONES 11054 05/24/20 03:50:47 60:00 554 630 nxtgenpho APPLE !PHONES ne 11055 05/24/20 04:20:35 60:00 6972 3540 Las APPLE !PHONES 11056 05/24/20 04:50:47 60:00 225 210 nxtgenpho APPLE !PHONES ne 11057 05/24/20 05:20:35 60:00 6956 2788 Las APPLE !PHONES 11058 05/24/20 05:50:47 60:00 225 210 nxtgenpho APPLE !PHONES ne 11059 05/24/20 06:20:35 60:00 10488 4144 Las APPLE !PHONES 11060 05/24/20 06:50:47 60:00 277 262 nxtgenpho APPLE !PHONES ne 11061 05/24/20 07:20:35 60:00 10036 3300 Las APPLE !PHONES 11062 05/24/20 07:50:47 60:00 346 210 nxtgenpho APPLE !PHONES ne 11063 05/24/20 08:20:35 60:00 8604 3284 Las APPLE !PHONES 11064 05/24/20 08:50:47 60:00 329 419 nxtgenpho APPLE !PHONES ne 11065 05/24/20 09:20:35 60:00 13120 4552 Las APPLE !PHONES 11066 05/24/20 09:50:47 60:00 329 367 nxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 454 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171374 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343432 MOBILITY 4Illo pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. "----B° 4-6 AT&T .tost y ,. ill° Run Date: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn EBB! INSI MAKE MODEL Date Tame Number Up Dn (OTC) 11067 05/24/20 10:20:35 60:00 8604 3268 Las APPLE !PHONES 11068 05/24/20 10:50:47 60:00 105717 13502 nxtgenpho APPLE !PHONES ne 11069 05/24/20 11:20:35 60:00 15108 4980 Less APPLE !PHONES 11070 05/24/20 11:50:47 60:00 173 105 nxtgenpho APPLE !PHONES ne 11071 05/24/20 12:20:35 7:08 0 0 Less APPLE !PHONES 11072 05/24/20 12:27:43 0:01 0 0 Less APPLE !PHONES 11073 05/24/20 12:27:49 60:00 19676 9528 Less 11074 05/24/20 12:50:47 59:18 48816 36522 nxtgenpho APPLE !PHONES ne 11075 05/24/20 13:27:49 60:00 7420 3004 Less 11076 05/24/20 13:50:05 60:00 7287 11686 nxtgenpho APPLE !PHONES ne 11077 05/24/20 14:27:49 60:00 8496 3004 Less 11078 05/24/20 14:50:05 60:00 20381 14005 nxtgenpho APPLE !PHONES ne 11079 05/24/20 15:27:49 44:15 7080 3524 Less APPLE !PHONES 11080 05/24/20 15:50:05 60:00 211351 248792 nxtgenpho APPLE !PHONES ne 11081 05/24/20 16:12:04 0:42 32152 1324 Less APPLE !PHONES 11082 05/24/20 16:12:04 0:42 2704 1324 Less APPLE !PHONES 11083 05/24/20 16:12:46 60:00 16852 6828 Less APPLE !PHONES 11084 05/24/20 16:50:05 60:00 29232 25422 nxtgenpho APPLE !PHONES ne 11085 05/24/20 17:12:46 60:00 7172 2772 Leas APPLE !PHONES 11086 05/24/20 17:50:05 31:52 23593 17913 nxtgenpho APPLE !PHONES ne 11087 05/24/20 18:12:46 60:00 10272 3972 Less APPLE !PHONES 11088 05/24/20 18:21:56 2:04 288 48 nxtgenpho APPLE !PHONES ne 11089 05/24/20 18:21:57 2:04 48 0 nxtgenpho APPLE !PHONES ne 11090 05/24/20 18:24:01 60:00 6599 5270 nxtgenpho APPLE !PHONES ne 11091 05/24/20 19:12:46 60:00 7280 2972 Less APPLE !PHONES 11092 05/24/20 19:24:01 60:00 346 210 nxtgenpho APPLE !PHONES ne 11093 05/24/20 20:12:46 60:00 8496 2896 Less APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 455 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171375 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343433 MOBILITY „so ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run pato: 06/17/2020 Run Time: Data Usage For: NM= Item Conn. Conn. Originating ET Bytes Bytes Apn INEZ ISM WARE MODEL Date Time Number Up Dn (UTC) 11094 05/24/20 20:24:01 60:00 699 630 nxtgenpho APPLE 'PEONES ne 11095 05/24/20 21:12:46 60:00 8388 3004 ims APPLE 'PEONES 11096 05/24/20 21:24:01 60:00 462 420 nxtgenpho APPLE 'PEONES ne 11097 05/24/20 22:12:46 60:00 13676 4768 ims APPLE IPHONEB 11098 05/24/20 22:24:01 60:00 8399 8432 nxtgenpho APPLE 'PHONES ne 11099 05/24/20 23:12:46 60:00 10952 4328 ims APPLE 'PHONES 11100 05/24/20 23:24:01 60:00 142078 88636 nxtgenpho APPLE 'PHONES ne 11101 05/25/20 00:12:46 60:00 8836 3020 ims APPLE 'PHONES 11102 05/25/20 00:24:01 60:00 346 210 nxtgenpho APPLE 'PHONES ne 11103 05/25/20 01:12:46 60:00 7064 2756 ims APPLE 'PHONES 11104 05/25/20 01:24:01 60:00 519 315 nxtgenpho APPLE 'PHONES ne 11105 05/25/20 02:12:46 60:00 6956 2648 ims APPLE 'PHONES 11106 05/25/20 02:24:01 60:00 526 525 nxtgenpho APPLE 'PHONES ne 11107 05/25/20 03:12:46 60:00 18748 6788 ims APPLE 'PHONES 11108 05/25/20 03:24:01 60:00 346 210 nxtgenpho APPLE 'PHONES ne 11109 05/25/20 04:12:46 60:00 6956 2648 ims APPLE 'PHONES 11110 05/25/20 04:24:01 60:00 346 210 nxtgenpho APPLE 'PHONES ne 11111 05/25/20 05:12:46 60:00 6956 2648 ims APPLE 'PHONES 11112 05/25/20 05:24:01 60:00 519 315 nxtgenpho APPLE 'PHONES ne 11113 05/25/20 06:12:46 60:00 7280 2896 ims APPLE 'PHONES 11114 05/25/20 06:24:01 60:00 346 210 nxtgenpho APPLE 'PHONES ne 11115 05/25/20 07:12:46 60:00 10596 4312 ims APPLE 'PHONES 11116 05/25/20 07:24:01 60:00 519 315 nxtgenpho APPLE 'PHONES ne 11117 05/25/20 08:12:46 60:00 10380 4364 ims APPLE 'PHONES 11118 05/25/20 08:24:01 60:00 346 210 nxtgenpho APPLE 'PHONES ne 11119 05/25/20 09:12:46 60:00 6848 2756 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 456 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171376 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343434 MOBILITY e s, pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. AT&T Run Dato: 06/17/2020 Run Time: Data Usage For: Sim Item Conn. Conn. Originating ET Bytes Bytes Apn DEBI INS! WANE *Mel. Date Time Number Up Dn (OTC) 11120 05/25/20 09:24:01 60:00 346 210 nxtgonpho APPLE 'PEONES no 11121 05/25/20 10:12:46 60:00 8620 3772 isms APPLE 'PEONES 11122 05/25/20 10:24:01 60:00 346 210 nxtgonpho APPLE 'PEONES no 11123 05/25/20 11:12:46 60:00 6956 2756 isms APPLE 'PEONES 11124 05/25/20 11:24:01 60:00 519 315 nxtgonpho APPLE 'PEONES no 11125 05/25/20 12:12:46 60:00 13676 4700 isms APPLE 'PHONES 11126 05/25/20 12:24:01 60:00 346 210 nxtgonpho APPLE 'PHONES ne 11127 05/25/20 13:12:46 60:00 7080 2772 isms APPLE 'PHONES 11128 05/25/20 13:24:01 60:00 346 210 nxtgonpho APPLE 'PHONES ne 11129 05/25/20 14:12:46 52:27 15108 5000 isms APPLE 'PHONES 11130 05/25/20 14:24:01 60:00 58442 119003 nxtgonpho APPLE 'PHONES ne 11131 05/25/20 15:05:13 60:00 129047 11765 isms APPLE 'PHONES 11132 05/25/20 15:05:13 60:00 21279 12641 isms APPLE 'PHONES 11133 05/25/20 15:24:01 60:00 69319 499950 nxtgonpho APPLE 'PHONES ne 11134 05/25/20 16:05:13 48:34 0 0 isms APPLE 'PHONES 11135 05/25/20 16:05:13 48:34 0 108 isms APPLE 'PHONES 11136 05/25/20 16:24:01 29:46 0 840 nxtgonpho APPLE 'PHONES ne 11137 05/25/20 16:53:47 4:57 248099 641220 nxtgonpho APPLE 'PHONES ne 11138 05/25/20 16:53:49 4:55 6693 6000 isms APPLE 'PHONES 11139 05/25/20 16:58:44 60:00 48947 93202 nxtgonpho APPLE 'PHONES ne 11140 05/25/20 16:58:46 60:00 11983 8737 isms APPLE 'PHONES 11141 05/25/20 17:58:44 60:00 23550 58827 nxtgonpho APPLE 'PHONES ne 11142 05/25/20 17:58:46 32:30 2596 1324 isms APPLE 'PHONES 11143 05/25/20 18:31:16 23:24 3424 1324 isms APPLE 'PHONES 11144 05/25/20 18:54:40 3:47 2628 1324 isms APPLE 'PHONES 11145 05/25/20 18:58:27 60:00 12260 4344 isms APPLE 'PHONES 11146 05/25/20 18:58:44 60:00 8657 12745 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 457 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171377 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343435 MOBILITY ce• P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: JIM= Item Conn. Conn. Originating ET Bytes Bytes Apn MDME MODEL Date Time Number Up Dn (UTC) 11147 05/25/20 19:58:27 60:00 10036 3144 ims APPLE 'PEONES 11148 05/25/20 19:58:44 60:00 1230 5994 nxtgonpho APPLE 'PEONES no 11149 05/25/20 20:58:27 60:00 8496 3004 ims APPLE 'PEONES 11150 05/25/20 20:58:44 60:00 832 4118 nxtgenpho APPLE 'PEONES no 11151 05/25/20 21:58:27 60:00 15812 6308 ims APPLE 'PEONES 11152 05/25/20 21:58:44 60:00 571 420 nxtgenpho APPLE 'PEONES no 11153 05/25/20 22:58:27 60:00 10144 3252 Dos APPLE 'PEONES 11154 05/25/20 22:58:44 6:35 3026 366 nxtgenpho APPLE !PHONES no 11155 05/25/20 23:05:18 1:45 288 48 nxtgenpho APPLE 'PHONES no 11156 05/25/20 23:05:19 1:45 48 0 nxtgenpho APPLE 'PHONES no 11157 05/25/20 23:07:04 60:00 7351 13113 nxtgenpho APPLE 'PHONES no 11158 05/25/20 23:58:27 60:00 8480 2896 ims APPLE 'PHONES 11159 05/26/20 00:07:04 60:00 46662 34373 nxtgenpho APPLE 'PHONES no 11160 05/26/20 00:58:27 60:00 8496 3004 ims APPLE 'PHONES 11161 05/26/20 01:07:04 60:00 57410 35601 nxtgenpho APPLE 'PHONES no 11162 05/26/20 01:58:27 60:00 11168 4668 ims APPLE 'PHONES 11163 05/26/20 02:07:04 60:00 739 735 nxtgenpho APPLE 'PHONES no 11164 05/26/20 02:58:27 60:00 11920 4396 ims APPLE 'PHONES 11165 05/26/20 03:07:04 60:00 578 630 nxtgenpho APPLE 'PHONES no 11166 05/26/20 03:58:27 60:00 7172 2988 ims APPLE 'PHONES 11167 05/26/20 04:07:04 60:00 4320 7358 nxtgonpho APPLE !PHONES no 11168 05/26/20 04:58:27 60:00 10272 4096 ims APPLE !PHONES 11169 05/26/20 05:07:04 60:00 1109 1073 nxtgenpho APPLE 'PHONES no 11170 05/26/20 05:58:27 60:00 8496 3004 ims APPLE 'PHONES 11171 05/26/20 06:07:04 60:00 803 892 nxtgonpho APPLE !PHONES no 11172 05/26/20 06:58:27 60:00 8388 2896 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 458 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171378 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343436 MOBILITY ci sto PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTZ. Run Date: 06/17/2020 Run Time: Data Usage For: Sim Item Conn. Conn. Originating ET Bytes Bytes Apn MMBI II S2 EASE EOM Date Time Number Up Dn (OTC) 11173 05/26/20 07:07:04 60:00 1040 1050 nxtgenpho APPLE 'PEONES no 11174 05/26/20 07:58:27 60:00 13804 5472 ims APPLE 'PEONES 11175 05/26/20 08:07:04 60:00 514 525amtgonphe APPLE 'PEONES no 11176 05/26/20 08:58:27 60:00 7064 2880 ims APPLE !PEONES 11177 05/26/20 09:07:04 60:00 514 525 nxtgonphe APPLE !PEONES no 11178 05/26/20 09:58:27 60:00 8388 2896 ims APPLE !PHONES 11179 05/26/20 10:07:04 60:00 225 210nxtgonphe APPLE !PHONES ne 11180 05/26/20 10:58:27 60:00 6848 2756 ims APPLE !PHONES 11181 05/26/20 11:07:04 60:00 10185 7444 nxtgonpho APPLE !PHONES no 11182 05/26/20 11:58:27 60:00 11920 4436 ims APPLE !PHONES 11183 05/26/20 12:07:04 60:00 173 105 nxtgonpho APPLE !PHONES no 11184 05/26/20 12:58:27 60:00 12028 4612 ims APPLE !PHONES 11185 05/26/20 13:07:04 31:15 173 105 nxtgonpho APPLE !PHONES no 11186 05/26/20 13:38:18 2:04 5234 6399 nxtgonpho APPLE !PHONES no 11187 05/26/20 13:38:20 2:03 6399 4946 nxtgonpho APPLE !PHONES no 11188 05/26/20 13:40:23 60:00 6905 5937 nxtgonpho APPLE !PHONES no 11189 05/26/20 13:58:27 60:00 20392 9244 ims APPLE !PHONES 11190 05/26/20 14:10:31 0:05 0 0 ims APPLE !PHONES 11191 05/26/20 14:40:23 60:00 35173 31137 nxtgonpho APPLE !PHONES no 11192 05/26/20 14:58:27 60:00 8728 3128 ims APPLE !PHONES 11193 05/26/20 15:40:23 60:00 31738 18963nxtgonphe APPLE !PHONES ne 11194 05/26/20 15:58:27 34:13 3764 1448 ims APPLE !PHONES 11195 05/26/20 16:32:40 0:33 81484 1412 ims APPLE !PHONES 11196 05/26/20 16:32:40 0:33 2752 1324 ims APPLE !PHONES 11197 05/26/20 16:33:13 60:00 13444 4468 ims APPLE !PHONES 11198 05/26/20 16:40:23 60:00 53176 37079 nxtgonpho APPLE !PHONES no 11199 05/26/20 17:33:13 53:51 21888 17644 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 459 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171379 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343437 MOBILITY cr. PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating CT Bytes Bytes Apn nizx IMSI MAR MODEL Date Time Number Up Dn (UTC) 11200 05/26/20 17:40:23 36:13 40724 33425 nxtgonphe APPLE IPROMES ne 11201 05/26/20 18:03:20 0:38 13253 34786 isms APPLE 'PROMS 11202 05/26/20 18:16:36 60:00 117250 95888 nxtgonphe APPLE 'PROMS ne 11203 05/26/20 18:27:04 3:49 37984 1412 isms APPLE 'PHONES 11204 05/26/20 18:27:04 3:49 2752 1324 isms APPLE 'PHONES 11205 05/26/20 18:30:53 60:00 100784 69504 isms APPLE 'PHONES 11206 05/26/20 19:02:23 0:29 0 1649 Len APPLE 'PHONES 11207 05/26/20 19:12:50 0:24 0 10712 Len APPLE 'PHONES 11208 05/26/20 19:16:36 60:00 27077 17602 nxtgonphe APPLE 'PHONES ne 11209 05/26/20 19:19:49 0:48 111993 116256 isms APPLE 'PHONES 11210 05/26/20 19:20:46 0:05 845 11451 isms APPLE 'PHONES 11211 05/26/20 19:20:56 0:32 7629 19005 isms APPLE 'PHONES 11212 05/26/20 19:21:34 7:01 1434820 762443 isms APPLE 'PHONES 11213 05/26/20 19:30:53 60:00 41316 22656 isms APPLE 'PHONES 11214 05/26/20 20:00:28 5:32 603763 572496 isms APPLE 'PHONES 11215 05/26/20 20:06:10 0:45 89257 76088 isms APPLE 'PHONES 11216 05/26/20 20:16:36 60:00 5619893 4931777 nxtgonphe APPLE 'PHONES no 11217 05/26/20 20:30:53 18:56 5072 1572 isms APPLE 'PHONES 11218 05/26/20 20:49:49 0:53 101448 1412 isms APPLE 'PHONES 11219 05/26/20 20:49:49 0:53 2644 1324 isms APPLE 'PHONES 11220 05/26/20 20:50:42 2:39 3424 1432 isms APPLE 'PHONES 11221 05/26/20 20:53:21 3:47 15932 1412 isms APPLE 'PHONES 11222 05/26/20 20:53:21 3:47 2644 1324 isms APPLE !PHONES 11223 05/26/20 20:57:08 37:07 8620 3020 isms APPLE !PHONES 11224 05/26/20 21:16:36 60:00 20410 60185 nxtgonphe APPLE !PHONES ne 11225 05/26/20 21:34:14 1:25 2644 1412 isms APPLE 'PHONES 11226 05/26/20 21:34:15 1:24 2644 1324 isms APPLE 'PHONES 11227 05/26/20 21:35:39 1:05 4964 1572 isms APPLE 'PHONES 11228 05/26/20 21:36:44 45:05 5240 2736 isms APPLE 'PHONES 11229 05/26/20 21:36:44 45:05 5240 2648 isms APPLE 'PHONES 11230 05/26/20 22:16:36 60:00 17332 93390 nxtgonphe APPLE 'PHONES no 11231 05/26/20 22:21:49 60:00 22232 12448 Len APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 460 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171380 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343438 MOBILITY ce. PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .ai. AT&T ••- OTC. Run Dato: 06/17/2020 Run Tine: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DOLT INSI MAKE NODE'. Date Time Number Up Dn (OTC) 11232 05/26/20 22:46:26 0:43 9346 18783 ims APPLE 'PHONES 11233 05/26/20 23:16:36 60:00 120503 36202 nxtgenpho APPLE 'PHONES ne 11234 05/26/20 23:21:49 9:19 0 0 ims APPLE 'PHONES 11235 05/26/20 23:31:08 54:34 20076 3952 ims APPLE 'PHONES 11236 05/26/20 23:31:08 54:34 7944 3864 ims APPLE 'PHONES 11237 05/27/20 00:16:36 60:00 751 735 nxtgenpho APPLE 'PHONES ne 11238 05/27/20 00:25:42 60:00 17100 6092 ims APPLE 'PHONES 11239 05/27/20 01:16:36 60:00 751 735 nxtgenpho APPLE 'PHONES ne 11240 05/27/20 01:25:42 60:00 8388 2896 ims APPLE 'PHONES 11241 05/27/20 02:16:36 29:02 46307 31337 nxtgenpho APPLE 'PHONES ne 11242 05/27/20 02:25:42 60:00 6956 2648 ims APPLE 'PHONES 11243 05/27/20 02:45:37 2:02 288 48 nxtgenpho APPLE 'PHONES ne 11244 05/27/20 02:45:38 2:02 48 0 nxtgenpho APPLE 'PHONES ne 11245 05/27/20 02:47:40 60:00 139139 80811 nxtgenpho APPLE 'PHONES ne 11246 05/27/20 03:25:42 60:00 10380 3972 ims APPLE 'PHONES 11247 05/27/20 03:47:40 60:00 45200 27992 nxtgenpho APPLE 'PHONES ne 11248 05/27/20 04:25:42 60:00 8388 2896 ims APPLE 'PHONES 11249 05/27/20 04:47:40 60:00 3688 6316 nxtgenpho APPLE 'PHONES ne 11250 05/27/20 05:25:42 60:00 12244 4860 ims APPLE 'PHONES 11251 05/27/20 05:47:40 60:00 751 735 nxtgenpho APPLE 'PHONES ne 11252 05/27/20 06:25:42 60:00 8512 3772 ims APPLE 'PHONES 11253 05/27/20 06:47:40 60:00 744 525 nxtgenpho APPLE 'PHONES ne 11254 05/27/20 07:25:42 60:00 11920 4344 ims APPLE 'PHONES 11255 05/27/20 07:47:40 60:00 808 630 nxtgenpho APPLE 'PHONES ne 11256 05/27/20 08:25:42 60:00 8496 3020 ims APPLE 'PHONES 11257 05/27/20 08:47:40 60:00 462 420 nxtgenpho APPLE 'PHONES ne 11258 05/27/20 09:25:42 60:00 7080 2664 Lam APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 461 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171381 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343439 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Tama: Data Usage For: Item Conn. Conn. Originating (IT Bytes Bytes Apn INELI INS! 1SAPZZ MODPI. Date Time Number Up Dn (UTC) 11259 05/27/20 09:47:40 60:00 346 210 nxtgonpho APPLE APNOEAS ne 11260 05/27/20 10:25:42 60:00 6848 2648 ims APPLE APNOEAS 11261 05/27/20 10:47:40 60:00 58296 22185 nxtgonpho APPLE APNOEAS ne 11262 05/27/20 11:25:42 60:00 18640 6448 ims APPLE !PHONES 11263 05/27/20 11:47:40 60:00 17401 5763 nxtgonpho APPLE 'PHONES ne 11264 05/27/20 12:25:42 60:00 10144 3252 ims APPLE 'PHONES 11265 05/27/20 12:47:40 60:00 346 210 nxtgonpho APPLE 'PHONES ne 11266 05/27/20 13:25:42 60:00 7296 2880 ims APPLE 'PHONES 11267 05/27/20 13:47:40 60:00 48449 41613 nxtgonpho APPLE 'PHONES ne 11268 05/27/20 14:25:42 60:00 12420 3284 ims APPLE 'PHONES 11269 05/27/20 14:47:40 60:00 19491 5874 nxtgonpho APPLE 'PHONES no 11270 05/27/20 15:25:42 60:00 15576 5984 ims APPLE 'PHONES 11271 05/27/20 15:47:40 60:00 48403 20501 nxtgonpho APPLE 'PHONES no 11272 05/27/20 16:25:42 60:00 8496 3004 ims APPLE 'PHONES 11273 05/27/20 16:47:40 60:00 112706 2897288 nxtgonpho APPLE 'PHONES no 11274 05/27/20 17:25:42 60:00 7188 2772 ims APPLE 'PHONES 11275 05/27/20 17:47:40 53:52 92506 76534 nxtgonpho APPLE 'PHONES no 11276 05/27/20 18:25:42 23:48 3548 2200 ims APPLE 'PHONES 11277 05/27/20 18:41:31 0:55 288 48 nxtgonpho APPLE 'PHONES ne 11278 05/27/20 18:41:32 0:55 48 0 nxtgonpho APPLE 'PHONES no 11279 05/27/20 18:42:27 60:00 7652706 7794856 nxtgonpho APPLE 'PHONES no 11280 05/27/20 18:49:29 1:14 227312 1536 ims APPLE 'PHONES 11281 05/27/20 18:49:30 1:13 3376 1448 ims APPLE 'PHONES 11282 05/27/20 18:50:43 1:21 3548 2308 ims APPLE 'PHONES 11283 05/27/20 18:52:04 1:45 29164 1536 ims APPLE 'PHONES 11284 05/27/20 18:52:04 1:45 3952 1448 ims APPLE 'PHONES 11285 05/27/20 18:53:49 15:27 4964 1572 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 462 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171382 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343440 MOBILITY ce ls.o ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: MS= Item Conn. Conn. Originating BT Bytes Bytes Apn flat IMSI DOKE MODEL Date Time Number Up Dn (OTC) 11286 05/27/20 19:09:16 6:37 2644 1412 ims APPLE IPNONE8 11287 05/27/20 19:09:16 6:37 2644 1324 ims APPLE IPHONE8 11288 05/27/20 19:15:53 10:11 4964 1680 ims APPLE IPHONE8 11289 05/27/20 19:26:04 21:42 29328 1412 ims APPLE IPHONE8 11290 05/27/20 19:26:04 21:42 2644 1324 ims APPLE IPHONE8 11291 05/27/20 19:42:27 60:00 1468651 2192847 nxtgenpho APPLE IPHONE8 ne 11292 05/27/20 19:47:46 34:04 47948 29992 ims APPLE IPHONE8 11293 05/27/20 19:57:45 0:29 2059 12321 ims APPLE IPHONE8 11294 05/27/20 20:19:34 2:16 310500 439921 ims APPLE 'PHONES 11295 05/27/20 20:21:50 0:20 22759 3904 ims APPLE 'PHONES 11296 05/27/20 20:21:50 0:20 8512 3816 ims APPLE 'PHONES 11297 05/27/20 20:21:50 0:06 24743 24066 ims APPLE 'PHONES 11298 05/27/20 20:21:50 0:06 24743 24066 ims APPLE 'PHONES 11299 05/27/20 20:22:10 5:19 48648 35140 ims APPLE 'PHONES 11300 05/27/20 20:22:13 0:16 5753 28311 ims APPLE 'PHONES 11301 05/27/20 20:22:31 0:19 2956 14614 ims APPLE 'PHONES 11302 05/27/20 20:26:59 0:14 10995 24979 ims APPLE 'PHONES 11303 05/27/20 20:27:15 0:14 26901 13651 ims APPLE 'PHONES 11304 05/27/20 20:27:28 2:17 34632 11196 ims APPLE 'PHONES 11305 05/27/20 20:27:29 2:16 308528 407579 ims APPLE 'PHONES 11306 05/27/20 20:27:29 2:16 12828 11108 ims APPLE 'PHONES 11307 05/27/20 20:27:29 2:16 308528 407579 ims APPLE 'PHONES 11308 05/27/20 20:29:45 13:26 23900 15528 ims APPLE 'PHONES 11309 05/27/20 20:29:45 0:09 2623 789 ims APPLE 'PHONES 11310 05/27/20 20:31:25 0:02 0 0 ims APPLE 'PHONES 11311 05/27/20 20:34:23 8:48 1792647 899650 ims APPLE 'PHONES 11312 05/27/20 20:42:27 60:00 60200 43002 nxtgenpho APPLE 'PHONES ne 11313 05/27/20 20:43:11 7:48 1416988 1143983 ims APPLE 'PHONES 11314 05/27/20 20:43:11 7:49 1416988 1143983 ims APPLE 'PHONES 11315 05/27/20 20:43:11 7:59 50126 7860 ims APPLE 'PHONES 11316 05/27/20 20:43:11 7:59 15840 7772 ims APPLE !PHONES 11317 05/27/20 20:51:10 0:00 0 0 ims APPLE !PHONES 11318 05/27/20 20:51:10 0:00 0 0 ims APPLE !PHONES 11319 05/27/20 20:51:10 38:58 6540666 7950919 ims APPLE !PHONES 11320 05/27/20 20:51:10 60:00 44124 31640 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 463 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171383 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343441 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTZ. Run Date: 06/17/2020 Run Time: Data Usage For: Sim Item Conn. Conn. Originating CT Bytes Bytes Apn LEI 1162 late MOBIL Date Time Number Up Dn (OTC) 11321 05/27/20 21:37:03 0:33 2854 17432 ims APPLE !PEONES 11322 05/27/20 21:42:27 60:00 56058 35389 nxtgenpho APPLE !PEONES ne 11323 05/27/20 21:51:10 60:00 8944 3468 ims APPLE !PEONES 11324 05/27/20 22:42:27 60:00 256806 93639 nxtgenpho APPLE !PEONES ne 11325 05/27/20 22:51:10 60:00 6956 2772 ims APPLE !PEONES 11326 05/27/20 23:42:27 60:00 80529 87769 nxtgenpho APPLE !PEONES ne 11327 05/27/20 23:51:10 17:41 3424 1324 ims APPLE !PEONES 11328 05/28/20 00:08:51 8:07 153176 1660 ims APPLE !PHONES 11329 05/28/20 00:08:51 8:07 4416 1572 ims APPLE 'PHONES 11330 05/28/20 00:16:58 4:15 5056 1712 ims APPLE 'PHONES 11331 05/28/20 00:21:13 60:00 7836 3756 ims APPLE 'PHONES 11332 05/28/20 00:21:13 60:00 7836 3844 ims APPLE 'PHONES 11333 05/28/20 00:42:27 60:00 6034 6629 nxtgenpho APPLE 'PHONES ne 11334 05/28/20 01:21:13 35:08 5624 2964 ims APPLE 'PHONES 11335 05/28/20 01:21:13 35:08 5624 2964 ims APPLE 'PHONES 11336 05/28/20 01:42:27 16:10 39032 122533 nxtgenpho APPLE 'PHONES ne 11337 05/28/20 01:56:21 2:16 8080 3408 ims APPLE 'PHONES 11338 05/28/20 02:01:35 60:00 76938 325868 nxtgenpho APPLE !PHONES ne 11339 05/28/20 02:01:38 60:00 13065 8742 ims APPLE !PHONES 11340 05/28/20 03:01:35 60:00 578 630 nxtgenpho APPLE !PHONES ne 11341 05/28/20 03:01:38 60:00 5408 2788 ims APPLE !PHONES 11342 05/28/20 04:01:35 60:00 735 1639 nxtgenpho APPLE !PHONES ne 11343 05/28/20 04:01:38 60:00 5192 2680 ims APPLE !PHONES 11344 05/28/20 05:01:35 60:00 225 210 nxtgenpho APPLE !PHONES ne 11345 05/28/20 05:01:38 60:00 5192 2664 ims APPLE !PHONES 11346 05/28/20 06:01:35 60:00 3194 21908 nxtgenpho APPLE !PHONES ne 11347 05/28/20 06:01:38 60:00 5300 2680 ims APPLE !PHONES 11348 05/28/20 07:01:35 60:00 289 315 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 464 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171384 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343442 MOBILITY cro pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Data: 06/17/2020 Run Time: Data usage For: Item conn. Conn. originating BT Bytes Bytes Apn DOLT IBIS! MAR Mori. Data Time Number Up on (OTC) 11349 05/28/20 07:01:38 60:00 10492 5412 ims APPLE 'PHONES 11350 05/28/20 08:01:35 60:00 555 1020 nxtgenpho APPLE 'PHONES ne 11351 05/28/20 08:01:38 60:00 5408 2588 ims APPLE 'PHONES 11352 05/28/20 09:01:35 60:00 289 315nstgempho APPLE 'PHONES ne 11353 05/28/20 09:01:38 60:00 5408 2696 ims APPLE 'PHONES 11354 05/28/20 10:01:35 60:00 3101 21777 nxtgempho APPLE 'PHONES ne 11355 05/28/20 10:01:38 60:00 7572 3912 ims APPLE 'PHONES 11356 05/28/20 11:01:35 55:07 46383 155843nstgempho APPLE 'PHONES ne 11357 05/28/20 11:01:38 52:17 2812 1448 ims APPLE 'PHONES 11358 05/28/20 11:53:55 60:00 15560 6124 ims APPLE 'PHONES 11359 05/28/20 11:56:41 5:33 288 48 nxtgempho APPLE 'PHONES ne 11360 05/28/20 11:56:42 5:33 48 Onstgempho APPLE 'PHONES ne 11361 05/28/20 12:02:15 1:23 2494 2402 nxtgempho APPLE IPHONE8 ne 11362 05/28/20 12:03:37 2:04 4557 6014 nxtgempho APPLE IPHONE8 ne 11363 05/28/20 12:03:38 2:04 6014 4269nstgempho APPLE IPHONE8 ne 11364 05/28/20 12:05:42 15:48 0 Onstgempho APPLE IPHONE8 ne 11365 05/28/20 12:21:29 2:04 288 48 nxtgempho APPLE IPHONE8 ne 11366 05/28/20 12:21:31 2:03 48 Onstgempho APPLE 'PHONES ne 11367 05/28/20 12:23:34 60:00 6419 4850 nxtgenpho APPLE 'PHONES ne 11368 05/28/20 12:53:55 60:00 8836 3268 ims APPLE 'PHONES 11369 05/28/20 13:23:34 60:00 63701 69842 nxtgempho APPLE 'PHONES ne 11370 05/28/20 13:53:55 27:21 5072 1588 ims APPLE 'PHONES 11371 05/28/20 14:21:16 4:27 14776 1428 ims APPLE 'PHONES 11372 05/28/20 14:21:16 4:27 2644 1340 ims APPLE 'PHONES 11373 05/28/20 14:23:34 60:00 5788 9155 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 465 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171385 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343443 MOBILITY pm. AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Dato: 06/17/2020 Run Time: Data Usage For: INA= Item Conn. Conn. Originating ET Bytes Bytes Apn IIMLI IMSI MOMS MODEL Date TIRO Number Up Dn (OTC) 11374 05/28/20 14:25:43 1:43 3532 1448 ims APPLE 'PHONES 11375 05/28/20 14:27:26 1:03 2644 1428 ims APPLE 'PHONES 11376 05/28/20 14:27:26 1:03 2644 1340 ims APPLE 'PHONES 11377 05/28/20 14:28:29 14:58 3440 2448 ims APPLE 'PHONES 11378 05/28/20 14:43:27 60:00 7836 4108 ims APPLE 'PHONES 11379 05/28/20 14:43:27 60:00 7836 4020 ims APPLE 'PHONES 11380 05/28/20 15:23:34 60:00 9735 9332 nxtgonpho APPLE 'PHONES no 11381 05/28/20 15:43:27 41:49 42176 1340 ims APPLE 'PHONES 11382 05/28/20 15:43:27 41:49 2596 1340 ims APPLE 'PHONES 11383 05/28/20 16:23:34 60:00 3657935 3735645 nxtgenpho APPLE 'PHONES no 11384 05/28/20 16:25:16 15:34 5072 1712 ims APPLE 'PHONES 11385 05/28/20 16:40:50 4:57 39512 1428 ims APPLE 'PHONES 11386 05/28/20 16:40:50 4:57 2644 1340 ims APPLE 'PHONES 11387 05/28/20 16:45:50 0:34 6685 5999 ims APPLE 'PHONES 11388 05/28/20 16:46:24 56:32 80324 54744 ims APPLE 'PHONES 11389 05/28/20 16:49:17 0:36 4888 22127 ims APPLE 'PHONES 11390 05/28/20 16:50:02 0:05 4216 10007 ims APPLE 'PHONES 11391 05/28/20 16:50:18 0:23 25630 41481 ims APPLE 'PHONES 11392 05/28/20 16:50:45 0:09 0 0 ims APPLE 'PHONES 11393 05/28/20 17:10:07 4:02 711572 520280 ims APPLE 'PHONES 11394 05/28/20 17:14:16 22:37 3682982 3256721 ims APPLE 'PHONES 11395 05/28/20 17:23:34 60:00 1664510 1837148 nxtgonpho APPLE 'PHONES no 11396 05/28/20 17:42:56 14:15 2752 1340 ims APPLE 'PHONES 11397 05/28/20 17:57:11 2:20 4748 1464 ims APPLE 'PHONES 11398 05/28/20 17:59:31 18:35 2752 1340 ims APPLE 'PHONES 11399 05/28/20 18:18:06 16:16 4964 1588 ims APPLE 'PHONES 11400 05/28/20 18:23:34 60:00 47446 36906 nxtgonpho APPLE 'PHONES no 11401 05/28/20 18:34:22 1:58 2644 1340 ims APPLE 'PHONES 11402 05/28/20 18:36:20 0:18 4964 1588 ims APPLE 'PHONES 11403 05/28/20 18:36:38 3:57 2644 1340 ims APPLE 'PHONES 11404 05/28/20 18:40:35 2:15 7940 2084 ims APPLE 'PHONES 11405 05/28/20 18:42:50 0:53 2644 1340 ims APPLE 'PHONES 11406 05/28/20 18:43:43 4:44 4964 1480 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with Internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 466 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171386 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343444 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:53:63pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. .‘•- 1. AT&T Run pato: 06/17/2020 Run Time: Data Usage For: Si= Item Conn. Conn. Originating ET Bytes Bytes Apn ZIOLI INSI BAKE MODEL Date Time Nunbar Up Dn (OTC) 11407 05/28/20 18:48:27 9:17 2644 1340 ims APPLE !PHONES 11408 05/28/20 18:57:44 5:54 4964 1588 ims APPLE !PHONES 11409 05/28/20 19:03:38 7:51 2644 1340 ims APPLE 'PEONES 11410 05/28/20 19:11:29 1:11 4556 2464 ims APPLE !PHONES 11411 05/28/20 19:12:40 0:18 2644 1340 ims APPLE !PHONES 11412 05/28/20 19:12:58 60:00 10596 4252 ims APPLE !PHONES 11413 05/28/20 19:23:34 60:00 90472 61202 nxtgonpho APPLE !PHONES ne 11414 05/28/20 20:12:58 60:00 8604 3160 ims APPLE !PHONES 11415 05/28/20 20:23:34 10:56 550 525 nxtgonpho APPLE !PHONES ne 11416 05/28/20 20:34:29 5:40 288 48 nxtgonpho APPLE !PHONES ne 11417 05/28/20 20:34:31 5:39 48 0 nxtgonpho APPLE !PHONES ne 11418 05/28/20 20:40:10 25:46 35557 34463 nxtgonpho APPLE !PHONES ne 11419 05/28/20 21:05:56 60:00 142518 98080 nxtgonpho APPLE !PHONES ne 11420 05/28/20 21:12:58 60:00 9912 2944 ims APPLE !PHONES 11421 05/28/20 22:05:56 60:00 38816 28220 nxtgonpho APPLE !PHONES no 11422 05/28/20 22:12:58 60:00 15236 5984 ims APPLE !PHONES 11423 05/28/20 23:05:56 60:00 7540 11121 nxtgonpho APPLE !PHONES no 11424 05/28/20 23:12:58 60:00 8496 3036 ims APPLE !PHONES 11425 05/29/20 00:05:56 60:00 142580 62595 nxtgonpho APPLE !PHONES ne 11426 05/29/20 00:12:58 1:21 0 0 ims APPLE !PHONES 11427 05/29/20 00:14:19 1:52 2644 1340 ims APPLE !PHONES 11428 05/29/20 00:16:11 60:00 12044 4500 ims APPLE !PHONES 11429 05/29/20 01:05:56 53:24 43622 29764 nxtgonpho APPLE !PHONES no 11430 05/29/20 01:16:11 60:00 6956 2680 ims APPLE !PHONES 11431 05/29/20 01:59:20 0:33 48 0 nxtgenpho APPLE !PHONES no 11432 05/29/20 01:59:52 2:05 5170 6246 nxtgenpho APPLE !PHONES no 11433 05/29/20 01:59:53 2:06 6246 4882 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 467 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171387 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343445 MOBILITY e s, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Tine: Data Usage For: Si= Item Conn. Conn. Originating ET Bytes Bytes Apn DOLT INS! ISAPZZ Mori. Date Time Number Up Dn (UTC) 11434 05/29/20 02:01:58 60:00 641077 49388 nxtgenpho APPLE 'PEONES no 11435 05/29/20 02:16:11 46:39 6956 2896 ims APPLE 'PEONES 11436 05/29/20 03:01:58 60:00 297501 812446 nxtgonpho APPLE 'PEONES no 11437 05/29/20 03:02:50 4:03 5972 2964 ims APPLE 'PEONES 11438 05/29/20 03:06:53 60:00 11920 4500 ims APPLE 'PEONES 11439 05/29/20 04:01:58 40:38 4010 5034 nxtgonpho APPLE 'PEONES no 11440 05/29/20 04:06:53 60:00 10036 3176 ims APPLE !PEONES 11441 05/29/20 04:42:35 3:14 288 48 nxtgonpho APPLE !PHONES no 11442 05/29/20 04:42:36 3:14 48 0 nxtgonpho APPLE 'PHONES no 11443 05/29/20 04:45:50 60:00 9319 8347 nxtgonpho APPLE 'PHONES no 11444 05/29/20 05:06:53 60:00 9928 3176 ims APPLE 'PHONES 11445 05/29/20 05:45:50 60:00 751 735 nxtgenpho APPLE 'PHONES ne 11446 05/29/20 06:06:53 60:00 6956 2896 ims APPLE 'PHONES 11447 05/29/20 06:45:50 60:00 635 525nmtgonphe APPLE 'PHONES ne 11448 05/29/20 07:06:53 60:00 8388 2928 ims APPLE 'PHONES 11449 05/29/20 07:45:50 60:00 751 735 nxtgonpho APPLE 'PHONES no 11450 05/29/20 08:06:53 60:00 13912 5628 ims APPLE 'PHONES 11451 05/29/20 08:45:50 60:00 519 315 nxtgonpho APPLE 'PHONES no 11452 05/29/20 09:06:53 60:00 6848 2788 ims APPLE 'PHONES 11453 05/29/20 09:45:50 60:00 3199 471 nxtgonpho APPLE 'PHONES no 11454 05/29/20 10:06:53 60:00 9928 3284 ims APPLE 'PHONES 11455 05/29/20 10:45:50 60:00 519 315 nxtgonpho APPLE 'PHONES no 11456 05/29/20 11:06:53 60:00 8604 3144 ims APPLE 'PHONES 11457 05/29/20 11:45:50 60:00 30962 17214 nxtgonpho APPLE 'PHONES no 11458 05/29/20 12:06:53 46:14 8388 2928 ims APPLE 'PHONES 11459 05/29/20 12:45:50 60:00 56745 235626 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 468 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171388 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343446 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Sift Item Conn. Conn. Originating ET Bytos Bytes Apn L@1 IMSI MAKE MODEL Date Time Number Up On (UTC) 11460 05/29/20 12:53:07 3:30 32968 1428 ims APPLE IPHONE8 11461 05/29/20 12:53:07 3:30 2644 1340 ims APPLE IPHONE8 11462 05/29/20 12:56:37 10:30 3332 1448 ims APPLE IPHONE8 11463 05/29/20 13:09:32 0:54 8757 6209 ims APPLE IPHONE8 11464 05/29/20 13:10:26 1:08 3532 1324 ims APPLE IPHONE8 11465 05/29/20 13:11:34 0:45 2628 1324 ims APPLE IPHONE8 11466 05/29/20 13:12:19 1:03 8496 6192 ims APPLE IPHONE8 11467 05/29/20 13:14:00 60:00 20045 9784 ims 11468 05/29/20 13:45:50 60:00 79832 45211 nxtgonpho APPLE IPHONE8 no 11469 05/29/20 14:14:00 60:00 8496 2912 ims 11470 05/29/20 14:45:50 60:00 3789 997 nxtgonpho APPLE IPHONE8 no 11471 05/29/20 15:14:00 43:31 8604 2928 ims APPLE IPHONE8 11472 05/29/20 15:45:50 60:00 93318 70359 nxtgonpho APPLE IPHONE8 ne 11473 05/29/20 15:57:31 1:40 15492 1464 ims APPLE IPHONE8 11474 05/29/20 15:57:31 1:40 3296 1464 ims APPLE IPHONE8 11475 05/29/20 15:59:11 17:32 3408 1340 ims APPLE IPHONE8 11476 05/29/20 16:16:43 0:29 14792 1340 ims APPLE IPHONE8 11477 05/29/20 16:16:43 0:29 2596 1340 ims APPLE IPHONE8 11478 05/29/20 16:17:12 0:21 3408 1340 ims APPLE IPHONE8 11479 05/29/20 16:17:33 15:08 2660 1340 ims APPLE IPHONE8 11480 05/29/20 16:17:33 15:08 2596 1340 ims APPLE IPHONE8 11481 05/29/20 16:32:41 60:00 11904 4268 ims APPLE IPHONE8 11482 05/29/20 16:45:50 60:00 4765 11177 nxtgonpho APPLE IPHONE8 ne 11483 05/29/20 17:32:41 59:25 18824 13508 ims APPLE IPHONE8 11484 05/29/20 17:45:50 60:00 177801 176243 nxtgonpho APPLE IPHONE8 no 11485 05/29/20 18:23:39 8:27 1726405 1092481 ims APPLE IPHONE8 11486 05/29/20 18:32:06 6:23 893694 1158271 ims APPLE IPHONE8 11487 05/29/20 18:32:06 6:31 53756 10036 ims APPLE IPHONE8 11488 05/29/20 18:32:06 6:31 14536 10036 ims APPLE IPHONE8 11489 05/29/20 18:32:07 6:22 894572 1158271 ims APPLE IPHONE8 11490 05/29/20 18:38:37 6:26 3408 1448 in, APPLE IPHONE8 11491 05/29/20 18:45:03 0:24 23444 1340 ims APPLE IPHONE8 11492 05/29/20 18:45:03 0:24 2596 1340 isle APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 469 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171389 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343447 MOBILITY c .o PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn EMMI IMSI MIMS MODEL Date Time Malabar Up Dn (OTC) 11493 05/29/20 18:45:27 1:25 5088 1588 ims APPLE IPPON= 11494 05/29/20 18:45:50 20:01 2221740 2250309 nxtgonpho APPLE IPROI=B ne 11495 05/29/20 18:46:51 0:51 2660 1340 Les APPLE 'PROMS 11496 05/29/20 18:46:52 0:50 2596 1340 Les APPLE 'PROMS 11497 05/29/20 18:47:42 29:35 13364 9832 Les APPLE 'PROMS 11498 05/29/20 18:52:19 24:58 4773957 4358860 Les APPLE 'PROMS 11499 05/29/20 19:05:50 2:04 5061 6212 nxtgonpho APPLE 'PROMS no 11500 05/29/20 19:05:52 2:03 6212 4773 nxtgonpho APPLE IPHO&ES no 11501 05/29/20 19:07:55 60:00 109777 162255 nxtgonpho APPLE 'PHONES ne 11502 05/29/20 19:17:17 3:04 515194 672966 isms APPLE 'PHONES 11503 05/29/20 19:17:17 3:04 515194 672966 isms APPLE 'PHONES 11504 05/29/20 19:17:17 3:10 16204 8292 Les APPLE 'PHONES 11505 05/29/20 19:17:17 3:10 15628 8204 Les APPLE 'PHONES 11506 05/29/20 19:20:27 1:44 3516 1448 Les APPLE 'PHONES 11507 05/29/20 19:22:11 14:24 2660 1340 Les APPLE 'PHONES 11508 05/29/20 19:22:11 14:24 2596 1340 Les APPLE 'PHONES 11509 05/29/20 19:36:35 60:00 15156 4872 isms APPLE 'PHONES 11510 05/29/20 20:07:55 60:00 118957 25277 nxtgonpho APPLE 'PHONES ne 11511 05/29/20 20:36:35 60:00 8388 3144 isms APPLE 'PHONES 11512 05/29/20 21:07:55 60:00 1012 5000 nxtgonpho APPLE 'PHONES ne 11513 05/29/20 21:36:35 60:00 8604 3052 isms APPLE 'PHONES 11514 05/29/20 22:07:55 60:00 519 315 nxtgonpho APPLE 'PHONES no 11515 05/29/20 22:36:35 43:36 13784 8136 isms APPLE 'PHONES 11516 05/29/20 23:07:55 12:15 410 262 nxtgonpho APPLE 'PHONES no 11517 05/30/20 00:35:05 17:41 76056 328882 nxtgonpho APPLE 'PHONES no 11518 05/30/20 00:35:08 17:38 6671 5921 isms APPLE 'PHONES 11519 05/30/20 00:52:46 60:00 148124 126933 nxtgonpho APPLE 'PHONES ne 11520 05/30/20 00:52:48 5:50 6671 5982 isms APPLE 'PHONES 11521 05/30/20 00:58:38 60:00 14016 4948 isms APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 470 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171390 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343448 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in k.:7,04 AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Sim Item Conn. Conn. Originating ET Bytes Bytes Apn EMBI IMSI NAM MODEL Date Time Number Up Dn (OTC) 11522 05/30/20 01:52:46 60:00 2720578 2661896 nxtgonpho APPLE 'PHONES no 11523 05/30/20 01:58:38 45:23 8604 2896 ims APPLE 'PHONES 11524 05/30/20 02:44:01 5:16 6332 1944 ims APPLE 'PHONES 11525 05/30/20 02:49:17 1:20 5072 1680 ims APPLE 'PHONES 11526 05/30/20 02:50:37 1:29 3376 1448 ims APPLE 'PHONES 11527 05/30/20 02:52:06 12:54 3764 1448 ims APPLE 'PHONES 11528 05/30/20 02:52:46 60:00 112473 35958 nxtgonpho APPLE 'PHONES no 11529 05/30/20 03:05:00 2:43 2644 1324 ims APPLE 'PHONES 11530 05/30/20 03:07:43 60:00 13784 4592 ims APPLE 'PHONES 11531 05/30/20 03:52:46 60:00 5683 12712 nxtgonpho APPLE 'PHONES no 11532 05/30/20 04:07:43 60:00 8712 3004 ims APPLE 'PHONES 11533 05/30/20 04:52:46 60:00 1454 1470 nxtgonpho APPLE 'PHONES no 11534 05/30/20 05:07:43 60:00 6956 2772 ims APPLE 'PHONES 11535 05/30/20 05:52:46 60:00 1402 1365 nxtgonpho APPLE 'PHONES no 11536 05/30/20 06:07:43 60:00 10520 4396 ims APPLE 'PHONES 11537 05/30/20 06:52:46 60:00 4339 7071 nxtgonpho APPLE 'PHONES ne 11538 05/30/20 07:07:43 60:00 13196 4436 ims APPLE 'PHONES 11539 05/30/20 07:52:46 60:00 727 735 nxtgonpho APPLE 'PHONES ne 11540 05/30/20 08:07:43 60:00 7296 3004 ims APPLE 'PHONES 11541 05/30/20 08:52:46 60:00 554 630 nxtgonpho APPLE 'PHONES ne 11542 05/30/20 09:07:43 60:00 11920 4220 ims APPLE 'PHONES 11543 05/30/20 09:52:46 60:00 225 210 nxtgonpho APPLE 'PHONES ne 11544 05/30/20 10:07:43 60:00 6848 2864 ims APPLE 'PHONES 11545 05/30/20 10:52:46 60:00 3681 5026 nxtgonpho APPLE 'PHONES ne 11546 05/30/20 11:07:43 60:00 15216 5140 ims APPLE 'PHONES 11547 05/30/20 11:52:46 60:00 20918 5577 nxtgonpho APPLE 'PHONES ne 11548 05/30/20 12:07:43 60:00 7296 2896 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 471 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171391 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343449 MOBILITY ce• PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTZ. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DOLT INSI MAKE MODEL Date Time Number Up Dn (OTC) 11549 05/30/20 12:52:46 60:00 69854 303257 nxtgenpho APPLE 'PHONES ne 11550 05/30/20 13:07:43 12:25 4964 1572 ims APPLE 'PHONES 11551 05/30/20 13:20:08 18:05 3952 1448 ims APPLE 'PHONES 11552 05/30/20 13:38:16 6:09 9665 7168 ims APPLE 'PHONES 11553 05/30/20 13:44:28 1:41 6687 5979 ims APPLE 'PHONES 11554 05/30/20 13:46:13 50:49 9267 7305 ims APPLE 'PHONES 11555 05/30/20 13:52:46 60:00 23941 109256 nxtgenpho APPLE 'PHONES ne 11556 05/30/20 14:37:05 9:08 6673 5924 ims APPLE 'PHONES 11557 05/30/20 14:46:18 60:00 30390 21458 ims 11558 05/30/20 14:52:46 7:13 446 700 nxtgenpho APPLE 'PHONES ne 11559 05/30/20 14:59:59 60:00 30303 23912 nxtgenpho APPLE 'PHONES ne 11560 05/30/20 15:17:08 0:21 0 8905 ims 11561 05/30/20 15:23:34 36:25 6212479 6241405 ims 11562 05/30/20 15:46:18 60:00 9616 4660 ims 11563 05/30/20 15:59:59 60:00 72441 58851 nxtgenpho APPLE 'PHONES ne 11564 05/30/20 16:46:18 10:24 0 0 ims APPLE 'PHONES 11565 05/30/20 16:56:42 3:49 72644 1340 ims APPLE 'PHONES 11566 05/30/20 16:56:42 3:49 2596 1340 ims APPLE 'PHONES 11567 05/30/20 16:59:59 60:00 144356 465987 nxtgenpho APPLE 'PHONES ne 11568 05/30/20 17:00:31 25:45 3656 1340 ims APPLE 'PHONES 11569 05/30/20 17:26:16 21:45 3644 1340 ims APPLE 'PHONES 11570 05/30/20 17:26:16 21:45 2596 1340 ims APPLE 'PHONES 11571 05/30/20 17:48:01 12:55 3424 1448 ims APPLE 'PHONES 11572 05/30/20 17:59:59 60:00 24302 65784 nxtgenpho APPLE 'PHONES ne 11573 05/30/20 18:00:56 0:51 35612 480 ims APPLE 'PHONES 11574 05/30/20 18:00:56 0:51 1540 480 ims APPLE 'PHONES 11575 05/30/20 18:01:47 2:02 8689 3361 ims APPLE 'PHONES 11576 05/30/20 18:03:49 1:55 6689 5998 ims APPLE 'PHONES 11577 05/30/20 18:03:49 1:55 6625 5998 ims APPLE !PHONES 11578 05/30/20 18:05:44 1:19 3316 1324 ims APPLE IPHONE8 11579 05/30/20 18:07:03 23:33 5596 2772 ims APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 472 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171392 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343450 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating AT Bytes Bytes Apn MKT IMBI IOJCIL MODEL Date Time Number Up Dn (OTC) 11580 05/30/20 18:07:03 23:33 5532 2772 isms APPLE !PEONES 11581 05/30/20 18:30:36 7:42 3424 1340 isms APPLE !PEONES 11582 05/30/20 18:38:18 1:39 2660 1340 ims APPLE !PEONES 11583 05/30/20 18:38:18 1:39 2596 1340 ims APPLE !PEONES 11584 05/30/20 18:39:57 60:00 13568 4624 ims APPLE !PEONES 11585 05/30/20 18:59:59 60:00 5469 18862 nxtgonpho APPLE !PEONES ne 11586 05/30/20 19:39:57 60:00 8388 2928 ims APPLE !PEONES 11587 05/30/20 19:59:59 60:00 83785 48437 nxtgonpho APPLE !PEONES ne 11588 05/30/20 20:39:57 60:00 8728 2944 isms APPLE 'PHONES 11589 05/30/20 20:59:59 12:27 26118 19322 nxtgonpho APPLE 'PHONES no 11590 05/30/20 21:12:25 1:31 288 48 nxtgonpho APPLE 'PHONES no 11591 05/30/20 21:12:26 1:32 48 0 nxtgonpho APPLE 'PHONES no 11592 05/30/20 21:13:57 60:00 144310 101814 nxtgonpho APPLE 'PHONES no 11593 05/30/20 21:39:57 60:00 6956 2680 isms APPLE 'PHONES 11594 05/30/20 22:13:57 60:00 879 945 nxtgonpho APPLE 'PHONES no 11595 05/30/20 22:39:57 60:00 12244 4676 isms APPLE 'PHONES 11596 05/30/20 23:13:57 60:00 1081 2041 nxtgonpho APPLE 'PHONES no 11597 05/30/20 23:39:57 60:00 10036 3176 isms APPLE 'PHONES 11598 05/31/20 00:13:57 34:24 60624 43394 nxtgonpho APPLE 'PHONES ne 11599 05/31/20 00:39:57 60:00 13568 4624 ims APPLE 'PHONES 11600 05/31/20 00:48:20 2:04 5065 6214 nxtgonpho APPLE 'PHONES no 11601 05/31/20 00:48:22 2:03 6214 4777 nxtgonpho APPLE 'PHONES no 11602 05/31/20 00:50:25 60:00 79456 101692 nxtgonpho APPLE 'PHONES no 11603 05/31/20 01:39:57 9:41 4996 3164 ims APPLE 'PHONES 11604 05/31/20 01:50:25 1:11 0 0 nxtgonpho APPLE 'PHONES ne 11605 05/31/20 01:51:36 60:00 91356 352870 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 473 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171393 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343451 MOBILITY cro pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn L@I IMSI MAKE MODEL Date Time Number Up Dn (OTC) 11606 05/31/20 01:51:38 60:00 12193 8910 Las APPLE 'PEONES 11607 05/31/20 02:51:36 60:00 10696 11747 nxtgonpho APPLE 'PEONES ne 11608 05/31/20 02:51:38 60:00 5532 2772 ims APPLE 'PEONES 11609 05/31/20 03:51:36 60:00 2731 11571 nxtgonpho APPLE 'PEONES no 11610 05/31/20 03:51:38 60:00 5516 2664 ims APPLE 'PEONES 11611 05/31/20 04:51:36 60:00 2250 3672 nxtgonpho APPLE 'PEONES no 11612 05/31/20 04:51:38 60:00 5516 2788 ims APPLE 'PEONES 11613 05/31/20 05:51:36 60:00 3925 22922 nxtgonpho APPLE 'PHONES ne 11614 05/31/20 05:51:38 60:00 11884 6388 ims APPLE 'PHONES 11615 05/31/20 06:51:36 60:00 1053 2097 nxtgonpho APPLE 'PHONES ne 11616 05/31/20 06:51:38 60:00 5192 2680 ims APPLE 'PHONES 11617 05/31/20 07:51:36 60:00 1214 1770 nxtgonpho APPLE 'PHONES ne 11618 05/31/20 07:51:38 60:00 5732 2928 Leas APPLE 'PHONES 11619 05/31/20 08:51:36 60:00 960 1177 nxtgonpho APPLE IPHONE8 no 11620 05/31/20 08:51:38 60:00 7572 3912 Leas APPLE IPHONE8 11621 05/31/20 09:51:36 60:00 3191 22221 nxtgonpho APPLE IPHONE8 no 11622 05/31/20 09:51:38 60:00 5408 2788 Leas APPLE IPHONE8 11623 05/31/20 10:51:36 60:00 33477 58128 nxtgonpho APPLE IPHONE8 no 11624 05/31/20 10:51:38 41:04 2596 1340 Leas APPLE IPHONE8 11625 05/31/20 11:32:42 60:00 13804 5752 Leas APPLE IPHONE8 11626 05/31/20 11:51:36 2:45 0 Onxtgonpho APPLE IPHONE8 ne 11627 05/31/20 11:54:21 43:25 52232 9857 nxtgonpho APPLE IPHONE8 ne 11628 05/31/20 12:32:42 7:51 0 0 Leas APPLE IPHONE8 11629 05/31/20 12:37:47 16:09 6282 5795 nxtgonpho APPLE IPHONE8 ne 11630 05/31/20 12:40:33 3:01 3376 1552 Leas APPLE IPHONE8 11631 05/31/20 12:40:33 3:01 3376 1464 Leas APPLE IPHONE8 11632 05/31/20 12:43:34 10:33 4964 1588 Leas APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 474 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SONYGAt00171394 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343452 MOBILITY cro PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn MBRI IMSI MESE MODEL Date Time Number up Dn (UTC) 11633 05/31/20 12:53:56 14:06 16087 61340 nxtgenpho APPLE IPHONE8 ne 11634 05/31/20 12:54:07 13:55 2644 1428 ims APPLE 'PHONES 11635 05/31/20 12:54:07 13:55 2644 1340 ims APPLE 'PHONES 11636 05/31/20 13:08:01 0:45 295117 38720 nxtgenpho APPLE 'PHONES ne 11637 05/31/20 13:08:02 0:44 6245 6675 ims APPLE 'PHONES 11638 05/31/20 13:08:02 0:45 38720 294829 nxtgenpho APPLE 'PHONES ne 11639 05/31/20 13:08:04 0:43 6675 5981 ims APPLE 'PHONES 11640 05/31/20 13:08:28 2:46 9695 6018 ims APPLE 'PHONES 11641 05/31/20 13:08:47 50:21 18474 76422 nxtgenpho APPLE 'PHONES ne 11642 05/31/20 13:11:14 3:42 2768 1324 ims APPLE 'PHONES 11643 05/31/20 13:11:14 3:42 2704 1324 ims APPLE 'PHONES 11644 05/31/20 13:14:56 60:00 10704 4436 ims APPLE 'PHONES 11645 05/31/20 13:59:07 8:18 5168 6230 nxtgenpho APPLE 'PHONES ne 11646 05/31/20 13:59:09 8:17 6230 4880 nxtgenpho APPLE 'PHONES ne 11647 05/31/20 14:07:26 0:33 0 0 nxtgenpho APPLE 'PHONES ne 11648 05/31/20 14:07:58 1:26 901 280 nxtgenpho APPLE 'PHONES ne 11649 05/31/20 14:07:59 1:26 280 613 nxtgenpho APPLE 'PHONES ne 11650 05/31/20 14:09:25 21:08 13744 9093 nxtgenpho APPLE 'PHONES ne 11651 05/31/20 14:09:26 21:08 9093 13456 nxtgenpho APPLE 'PHONES ne 11652 05/31/20 14:14:56 60:00 8836 3144 ims APPLE 'PHONES 11653 05/31/20 14:30:34 11:54 288 48 nxtgenpho APPLE 'PHONES ne 11654 05/31/20 14:30:35 11:55 48 0 nxtgenpho APPLE 'PHONES ne 11655 05/31/20 14:42:29 2:04 192 0 nxtgenpho APPLE 'PHONES ne 11656 05/31/20 14:42:30 2:03 5328 6230 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 475 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171395 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343453 MOBILITY cee pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Dato: 06/17/2020 Run Time: Data Usage For: Si= Item Conn. Conn. Originating ET Bytes Bytes Apn US! II SI DBMS MODEL Date T11011 Number Up Dn lust/ 11657 05/31/20 14:42:30 2:04 0 0 nxtgonpho APPLE 'PEONES no 11658 05/31/20 14:42:31 2:03 6230 4944 nxtgonpho APPLE 'PEONES no 11659 05/31/20 14:44:34 1:10 280 581 nxtgonpho APPLE 'PEONES no 11660 05/31/20 14:45:43 5:13 288 48 nxtgonpho APPLE 'PEONES no 11661 05/31/20 14:45:44 5:13 48 0 nxtgonpho APPLE 'PEONES no 11662 05/31/20 14:50:57 7:53 8532 6874 nxtgonpho APPLE 'PEONES no 11663 05/31/20 14:58:49 8:27 5337 6431 nxtgonpho APPLE IPECHEB no 11664 05/31/20 14:58:50 8:27 6431 5049 nxtgonpho APPLE !PHONES no 11665 05/31/20 15:07:17 9:36 6282 4744 nxtgonpho APPLE 'PHONES no 11666 05/31/20 15:14:56 60:00 8496 3004 ims APPLE 'PHONES 11667 05/31/20 15:16:52 1:25 5165 6228 nxtgonpho APPLE 'PHONES no 11668 05/31/20 15:16:53 1:25 6228 4877 nxtgonpho APPLE 'PHONES no 11669 05/31/20 15:18:18 0:33 278 577 nxtgonpho APPLE 'PHONES no 11670 05/31/20 15:18:51 2:28 288 48 nxtgenpho APPLE 'PHONES ne 11671 05/31/20 15:18:52 2:28 48 0 nxtgonpho APPLE !PHONES no 11672 05/31/20 15:21:20 60:00 50296 39152 nxtgonpho APPLE !PHONES no 11673 05/31/20 16:14:56 60:00 13584 4592 ims APPLE !PHONES 11674 05/31/20 16:21:20 60:00 54089 34043 nxtgonpho APPLE !PHONES no 11675 05/31/20 17:14:56 60:00 8604 2896 ims APPLE !PHONES 11676 05/31/20 17:21:20 60:00 41758 20779 nxtgonpho APPLE 'PHONES ne 11677 05/31/20 18:14:56 60:00 12152 4628 ims APPLE 'PHONES 11678 05/31/20 18:21:20 60:00 2044 1422 nxtgenpho APPLE !PHONES ne 11679 05/31/20 19:14:56 60:00 6848 2432 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 476 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171396 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343454 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ INSI HAKE MODEL Date Time Number Up Dn (OTC) 11680 05/31/20 19:21:20 60:00 4032 6445 nxtgonpho APPLE 'PHONES ne 11681 05/31/20 20:14:56 60:00 6956 2648 imp APPLE 'PHONES 11682 05/31/20 20:21:20 60:00 1611 1470 nxtgonpho APPLE 'PHONES ne 11683 05/31/20 21:14:56 60:00 10612 4096 imp APPLE 'PHONES 11684 05/31/20 21:21:20 60:00 1090 735 nxtgonpho APPLE 'PHONES ne 11685 05/31/20 22:14:56 60:00 8264 2896 imp APPLE 'PHONES 11686 05/31/20 22:21:20 60:00 1154 840 nxtgonpho APPLE 'PHONES ne 11687 05/31/20 23:14:56 60:00 10612 4380 imp APPLE 'PHONES 11688 05/31/20 23:21:20 60:00 94805 61150 nxtgonpho APPLE 'PHONES no 11689 06/01/20 00:14:56 60:00 8604 3128 imp APPLE 'PHONES 11690 06/01/20 00:21:20 54:24 8979 7411 nxtgonpho APPLE 'PHONES no 11691 06/01/20 01:14:56 0:48 4764 2084 imp APPLE 'PHONES 11692 06/01/20 01:19:10 60:00 363521 876459 nxtgonpho APPLE 'PHONES ne 11693 06/01/20 01:19:13 29:29 9271 7244 imp APPLE 'PHONES 11694 06/01/20 01:48:42 52:50 15108 5272 imp APPLE 'PHONES 11695 06/01/20 02:19:10 1:59 0 0nmtgonpho APPLE 'PHONES ne 11696 06/01/20 02:21:09 60:00 14525 9834 nxtgonpho APPLE 'PHONES ne 11697 06/01/20 02:48:35 0:29 6689 5997 imp APPLE 'PHONES 11698 06/01/20 02:49:04 60:00 12352 4608 imp APPLE 'PHONES 11699 06/01/20 03:21:09 13:00 277 315 nxtgonpho APPLE 'PHONES ne 11700 06/01/20 03:34:09 28:42 6532 5252 nxtgonpho APPLE 'PHONES ne 11701 06/01/20 03:49:04 60:00 8496 3036 imp APPLE 'PHONES 11702 06/01/20 04:02:50 2:13 288 48 nxtgonpho APPLE 'PHONES ne 11703 06/01/20 04:02:51 2:13 48 0nxtgonpho APPLE 'PHONES ne 11704 06/01/20 04:05:04 60:00 7584 6400 nxtgonpho APPLE 'PHONES ne 11705 06/01/20 04:49:04 60:00 6940 2896 imp APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 477 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171397 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343455 MOBILITY c to pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn flat IISI Ian Mori. Date Time Number Up Dn (OTC) 11706 06/01/20 05:05:04 60:00 1213 1207 nxtgenpho APPLE 'PEONES ne 11707 06/01/20 05:49:04 60:00 10272 4128 ims APPLE 'PEONES 11708 06/01/20 06:05:04 60:00 692 420 nxtgenpho APPLE 'PEONES ne 11709 06/01/20 06:49:04 60:00 8388 2928 ims APPLE 'PEONES 11710 06/01/20 07:05:04 60:00 924 840 nxtgenpho APPLE 'PEONES ne 11711 06/01/20 07:49:04 60:00 12028 4628 ims APPLE 'PHONES 11712 06/01/20 08:05:04 60:00 976 945 nxtgenpho APPLE 'PHONES ne 11713 06/01/20 08:49:04 60:00 8388 2928 ims APPLE 'PHONES 11714 06/01/20 09:05:04 60:00 1033 840 nxtgenpho APPLE 'PHONES ne 11715 06/01/20 09:49:04 60:00 10844 4268 ims APPLE 'PHONES 11716 06/01/20 10:05:04 60:00 808 630 nxtgenpho APPLE 'PHONES ne 11717 06/01/20 10:49:04 60:00 8264 2928 ims APPLE 'PHONES 11718 06/01/20 11:05:04 60:00 1176 676 nxtgenpho APPLE 'PHONES ne 11719 06/01/20 11:49:04 60:00 10036 3176 ims APPLE 'PHONES 11720 06/01/20 12:05:04 60:00 6242 8975 nxtgenpho APPLE 'PHONES ne 11721 06/01/20 12:49:04 60:00 11796 4736 ims APPLE 'PHONES 11722 06/01/20 13:05:04 60:00 1292 938 nxtgenpho APPLE 'PHONES ne 11723 06/01/20 13:49:04 60:00 12028 4268 ims APPLE 'PHONES 11724 06/01/20 14:05:04 52:50 97659 63430 nxtgenpho APPLE 'PHONES ne 11725 06/01/20 14:49:04 1:01 6304 2224 ims APPLE 'PHONES 11726 06/01/20 14:50:09 18:13 9393 8466 ims APPLE 'PHONES 11727 06/01/20 14:57:54 19:38 53238 283837 nxtgenpho APPLE 'PHONES ne 11728 06/01/20 15:08:22 9:10 3052 1432 ims APPLE 'PHONES 11729 06/01/20 15:08:22 9:10 2920 1432 ims APPLE 'PHONES 11730 06/01/20 15:17:31 2:04 54413 18936 nxtgenpho APPLE 'PHONES ne 11731 06/01/20 15:17:32 2:03 6228 6689 ims APPLE 'PHONES 11732 06/01/20 15:17:32 2:04 18936 54125 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 478 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171398 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343456 MOBILITY 45, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .a# AT&T ‘•- OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn ENE! INSI NAAS MODEL Date Time Number Up Dn (UTC) 11733 06/01/20 15:17:34 2:02 6689 5964 isms APPLE 'PHONES 11734 06/01/20 15:19:36 60:00 235957 176510 nxtgenpho APPLE 'PHONES ne 11735 06/01/20 15:19:38 31:40 9383 7358 isms APPLE 'PHONES 11736 06/01/20 15:51:18 16:00 3872 1556 isms APPLE 'PHONES 11737 06/01/20 16:07:18 0:15 6676 1820 isms APPLE 'PHONES 11738 06/01/20 16:07:33 43:40 6832 2648 isms APPLE 'PHONES 11739 06/01/20 16:19:36 60:00 81016 209053 nxtgenpho APPLE 'PHONES ne 11740 06/01/20 16:51:13 0:51 2644 1324 isms APPLE 'PHONES 11741 06/01/20 16:52:04 12:52 3532 1432 isms APPLE 'PHONES 11742 06/01/20 17:04:56 1:09 2644 1324 isms APPLE 'PHONES 11743 06/01/20 17:06:05 60:00 11996 4328 isms APPLE 'PHONES 11744 06/01/20 17:19:36 60:00 1138 1936 nxtgenpho APPLE 'PHONES ne 11745 06/01/20 18:06:05 60:00 8480 3020 isms APPLE 'PHONES 11746 06/01/20 18:19:36 60:00 36198 25369 nxtgenpho APPLE 'PHONES ne 11747 06/01/20 19:06:05 21:04 5072 1572 isms APPLE 'PHONES 11748 06/01/20 19:19:36 60:00 80090 154219 nxtgenpho APPLE 'PHONES ne 11749 06/01/20 19:27:09 14:38 2644 1324 ims APPLE 'PHONES 11750 06/01/20 19:41:47 60:00 12136 4684 ims APPLE 'PHONES 11751 06/01/20 20:19:36 60:00 9626 23893 nxtgenpho APPLE 'PHONES ne 11752 06/01/20 20:41:47 60:00 11060 4952 isms APPLE 'PHONES 11753 06/01/20 21:19:36 35:09 12444 6123 nxtgenpho APPLE 'PHONES ne 11754 06/01/20 21:41:47 54:22 8480 2896 isms APPLE 'PHONES 11755 06/01/20 21:54:44 2:03 288 48 nxtgenpho APPLE 'PHONES ne 11756 06/01/20 21:54:45 2:03 48 0 nxtgenpho APPLE 'PHONES ne 11757 06/01/20 21:56:48 1:48 48 0 nxtgenpho APPLE 'PHONES ne 11758 06/01/20 21:58:36 3:37 48 0 nxtgenpho APPLE 'PHONES ne 11759 06/01/20 22:02:12 1:45 288 48 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 479 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171399 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343457 MOBILITY 4III, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Tame: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn L@1 IMSI MAKE MODEL Date Time Number Up Dn (UTC) 11760 06/01/20 22:02:13 1:45 48 0nxtgonpho APPLE 'PHONES ne 11761 06/01/20 22:03:58 60:00 74045 78426 nxtgonpho APPLE 'PHONES ne 11762 06/01/20 22:36:09 21:23 26404 1412 ims APPLE 'PHONES 11763 06/01/20 22:36:09 21:23 2644 1324 ism APPLE 'PHONES 11764 06/01/20 22:57:32 11:56 8280 2820 ism APPLE 'PHONES 11765 06/01/20 23:03:58 60:00 4095 4941 nxtgonpho APPLE 'PHONES ne 11766 06/01/20 23:09:28 0:02 0 0 ism APPLE 'PHONES 11767 06/01/20 23:09:28 0:02 0 0 ism APPLE 'PHONES 11768 06/01/20 23:09:41 60:00 35795 18581 ism 11769 06/02/20 00:03:58 60:00 5974 7569 nxtgonpho APPLE 'PHONES ne 11770 06/02/20 00:09:41 60:00 8728 3252 ism 11771 06/02/20 01:03:58 60:00 3725 892 nxtgonpho APPLE 'PHONES ne 11772 06/02/20 01:09:41 60:00 10160 3284 ism 11773 06/02/20 02:03:58 30:02 490 1155 nxtgonpho APPLE 'PHONES ne 11774 06/02/20 02:09:41 60:00 8496 3036 ism 11775 06/02/20 02:33:59 0:35 5168 6230 nxtgonpho APPLE 'PHONES ne 11776 06/02/20 02:34:00 0:35 6230 4880 nxtgonpho APPLE 'PHONES ne 11777 06/02/20 02:34:35 51:01 19228 7931 nxtgonpho APPLE 'PHONES no 11778 06/02/20 03:09:41 60:00 15344 5768 imp 11779 06/02/20 03:25:35 0:54 288 48 nxtgonpho APPLE 'PHONES no 11780 06/02/20 03:25:37 0:53 48 0nmtgonpho APPLE 'PHONES no 11781 06/02/20 03:26:30 60:00 7623 6111 nxtgonpho APPLE 'PHONES ne 11782 06/02/20 04:09:41 60:00 6956 2664 ism 11783 06/02/20 04:26:30 60:00 1559 1365 nxtgonpho APPLE 'PHONES ne 11784 06/02/20 05:09:41 60:00 6956 2788 ism 11785 06/02/20 05:26:30 60:00 1443 1155 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 480 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNNIGNI00171400 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343458 MOBILITY cut, pm.. AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:38:58pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DELI IMSI MAKE MODEL Date Time Number Up Dn (OTC) 11786 06/02/20 06:09:41 60:00 6848 2680 ims 11787 06/02/20 06:26:30 60:00 1722 2051 nxtgenpho APPLE !PEONES ne 11788 06/02/20 07:09:41 60:00 7064 2804 isms 11789 06/02/20 07:26:30 60:00 9292 13711 nxtgonpho APPLE !PEONES ne 11790 06/02/20 08:09:41 60:00 15452 5768 isms 11791 06/02/20 08:26:30 60:00 1097 945 nxtgenpho APPLE !PEONES no 11792 06/02/20 09:09:41 60:00 6848 2572 ims 11793 06/02/20 09:26:30 60:00 808 630 nxtgenpho APPLE 'PHONES no 11794 06/02/20 10:09:41 60:00 6956 2804 isms 11795 06/02/20 10:26:30 60:00 3604 996 nxtgenpho APPLE 'PHONES ne 11796 06/02/20 11:09:41 60:00 12060 6052 isms 11797 06/02/20 11:26:30 60:00 740 420 nxtgenpho APPLE 'PHONES ne 11798 06/02/20 12:09:41 60:00 6956 2772 isms 11799 06/02/20 12:26:30 60:00 578 630 nxtgenpho APPLE 'PHONES ne 11800 06/02/20 13:09:41 60:00 10488 4288 isms 11801 06/02/20 13:26:30 60:00 467 210 nxtgenpho APPLE 'PHONES ne 11802 06/02/20 14:09:41 44:54 20088 10876 isms APPLE 'PHONES 11803 06/02/20 14:26:30 60:00 49577 154114 nxtgenpho APPLE 'PHONES ne 11804 06/02/20 14:43:50 10:45 1146262 2105550 isms APPLE 'PHONES 11805 06/02/20 14:54:35 0:15 5526 2840 isms APPLE 'PHONES 11806 06/02/20 14:54:35 0:15 5192 2840 isms APPLE 'PHONES 11807 06/02/20 14:54:35 0:15 52007 29291 isms APPLE 'PHONES 11808 06/02/20 14:54:35 0:15 52074 29291 isms APPLE 'PHONES 11809 06/02/20 14:54:50 6:46 1277744 902121 isms APPLE 'PHONES 11810 06/02/20 14:54:50 10:37 10112 4792 isms APPLE 'PHONES 11811 06/02/20 15:05:27 2:59 2660 1340 isms APPLE 'PHONES 11812 06/02/20 15:05:27 2:59 2596 1340 isms APPLE 'PHONES 11813 06/02/20 15:08:30 0:16 6689 5999 isms APPLE 'PHONES 11814 06/02/20 15:08:46 4:21 3532 1340 isms APPLE 'PHONES 11815 06/02/20 15:13:07 10:32 2644 1324 isms APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 481 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171401 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343459 MOBILITY cro ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .`•- 0° AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn NAM MODEL Date Time Number Up Dn (UTC) 11816 06/02/20 15:23:39 60:00 12028 4484 ims APPLE 'PHONES 11817 06/02/20 15:26:30 60:00 99974 67663 nxtgonpho APPLE 'PHONES no 11818 06/02/20 16:23:39 60:00 14832 9324 ims APPLE 'PHONES 11819 06/02/20 16:26:30 60:00 43565 32662 nxtgonpho APPLE 'PHONES no 11820 06/02/20 17:04:21 10:23 1523437 1820730 ims APPLE 'PHONES 11821 06/02/20 17:23:39 60:00 25120 13800 ims APPLE 'PHONES 11822 06/02/20 17:26:30 25:51 6237 7511 nxtgonpho APPLE 'PHONES no 11823 06/02/20 17:33:52 1:01 126707 153540 ims APPLE 'PHONES 11824 06/02/20 17:52:21 60:00 15314 18255 nxtgonpho APPLE 'PHONES ne 11825 06/02/20 18:23:39 60:00 6956 2680 ims APPLE 'PHONES 11826 06/02/20 18:52:21 60:00 751 735 nxtgonpho APPLE 'PHONES no 11827 06/02/20 19:23:39 60:00 12136 4592 ims APPLE 'PHONES 11828 06/02/20 19:52:21 60:00 34062 35324 nxtgonpho APPLE 'PHONES no 11829 06/02/20 20:23:39 60:00 12368 4444 ims APPLE 'PHONES 11830 06/02/20 20:52:21 60:00 16138 17233 nxtgonpho APPLE 'PHONES ne 11831 06/02/20 21:23:39 28:19 124 496 ims APPLE 'PHONES 11832 06/02/20 21:43:17 8:41 10410 6526 ims 11833 06/02/20 21:51:58 60:00 0 0 ims 11834 06/02/20 21:52:21 60:00 83690 71751 nxtgonpho APPLE 'PHONES ne 11835 06/02/20 21:53:02 9:02 9853 6222 ims APPLE 'PHONES 11836 06/02/20 22:02:04 7:42 2820 1340 ims APPLE 'PHONES 11837 06/02/20 22:02:04 7:42 2688 1340 ims APPLE 'PHONES 11838 06/02/20 22:09:46 0:20 3408 1324 ims APPLE 'PHONES 11839 06/02/20 22:10:06 2:06 2660 1324 ims APPLE 'PHONES 11840 06/02/20 22:10:06 2:06 2596 1324 ims APPLE 'PHONES 11841 06/02/20 22:12:12 60:00 11996 4392 ims APPLE 'PHONES 11842 06/02/20 22:51:58 60:00 0 0 ims 11843 06/02/20 22:52:21 60:00 53259 29558 nxtgonpho APPLE 'PHONES ne 11844 06/02/20 23:12:12 60:00 16884 9908 ims APPLE 'PHONES 11845 06/02/20 23:51:58 60:00 0 0 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 482 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171402 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343460 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: JIM= Item Conn. Conn. Originating ET Bytes Bytes Apn ZIOLI INSI NAAS MODEL Date Time Number Up Dn lu7C) 11846 06/02/20 23:52:21 60:00 113776 20487 nxtgenpho APPLE !PHONES ne 11847 06/03/20 00:07:02 6:55 1488519 757807 isms APPLE !PHONES 11848 06/03/20 00:12:12 60:00 9280 3612 isms APPLE !PHONES 11849 06/03/20 00:51:58 60:00 0 0 isms 11850 06/03/20 00:52:21 59:45 616690 47854 nxtgenpho APPLE !PHONES ne 11851 06/03/20 01:12:12 36:32 3408 1340 isms APPLE !PHONES 11852 06/03/20 01:48:43 1:43 61788 1340 isms APPLE !PHONES 11853 06/03/20 01:48:44 1:42 2596 1340 isms APPLE !PHONES 11854 06/03/20 01:50:26 0:20 3408 1340 isms APPLE !PHONES 11855 06/03/20 01:50:46 1:17 2660 1340 isms APPLE !PHONES 11856 06/03/20 01:50:46 1:17 2596 1340 isms APPLE !PHONES 11857 06/03/20 01:51:58 0:01 0 0 isms 11858 06/03/20 01:52:03 60:00 24624 7240 isms APPLE !PHONES 11859 06/03/20 01:52:05 1:07 288 48 nxtgenpho APPLE !PHONES ne 11860 06/03/20 01:52:06 1:07 48 0 nxtgenpho APPLE !PHONES ne 11861 06/03/20 01:53:13 60:00 107627 64507 nxtgenpho APPLE !PHONES ne 11862 06/03/20 02:52:03 60:00 6816 2680 isms APPLE !PHONES 11863 06/03/20 02:53:13 60:00 514 525 nxtgenpho APPLE !PHONES ne 11864 06/03/20 03:52:03 8:25 0 0 isms APPLE !PHONES 11865 06/03/20 03:53:13 60:00 514 525 nxtgenpho APPLE !PHONES ne 11866 06/03/20 04:00:27 4:35 48740 1340 isms APPLE !PHONES 11867 06/03/20 04:00:28 4:33 2596 1340 isms APPLE !PHONES 11868 06/03/20 04:05:01 60:00 12120 4732 isms APPLE !PHONES 11869 06/03/20 04:53:13 60:00 578 630 nxtgenpho APPLE !PHONES ne 11870 06/03/20 05:05:01 60:00 8496 3036 isms APPLE !PHONES 11871 06/03/20 05:53:13 60:00 462 420 nxtgenpho APPLE !PHONES ne 11872 06/03/20 06:05:01 60:00 6816 2664 isms APPLE !PHONES 11873 06/03/20 06:53:13 60:00 803 840 nxtgenpho APPLE !PHONES ne 11874 06/03/20 07:05:01 33:19 4980 1588 isms APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 483 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171403 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343461 MOBILITY alb ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ttr.„„s `-' s AT&T UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn =RI INSI MAKE MODEL Date Time Number Up Dn (OTC) 11875 06/03/20 07:38:20 0:02 0 0 ims APPLE 'PHONES 11876 06/03/20 07:38:20 0:02 0 0 ims APPLE 'PHONES 11877 06/03/20 07:45:17 60:00 11869 8788 ims APPLE 'PHONES 11878 06/03/20 07:53:13 60:00 3620 996 nxtgonpho APPLE 'PHONES ne 11879 06/03/20 08:45:17 35:25 2596 1340 ims APPLE 'PHONES 11880 06/03/20 08:53:13 60:00 514 525 nxtgonpho APPLE 'PHONES ne 11881 06/03/20 09:20:42 0:01 0 0 ims APPLE 'PHONES 11882 06/03/20 09:20:59 60:00 18242 9408 ims 11883 06/03/20 09:53:13 60:00 578 630 nxtgonpho APPLE 'PHONES no 11884 06/03/20 10:20:59 60:00 6956 2772 ims 11885 06/03/20 10:53:13 60:00 3488 786 nxtgonpho APPLE 'PHONES no 11886 06/03/20 11:20:59 60:00 13460 4624 ims 11887 06/03/20 11:53:13 43:06 346 210 nxtgonpho APPLE 'PHONES no 11888 06/03/20 12:20:59 60:00 8496 2928 ims 11889 06/03/20 12:36:19 60:00 17171 19006 nxtgonpho APPLE 'PHONES ne 11890 06/03/20 13:20:59 60:00 6848 2680 ims 11891 06/03/20 13:36:19 60:00 1076 5194 nxtgonpho APPLE 'PHONES ne 11892 06/03/20 14:20:59 60:00 17440 7140 ims 11893 06/03/20 14:36:19 60:00 33285 20450 nxtgonpho APPLE 'PHONES ne 11894 06/03/20 15:20:59 60:00 8388 2928 ims 11895 06/03/20 15:36:19 60:00 68804 52255 nxtgonpho APPLE IPHONE8 ne 11896 06/03/20 16:20:59 25:43 3532 1340 ims APPLE IPHONE8 11897 06/03/20 16:36:19 60:00 73150 319642 nxtgonpho APPLE IPHONE8 no 11898 06/03/20 16:46:42 35:56 18696 2804 ims APPLE 'PHONES 11899 06/03/20 16:46:42 35:56 6500 2804 ims APPLE IPHONE8 11900 06/03/20 17:22:38 60:00 12152 5500 ims APPLE IPHONE8 11901 06/03/20 17:36:19 60:00 6217 8569 nxtgonpho APPLE IPHONE8 ne 11902 06/03/20 18:22:38 50:15 20272 14536 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 484 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $ONY_GM_00171404 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343462 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Sim Item Conn. Conn. Originating ET Bytes Bytes Apn MIMI IMSI MAKE MODEL Date Time Number Up Dn lu7C) 11903 06/03/20 18:36:19 60:00 65601 74295 nxtgonpho APPLE 'PHONES ne 11904 06/03/20 19:08:57 0:32 3390 17716 ims APPLE 'PHONES 11905 06/03/20 19:12:53 1:08 29864 1588 ims APPLE 'PHONES 11906 06/03/20 19:12:53 1:08 4244 1588 ims APPLE 'PHONES 11907 06/03/20 19:14:01 60:00 15452 6108 ims APPLE 'PHONES 11908 06/03/20 19:36:19 49:02 154491 104472 nxtgonpho APPLE 'PHONES ne 11909 06/03/20 20:14:01 12:54 0 0 ims APPLE 'PHONES 11910 06/03/20 20:25:20 1:52 118093 19163 nxtgonpho APPLE 'PHONES ne 11911 06/03/20 20:25:21 1:51 6244 6715 ims APPLE 'PHONES 11912 06/03/20 20:25:21 1:52 19163 117805 nxtgonpho APPLE 'PHONES ne 11913 06/03/20 20:25:22 1:51 6647 5980 ims APPLE 'PHONES 11914 06/03/20 20:26:55 21:44 15066 11650 ims APPLE 'PHONES 11915 06/03/20 20:27:13 60:00 29899 22731 nxtgonpho APPLE 'PHONES ne 11916 06/03/20 20:31:01 17:38 2582971 3580061 ims APPLE 'PHONES 11917 06/03/20 20:48:39 20:58 3222937 4174165 ims APPLE 'PHONES 11918 06/03/20 20:48:39 20:58 9450 5464 ims APPLE 'PHONES 11919 06/03/20 20:48:39 20:58 3222937 4174165 ims APPLE 'PHONES 11920 06/03/20 20:48:39 20:58 9200 5464 ims APPLE 'PHONES 11921 06/03/20 21:09:37 22:11 3048535 4722292 ims APPLE 'PHONES 11922 06/03/20 21:09:37 60:00 25284 10868 ims APPLE 'PHONES 11923 06/03/20 21:27:13 56:17 30089 21364 nxtgonpho APPLE 'PHONES no 11924 06/03/20 22:09:37 60:00 8604 3144 ims APPLE 'PHONES 11925 06/03/20 22:23:29 0:34 288 48 nxtgonpho APPLE !PHONES no 11926 06/03/20 22:23:30 0:34 48 0 nxtgonpho APPLE !PHONES no 11927 06/03/20 22:24:03 60:00 187528 117996 nxtgonpho APPLE !PHONES ne 11928 06/03/20 23:09:37 60:00 8836 3160 ims APPLE 'PHONES 11929 06/03/20 23:24:03 60:00 44474 24371 nxtgonpho APPLE 'PHONES ne 11930 06/04/20 00:09:37 60:00 10144 3176 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 485 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171405 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343463 MOBILITY / 1 445 PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage For: MA= Item Conn. Conn. Originating ET Bytes Bytes Apn TIM IMSI MIMS MODEL Date Time Number Up Dn (OTC) 11931 06/04/20 00:24:03 60:00 1976 5865 nxtgonpho APPLE IPHONE8 no 11932 06/04/20 01:09:37 60:00 6956 2680 ims APPLE IPHONE8 11933 06/04/20 01:24:03 23:49 35215 21990 nxtgonpho APPLE IPHONE8 no 11934 06/04/20 01:47:52 60:00 58507 36707 nxtgonpho APPLE IPHONE8 no 11935 06/04/20 02:09:37 60:00 18640 6280 ims APPLE IPHONE8 11936 06/04/20 02:47:52 60:00 7541 1994 nxtgonpho APPLE IPHONE8 no 11937 06/04/20 03:09:37 60:00 6848 2896 ims APPLE IPHONE8 11938 06/04/20 03:47:52 60:00 2284 3777 nxtgonpho APPLE IPHONE8 no 11939 06/04/20 04:09:37 60:00 8604 2928 ims APPLE IPHONE8 11940 06/04/20 04:47:52 60:00 1670 1785 nxtgonpho APPLE IPHONE8 ne 11941 06/04/20 05:09:37 60:00 8388 2928 ims APPLE IPHONE8 11942 06/04/20 05:47:52 60:00 1651 1575 nxtgonpho APPLE IPHONE8 no 11943 06/04/20 06:09:37 60:00 11920 4144 ims APPLE IPHONE8 11944 06/04/20 06:47:52 60:00 1092 1155 nxtgonpho APPLE IPHONE8 no 11945 06/04/20 07:09:37 60:00 11920 4412 ims APPLE IPHONE8 11946 06/04/20 07:47:52 60:00 450 420 nxtgonpho APPLE IPHONE8 ne 11947 06/04/20 08:09:37 60:00 6848 2680 ims APPLE IPHONE8 11948 06/04/20 08:47:52 60:00 514 525 nxtgonpho APPLE IPHONE8 no 11949 06/04/20 09:09:37 60:00 11920 4592 ims APPLE IPHONE8 11950 06/04/20 09:47:52 60:00 3251 576 nxtgonpho APPLE IPHONE8 no 11951 06/04/20 10:09:37 60:00 6848 2680 ims APPLE IPHONE8 11952 06/04/20 10:47:52 60:00 42253 3025 nxtgonpho APPLE IPHONE8 no 11953 06/04/20 11:09:37 38:20 3424 1340 ims APPLE IPHONE8 11954 06/04/20 11:47:52 24:27 10549 17309 nxtgonpho APPLE IPHONE8 no 11955 06/04/20 11:47:57 7:10 195712 2208 ims APPLE IPHONE8 11956 06/04/20 11:47:57 7:10 7524 2208 ims APPLE IPHONE8 11957 06/04/20 11:55:07 18:31 3532 1340 ims APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 486 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171406 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343464 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:38:58pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in k..7:4 0 AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Si= Item Conn. Conn. Originating ET Bytos Bytes Apn DOLT INBI MAKE MODEL Date Time Number Up Dn (OTC/ 11958 06/04/20 12:12:18 2:04 288 48 nxtgonpho APPLE !PHONES no 11959 06/04/20 12:12:19 2:04 48 0 nxtgonpho APPLE !PHONES no 11960 06/04/20 12:13:36 0:46 6471 7525 ims APPLE !PHONES 11961 06/04/20 12:13:37 0:46 7525 6207 ism APPLE !PHONES 11962 06/04/20 12:14:23 52:50 19803 32618 nxtgonpho APPLE !PHONES no 11963 06/04/20 12:14:24 2:22 6683 5919 ism APPLE !PHONES 11964 06/04/20 12:16:46 51:41 11920 4344 ism APPLE !PHONES 11965 06/04/20 13:07:12 0:45 288 48 nxtgonpho APPLE !PHONES no 11966 06/04/20 13:07:14 0:44 48 0 nxtgonpho APPLE !PHONES ne 11967 06/04/20 13:07:59 60:00 90315 877381 nxtgonpho APPLE !PHONES ne 11968 06/04/20 13:08:27 4:47 2736 1536 ims APPLE !PHONES 11969 06/04/20 13:08:27 4:47 2736 1448 ism APPLE !PHONES 11970 06/04/20 13:13:14 0:29 3208 1216 ism APPLE !PHONES 11971 06/04/20 13:13:43 2:34 2752 1412 ism APPLE !PHONES 11972 06/04/20 13:13:43 2:34 2752 1324 ism APPLE !PHONES 11973 06/04/20 13:16:17 1:51 3532 1340 ism APPLE !PHONES 11974 06/04/20 13:18:08 20:43 2644 1412 ism APPLE !PHONES 11975 06/04/20 13:18:08 20:43 2644 1324 ism APPLE !PHONES 11976 06/04/20 13:38:51 1:46 3424 1324 ism APPLE !PHONES 11977 06/04/20 13:40:37 4:42 3500 2412 ism APPLE !PHONES 11978 06/04/20 13:40:37 4:42 3500 2324 ism APPLE !PHONES 11979 06/04/20 13:45:19 2:47 3424 1324 ism APPLE !PHONES 11980 06/04/20 13:48:06 2:08 3952 1536 ism APPLE !PHONES 11981 06/04/20 13:48:06 2:08 3952 1448 ism APPLE !PHONES 11982 06/04/20 13:50:14 60:00 29360 13004 ism APPLE !PHONES 11983 06/04/20 14:07:59 46:54 11593 1675 nxtgonpho APPLE !PHONES no 11984 06/04/20 14:30:02 1:48 273405 246324 ism APPLE !PHONES 11985 06/04/20 14:50:14 60:00 8496 3004 ism APPLE !PHONES 11986 06/04/20 14:54:53 1:41 288 48 nxtgonpho APPLE !PHONES no 11987 06/04/20 14:54:54 1:41 48 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 487 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171407 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343465 MOBILITY „two ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Data: 06/17/2020 Run Timm: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn flat Ian MARE MOM Date Time Numbor Up Dn (OTC) 11988 06/04/20 14:56:35 60:00 162860 104092 nxtgenpho APPLE 'PROVES ne 11989 06/04/20 15:50:14 60:00 8496 2896 ims APPLE 'PEONES 11990 06/04/20 15:56:35 60:00 53947 4385 nxtgonpho APPLE 'PEONES ne 11991 06/04/20 16:50:14 60:00 16776 6092 ims APPLE !PHONES 11992 06/04/20 16:56:35 60:00 1944 6715nxtgonphe APPLE !PHONES ne 11993 06/04/20 17:50:14 51:35 5396 1680 ims APPLE !PHONES 11994 06/04/20 17:56:35 60:00 35568 39441 nxtgenpho APPLE !PHONES ne 11995 06/04/20 18:41:49 1:00 60184 2412 ims APPLE !PHONES 11996 06/04/20 18:41:49 1:00 3484 2324 ims APPLE !PHONES 11997 06/04/20 18:42:49 60:00 15680 5072 ims APPLE !PHONES 11998 06/04/20 18:56:35 60:00 10263 5883nxtgonphe APPLE !PHONES ne 11999 06/04/20 19:42:49 60:00 8496 3020 ims APPLE !PHONES 12000 06/04/20 19:56:35 60:00 8052 6043nxtgonphe APPLE !PHONES ne 12001 06/04/20 20:42:49 39:08 5072 1572 ims APPLE !PHONES 12002 06/04/20 20:56:35 60:00 4093 1356 nxtgonpho APPLE !PHONES no 12003 06/04/20 21:21:57 0:26 2644 1412 ims APPLE !PHONES 12004 06/04/20 21:21:57 0:26 2644 1324 ims APPLE !PHONES 12005 06/04/20 21:22:23 60:00 15000 4716 ims APPLE !PHONES 12006 06/04/20 21:56:35 39:14 5719913 14280470 nxtgonpho APPLE !PHONES no 12007 06/04/20 22:22:23 12:02 0 0 ims APPLE !PHONES 12008 06/04/20 22:34:25 2:40 90252 2696 ims APPLE !PHONES 12009 06/04/20 22:34:25 2:40 5240 2608 ims APPLE !PHONES 12010 06/04/20 22:35:49 1:46 1831454 6936581 nxtgonpho APPLE !PHONES no 12011 06/04/20 22:37:05 0:31 17188 5524 ims APPLE !PHONES 12012 06/04/20 22:47:30 60:00 123438 507848 nxtgonpho APPLE !PHONES no 12013 06/04/20 22:47:33 1:23 6667 5982 ims APPLE !PHONES 12014 06/04/20 22:48:56 60:00 11920 4328 ims APPLE !PHONES 12015 06/04/20 23:47:30 60:00 872 735nxtgonphe APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 488 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171408 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343466 MOBILITY ce• PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage For: Si= Item Conn. Conn. Originating ET Bytes Bytes Apn IME2 HOSE BAKE MODEL Date Time Number Up Dn (OTC) 12016 06/04/20 23:48:56 60:00 8604 2896 ims APPLE !PEONES 12017 06/05/20 00:47:30 0:31 0 Onxtgonpho APPLE !PEONES ne 12018 06/05/20 00:48:02 60:00 155415 89338 nxtgonpho APPLE !PEONES ne 12019 06/05/20 00:48:56 60:00 8388 2896 ims APPLE !PEONES 12020 06/05/20 01:48:02 60:00 12724 8711 nxtgonpho APPLE !PEONES no 12021 06/05/20 01:48:56 60:00 11920 4112 ims APPLE !PHONES 12022 06/05/20 02:48:02 60:00 969 735 nxtgonpho APPLE !PHONES ne 12023 06/05/20 02:48:56 60:00 6956 2540 ims APPLE !PHONES 12024 06/05/20 03:48:02 15:20 173 105 nxtgonpho APPLE !PHONES ne 12025 06/05/20 03:48:56 60:00 13352 4860 ims APPLE !PHONES 12026 06/05/20 04:03:21 0:46 288 48 nxtgonpho APPLE !PHONES no 12027 06/05/20 04:03:22 0:46 48 0 nxtgonpho APPLE !PHONES no 12028 06/05/20 04:04:08 60:00 7363 6195 nxtgonpho APPLE !PHONES no 12029 06/05/20 04:48:56 60:00 13568 4576 ims APPLE !PHONES 12030 06/05/20 05:04:08 60:00 635 525 nxtgonpho APPLE !PHONES ne 12031 06/05/20 05:48:56 60:00 11256 3268 ims APPLE !PHONES 12032 06/05/20 06:04:08 60:00 687 630 nxtgonpho APPLE !PHONES ne 12033 06/05/20 06:48:56 60:00 6956 2664 ims APPLE !PHONES 12034 06/05/20 07:04:08 60:00 635 525 nxtgonpho APPLE !PHONES ne 12035 06/05/20 07:48:56 60:00 8496 3004 ims APPLE !PHONES 12036 06/05/20 08:04:08 60:00 635 525 nxtgonpho APPLE !PHONES ne 12037 06/05/20 08:48:56 60:00 13696 5364 ims APPLE !PHONES 12038 06/05/20 09:04:08 60:00 751 735 nxtgonpho APPLE !PHONES ne 12039 06/05/20 09:48:56 60:00 8712 3220 ims APPLE !PHONES 12040 06/05/20 10:04:08 60:00 578 630 nxtgonpho APPLE !PHONES ne 12041 06/05/20 10:48:56 60:00 6848 2648 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 489 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171409 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343467 MOBILITY 45, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytos Bytes Apn DOM IMSI MBE MODEL Date Tame Number up on (OTC) 12042 06/05/20 11:04:08 60:00 398 315 nxtgenpho APPLE !PEONES ne 12043 06/05/20 11:48:56 60:00 8604 3252 ims APPLE 'PHONED 12044 06/05/20 12:04:08 60:00 6730 5064 nxtgenpho APPLE 'PHONED ne 12045 06/05/20 12:48:56 60:00 6832 2648 ims APPLE 'PHONES 12046 06/05/20 13:04:08 60:00 450 420 nxtgenpho APPLE !PHONES ne 12047 06/05/20 13:48:56 60:00 15684 6940 ims APPLE !PHONES 12048 06/05/20 14:04:08 60:00 450 420 nxtgenpho APPLE !PHONES ne 12049 06/05/20 14:48:56 60:00 6848 2648 ims APPLE !PHONES 12050 06/05/20 15:04:08 60:00 659 4452 nxtgenpho APPLE !PHONES ne 12051 06/05/20 15:48:56 60:00 8496 2896 ims APPLE !PHONES 12052 06/05/20 16:04:08 60:00 3372 472 nxtgenpho APPLE !PHONES ne 12053 06/05/20 16:48:56 60:00 8496 2896 ims APPLE !PHONES 12054 06/05/20 17:04:08 15:22 0 Onstgenpho APPLE !PHONES ne 12055 06/05/20 17:19:30 60:00 35972 24529 nxtgenpho APPLE 'PHONES ne 12056 06/05/20 17:48:56 60:00 8604 3128 ims APPLE 'PHONES 12057 06/05/20 18:19:30 60:00 3536 682 nxtgenpho APPLE 'PHONES ne 12058 06/05/20 18:48:56 60:00 41944 22316 ims APPLE 'PHONES 12059 06/05/20 19:19:30 60:00 6492 17785 nxtgenpho APPLE 'PHONES ne 12060 06/05/20 19:33:43 0:22 0 320 ims APPLE 'PHONES 12061 06/05/20 19:34:13 0:24 0 320 ims APPLE 'PHONES 12062 06/05/20 19:48:56 60:00 40528 31092 ims APPLE 'PHONES 12063 06/05/20 20:19:30 60:00 3424 577 nxtgenpho APPLE 'PHONES ne 12064 06/05/20 20:45:10 0:33 3038 17869 ims APPLE 'PHONES 12065 06/05/20 20:46:07 0:33 3750 20453 ims APPLE 'PHONES 12066 06/05/20 20:48:56 60:00 7172 2988 ims APPLE 'PHONES 12067 06/05/20 21:19:30 60:00 1012 4808 nxtgenpho APPLE 'PHONES ne 12068 06/05/20 21:48:56 58:49 13568 4592 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 490 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171410 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343468 MOBILITY ce• P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DOLT INSI MAKE MODEL Date Time Number Up Dn (OTC) 12069 06/05/20 22:19:30 60:00 1220 687 nxtgenpho APPLE 'PHONES ne 12070 06/05/20 22:47:45 2:43 118304 1412 isms APPLE 'PHONES 12071 06/05/20 22:47:45 2:43 2752 1324 isms APPLE 'PHONES 12072 06/05/20 22:50:28 60:00 11044 4344 isms APPLE 'PHONES 12073 06/05/20 23:19:30 60:00 462 420 nxtgenpho APPLE 'PHONES ne 12074 06/05/20 23:50:28 60:00 15232 5108 isms APPLE 'PHONES 12075 06/06/20 00:19:30 60:00 711 4833 nxtgenpho APPLE 'PHONES ne 12076 06/06/20 00:50:28 60:00 15324 4840 ims APPLE 'PHONES 12077 06/06/20 01:19:30 60:00 32521 22185 nxtgenpho APPLE 'PHONES ne 12078 06/06/20 01:50:28 60:00 6848 2540 isms APPLE 'PHONES 12079 06/06/20 02:19:30 60:00 6756 5215 nxtgenpho APPLE 'PHONES ne 12080 06/06/20 02:50:28 1:24 0 0 ims APPLE 'PHONES 12081 06/06/20 02:51:52 6:21 13120 1536 ims APPLE 'PHONES 12082 06/06/20 02:51:52 6:21 3376 1448 isms APPLE 'PHONES 12083 06/06/20 02:58:13 60:00 14876 4716 isms APPLE 'PHONES 12084 06/06/20 03:19:30 60:00 3718 682 nxtgenpho APPLE 'PHONES ne 12085 06/06/20 03:58:13 60:00 8388 2896 isms APPLE 'PHONES 12086 06/06/20 04:19:30 60:00 872 735 nxtgenpho APPLE 'PHONES ne 12087 06/06/20 04:58:13 60:00 9928 3144 isms APPLE 'PHONES 12088 06/06/20 05:19:30 60:00 867 945 nxtgenpho APPLE 'PHONES ne 12089 06/06/20 05:58:13 60:00 15344 6044 isms APPLE 'PHONES 12090 06/06/20 06:19:30 60:00 908 1120 nxtgenpho APPLE 'PHONES ne 12091 06/06/20 06:58:13 60:00 8496 2896 isms APPLE 'PHONES 12092 06/06/20 07:19:30 60:00 635 525 nxtgenpho APPLE 'PHONES ne 12093 06/06/20 07:58:13 60:00 8604 3004 isms APPLE 'PHONES 12094 06/06/20 08:19:30 60:00 346 210 nxtgenpho APPLE 'PHONES ne 12095 06/06/20 08:58:13 60:00 10380 4204 isms APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 491 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171411 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343469 MOBILITY „lee PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INEZ IMSI MIME MODEL Date Time Number Up Dn (OTC/ 12096 06/06/20 09:19:30 60:00 519 315 nxtgenpho APPLE 'PEONES no 12097 06/06/20 09:58:13 60:00 8496 2896 ims APPLE IPROMEB 12098 06/06/20 10:19:30 60:00 578 630 nxtgenpho APPLE IPROMEB ne 12099 06/06/20 10:58:13 60:00 12152 4520 ims APPLE IPROMEB 12100 06/06/20 11:19:30 47:23 16469 13411 nxtgenpho APPLE IPROMEB ne 12101 06/06/20 11:58:13 60:00 7080 2988 ims APPLE 'PHONES 12102 06/06/20 12:06:53 60:00 6834 5371 nxtgenpho APPLE 'PHONES ne 12103 06/06/20 12:58:13 60:00 8496 2896 ims APPLE 'PHONES 12104 06/06/20 13:06:53 60:00 35211 18104 nxtgenpho APPLE 'PHONES ne 12105 06/06/20 13:58:13 60:00 12028 4328 ims APPLE 'PHONES 12106 06/06/20 14:06:53 60:00 1126 5579 nxtgenpho APPLE 'PHONES ne 12107 06/06/20 14:58:13 60:00 8388 2896 ims APPLE 'PHONES 12108 06/06/20 15:06:53 60:00 3922 4868 nxtgenpho APPLE 'PHONES ne 12109 06/06/20 15:58:13 60:00 13676 4892 ims APPLE 'PHONES 12110 06/06/20 16:06:53 60:00 462 420 nxtgenpho APPLE 'PHONES ne 12111 06/06/20 16:58:13 60:00 8496 3004 ims APPLE 'PHONES 12112 06/06/20 17:06:53 60:00 1012 5048 nxtgenpho APPLE 'PHONES ne 12113 06/06/20 17:58:13 13:19 4964 1572 ims APPLE 'PHONES 12114 06/06/20 18:06:53 60:00 14636 14580 nxtgenpho APPLE 'PHONES no 12115 06/06/20 18:11:32 3:46 2644 1324 ims APPLE 'PHONES 12116 06/06/20 18:11:32 3:47 13456 1412 ims APPLE 'PHONES 12117 06/06/20 18:15:18 60:00 12028 4328 ims APPLE 'PHONES 12118 06/06/20 19:06:53 60:00 13602 14022 nxtgenpho APPLE 'PHONES no 12119 06/06/20 19:15:18 60:00 8604 3020 ims APPLE 'PHONES 12120 06/06/20 20:06:53 60:00 867 945 nxtgenpho APPLE 'PHONES ne 12121 06/06/20 20:15:18 60:00 8388 3004 ims APPLE !PHONES 12122 06/06/20 21:06:53 60:00 4045 10186 nxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 492 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171412 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343470 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ST Bytes Bytes Apn TWAT IMBI NAM MODEL Date Time Number Up Dn (OTC/ 12123 06/06/20 21:15:18 60:00 17224 6108 ims APPLE 'PHONES 12124 06/06/20 22:06:53 40:49 173 105 nxtgenpho APPLE 'PHONES ne 12125 06/06/20 22:15:18 19:10 0 0 Limo APPLE 'PHONES 12126 06/06/20 22:34:28 0:02 0 0 isms APPLE 'PHONES 12127 06/06/20 22:34:28 0:02 0 0 ims APPLE 'PHONES 12128 06/06/20 22:34:36 6:42 20846 19472 ims APPLE 'PHONES 12129 06/06/20 22:40:48 0:30 979 3143 ims APPLE 'PHONES 12130 06/06/20 22:41:18 3:19 19216 12680 ims APPLE 'PHONES 12131 06/06/20 22:41:18 3:19 17772 12680 ims APPLE 'PHONES 12132 06/06/20 22:41:18 1:03 209603 84563 ims APPLE 'PHONES 12133 06/06/20 22:41:18 1:03 209603 84563 ims APPLE 'PHONES 12134 06/06/20 22:43:39 0:58 174366 84571 ims APPLE 'PHONES 12135 06/06/20 22:43:39 0:58 174366 84571 ims APPLE 'PHONES 12136 06/06/20 22:44:37 2:40 407479 313778 ims APPLE 'PHONES 12137 06/06/20 22:44:37 2:45 23520 12096 ims APPLE 'PHONES 12138 06/06/20 22:47:33 60:00 20211 9806 ims 12139 06/06/20 22:47:41 8:26 5065 6246 nxtgenpho APPLE 'PHONES ne 12140 06/06/20 22:47:43 8:25 6246 4777 nxtgenpho APPLE 'PHONES ne 12141 06/06/20 22:56:08 60:00 8145 11569 nxtgenpho APPLE 'PHONES ne 12142 06/06/20 23:47:33 60:00 6924 2648 ims 12143 06/06/20 23:56:08 60:00 1347 1262 nxtgenpho APPLE 'PHONES ne 12144 06/07/20 00:47:33 60:00 10084 3036 ims 12145 06/07/20 00:56:08 60:00 808 630 nxtgenpho APPLE 'PHONES ne 12146 06/07/20 01:47:33 60:00 12244 4452 ims 12147 06/07/20 01:56:08 60:00 692 420 nxtgenpho APPLE 'PHONES ne 12148 06/07/20 02:47:33 60:00 13584 4644 ims 12149 06/07/20 02:56:08 60:00 692 420 nxtgenpho APPLE 'PHONES ne 12150 06/07/20 03:47:33 60:00 8728 2804 ims 12151 06/07/20 03:56:08 60:00 865 525 nxtgenpho APPLE 'PHONES ne 12152 06/07/20 04:47:33 60:00 9960 3036 isms AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 493 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171413 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343471 MOBILITY es% pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Data: 06/17/2020 Run Time: Data Usage For: MA= Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ INSI HAKE MODEL Data Time Number Up Dn (OTC) 12153 06/07/20 04:56:08 60:00 699 630 nxtgenpho APPLE 'PHONES ne 12154 06/07/20 05:47:33 60:00 13368 4468 ism 12155 06/07/20 05:56:08 60:00 865 525 nxtgenpho APPLE 'PHONES ne 12156 06/07/20 06:47:33 60:00 7264 2772 ism 12157 06/07/20 06:56:08 60:00 751 735 nxtgenpho APPLE 'PHONES ne 12158 06/07/20 07:47:33 60:00 13476 4644 ism 12159 06/07/20 07:56:08 60:00 635 525 nxtgenpho APPLE 'PHONES ne 12160 06/07/20 08:47:33 60:00 10068 3144 ism 12161 06/07/20 08:56:08 60:00 519 315 nxtgenpho APPLE 'PHONES ne 12162 06/07/20 09:47:33 60:00 11904 4436 ism 12163 06/07/20 09:56:08 60:00 519 315 nxtgenpho APPLE 'PHONES ne 12164 06/07/20 10:47:33 60:00 9960 3036 ism 12165 06/07/20 10:56:08 60:00 5502 7165 nxtgenpho APPLE 'PHONES ne 12166 06/07/20 11:47:33 60:00 6924 2988 ism 12167 06/07/20 11:56:08 25:31 3199 471 nxtgenpho APPLE 'PHONES ne 12168 06/07/20 12:21:39 60:00 10267 5332 nxtgenpho APPLE 'PHONES ne 12169 06/07/20 12:47:33 60:00 14816 4876 ism 12170 06/07/20 13:21:39 60:00 763 735 nxtgenpho APPLE 'PHONES ne 12171 06/07/20 13:47:33 60:00 13368 4360 ism 12172 06/07/20 14:21:39 60:00 42891 28310 nxtgenpho APPLE 'PHONES ne 12173 06/07/20 14:47:33 60:00 8496 2896 ism 12174 06/07/20 15:21:39 60:00 3488 682 nxtgenpho APPLE 'PHONES ne 12175 06/07/20 15:47:33 60:00 8604 2896 ism 12176 06/07/20 16:21:39 16:38 75874 50048 nxtgenpho APPLE 'PHONES ne 12177 06/07/20 16:38:16 1:49 288 48 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 494 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171414 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343472 MOBILITY cr, P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: NM= Item Conn. Conn. Originating ET Bytes Bytes Apn EMBI IMSI MARE MODEL Date Time Number Up Dn (OTC) 12178 06/07/20 16:38:17 1:49 48 Onmtgonpho APPLE 'PHONES ne 12179 06/07/20 16:40:06 2:35 48 0 nxtgenpho APPLE 'PHONES ne 12180 06/07/20 16:42:40 0:41 5065 6246 nxtgenpho APPLE 'PHONES ne 12181 06/07/20 16:42:41 0:41 6246 4777 nxtgenpho APPLE 'PHONES ne 12182 06/07/20 16:43:22 60:00 28254 16020 nxtgenpho APPLE 'PHONES ne 12183 06/07/20 16:47:33 60:00 10176 3252 ims 12184 06/07/20 17:43:22 60:00 364517 42816 nxtgenpho APPLE 'PHONES ne 12185 06/07/20 17:47:33 60:00 18688 6356 ims 12186 06/07/20 18:43:22 60:00 981 735 nxtgenpho APPLE 'PHONES ne 12187 06/07/20 18:47:33 60:00 8712 3112 ims 12188 06/07/20 19:43:22 60:00 924 840 nxtgenpho APPLE 'PHONES ne 12189 06/07/20 19:47:33 60:00 7048 2772 ims 12190 06/07/20 20:43:22 60:00 6110 8869 nxtgenpho APPLE 'PHONES ne 12191 06/07/20 20:47:33 60:00 10068 4020 ims 12192 06/07/20 21:43:22 60:00 79051 47955 nxtgenpho APPLE 'PHONES ne 12193 06/07/20 21:47:33 60:00 8496 2896 ims 12194 06/07/20 22:43:22 13:06 34981 20953 nxtgenpho APPLE 'PHONES ne 12195 06/07/20 22:47:33 60:00 13584 4644 ims 12196 06/07/20 22:56:29 48:56 35786 37486 nxtgenpho APPLE 'PHONES ne 12197 06/07/20 23:45:24 0:43 288 48 nxtgenpho APPLE 'PHONES ne 12198 06/07/20 23:45:25 0:43 48 0 nxtgenpho APPLE 'PHONES ne 12199 06/07/20 23:46:08 60:00 52762 20554 nxtgenpho APPLE 'PHONES ne 12200 06/07/20 23:47:33 60:00 10008 4080 ims 12201 06/08/20 00:46:08 60:00 867 945 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 495 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171415 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343473 MOBILITY c .o ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Tine: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn INET IMSI MAKE MODEL Date Time Mannar Up Dn (OTC) 12202 06/08/20 00:47:33 60:00 10284 3252 isms 12203 06/08/20 01:46:08 60:00 746 1106 nxtgonpho APPLE 'PROMO ne 12204 06/08/20 01:47:33 60:00 8496 3020 isms 12205 06/08/20 02:46:08 60:00 6780 7607 nxtgonpho APPLE 'PEONES ne 12206 06/08/20 02:47:33 60:00 10176 3144 isms 12207 06/08/20 03:46:08 60:00 25665 16313 nxtgonpho APPLE 'PEONES ne 12208 06/08/20 03:47:33 60:00 10332 4056 isms 12209 06/08/20 04:46:08 60:00 9060 7108 nxtgonpho APPLE 'PEONES ne 12210 06/08/20 04:47:33 60:00 12012 4560 isms 12211 06/08/20 05:46:08 60:00 18026 13171 nxtgonpho APPLE 'PHONES no 12212 06/08/20 05:47:33 60:00 6924 2648 isms 12213 06/08/20 06:46:08 60:00 7047 6226 nxtgonpho APPLE 'PHONES no 12214 06/08/20 06:47:33 60:00 8496 3004 isms 12215 06/08/20 07:46:08 60:00 7818 8164 nxtgonpho APPLE 'PHONES ne 12216 06/08/20 07:47:33 60:00 10332 3972 isms 12217 06/08/20 08:46:08 60:00 9845 7517 nxtgonpho APPLE 'PHONES ne 12218 06/08/20 08:47:33 60:00 12012 4504 isms 12219 06/08/20 09:46:08 60:00 8976 8696 nxtgonpho APPLE 'PHONES no 12220 06/08/20 09:47:33 60:00 8388 2788 isms 12221 06/08/20 10:46:08 60:00 995 840 nxtgonpho APPLE !PHONES no 12222 06/08/20 10:47:33 60:00 6940 3524 isms 12223 06/08/20 11:46:08 60:00 793883 55327 nxtgonpho APPLE !PHONES no 12224 06/08/20 11:47:33 60:00 11796 4328 isms 12225 06/08/20 12:46:08 60:00 50438 31769 nxtgonpho APPLE !PHONES ne 12226 06/08/20 12:47:33 3:06 0 0 isms 12227 06/08/20 12:54:20 6:06 7193 6158 isms APPLE 'PHONES 12228 06/08/20 13:00:26 60:00 13552 4684 isms APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 496 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171416 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343474 MOBILITY 4.45 , ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn EMU IMAI MAKE MODEL Date Time Number Up On (OTC) 12229 06/08/20 13:46:08 60:00 17843 6938 nxtgenpho APPLE 'PEONES ne 12230 06/08/20 14:00:26 60:00 8712 3128 ims APPLE 'PEONES 12231 06/08/20 14:46:08 60:00 27331 86706 nxtgenpho APPLE 'PEONES ne 12232 06/08/20 15:00:26 32:51 3424 1324 ims APPLE !PHONES 12233 06/08/20 15:33:17 4:42 4076 2324 ims APPLE IPHONE8 12234 06/08/20 15:37:59 60:00 14076 7740 ims APPLE 'PHONES 12235 06/08/20 15:46:08 60:00 19087 9600nmtgonpho APPLE 'PHONES ne 12236 06/08/20 16:37:59 60:00 13676 4768 ims APPLE 'PHONES 12237 06/08/20 16:46:08 60:00 647969 594639 nxtgenpho APPLE 'PHONES ne 12238 06/08/20 17:37:59 3:23 0 0 ims APPLE 'PHONES 12239 06/08/20 17:41:22 2:08 2644 1324 ims APPLE 'PHONES 12240 06/08/20 17:43:30 0:22 3640 1448 ims APPLE !PHONES 12241 06/08/20 17:43:52 2:18 2644 1324 ims APPLE !PHONES 12242 06/08/20 17:46:08 60:00 4306491 5451466 nxtgenpho APPLE !PHONES no 12243 06/08/20 17:46:10 0:29 3424 1216 ims APPLE !PHONES 12244 06/08/20 17:46:39 0:26 2644 1324 ims APPLE !PHONES 12245 06/08/20 17:47:05 0:16 5072 1680 ims APPLE !PHONES 12246 06/08/20 17:47:21 0:32 2644 1324 ims APPLE !PHONES 12247 06/08/20 17:47:53 1:35 3424 1324 ims APPLE !PHONES 12248 06/08/20 17:49:28 2:36 2644 1324 ims APPLE !PHONES 12249 06/08/20 17:52:04 24:12 10036 3036 ims APPLE !PHONES 12250 06/08/20 18:16:16 11:54 2644 1324 ims APPLE !PHONES 12251 06/08/20 18:28:10 0:44 3532 1540 ims APPLE !PHONES 12252 06/08/20 18:28:54 16:28 2644 1324 ims APPLE !PHONES 12253 06/08/20 18:45:22 0:13 3316 1648 ims APPLE !PHONES 12254 06/08/20 18:45:35 3:36 2876 1432 ims APPLE !PHONES 12255 06/08/20 18:46:08 60:00 60107 19783 nxtgonpho APPLE !PHONES no 12256 06/08/20 18:49:11 60:00 11796 4328 ims APPLE !PHONES 12257 06/08/20 19:46:08 60:00 12076 7056 nxtgonpho APPLE !PHONES no 12258 06/08/20 19:49:11 60:00 7080 2664 ims APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 097 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171417 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343475 MOBILITY 45, pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. .ai. AT&T `•- Run Date: 06/17/2020 Run Time: Data Usage For: NM= Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ IMSI MAKE MODEL Date Time Number Up Dn (OTC) 12259 06/08/20 20:46:08 60:00 1975 2926 nxtgenpho 310410214827503 APPLE !PHONES no 12260 06/08/20 20:49:11 60:00 6956 2756 ims 310410214827503 APPLE !PHONES 12261 06/08/20 21:46:08 60:00 1379 1102 nxtgonpho 310410214827503 APPLE !PHONES ne 12262 06/08/20 21:49:11 59:12 15684 6572 ims 310410214827503 APPLE !PHONES 12263 06/08/20 22:46:08 2:15 277 209 nxtgonpho 310410214827503 APPLE !PHONES ne 12264 06/08/20 22:48:55 60:00 279778 966831 nxtgonpho 310410214827503 APPLE !PHONES ne 12265 06/08/20 22:48:58 1:31 6673 5940 ims 310410214827503 APPLE !PHONES 12266 06/08/20 22:50:29 0:27 3532 1340 ims 310410214827503 APPLE !PHONES 12267 06/08/20 22:50:56 0:15 2644 1340 ims 310410214827503 APPLE !PHONES 12268 06/08/20 22:51:11 60:00 12028 4608 ims 310410214827503 APPLE !PHONES 12269 06/08/20 23:48:55 60:00 860 735 nxtgonpho 310410214827503 APPLE !PHONES ne 12270 06/08/20 23:51:11 60:00 8388 3128 ims 310410214827503 APPLE !PHONES 12271 06/09/20 00:48:55 60:00 20227 23698 nxtgonpho 310410214827503 APPLE !PHONES ne 12272 06/09/20 00:51:11 60:00 10268 3408 ims 310410214827503 APPLE !PHONES 12273 06/09/20 01:48:55 60:00 751 735 nxtgonpho 310410214827503 APPLE !PHONES ne 12274 06/09/20 01:51:11 60:00 8604 3036 ism 310410214827503 APPLE !PHONES 12275 06/09/20 02:48:55 60:00 578 630 nxtgonpho 310410214827503 APPLE !PHONES ne 12276 06/09/20 02:51:11 60:00 15668 6108 ism 310410214827503 APPLE !PHONES 12277 06/09/20 03:48:55 60:00 578 630 nxtgonpho 310410214827503 APPLE !PHONES no 12278 06/09/20 03:51:11 60:00 7544 3820 ism 310410214827503 APPLE !PHONES 12279 06/09/20 04:48:55 60:00 828 867 nxtgonpho 310410214827503 APPLE !PHONES ne 12280 06/09/20 04:51:11 60:00 6848 2680 ism 310410214827503 APPLE !PHONES 12281 06/09/20 05:48:55 60:00 225 210 nxtgonpho 310410214827503 APPLE !PHONES no 12282 06/09/20 05:51:11 60:00 7064 2804 ism 310410214827503 APPLE !PHONES 12283 06/09/20 06:48:55 60:00 289 315 nxtgonpho 310410214827503 APPLE !PHONES no 12284 06/09/20 06:51:11 60:00 11920 4500 ism 310410214827503 APPLE !PHONES 12285 06/09/20 07:48:55 60:00 398 315 nxtgonpho 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 498 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171418 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343476 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Tine: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn EBB! INSI MAKE MODEL Date Time Number Up Dn (OTC) 12286 06/09/20 07:51:11 60:00 7172 3020 ims APPLE !PHONES 12287 06/09/20 08:48:55 60:00 225 210 nxtgenpho APPLE 'PHONES ne 12288 06/09/20 08:51:11 60:00 10488 4536 ism APPLE !PHONES 12289 06/09/20 09:48:55 60:00 277 262 nxtgenpho APPLE 'PHONES ne 12290 06/09/20 09:51:11 3:50 0 0 ism APPLE !PHONES 12291 06/09/20 09:58:39 0:38 6675 5980 ism APPLE !PHONES 12292 06/09/20 09:59:17 60:00 10720 4420 ism APPLE !PHONES 12293 06/09/20 10:48:55 60:00 341 367 nxtgonpho APPLE 'PHONES no 12294 06/09/20 10:59:17 60:00 8496 3128 Las APPLE !PHONES 12295 06/09/20 11:48:55 60:00 3074 262 nxtgonpho APPLE !PHONES no 12296 06/09/20 11:59:17 60:00 7172 3220 Las APPLE !PHONES 12297 06/09/20 12:48:55 23:58 341 367 nxtgonpho APPLE !PHONES no 12298 06/09/20 12:59:17 60:00 8388 3004 Las APPLE !PHONES 12299 06/09/20 13:12:53 11:46 98124 66778 nxtgonpho APPLE !PHONES no 12300 06/09/20 13:24:39 60:00 7508 15117 nxtgonpho APPLE !PHONES no 12301 06/09/20 13:59:17 52:10 15468 8244 Las APPLE !PHONES 12302 06/09/20 14:24:39 22:50 0 0 nxtgonpho APPLE !PHONES no 12303 06/09/20 14:47:28 2:05 5064 6314 nxtgonpho APPLE !PHONES no 12304 06/09/20 14:47:29 2:05 6314 4776 nxtgenpho APPLE !PHONES no 12305 06/09/20 14:49:34 3:11 280 581 nxtgenpho APPLE !PHONES ne 12306 06/09/20 14:51:33 10:30 8368 6156 Las 12307 06/09/20 14:52:44 0:37 5453 6094 nxtgonpho APPLE !PHONES no 12308 06/09/20 14:52:46 0:35 6315 8165 Las APPLE !PHONES 12309 06/09/20 14:52:46 0:36 6094 5165 nxtgenpho APPLE !PHONES ne 12310 06/09/20 14:52:47 0:35 8097 6051 Las APPLE !PHONES 12311 06/09/20 14:53:22 44:46 2021706 2314792 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 499 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171419 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343477 MOBILITY 45, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .a° AT&T ••- OTC. Run Data: 06/17/2020 Run Tine: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn EBB! INSI BAKE MODEL Date TIRO Number Up Dn MC) 12312 06/09/20 14:53:24 2:22 0 0 ims APPLE 'PHONES 12313 06/09/20 14:55:55 0:00 0 0 ims APPLE 'PHONES 12314 06/09/20 14:56:10 0:37 10745 6428 ims APPLE 'PHONES 12315 06/09/20 14:56:47 33:26 17928 2804 ims APPLE 'PHONES 12316 06/09/20 14:56:47 33:26 5624 2804 ims APPLE 'PHONES 12317 06/09/20 15:30:13 60:00 10632 4236 ims APPLE 'PHONES 12318 06/09/20 15:38:07 0:32 5220 6314 nxtgonphe APPLE 'PHONES no 12319 06/09/20 15:38:09 0:31 6314 4932 nxtgonphe APPLE 'PHONES ne 12320 06/09/20 15:38:40 60:00 45938 25244 nxtgonphe APPLE 'PHONES ne 12321 06/09/20 16:30:13 60:00 6848 2680 ims APPLE 'PHONES 12322 06/09/20 16:38:40 60:00 142769 4687229nmtgonphe APPLE 'PHONES ne 12323 06/09/20 17:30:13 60:00 8496 2928 ims APPLE 'PHONES 12324 06/09/20 17:38:40 60:00 2367 875nxtgonphe APPLE 'PHONES ne 12325 06/09/20 18:30:13 60:00 8620 3052 ims APPLE 'PHONES 12326 06/09/20 18:38:40 60:00 180792 103730nxtgonphe APPLE 'PHONES ne 12327 06/09/20 19:30:13 60:00 26512 13248 ims APPLE 'PHONES 12328 06/09/20 19:38:40 60:00 2079 3220nxtgonphe APPLE 'PHONES ne 12329 06/09/20 20:00:47 2:23 372588 270899 ims APPLE 'PHONES 12330 06/09/20 20:30:13 60:00 15388 8752 ims APPLE 'PHONES 12331 06/09/20 20:38:40 60:00 51601 38466nmtgonphe APPLE 'PHONES ne 12332 06/09/20 20:59:47 40:16 6008484 8878545 ims APPLE 'PHONES 12333 06/09/20 21:30:13 29:49 32156 20948 ims APPLE 'PHONES 12334 06/09/20 21:38:40 60:00 337102 301510nxtgonphe APPLE 'PHONES no 12335 06/09/20 21:45:27 0:43 6452 17206 ims APPLE 'PHONES 12336 06/09/20 21:46:22 0:19 1381 10147 ims APPLE 'PHONES 12337 06/09/20 22:00:02 0:44 179116 1712 ims APPLE 'PHONES 12338 06/09/20 22:00:02 0:44 4744 1712 ims APPLE 'PHONES 12339 06/09/20 22:00:46 1:09 3424 1340 ims APPLE 'PHONES 12340 06/09/20 22:01:55 0:43 2660 1340 ims APPLE 'PHONES 12341 06/09/20 22:01:55 0:43 2596 1340 ims APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 500 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY0000171420 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343478 MOBILITY / 1 44e. ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Dato: 06/17/2020 Run Time: Data usage For: MS= Item conn. Conn. Originating ET Bytes Bytes Apn TMEI IMSI Ma= MODEL Date Time up Dn (UTC) 12342 06/09/20 22:02:38 32:47 8388 2928 ims APPLE 'PHONES 12343 06/09/20 22:35:25 0:53 2660 1340 ims APPLE 'PHONES 12344 06/09/20 22:35:25 0:53 2596 1340 ims APPLE 'PHONES 12345 06/09/20 22:36:18 0:52 4840 1588 ims APPLE 'PHONES 12346 06/09/20 22:37:10 13:39 2596 1340 ims APPLE 'PHONES 12347 06/09/20 22:37:10 13:40 2660 1340 ims APPLE 'PHONES 12348 06/09/20 22:38:40 40:24 125226 85387 nxtgenpho APPLE 'PHONES ne 12349 06/09/20 22:50:49 60:00 35576 21760 ims APPLE 'PHONES 12350 06/09/20 23:19:03 0:37 5285 6451 nxtgenpho APPLE 'PHONES ne 12351 06/09/20 23:19:05 0:36 6451 4997 nxtgenpho APPLE 'PHONES ne 12352 06/09/20 23:19:22 0:14 3297 14724 ims APPLE !PHONES 12353 06/09/20 23:19:38 0:10 1431 12839 ims APPLE !PHONES 12354 06/09/20 23:19:41 60:00 108959 73126 nxtgenpho APPLE !PHONES ne 12355 06/09/20 23:50:49 60:00 19884 11412 ims APPLE !PHONES 12356 06/09/20 23:58:54 0:08 2460 11189 ims APPLE !PHONES 12357 06/10/20 00:19:41 1:32 39417 20149 nxtgenpho APPLE !PHONES ne 12358 06/10/20 00:21:12 2:03 288 48 nxtgenpho APPLE !PHONES ne 12359 06/10/20 00:21:13 2:03 48 0 nxtgenphe APPLE !PHONES ne 12360 06/10/20 00:23:15 3:45 7211 8328 nxtgenpho APPLE !PHONES ne 12361 06/10/20 00:23:16 3:45 8328 6923 nxtgenphe APPLE !PHONES ne 12362 06/10/20 00:27:01 2:48 78953 60993 nxtgenphe APPLE !PHONES ne 12363 06/10/20 00:29:48 24:08 7773 7645 nxtgenphe APPLE 'PHONES ne 12364 06/10/20 00:29:49 24:08 7645 7485 nxtgenphe APPLE 'PHONES ne 12365 06/10/20 00:50:49 14:49 3424 1340 ims APPLE 'PHONES 12366 06/10/20 00:53:57 3:57 48 Onatgenpho APPLE !PHONES ne 12367 06/10/20 00:57:53 1:12 288 48 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 501 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171421 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343479 MOBILITY e s, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .‘•-00 AT&T UTC. Run Data: 06/17/2020 Run Time: Data Usage For: IS= Item Conn. Conn. Originating ET Bytes Bytes Apn ZIOLI INSI MAKE MODEL Date Time Number Up Dn (OTC) 12368 06/10/20 00:57:55 1:11 48 Onxtgonpho APPLE !PHONES ne 12369 06/10/20 00:59:06 28:09 91843 405897 nxtgenpho APPLE !PHONES ne 12370 06/10/20 01:05:38 4:36 149256 3496 ism APPLE !PHONES 12371 06/10/20 01:05:38 4:36 6160 3496 ism APPLE !PHONES 12372 06/10/20 01:10:14 17:03 10176 8292 ism APPLE !PHONES 12373 06/10/20 01:30:49 8:06 298180 975215 nxtgenpho APPLE !PHONES ne 12374 06/10/20 01:30:51 6:57 6671 5904 ism APPLE !PHONES 12375 06/10/20 01:37:48 60:00 13568 4684 ism APPLE !PHONES 12376 06/10/20 01:38:55 14:43 288 48 nxtgenpho APPLE !PHONES ne 12377 06/10/20 01:38:56 14:43 48 0 nxtgenpho APPLE !PHONES no 12378 06/10/20 01:53:39 5:39 8614 8797 nxtgenpho APPLE !PHONES no 12379 06/10/20 01:59:18 60:00 15777 16256 nxtgenpho APPLE !PHONES ne 12380 06/10/20 02:37:48 60:00 8496 3112 ism APPLE !PHONES 12381 06/10/20 02:59:18 60:00 687 630 nxtgenpho APPLE !PHONES ne 12382 06/10/20 03:37:48 60:00 7172 2756 ism APPLE !PHONES 12383 06/10/20 03:59:18 60:00 578 630 nxtgenpho APPLE !PHONES ne 12384 06/10/20 04:37:48 60:00 14892 4824 ism APPLE !PHONES 12385 06/10/20 04:59:18 60:00 289 315 nxtgenpho APPLE !PHONES ne 12386 06/10/20 05:37:48 60:00 13352 4752 ism APPLE !PHONES 12387 06/10/20 05:59:18 60:00 462 420 nxtgenpho APPLE !PHONES ne 12388 06/10/20 06:37:48 60:00 6956 2648 ism APPLE !PHONES 12389 06/10/20 06:59:18 60:00 173 105 nxtgenpho APPLE !PHONES ne 12390 06/10/20 07:37:48 60:00 8388 3004 ism APPLE !PHONES 12391 06/10/20 07:59:18 60:00 346 210 nxtgenpho APPLE !PHONES ne 12392 06/10/20 08:37:48 60:00 6848 2864 ism APPLE !PHONES 12393 06/10/20 08:59:18 60:00 346 210 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 502 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171422 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343480 MOBILITY ce• PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run pato: 06/17/2020 Run Time: Data Usage For: MN= Item Conn. Conn. Originating ET Bytes Bytes Apn DM INSI MAKE MODEL Date Time Number Up Dn (UTC) 12394 06/10/20 09:37:48 60:00 8496 3112 ims APPLE !PHONES 12395 06/10/20 09:59:18 60:00 792 910 nxtgenpho APPLE !PHONES ne 12396 06/10/20 10:37:48 60:00 14020 5596 ims APPLE !PHONES 12397 06/10/20 10:59:18 53:48 73033 46330 nxtgenpho APPLE !PHONES ne 12398 06/10/20 11:37:48 59:15 10036 3252 ims APPLE !PHONES 12399 06/10/20 11:53:05 2:03 5221 6330 nxtgenpho APPLE !PHONES ne 12400 06/10/20 11:53:06 2:03 6330 4933 nxtgenpho APPLE !PHONES ne 12401 06/10/20 11:55:09 60:00 6915 5746 nxtgenpho APPLE !PHONES no 12402 06/10/20 12:37:03 2:44 3376 1448 ims APPLE !PHONES 12403 06/10/20 12:39:47 60:00 15000 4716 ims APPLE !PHONES 12404 06/10/20 12:55:09 56:15 1071 5832 nxtgenpho APPLE !PHONES ne 12405 06/10/20 13:39:47 60:00 8496 2896 ims APPLE !PHONES 12406 06/10/20 13:51:23 2:04 5062 6328 nxtgenpho APPLE !PHONES ne 12407 06/10/20 13:51:24 2:04 6328 4774 nxtgenpho APPLE !PHONES ne 12408 06/10/20 13:53:28 56:30 70376 54700 nxtgenpho APPLE !PHONES ne 12409 06/10/20 14:39:47 60:00 31844 22980 ims APPLE !PHONES 12410 06/10/20 14:49:57 0:22 288 48 nxtgenpho APPLE !PHONES ne 12411 06/10/20 14:49:59 0:21 48 0 nxtgenpho APPLE !PHONES ne 12412 06/10/20 14:50:20 8:44 48 0 nxtgenpho APPLE !PHONES ne 12413 06/10/20 14:54:49 0:29 1590 14344 ims APPLE !PHONES 12414 06/10/20 14:55:26 0:16 9756 24842 ims APPLE !PHONES 12415 06/10/20 14:59:03 3:32 288 48 nxtgenpho APPLE !PHONES ne 12416 06/10/20 14:59:05 3:31 48 0 nxtgenpho APPLE !PHONES ne 12417 06/10/20 15:02:36 60:00 92707 50816 nxtgenpho APPLE !PHONES ne 12418 06/10/20 15:39:47 60:00 15236 5936 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 503 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171423 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343481 MOBILITY cro pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/17/2020 Run Timm: Data Usage For: MS= Item Conn. Conn. Originating ET Bytes Bytes Apn nizx IEEE EASE MODES Date Time Numbor Op Dn (OTC) 12419 06/10/20 16:02:36 60:00 2961 11328 nxtgonpho APPLE 'PHONES ne 12420 06/10/20 16:39:47 60:00 10252 3376 ims APPLE 'PEONES 12421 06/10/20 17:02:36 24:14 4741 797 nxtgonpho APPLE 'PEONES no 12422 06/10/20 17:26:50 60:00 96839 37310 nxtgonpho APPLE !PEONES ne 12423 06/10/20 17:39:47 60:00 8388 2896 ims APPLE 'PHONES 12424 06/10/20 18:26:50 60:00 169501 105986 nxtgonpho APPLE 'PHONES ne 12425 06/10/20 18:39:47 60:00 34924 26900 ims APPLE 'PHONES 12426 06/10/20 18:50:57 0:33 2804 18349 ims APPLE 'PHONES 12427 06/10/20 19:11:28 0:27 2059 12714 ims APPLE 'PHONES 12428 06/10/20 19:26:50 37:20 40083 29088 nxtgonpho APPLE 'PHONES ne 12429 06/10/20 19:39:47 60:00 13676 4684 ims APPLE 'PHONES 12430 06/10/20 20:04:10 2:03 5566 8034 nxtgonpho APPLE 'PHONES ne 12431 06/10/20 20:04:11 2:03 8034 5278 nxtgonpho APPLE 'PHONES no 12432 06/10/20 20:06:14 60:00 13685 12191 nxtgonpho APPLE 'PHONES no 12433 06/10/20 20:39:47 43:51 3408 1324 ims APPLE 'PHONES 12434 06/10/20 21:06:14 37:19 59742 42049 nxtgonpho APPLE 'PHONES no 12435 06/10/20 21:23:38 0:35 163424 2912 ims APPLE 'PHONES 12436 06/10/20 21:23:38 0:35 5240 2824 ims APPLE 'PHONES 12437 06/10/20 21:24:13 4:48 3424 1432 ims APPLE 'PHONES 12438 06/10/20 21:29:01 14:32 7580 2908 ims APPLE 'PHONES 12439 06/10/20 21:29:01 14:32 7580 2820 ims APPLE 'PHONES 12440 06/10/20 21:43:33 1:15 23581 106165 nxtgonpho APPLE 'PHONES no 12441 06/10/20 21:43:36 1:12 8191 6178 ims APPLE 'PHONES 12442 06/10/20 21:44:48 55:44 93041 251870 nxtgonpho APPLE !PHONES no 12443 06/10/20 21:44:50 0:29 7407 6090 ims APPLE !PHONES 12444 06/10/20 21:45:19 3:27 3748 1556 ims APPLE !PHONES 12445 06/10/20 21:48:46 1:03 2644 1324 ims APPLE !PHONES 12446 06/10/20 21:49:49 45:13 21796 15580 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 504 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171424 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343482 MOBILITY / 1 44r. ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn EMU INS! MAKE MODEL Date Time Number Up Dn (OTC) 12447 06/10/20 22:20:49 0:30 4259 15173 ims APPLE !PEONES 12448 06/10/20 22:35:02 5:27 2752 1324 ims APPLE !PEONES 12449 06/10/20 22:40:29 2:19 4948 1680 ims APPLE !PEONES 12450 06/10/20 22:40:31 2:03 5065 6314 nxtgonpho APPLE !PEONES no 12451 06/10/20 22:40:32 2:03 6314 4777 nxtgonpho APPLE !PEONES no 12452 06/10/20 22:42:35 60:00 33070 35962 nxtgonpho APPLE !PEONES no 12453 06/10/20 22:42:48 0:28 2644 1412 imp APPLE !PEONES 12454 06/10/20 22:42:48 0:28 2644 1324 imp APPLE !PHONES 12455 06/10/20 22:43:16 17:45 3532 1324 imp APPLE 'PHONES 12456 06/10/20 23:05:46 5:35 6671 5979 ims APPLE !PHONES 12457 06/10/20 23:11:25 2:26 6667 5982 ims APPLE !PHONES 12458 06/10/20 23:13:51 0:33 4856 1464 ims APPLE !PHONES 12459 06/10/20 23:14:24 1:30 2752 1324 ims APPLE !PHONES 12460 06/10/20 23:15:54 60:00 14016 4948 ims APPLE !PHONES 12461 06/10/20 23:42:35 18:08 52130 43565 nxtgonpho APPLE 'PHONES no 12462 06/11/20 00:00:42 2:03 288 48 nxtgonpho APPLE 'PHONES no 12463 06/11/20 00:00:43 2:03 48 0 nxtgenpho APPLE !PHONES no 12464 06/11/20 00:02:46 60:00 35541 16641 nxtgonpho APPLE !PHONES no 12465 06/11/20 00:15:54 60:00 26560 17852 ims APPLE !PHONES 12466 06/11/20 00:50:18 0:29 1749 13796 ims APPLE !PHONES 12467 06/11/20 01:00:11 44:46 7656873 9341811 ims APPLE !PHONES 12468 06/11/20 01:02:46 60:00 19543 7341 nxtgonpho APPLE !PHONES no 12469 06/11/20 01:15:54 60:00 11496 4784 ims APPLE !PHONES 12470 06/11/20 02:02:46 60:00 2218 2198 nxtgonpho APPLE !PHONES no 12471 06/11/20 02:15:54 60:00 10828 4220 ims APPLE !PHONES 12472 06/11/20 03:02:46 5:40 225 210 nxtgonphe APPLE !PHONES ne 12473 06/11/20 03:08:26 60:00 42848 32453 nxtgonphe APPLE !PHONES ne 12474 06/11/20 03:15:54 60:00 8728 3772 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 505 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171425 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343483 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in el.AT&T ‘s UTE. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DOLT INSI NAME MODEL Date Time Number Up Dn (OTC) 12475 06/11/20 04:08:26 60:00 5798 8080 nxtgenpho APPLE !PHONES ne 12476 06/11/20 04:15:54 60:00 13568 4876 isms APPLE 'PEONES 12477 06/11/20 05:08:26 60:00 1005 979 nxtgenpho APPLE !PHONES ne 12478 06/11/20 05:15:54 60:00 8388 2788 isms APPLE !PHONES 12479 06/11/20 06:08:26 60:00 450 420 nxtgenpho APPLE !PHONES ne 12480 06/11/20 06:15:54 31:28 5072 1572 isms APPLE !PHONES 12481 06/11/20 06:47:22 0:57 148724 1536 isms APPLE !PHONES 12482 06/11/20 06:47:22 0:57 2968 1448 isms APPLE !PHONES 12483 06/11/20 06:48:19 60:00 10256 4344 isms APPLE !PHONES 12484 06/11/20 07:08:26 60:00 225 210 nxtgenpho APPLE !PHONES ne 12485 06/11/20 07:48:19 60:00 8496 3004 isms APPLE !PHONES 12486 06/11/20 08:08:26 60:00 225 210 nxtgenpho APPLE !PHONES ne 12487 06/11/20 08:48:19 60:00 11904 4396 ims APPLE !PHONES 12488 06/11/20 09:08:26 60:00 398 315 nxtgenpho APPLE !PHONES ne 12489 06/11/20 09:48:19 60:00 7080 2772 ims APPLE !PHONES 12490 06/11/20 10:08:26 60:00 277 315 nxtgenpho APPLE !PHONES ne 12491 06/11/20 10:48:19 60:00 10596 4096 ims APPLE !PHONES 12492 06/11/20 11:08:26 37:36 329 367 nxtgenpho APPLE !PHONES ne 12493 06/11/20 11:46:01 0:34 5390 7804 nxtgenpho APPLE !PHONES ne 12494 06/11/20 11:46:02 0:34 7804 5102 nxtgenpho APPLE !PHONES ne 12495 06/11/20 11:46:36 60:00 14045 47524 nxtgenpho APPLE !PHONES ne 12496 06/11/20 11:48:19 15:20 0 0 isms APPLE !PHONES 12497 06/11/20 12:08:15 37:27 8454 6286 isms APPLE !PHONES 12498 06/11/20 12:45:42 0:17 2768 1324 isms APPLE !PHONES 12499 06/11/20 12:45:42 0:17 2704 1324 isms APPLE !PHONES 12500 06/11/20 12:45:59 10:11 4964 1696 isms APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 506 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171426 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343484 MOBILITY deo PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in -,01 AT&T UTZ. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DEBI IMSI HAKE MODEL Date Time Number Up Dn (OTC) 12501 06/11/20 12:46:36 60:00 2177046 2642670 nxtgenpho APPLE 'PHONES ne 12502 06/11/20 12:56:20 3:14 11347 6482 imn APPLE 'PHONES 12503 06/11/20 12:59:34 0:45 2768 1324 imn APPLE 'PHONES 12504 06/11/20 12:59:34 0:45 2704 1324 imn APPLE 'PHONES 12505 06/11/20 13:00:19 48:00 7064 2880 imn APPLE 'PHONES 12506 06/11/20 13:46:36 3:00 3006 1187 nxtgenpho APPLE 'PHONES ne 12507 06/11/20 13:48:19 1:17 7684 6376 imn APPLE 'PHONES 12508 06/11/20 13:48:19 1:17 7620 6376 imn APPLE 'PHONES 12509 06/11/20 13:51:27 3:56 356279 1131640 nxtgenpho APPLE 'PHONES ne 12510 06/11/20 13:51:30 3:53 8905 7072 imn APPLE 'PHONES 12511 06/11/20 13:55:22 2:03 288 48 nxtgenpho APPLE 'PHONES ne 12512 06/11/20 13:55:23 2:04 48 0 nxtgenpho APPLE 'PHONES ne 12513 06/11/20 13:56:00 1:25 6476 7421 imn APPLE 'PHONES 12514 06/11/20 13:56:01 1:26 7421 6124 imn APPLE 'PHONES 12515 06/11/20 13:57:27 33:22 8993 10526 nxtgenpho APPLE 'PHONES ne 12516 06/11/20 13:58:27 7:45 6689 6000 imn APPLE 'PHONES 12517 06/11/20 14:06:12 60:00 24096 13980 imn APPLE 'PHONES 12518 06/11/20 14:11:50 0:42 7780 14713 imn APPLE 'PHONES 12519 06/11/20 14:30:49 60:00 87380 60369 nxtgenpho APPLE 'PHONES ne 12520 06/11/20 15:06:12 60:00 7296 3020 imn APPLE 'PHONES 12521 06/11/20 15:30:49 60:00 27822 17667 nxtgenpho APPLE 'PHONES ne 12522 06/11/20 16:06:12 0:03 0 0 imn APPLE 'PHONES 12523 06/11/20 16:06:14 2:19 14560 1320 imn APPLE 'PHONES 12524 06/11/20 16:06:15 2:18 2428 1232 imn APPLE 'PHONES 12525 06/11/20 16:08:33 60:00 14032 4856 imn APPLE 'PHONES 12526 06/11/20 16:30:49 60:00 196129 15494 nxtgenpho APPLE 'PHONES ne 12527 06/11/20 17:08:33 29:08 3424 1340 imn APPLE 'PHONES 12528 06/11/20 17:30:49 60:00 240325 293154 nxtgenpho APPLE 'PHONES ne 12529 06/11/20 17:37:41 60:00 5240 2680 imn APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. page 507 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171427 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343485 MOBILITY e t. 1.1.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ST Bytes Bytes Apn IMMIX IIRI NAPS MODPI. Date Time Number Up Dn (OTC) 12530 06/11/20 17:37:41 60:00 29252 2768 ims APPLE 'PEONES 12531 06/11/20 18:30:49 42:56 89878 1231264 nxtgonpho APPLE 'PEONES ne 12532 06/11/20 18:37:41 36:04 8051 6072 ims APPLE 'PEONES 12533 06/11/20 18:37:41 36:04 8051 6072 ims APPLE 'PEONES 12534 06/11/20 19:13:45 0:26 108 0 ims APPLE 'PEONES 12535 06/11/20 19:13:45 0:26 108 0 ims APPLE 'PEONES 12536 06/11/20 19:13:45 0:26 5235 4253 nxtgonpho APPLE 'PEONES ne 12537 06/11/20 19:14:11 18:47 0 0 ims APPLE IPECNEEI 12538 06/11/20 19:14:11 18:47 0 0 ims APPLE !PHONES 12539 06/11/20 19:14:11 18:47 3483 7942 nxtgonpho APPLE !PHONES no 12540 06/11/20 19:32:58 7:25 14721 23899 nxtgonpho APPLE !PHONES ne 12541 06/11/20 19:33:01 6:18 8813 6157 ims APPLE !PHONES 12542 06/11/20 19:39:19 0:30 3424 1324 ims APPLE !PHONES 12543 06/11/20 19:39:49 0:34 2644 1324 ims APPLE !PHONES 12544 06/11/20 19:40:22 0:59 7221 7262 nxtgonpho APPLE !PHONES no 12545 06/11/20 19:40:23 0:58 6472 7381 ims APPLE !PHONES 12546 06/11/20 19:40:23 0:59 7262 6933 nxtgonpho APPLE !PHONES no 12547 06/11/20 19:40:24 0:58 7381 6120 ims APPLE !PHONES 12548 06/11/20 19:41:22 60:00 10384 23896 nxtgonpho APPLE !PHONES no 12549 06/11/20 19:41:24 1:07 6673 5982 ims APPLE !PHONES 12550 06/11/20 19:42:31 60:00 12120 4484 ims APPLE !PHONES 12551 06/11/20 20:41:22 60:00 1676 6285 nxtgonpho APPLE !PHONES no 12552 06/11/20 20:42:31 60:00 8604 3052 ims APPLE !PHONES 12553 06/11/20 21:41:22 11:14 0 0 nxtgonpho APPLE !PHONES no 12554 06/11/20 21:42:31 60:00 10252 3284 ims APPLE !PHONES 12555 06/11/20 21:52:35 8:42 5161 6314 nxtgonpho APPLE !PHONES ne 12556 06/11/20 21:52:36 8:42 6314 4777 nxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 508 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171428 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343486 MOBILITY „two ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: WWI= Item Conn. Conn. Originating ET Bytes Bytes Apn LBSS IMSI MAKE MOD= Date Time Number Up Dn (OTC) 12557 06/11/20 22:01:18 4:07 280 581 nxtgenpho APPLE 'PROMO ne 12558 06/11/20 22:05:24 7:07 5065 6314 nxtgenpho APPLE 'PROMO no 12559 06/11/20 22:05:25 7:07 6314 4777 nxtgenpho APPLE 'PROMO ne 12560 06/11/20 22:12:32 60:00 16116 15319 nxtgenpho APPLE 'PROMO ne 12561 06/11/20 22:42:31 42:11 15099 8175 ims APPLE 'PHONES 12562 06/11/20 23:12:32 20:12 0 0 nxtgenpho APPLE 'PHONES ne 12563 06/11/20 23:28:10 10:00 8530 6336 ims APPLE 'PHONES 12564 06/11/20 23:38:09 60:00 86182 67593 nxtgenpho APPLE 'PHONES ne 12565 06/11/20 23:38:10 0:02 0 0 ims APPLE 'PHONES 12566 06/11/20 23:38:10 0:02 0 0 ims APPLE 'PHONES 12567 06/11/20 23:38:18 60:00 70734 44647 ims 12568 06/11/20 23:57:41 0:10 1431 23774 ims 12569 06/12/20 00:35:14 0:43 5016 17038 ims 12570 06/12/20 00:36:09 0:33 6174 18269 ims 12571 06/12/20 00:38:09 60:00 4533 1101 nxtgenpho APPLE 'PHONES ne 12572 06/12/20 00:38:18 60:00 10252 3624 ims 12573 06/12/20 01:38:09 60:00 99995 29061 nxtgenpho APPLE 'PHONES ne 12574 06/12/20 01:38:18 60:00 8836 3284 ims 12575 06/12/20 02:38:09 47:00 5160 1217 nxtgenpho APPLE !PHONES ne 12576 06/12/20 02:38:18 60:00 10272 4036 ims 12577 06/12/20 03:25:09 60:00 7539 6634 nxtgenpho APPLE !PHONES ne 12578 06/12/20 03:38:18 60:00 10252 3284 ims 12579 06/12/20 04:25:09 60:00 578 630 nxtgenpho APPLE !PHONES ne 12580 06/12/20 04:38:18 60:00 15108 4924 ims 12581 06/12/20 05:25:09 60:00 225 210 nxtgenpho APPLE !PHONES ne 12582 06/12/20 05:38:18 60:00 8604 3052 ims 12583 06/12/20 06:25:09 60:00 514 525 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 509 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171429 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343487 MOBILITY „so pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:33:53pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytos Bytes Apn DMZ IBIS! MALE MODEM Date Time Number Up Dn Mt/ 12584 06/12/20 06:38:18 60:00 13476 4424 ims 12585 06/12/20 07:25:09 60:00 692 997 nxtgonpho APPLE 'PEONES ne 12586 06/12/20 07:38:18 60:00 7064 2788 ims 12587 06/12/20 08:25:09 60:00 289 315 nxtgenpho APPLE 'PEONES ne 12588 06/12/20 08:38:18 60:00 10036 3176 ims 12589 06/12/20 09:25:09 60:00 225 210 nxtgonpho APPLE 'PEONES no 12590 06/12/20 09:38:18 60:00 11812 4536 ims 12591 06/12/20 10:25:09 60:00 341 419 nxtgonpho APPLE 'PHONES no 12592 06/12/20 10:38:18 60:00 14892 4656 ims 12593 06/12/20 11:25:09 60:00 3042 262 nxtgonpho APPLE 'PHONES ne 12594 06/12/20 11:38:18 60:00 7172 2788 ims 12595 06/12/20 12:25:09 60:00 1340 2849 nxtgonpho APPLE 'PHONES no 12596 06/12/20 12:38:18 60:00 8496 2928 ims 12597 06/12/20 13:25:09 60:00 12800 15836 nxtgenpho APPLE 'PHONES ne 12598 06/12/20 13:38:18 60:00 22736 11832 ims 12599 06/12/20 13:40:43 0:52 84685 100813 ims 12600 06/12/20 13:41:48 0:02 0 0 ims 12601 06/12/20 14:25:09 60:00 115408 81206 nxtgenpho APPLE 'PHONES ne 12602 06/12/20 14:38:18 4:52 4964 1696 ims APPLE 'PHONES 12603 06/12/20 14:43:10 1:54 18932 1340 ims APPLE 'PHONES 12604 06/12/20 14:43:10 1:54 2704 1340 ims APPLE 'PHONES 12605 06/12/20 14:45:04 4:28 3424 1340 ims APPLE 'PHONES 12606 06/12/20 14:49:32 1:32 4092 2356 ims APPLE 'PHONES 12607 06/12/20 14:49:32 1:32 4028 2356 ims APPLE 'PHONES 12608 06/12/20 14:51:04 60:00 22640 7008 ims APPLE 'PHONES 12609 06/12/20 15:25:09 8:48 304 232 nxtgonpho APPLE 'PHONES no 12610 06/12/20 15:33:57 60:00 6756 5122 nxtgonpho APPLE 'PHONES no 12611 06/12/20 15:51:04 60:00 81148 44160 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 510 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171430 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343488 MOBILITY / 1 44r. P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Time: Data Usage For: "MI= Item Conn. Conn. Originating ET Bytes Bytes Apn IBIS! ISAPZIL )10Corl. Date Time Number Up Dn (UTC) 12612 06/12/20 16:33:57 60:00 109675 86611 nxtgonpho APPLE 'PHONES ne 12613 06/12/20 16:43:35 0:22 0 44448 Las APPLE 'PHONES 12614 06/12/20 16:44:44 0:05 0 2786 Las APPLE 'PHONES 12615 06/12/20 16:46:27 0:39 9591 15521 Las APPLE 'PHONES 12616 06/12/20 16:47:08 0:01 0 0 Las APPLE 'PHONES 12617 06/12/20 16:47:21 0:40 7107 21103 Las APPLE 'PHONES 12618 06/12/20 16:48:08 0:19 0 312 Las APPLE 'PHONES 12619 06/12/20 16:49:38 0:57 83844 70722 Las APPLE 'PHONES 12620 06/12/20 16:51:04 21:41 3532 1340 Las APPLE 'PHONES 12621 06/12/20 17:12:45 0:50 69840 1588 Las APPLE 'PHONES 12622 06/12/20 17:12:45 0:50 4244 1588 Las APPLE 'PHONES 12623 06/12/20 17:13:35 60:00 10380 4128 Las APPLE 'PHONES 12624 06/12/20 17:33:57 60:00 763 735 nxtgonpho APPLE 'PHONES ne 12625 06/12/20 18:13:35 60:00 7280 2928 Las APPLE 'PHONES 12626 06/12/20 18:33:57 60:00 346 210 nxtgonpho APPLE 'PHONES no 12627 06/12/20 19:13:35 60:00 11364 3424 Las APPLE 'PHONES 12628 06/12/20 19:33:57 60:00 462 420 nxtgonpho APPLE 'PHONES no 12629 06/12/20 20:13:35 33:36 10596 4536 ism APPLE 'PHONES 12630 06/12/20 20:33:57 60:00 5265859 5141147 nxtgonpho APPLE 'PHONES no 12631 06/12/20 20:47:11 0:58 7673 6480 ism APPLE 'PHONES 12632 06/12/20 20:47:11 0:58 6753 6480 ism APPLE 'PHONES 12633 06/12/20 20:48:09 0:20 3424 1340 Las APPLE 'PHONES 12634 06/12/20 20:48:29 14:58 69600 1448 Las APPLE 'PHONES 12635 06/12/20 20:48:29 14:58 3904 1448 Las APPLE 'PHONES 12636 06/12/20 21:03:27 1:32 3424 1448 ism APPLE 'PHONES 12637 06/12/20 21:04:58 16:51 90124 1464 ism APPLE 'PHONES 12638 06/12/20 21:04:59 16:50 3328 1464 ism APPLE !PHONES 12639 06/12/20 21:21:49 60:00 12028 4392 ism APPLE IPHONE8 12640 06/12/20 21:33:57 60:00 3797 4371 nxtgonpho APPLE IPHONE8 no 12641 06/12/20 22:21:49 60:00 8728 3052 Las APPLE IPHONE8 12642 06/12/20 22:33:57 60:00 41210 25146 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 511 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171431 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343489 MOBILITY de, PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Tame: Data Usage For: NM= Item Conn. Conn. Originating ET Bytes Bytes Apn flat INSI HAKE MODEL Date Time Number Up Dn (UTC) 12643 06/12/20 23:21:49 60:00 12044 4392 ims APPLE 'PHONES 12644 06/12/20 23:33:57 60:00 571 420 nxtgonpho APPLE 'PHONES no 12645 06/13/20 00:21:49 60:00 10036 3176 ims APPLE 'PHONES 12646 06/13/20 00:33:57 60:00 4302 4942 nxtgonpho APPLE 'PHONES no 12647 06/13/20 01:21:49 60:00 10952 4876 ims APPLE 'PHONES 12648 06/13/20 01:33:57 60:00 3240 5960 nxtgonpho APPLE 'PHONES no 12649 06/13/20 02:21:49 60:00 8496 3160 ims APPLE 'PHONES 12650 06/13/20 02:33:57 60:00 623 525 nxtgonpho APPLE 'PHONES no 12651 06/13/20 03:21:49 60:00 14424 4532 ims APPLE 'PHONES 12652 06/13/20 03:33:57 60:00 346 210 nxtgonpho APPLE 'PHONES ne 12653 06/13/20 04:21:49 60:00 8604 3036 ims APPLE 'PHONES 12654 06/13/20 04:33:57 48:11 346 210 nxtgonpho APPLE 'PHONES ne 12655 06/13/20 05:21:49 60:00 7188 2912 ims APPLE 'PHONES 12656 06/13/20 05:22:07 1:36 5064 6298 nxtgonpho APPLE 'PHONES ne 12657 06/13/20 05:22:08 1:36 6298 4776 nxtgonpho APPLE 'PHONES no 12658 06/13/20 05:23:44 60:00 18806 19522 nxtgonpho APPLE 'PHONES no 12659 06/13/20 06:21:49 60:00 7064 2804 ims APPLE 'PHONES 12660 06/13/20 06:23:44 60:00 3733 944 nxtgonpho APPLE 'PHONES no 12661 06/13/20 07:21:49 60:00 14160 5768 ims APPLE 'PHONES 12662 06/13/20 07:23:44 60:00 398 315 nxtgonpho APPLE 'PHONES ne 12663 06/13/20 08:21:49 60:00 8388 2928 ims APPLE 'PHONES 12664 06/13/20 08:23:44 60:00 277 315 nxtgonpho APPLE 'PHONES ne 12665 06/13/20 09:21:49 60:00 8388 2928 ims APPLE 'PHONES 12666 06/13/20 09:23:44 60:00 734 1106 nxtgonpho APPLE 'PHONES ne 12667 06/13/20 10:21:49 60:00 14892 4780 ims APPLE 'PHONES 12668 06/13/20 10:23:44 60:00 277 315 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 512 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171432 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343490 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Dato: 06/17/2020 Run Time: Data Usage For: NW= Item Conn. Conn. Originating CT Bytes Bytes Apn MBRI IMSI MOWS MODEL Date Time Number Up Dn (OTC) 12669 06/13/20 11:21:49 60:00 8944 3036 isms APPLE !PHONES 12670 06/13/20 11:23:44 60:00 225 210 nxtgonpho APPLE !PHONES ne 12671 06/13/20 12:21:49 60:00 12028 4660 isms APPLE !PHONES 12672 06/13/20 12:23:44 60:00 277 262 nxtgonpho APPLE !PHONES ne 12673 06/13/20 13:21:49 3:46 0 0 isms APPLE !PHONES 12674 06/13/20 13:23:44 60:00 10720 21297 nxtgonpho APPLE 'PHONES ne 12675 06/13/20 13:26:11 0:58 6687 5962 isms APPLE 'PHONES 12676 06/13/20 13:27:09 60:00 12368 4560 isms APPLE 'PHONES 12677 06/13/20 14:23:44 60:00 7873 3970 nxtgonpho APPLE 'PHONES no 12678 06/13/20 14:27:09 60:00 6848 2756 ism; APPLE 'PHONES 12679 06/13/20 15:23:44 60:00 538 4628 nxtgonpho APPLE 'PHONES no 12680 06/13/20 15:27:09 60:00 8604 3004 isms APPLE 'PHONES 12681 06/13/20 16:23:44 60:00 3528 4497 nxtgonpho APPLE 'PHONES no 12682 06/13/20 16:27:09 60:00 8496 2896 isms APPLE 'PHONES 12683 06/13/20 17:23:44 60:00 329 367 nxtgonpho APPLE 'PHONES no 12684 06/13/20 17:27:09 60:00 7048 2648 isms APPLE 'PHONES 12685 06/13/20 18:23:44 60:00 173 105 nxtgonpho APPLE !PHONES ne 12686 06/13/20 18:27:09 60:00 17100 6292 isms APPLE !PHONES 12687 06/13/20 19:23:44 60:00 5114 7043 nxtgonpho APPLE !PHONES no 12688 06/13/20 19:27:09 60:00 8480 2896 ism; APPLE !PHONES 12689 06/13/20 20:23:44 60:00 173 105 nxtgonpho APPLE !PHONES no 12690 06/13/20 20:27:09 60:00 8496 2896 isms APPLE !PHONES 12691 06/13/20 21:23:44 60:00 4941 4307 nxtgonpho APPLE !PHONES no 12692 06/13/20 21:27:09 60:00 13568 4792 isms APPLE !PHONES 12693 06/13/20 22:23:44 60:00 1316 4573 nxtgonpho APPLE !PHONES no 12694 06/13/20 22:27:09 60:00 7188 2880 isms APPLE !PHONES 12695 06/13/20 23:23:44 60:00 217948 136037 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 513 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171433 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343491 MOBILITY 45, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn flat IIRI Ma= MODEL Date Tame Number Up Dn (OTC/ 12696 06/13/20 23:27:09 60:00 10456 4256 ims APPLE 'PEONES 12697 06/14/20 00:23:44 60:00 173 105 nxtgenpho APPLE 'PEONES ne 12698 06/14/20 00:27:09 60:00 6848 2648 ims APPLE 'PEONES 12699 06/14/20 01:23:44 60:00 173 105 nxtgenpho APPLE 'PEONES ne 12700 06/14/20 01:27:09 60:00 14876 4608 ims APPLE 'PEONES 12701 06/14/20 02:23:44 60:00 536 297 nxtgenpho APPLE 'PEONES ne 12702 06/14/20 02:27:09 60:00 9788 3128 ims APPLE !PEONES 12703 06/14/20 03:23:44 60:00 173 157 nxtgenpho APPLE !PHONES ne 12704 06/14/20 03:27:09 60:00 10036 3144 ims APPLE 'PHONES 12705 06/14/20 04:23:44 60:00 346 210 nxtgenpho APPLE 'PHONES ne 12706 06/14/20 04:27:09 60:00 13676 4768 ims APPLE 'PHONES 12707 06/14/20 05:23:44 60:00 173 105 nxtgenpho APPLE 'PHONES ne 12708 06/14/20 05:27:09 60:00 13444 4576 ims APPLE 'PHONES 12709 06/14/20 06:23:44 60:00 173 105 nxtgenpho APPLE 'PHONES ne 12710 06/14/20 06:27:09 60:00 8372 2896 ims APPLE !PHONES 12711 06/14/20 07:23:44 60:00 173 105 nxtgenpho APPLE !PHONES ne 12712 06/14/20 07:27:09 60:00 8512 3772 ims APPLE !PHONES 12713 06/14/20 08:23:44 60:00 4732 3765 nxtgenpho APPLE !PHONES ne 12714 06/14/20 08:27:09 60:00 10020 3252 ims APPLE !PHONES 12715 06/14/20 09:23:44 60:00 173 105 nxtgenpho APPLE !PHONES ne 12716 06/14/20 09:27:09 60:00 13536 4860 ims APPLE !PHONES 12717 06/14/20 10:23:44 60:00 173 105 nxtgenpho APPLE !PHONES ne 12718 06/14/20 10:27:09 60:00 12012 4220 ims APPLE 'PHONES 12719 06/14/20 11:23:44 60:00 9404 1691 nxtgenpho APPLE 'PHONES ne 12720 06/14/20 11:27:09 60:00 8480 2896 ims APPLE !PHONES 12721 06/14/20 12:23:44 60:00 538 4260 nxtgenpho APPLE !PHONES ne 12722 06/14/20 12:27:09 60:00 8372 2896 Las APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 514 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171434 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343492 MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:58pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. tasioAT&T Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn ENE! INSI MAKE MODEL Date Time Number Up Dn (UTC) 12723 06/14/20 13:23:44 60:00 173 105 nxtgenpho APPLE !PHONES ne 12724 06/14/20 13:27:09 60:00 8388 2896 isms APPLE !PHONES 12725 06/14/20 14:23:44 60:00 173 105 nxtgenpho APPLE !PHONES ne 12726 06/14/20 14:27:09 60:00 18516 6324 isms APPLE !PHONES 12727 06/14/20 15:23:44 60:00 1145 5273 nxtgenpho APPLE !PHONES ne 12728 06/14/20 15:27:09 60:00 10128 3268 isms APPLE !PHONES 12729 06/14/20 16:23:44 60:00 434 1516 nxtgenpho APPLE !PHONES ne 12730 06/14/20 16:27:09 60:00 9928 3144 isms APPLE !PHONES 12731 06/14/20 17:23:44 60:00 830 530 nxtgenphe APPLE !PHONES ne 12732 06/14/20 17:27:09 15:49 3548 2200 isms APPLE !PHONES 12733 06/14/20 17:42:58 1:08 7480 4448 isms APPLE !PHONES 12734 06/14/20 17:44:06 60:00 13692 4592 isms APPLE !PHONES 12735 06/14/20 18:23:44 60:00 173 157 nxtgenpho APPLE !PHONES ne 12736 06/14/20 18:44:06 60:00 10144 3160 isms APPLE !PHONES 12737 06/14/20 19:23:44 60:00 173 105 nxtgenpho APPLE !PHONES ne 12738 06/14/20 19:44:06 60:00 8372 2896 isms APPLE !PHONES 12739 06/14/20 20:23:44 60:00 173 105 nxtgenpho APPLE !PHONES ne 12740 06/14/20 20:44:06 60:00 13768 5108 isms APPLE !PHONES 12741 06/14/20 21:23:44 49:24 10693 835 nxtgenpho APPLE !PHONES ne 12742 06/14/20 21:44:06 60:00 13552 4468 isms APPLE !PHONES 12743 06/14/20 22:13:08 60:00 17878 16048 nxtgenpho APPLE !PHONES ne 12744 06/14/20 22:44:06 60:00 9928 3144 isms APPLE !PHONES 12745 06/14/20 23:13:08 60:00 446 700 nxtgenpho APPLE !PHONES ne 12746 06/14/20 23:44:06 60:00 10036 3144 isms APPLE !PHONES 12747 06/15/20 00:13:08 60:00 173 105nxtgonpho APPLE !PHONES ne 12748 06/15/20 00:44:06 60:00 8604 3112 isms APPLE !PHONES 12749 06/15/20 01:13:08 60:00 14998 10416 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 515 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171435 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343493 MOBILITY e s, ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Date: 06/17/2020 Run Tame: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn ZIOLI INSI MAKE MODEL Date Tame Number Up Dn MC) 12750 06/15/20 01:44:06 60:00 11904 4504 isms APPLE !PHONES 12751 06/15/20 02:13:08 60:00 1334 1155nxtgonphe APPLE !PHONES ne 12752 06/15/20 02:44:06 60:00 13568 4468 ism APPLE !PHONES 12753 06/15/20 03:13:08 60:00 924 840nxtgonphe APPLE !PHONES ne 12754 06/15/20 03:44:06 60:00 7172 2772 ism APPLE !PHONES 12755 06/15/20 04:13:08 60:00 865 525nxtgonphe APPLE !PHONES ne 12756 06/15/20 04:44:06 60:00 10036 3144 ism APPLE !PHONES 12757 06/15/20 05:13:08 60:00 635 525nxtgonphe APPLE !PHONES ne 12758 06/15/20 05:44:06 60:00 6956 2648 ism APPLE !PHONES 12759 06/15/20 06:13:08 60:00 1292 886nxtgonphe APPLE !PHONES ne 12760 06/15/20 06:44:06 60:00 15360 6076 ism APPLE !PHONES 12761 06/15/20 07:13:08 60:00 981 787 nxtgonpho APPLE !PHONES ne 12762 06/15/20 07:44:06 60:00 7388 2756 isms APPLE !PHONES 12763 06/15/20 08:13:08 60:00 808 630 nxtgonpho APPLE !PHONES no 12764 06/15/20 08:44:06 60:00 10036 3252 isms APPLE !PHONES 12765 06/15/20 09:13:08 60:00 583 484 nxtgonpho APPLE !PHONES no 12766 06/15/20 09:44:06 50:37 6848 2648 ism APPLE !PHONES 12767 06/15/20 10:13:08 60:00 635 577 nxtgonphe APPLE !PHONES no 12768 06/15/20 10:34:43 0:02 0 0 ism APPLE !PHONES 12769 06/15/20 10:34:43 0:02 0 0 ism APPLE !PHONES 12770 06/15/20 10:34:51 56:51 16081 7902 ism APPLE !PHONES 12771 06/15/20 11:13:08 44:54 23897 84578 nxtgonphe APPLE !PHONES ne 12772 06/15/20 11:31:42 4:48 7052 2556 ism APPLE !PHONES 12773 06/15/20 11:31:42 4:48 6988 2556 ism APPLE !PHONES 12774 06/15/20 11:36:30 60:00 13568 4732 ism APPLE !PHONES 12775 06/15/20 11:58:01 2:03 288 48 nxtgonpho APPLE !PHONES no 12776 06/15/20 11:58:02 2:03 48 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 516 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171436 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343494 MOBILITY e• PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in / 1 4-sio AT&T OTC. Run Date: 06/17/2020 Run Tame: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn EBBE INSI MAKE MODEL Date Time Number Up Dn (OTC/ 12777 06/15/20 12:00:05 20:25 6294 4744 nxtgenpho APPLE 'PHONES ne 12778 06/15/20 12:20:30 60:00 10495 5873 nxtgenphe APPLE 'PHONES ne 12779 06/15/20 12:36:30 60:00 8620 3052 ims APPLE !PHONES 12780 06/15/20 13:20:30 60:00 5167 12292 nxtgenpho APPLE !PHONES ne 12781 06/15/20 13:36:30 53:44 10036 3284 ims APPLE !PHONES 12782 06/15/20 14:20:30 8:02 486 4491 nxtgenpho APPLE !PHONES ne 12783 06/15/20 14:28:31 2:07 23299 6302 nxtgenpho APPLE !PHONES ne 12784 06/15/20 14:28:32 2:08 6302 23011 nxtgenpho APPLE !PHONES ne 12785 06/15/20 14:29:56 0:21 6316 6669 ims APPLE !PHONES 12786 06/15/20 14:29:57 0:21 6669 5964 ims APPLE !PHONES 12787 06/15/20 14:30:14 0:04 2566 1212 ims 12788 06/15/20 14:30:17 0:21 6360 6677 ims APPLE !PHONES 12789 06/15/20 14:30:18 0:22 6677 6096 ims APPLE !PHONES 12790 06/15/20 14:30:40 30:01 82656 65503 nxtgenpho APPLE !PHONES ne 12791 06/15/20 14:30:41 10:16 6673 5924 isms APPLE !PHONES 12792 06/15/20 14:40:57 2:07 3532 1340 isms APPLE !PHONES 12793 06/15/20 14:43:04 0:34 3376 1464 isms APPLE !PHONES 12794 06/15/20 14:43:38 31:25 10036 3176 ims APPLE !PHONES 12795 06/15/20 15:00:41 40:12 253101 604319 nxtgenpho APPLE !PHONES ne 12796 06/15/20 15:15:04 25:49 6673 5964 ims APPLE !PHONES 12797 06/15/20 15:40:52 7:05 139044 35440 nxtgenpho APPLE !PHONES ne 12798 06/15/20 15:40:53 7:05 35440 143679 nxtgenphe APPLE 'PHONES ne 12799 06/15/20 15:40:54 7:03 6227 6781 into APPLE !PHONES 12800 06/15/20 15:40:55 7:03 6673 5963 ins APPLE !PHONES 12801 06/15/20 15:47:58 21:01 52525 117594 nxtgenpho APPLE !PHONES no 12802 06/15/20 15:48:01 20:58 6675 5980 into APPLE !PHONES 12803 06/15/20 16:08:59 22:22 137050 148078 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 517 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171437 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343495 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:30:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ‘•-•1° AT&T OTC. Run Date: 06/17/2020 Run Tame: Data Usage For: ISM= Item Conn. Conn. Originating ET Bytes Bytes Apn IMMIX IMEI MAKE MODEL Date TIRO Number Up Dn (OTC) 12804 06/15/20 16:09:05 0:00 0 0 ims APPLE 'PHONES 12805 06/15/20 16:09:13 12:38 7085 5956 ims APPLE 'PHONES 12806 06/15/20 16:21:51 0:52 5536 1696 ims APPLE 'PHONES 12807 06/15/20 16:22:43 2:41 3376 1464 ims APPLE 'PHONES 12808 06/15/20 16:25:24 60:00 20268 9392 ims APPLE 'PHONES 12809 06/15/20 16:31:20 1:51 5169 6230 nxtgenpho APPLE 'PHONES ne 12810 06/15/20 16:31:21 1:51 6230 4881 nxtgenpho APPLE 'PHONES ne 12811 06/15/20 16:33:12 60:00 7950 6460 nxtgenpho APPLE 'PHONES ne 12812 06/15/20 17:25:24 60:00 8496 2928 ims APPLE 'PHONES 12813 06/15/20 17:33:12 60:00 11387 1675 nxtgenpho APPLE 'PHONES ne 12814 06/15/20 18:25:24 39:31 3424 1340 ims APPLE 'PHONES 12815 06/15/20 18:33:12 60:00 76302 177440 nxtgenpho APPLE 'PHONES ne 12816 06/15/20 19:04:54 45:11 11099 8572 ims APPLE 'PHONES 12817 06/15/20 19:04:55 45:10 11099 8484 ims APPLE 'PHONES 12818 06/15/20 19:33:12 60:00 63045 307869 nxtgonpho APPLE 'PHONES no 12819 06/15/20 19:50:05 3:08 3640 1432 ims APPLE 'PHONES 12820 06/15/20 19:53:13 2:51 2644 1428 ims APPLE 'PHONES 12821 06/15/20 19:53:13 2:51 2644 1340 ims APPLE 'PHONES 12822 06/15/20 19:56:04 60:00 10272 4004 ims APPLE 'PHONES 12823 06/15/20 20:33:12 28:26 31735 20682 nxtgenpho APPLE 'PHONES no 12824 06/15/20 20:56:04 60:00 10036 3300 ims APPLE 'PHONES 12825 06/15/20 21:01:38 2:03 5060 6228 nxtgenpho APPLE 'PHONES no 12826 06/15/20 21:01:39 2:03 6228 4772 nxtgonpho APPLE 'PHONES no 12827 06/15/20 21:03:42 60:00 16986 13506 nxtgonpho APPLE 'PHONES ne 12828 06/15/20 21:56:04 60:00 8620 3160 ims APPLE 'PHONES 12829 06/15/20 22:03:42 60:00 50958 11825 nxtgenpho APPLE 'PHONES ne 12830 06/15/20 22:56:04 60:00 6956 2896 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 518 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171438 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343496 MOBILITY e s, 111.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Tame: Data Usage For: Item Conn. Conn. Originating ST Bytes Bytes Apn ZIOLT INSI MAKE MODEL Date Time Number Up Dn (UTC) 12831 06/15/20 23:03:42 8:50 0 Onmtgonpho APPLE 'PHONES no 12832 06/15/20 23:12:31 2:38 5065 6282 nxtgonpho APPLE 'PHONES no 12833 06/15/20 23:12:32 2:39 6282 4777 nxtgenpho APPLE 'PHONES no 12834 06/15/20 23:15:10 1:02 280 581 nxtgenpho APPLE 'PHONES ne 12835 06/15/20 23:16:11 2:04 288 48 nxtgenpho APPLE 'PHONES ne 12836 06/15/20 23:16:13 2:03 48 Onmtgonpho APPLE 'PHONES ne 12837 06/15/20 23:18:16 60:00 16495 14181 nxtgenpho APPLE 'PHONES no 12838 06/15/20 23:56:04 60:00 17100 6124 ims APPLE 'PHONES 12839 06/16/20 00:18:16 25:51 42120 24512 nxtgenpho APPLE 'PHONES no 12840 06/16/20 00:44:07 60:00 28133 14670 nxtgenpho APPLE 'PHONES ne 12841 06/16/20 00:56:04 60:00 7064 2680 ims APPLE 'PHONES 12842 06/16/20 01:44:07 60:00 10042 7545 nxtgenpho APPLE 'PHONES ne 12843 06/16/20 01:56:04 60:00 10036 3068 ims APPLE 'PHONES 12844 06/16/20 02:44:07 60:00 3561 6127 nxtgonpho APPLE 'PHONES no 12845 06/16/20 02:56:04 47:12 8604 3052 ims APPLE 'PHONES 12846 06/16/20 03:44:07 60:00 924 840 nxtgonpho APPLE 'PHONES no 12847 06/16/20 03:48:35 60:00 11908 7693 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 519 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $ONY_GM_00171439 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343497 MOBILITY .111020 11 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm S4 1 AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/17/2020 Run Time: SIG Usage For: Item Conn. Conn. Originating Terminating ffi I LEI Dose 100 Type Feature Date Time Maher No bs (UTC) 1 03/10/20 16:52:03 SMST 2 03/12/20 12:39:52 SMST 3 03/12/20 12:40:46 SMSO 4 03/12/20 12:41:34 SMST 5 03/12/20 12:41:56 SMSO 6 03/12/20 12:44:28 SMST 7 03/12/20 18:15:16 SMST Wi-ri 8 03/14/20 15:41:47 SMST Wi-ri 9 03/14/20 20:17:27 SMSO Ni-ri 10 03/14/20 20:18:17 SMSO Ni-ri 11 03/14/20 22:40:00 SMST 12 03/14/20 22:40:04 SMST 13 03/14/20 23:58:23 SMST 14 03/14/20 23:59:49 SMST 15 03/15/20 00:01:14 MST 16 03/15/20 00:02:40 SHST 17 03/15/20 00:05:03 SMST 18 03/15/20 00:07:02 SMST 19 03/18/20 11:53:14 SMSO 20 03/25/20 18:30:28 SMST Ni-ri 21 04/16/20 22:16:33 SMST 22 04/21/20 03:12:24 SMST 23 04/21/20 03:12:29 SMST 24 04/21/20 03:17:59 SMST 25 04/21/20 03:19:42 SMST 26 04/21/20 03:19:42 SMST 27 05/05/20 22:15:25 SMSO WI-ti 28 05/06/20 09:12:43 SMST WI-ti 29 05/09/20 17:20:58 SMST WI-ti 30 05/14/20 09:08:02 SMST AT&T Proprietary Page 1 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00171440 EFTA01343498 MOBILITY 0 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in t1/44 AT&T UTC. Run Date: Run Time: 0""n02. SIG Usage For: Item Conn. Conn. Originating Terminating DMZ Dere tea Type Feature Date Time Mintier Member (UTC) 31 05/14/20 09:08:04 SMST Wi-Ti 32 05/14/20 09:08:06 SMST Wi-Ti 33 05/15/20 06:20:40 SMSO 34 06/08/20 15:49:48 SMST Wi-Ti 35 06/15/20 17:15:46 MOO Wi-Ti 36 06/15/20 17:16:39 SNST Ni-Ti AT&T Proprietary Page 2 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00171441 EFTA01343499