EFTA01251208

MOBILITY 41111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm tr `a. a as i AT&T AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in arc. Run Date: 06/17/2020 Run Time: Voice Usage For: Item Conn. Conn. Seizure ET Originating Terminating IMEI CT Feature Date Time Time Number Number (OTC) 1 03/01/20 19:58:27 0:09 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE IPHONE8 2 03/02/20 16:34:38 0:03 0:00 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 3 03/02/20 16:35:15 0:10 0:00 MT (1 4 03/02/20 16:35:19 0:24 0:00 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 S 03/02/20 16:36:05 0:06 0:00 MT (NIOR) 6 03/02/20 16:36:05 0:07 0:00 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 7 03/02/20 16:36:53 0:09 0:47 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 8 03/02/20 16:43:46 0:09 0:04 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE IPHONE8 9 03/02/20 16:44:06 0:06 2:06 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 10 03/03/20 21:36:01 0:07 30:41 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 11 03/04/20 18:52:26 0:08 1:40 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE IPHONE8 12 03/04/20 19:46:37 0:20 0:05 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 13 03/04/20 22:07:25 0:05 47:57 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 14 03/04/20 23:04:25 0:03 0:39 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 15 03/05/20 00:56:24 0:33 0:00 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 AT&T Proprietary Page 1 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002608 CONFIDENTIAL EFTA_00116684 EFTA01251208 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in tr '`si a s AT&T OTC. Run Date: 06/17/2020 Run Time: 18:55:22 Voice usage For: Item Conn. Conn. Seizure ET Originating Terminating IMEI INS/ CT Feature Date Time Time Thaber Number (OTC) 16 03/05/20 00:58:14 0:07 0:26 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE IPHONE8 17 03/05/20 13:22:45 0:11 1:13 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 18 03/05/20 14:04:59 0:20 0:00 3587080982063725 310410214827503 MT (MOP) APPLE IPHONE8 19 03/05/20 15:49:47 0:29 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE IPHONE8 20 03/05/20 15:49:48 0:30 0:01 3587080982063725 310410214827503 MT (Wi- APPLE Fi:NIOP:CFMA:VM) IPHONE8 21 03/05/20 15:50:04 0:08 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE IPHONE8 22 03/05/20 17:14:12 0:02 0:34 3587080982063725 310410214827503 1.0 (Wi-Fi:NIOR) APPLE IPHONE8 23 03/05/20 17:15:32 0:07 0:00 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 24 03/05/20 18:27:34 0:19 0:05 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 25 03/05/20 18:29:16 0:20 0:04 3587080982063725 310410214827503 MO (Wi-Fi) APPLE IPHONE8 26 03/05/20 18:42:42 0:20 0:03 3587080982063725 310410214827503 MO (Ni-Fi) APPLE IPHONE8 27 03/05/20 20:38:46 0:10 9:04 3587080982063725 310410214827503 MO (VCORR) APPLE IPHONE8 28 03/05/20 20:51:35 0:05 0:00 3587080982063725 310410214827503 MO () APPLE IPRONE8 29 03/06/20 15:08:17 0:04 1:07 3587080982063725 310410214827503 NO (Wi-Fi:NIOR) APPLE IPHONE8 AT&T Proprietary Page 2 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002609 CONFIDENTIAL EFTA_00116685 EFTA01251209 MOBILITY 41111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Voice Usage For: MiiiIIIII Item Conn. Conn. Seizure ET Originating Terminating IMZI INS/ CT Feature Date Time Time Mater Number (UTC) 30 03/06/20 20:02:56 0:20 0:05 3587080982063725 310410214827503 MO (14i-Fi) APPLE !PHONES 31 03/06/20 20:51:24 0:03 0:58 3587080982063725 310410214827503 MO (Mi-Ti:NIOA) APPLE 'PHONES 32 03/06/20 21:03:38 0:14 0:00 3587080982063725 310410214827503 MT (Mi-Ti:NIOP) APPLE !PHONES 33 03/06/20 21:04:01 0:08 0:00 3587080982063725 310410214827503 MT (Mi-Ti:NIOP) APPLE !PHONES 34 03/06/20 21:04:33 0:03 0:16 3587080982063725 310410214827503 MO (Mi-Ti:NIOA) APPLE !PHONES 35 03/06/20 21:09:32 0:03 0:51 3587080982063725 310410214827503 MO (Mi-Ti:NIOA) APPLE !PHONES 36 03/06/20 21:32:36 0:03 1:11 3587080982063725 310410214827503 MO (Mi-Ti:NIOA) APPLE !PHONES 37 03/07/20 00:02:25 0:13 0:00 310410214827503 MT (1 38 03/07/20 00:02:25 0:24 0:00 ST 11410P) APPLE !PHONES 39 03/07/20 00:02:26 0:25 0:05 ST (1410P:CFNA:VM) APPLE !PHONES 40 03/07/20 16:17:45 0:15 0:00 ST 11410P) APPLE !PHONES 41 03/07/20 18:21:38 0:05 0:08 MT (NITR:INIOR) 42 03/07/20 18:21:40 0:25 0:04 3587080982063725 310410214827503 MO (Mi-Fi:NIOR) APPLE !PHONES 43 03/07/20 18:39:48 0:06 0:00 3587080982063725 310410214827503 MT (Mi-Ti:NIOP) APPLE !PHONES 44 03/08/20 00:01:01 0:22 0:00 3587080982063725 310410214827503 MT (Mi-Ti:NIOP) APPLE !PHONES AT&T Proprietary Page 3 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002610 CONFIDENTIAL EFTA_00116686 EFTA01251210 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Data: 06/17/2020 Run Tuna: 18:33:22 Voice Osage For: Item Conn. Conn. Seizure FM Originating Terminating IMEI CT Feature Date Time Time Number Number (UTC) 45 03/08/20 18:09:41 0:11 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 46 03/08/20 18:23:28 0:13 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 47 03/09/20 00:45:20 0:27 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 48 03/09/20 00:45:22 0:29 0:01 3587080982063725 310410214827503 MT (Wi- APPLE Fl:NIOP:CFNA:VM) 'PHONES 49 03/09/20 01:30:41 0:17 18:35 MT (NIOR:VCORR) SO 03/09/20 01:30:41 0:18 18:35 3587080982063725 310410214827503 NO (Wi-Fi:NIOR) APPLE 'PHONES Si 03/09/20 14:52:35 0:17 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES S2 03/09/20 15:46:24 0:07 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOR) APPLE 'PHONES S3 03/09/20 18:49:59 0:04 0:00 3587080982063725 310410214827503 NO (Wi-Fi:NIOR) APPLE 'PHONES 54 03/10/20 17:41:33 0:14 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 55 03/10/20 17:43:58 0:23 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOR) APPLE 'PHONES S6 03/10/20 17:44:00 0:25 0:58 3587080982063725 310410214827503 MT (Wi- APPLE Fi:NIOR:CFNA:VM) 'PHONES S7 03/10/20 18:36:22 0:13 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOR) APPLE 'PHONES S8 03/10/20 23:20:53 0:01 0:00 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE 'PHONES S9 03/10/20 23:20:57 0:02 0:00 3587080982063725 310410214827503 NO (Wi-Fi:NIOR) APPLE 'PHONES AT&T Proprietary Page 4 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002611 CONFIDENTIAL EFTA_00116687 EFTA01251211 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in c`tsgs AT&T OTC. Run Date: 06/17/2020 Run Time: Voice Usage For: MI= Item Conn. Conn. Seizure ST Originating Terminating IMEI INS/ CT Feature Date Time Time Hunter Number (UTC) 60 03/11/20 20:57:26 0:20 0:04 3587080982063725 310410214827503 MO (Mi-Fi:NIOR) APPLE 'PHONES 61 03/11/20 21:36:41 0:20 0:04 3587080982063725 310410214827503 NO (Mi-Fi:NIOR) APPLE 'PHONES 62 03/11/20 21:48:29 0:20 0:05 3587080982063725 310410214827503 NO (Mi-Fi) APPLE IPHONE8 63 03/11/20 21:56:49 0:21 0:04 3587080982063725 310410214827503 MO (Mi-Fi) APPLE IPHONE8 64 03/12/20 00:33:30 0:02 0:00 3587080982063725 310410214827503 MT (NIOP) APPLE IPHONE8 65 03/12/20 16:00:34 0:08 7:20 3587080982063725 310410214827503 MO (Mi-Fi) APPLE IPHONE8 66 03/12/20 18:12:35 0:20 0:03 3587080982063725 310410214827503 MO (Mi-Fi) APPLE IPHONE8 67 03/12/20 19:34:27 0:06 1:09 3587080982063725 310410214827503 MO (Mi-Fi) APPLE IPHONE8 68 03/12/20 19:39:16 0:12 0:00 3587080982063725 310410214827503 MO (Mi-Fi) APPLE IPHONE8 69 03/12/20 19:49:52 0:20 0:03 3587080982063725 310410214827503 MO (Mi-Fi) APPLE IPHONE8 70 03/13/20 16:33:25 0:21 0:04 3587080982063725 310410214827503 MO (Mi-Fi) APPLE IPHONE8 71 03/13/20 17:59:47 0:20 0:03 3587080982063725 310410214827503 MO (Mi-Fi) APPLE IPHONE8 72 03/14/20 15:39:45 0:28 0:00 3587080982063725 310410214827503 MT (Mi-Fi:NIOP) APPLE IPHONE8 73 03/14/20 15:39:45 0:28 0:00 3587080982063725 310410214827503 MT (Mi- APPLE Fi:NIOP:CFNA:VM) IPHONE8 AT&T Proprietary Page 5 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002612 CONFIDENTIAL EFTA_00116688 EFTA01251212 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in tr_Ii`" 1. AT&T OTC. Run Date: 06/17/2020 Run Time: Voice Osage For: Item Conn. Conn. Seizure ET Originating Terminating IMNI DUI CT Feature Date T1mo Time Mater Number (OTC) 74 03/14/20 20:56:04 0:03 0:02 3587080982063725 310410214827503 100 (Wi-Fi) APPLE IPHONE8 75 03/14/20 20:56:10 0:02 0:03 3587080982063725 310410214827503 WO (Wi-Fi) APPLE IPHONE8 76 03/14/20 20:56:19 0:05 0:03 3587080982063725 310410214827503 WO (Wi-Fi) APPLE IPHONE8 77 03/14/20 20:56:42 0:02 0:03 3587080982063725 310410214827503 WO (Wi-Fi) APPLE IPHONE8 78 03/14/20 22:49:35 0:19 0:00 3587080982063725 310410214827503 MT (1410P) APPLE IPHONE8 79 03/14/20 22:49:36 0:20 0:04 3587080982063725 310410214827503 MT (NIOP:CFNR:VN) APPLE IPHONE8 80 03/14/20 23:33:17 0:14 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE IPHONE8 81 03/15/20 00:44:05 0:02 0:00 3587080982063726 310410214827503 MT (1410P) APPLE IPHONE8 82 03/15/20 00:44:23 0:11 0:00 3587080982063726 310410214827503 MT (1410P) APPLE IPHONE8 83 03/15/20 00:44:23 0:11 0:09 3587080982063726 310410214827503 MT (1410P:CFNR:VM) APPLE IPHONE8 84 03/15/20 15:46:15 0:18 0:00 3587080982063726 310410214827503 MT (Wi-Fi:NIOR) APPLE IPHONE8 85 03/16/20 00:36:19 0:14 0:00 310410214827503 MT (1 86 03/16/20 00:36:19 0:25 0:00 ST (NIOR) APPLE IPHONE8 87 03/16/20 00:36:21 0:27 0:07 ST (NIOR:CFNA:VN) APPLE IPHONE8 88 03/19/20 16:30:35 0:39 0:00 3587080982063726 310410214827503 MO (Wi-Fi) APPLE IPHONE8 AT&T Proprietary Page 6 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002613 CONFIDENTIAL EFTA_001(6689 EFTA01251213 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Voice Osage For: Item Conn. Conn. Seizure ET Originating Terminating INS1 HISS CT Feature Date Time Time Number Number (UTC) • 89 03/19/20 19:26:50 0:18 0:00 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE8 90 03/23/20 03:56:33 0:14 0:00 310410214827503 MT (1 91 03/23/20 03:56:33 0:25 0:00 ST (1410P) APPLE IPHONE8 92 03/23/20 03:56:35 0:27 0:03 ST (NIOP:CFNA:VH) APPLE IPHONE8 93 03/23/20 04:01:36 0:26 0:00 3587080982063726 310410214827503 MT APPLE IPHONE8 94 03/24/20 00:20:32 0:24 0:00 MT (Ni-Fi:NIOP) 95 03/24/20 00:20:32 0:24 0:00 MT (Ni-Fi:NIOP) 96 03/24/20 00:20:38 0:30 0:05 MT Fi:N1OP:CFNA:VM) 97 03/24/20 00:20:38 0:30 0:05 3587080982063726 310410214827503 NO (Nit) APPLE IPHONE8 98 03/24/20 23:44:26 0:06 0:06 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE8 99 03/24/20 23:45:05 0:22 0:00 MT (Ni-ri:NIOP) 100 03/24/20 23:45:05 0:22 0:00 MT (NIOP:01041 101 03/24/20 23:45:12 0:29 0:04 MT (NIOP:CFNA:CMN:V141 102 03/24/20 23:45:12 0:29 0:04 3587080982063726 310410214827503 MO (Nit) APPLE 'PHONES 103 03/26/20 23:55:56 0:20 0:00 3587080982063726 310410214827503 MT APPLE 'PHONES 104 03/27/20 02:21:32 0:13 0:00 3587080982063726 310410214827503 MT APPLE 'PHONES 105 03/27/20 14:05:36 0:06 0:00 NT [1410P) 106 03/27/20 14:05:42 0:13 0:00 ST [1410P) 107 03/27/20 14:05:42 0:14 0:00 3587080982063726 310410214827503 NO [Nit) APPLE 'PHONES AT&T Proprietary Page 7 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002614 CONFIDENTIAL EFTA_0011 16690 EFTA01251214 MOBILITY 411111i 2996479 06/17/2020 AT&T hes queried for records from 03/01/2020 12:00:00em to 06/15/2020 11:59:59pm %---is`—‘ AT&T AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in OTC. Run Date: 06/17/2020 Run Time: 1 ' '22 • Voice Usage For: Item Conn. Conn. Seizure ST Originating Terminating INSI INS/ CT Feature Date Time Time Number Number (OTC) 108 03/27/20 20:17:37 0:05 0:00 3587080982063726 310410214827503 MT (Mi-Ti:NIOP) APPLE 'PHONES 109 03/27/20 20:52:41 0:11 0:00 3587080982063726 310410214827503 MT (Mi-Ti:NIOP) APPLE 'PHONES 110 03/30/20 23:55:43 0:21 0:00 3587080982063726 310410214827503 MT (Mi-Ti:NIOP) APPLE 'PHONES 111 03/31/20 17:28:06 0:01 0:00 3587080982063726 310410214827503 MO (Mi-Pi) APPLE 'PHONES 112 03/31/20 17:28:18 0:07 4:39 3587080982063726 310410214827503 MO (Mi-Pi) APPLE 'PRONGS 113 04/01/20 16:49:44 0:12 0:00 MT 114 04/01/20 16:49:44 0:12 0:00 MT 115 04/01/20 16:49:48 0:16 0:03 MT pli-Pi:MIOP:CPB:V241 116 04/01/20 16:49:48 0:16 0:03 3587080982063726 310410214827503 MO (Mi-Pi) APPLE IPHONZ8 117 04/01/20 16:50:01 0:04 44:44 3587080982063726 310410214827503 MT (Mi-Ti:NIOP) APPLE 'PHONES 118 04/01/20 16:50:01 0:04 14:01 NO (Mi-Pi) 119 04/01/20 17:04:02 0:00 0:12 NO (1 120 04/01/20 17:04:14 0:00 12:58 NO (Mi-Pi) 121 04/01/20 17:17:12 0:00 0:12 NO (1 122 04/01/20 17:17:24 0:00 0:15 NO (Mi-Pi) 123 04/01/20 17:17:39 0:00 0:11 MO (1 124 04/01/20 17:17:50 0:00 3:32 MO (Mi-Pi) 125 04/01/20 17:21:22 0:00 0:12 NO (1 126 04/01/20 17:21:34 0:00 5:33 NO (Mi-Pi) 127 04/01/20 17:27:07 0:00 0:11 NO (1 128 04/01/20 17:27:18 0:00 2:26 MO (Mi-Pi) 129 04/01/20 17:29:44 0:00 0:11 MO (1 130 04/01/20 17:29:55 0:00 0:21 NO (Mi-Pi) 131 04/01/20 17:30:16 0:00 0:11 NO (1 132 04/01/20 17:30:27 0:00 4:18 MO (Mi-Pi) AT&T Proprietary Page 8 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002615 CONFIDENTIAL EF-EA_00116691 EFTA01251215 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in %---- `— ', ‘0 AT&T tee OTC. Run Data: 06/17/2020 Run Time: 18:S3:22 Voice Moog° For: Item Conn. Conn. Seizure ET Originating Terminating INZI INSI CT Feature Date Time Time Number Number (UTC) 133 04/01/20 21:54:18 0:21 0:00 MT (Wi-Fi:NIOP) 134 04/01/20 21:54:18 0:21 0:00 MT (Wi-Fi:NIOP) 135 04/01/20 21:54:22 0:25 0:02 MT (Wi- Fi:NIOP:CFNA:VM) 136 04/01/20 21:54:22 0:25 0:02 3587080982063726 310410214827503 MO (Wi-Fi) APPLE IPRONE8 137 04/01/20 22:49:44 0:10 4:27 MO (111.-Fi) 138 04/01/20 22:49:44 0:10 61:40 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE IPRONE8 139 04/01/20 22:54:11 0:00 0:11 MO (1 140 04/01/20 22:54:22 0:00 13:02 MO (Wi-Fi) 141 04/01/20 23:07:24 0:00 0:09 NO (1 142 04/01/20 23:07:33 0:00 13:50 NO (Wi-Fi) 143 04/01/20 23:21:23 0:00 0:10 NO (1 144 04/01/20 23:21:33 0:00 2:28 NO (Wi-Fi) 145 04/01/20 23:24:01 0:00 0:12 NO (1 146 04/01/20 23:24:13 0:00 13:03 NO (Wi-Fi) 147 04/01/20 23:37:16 0:00 0:21 NO (1 148 04/01/20 23:37:37 0:00 6:17 NO (Wi-Fi) 149 04/01/20 23:43:54 0:00 0:12 NO (1 150 04/01/20 23:44:06 0:00 0:53 NO (Wi-Fi) 151 04/01/20 23:44:59 0:00 6:25 MO (VCORR) 152 04/03/20 14:24:29 0:15 0:00 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 153 04/03/20 20:07:32 0:03 0:27 3587080982063726 310410214827503 MO (Wi-Fi) APPLE 'PHONES 154 04/03/20 20:08:13 0:04 0:57 3587080982063726 310410214827503 NO (111.-Fi) APPLE IPHONE8 155 04/06/20 21:07:53 0:02 0:00 MT (Wi-Fi:NIOP) 156 04/06/20 21:08:13 0:22 0:00 MT (Wi-Fi:NIOP) 157 04/06/20 21:08:17 0:26 0:01 MT (Wi- Fi:NIOP:CFNA:VM) 158 04/06/20 21:08:17 0:26 0:01 3587080982063726 310410214827503 NO (Wi-Fi) APPLE IPHONE8 AT&T Proprietary Page 9 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002616 CONFIDENTIAL EFTA_00ll6692 EFTA01251216 MOBILITY 411., 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in %---- `-‘0 AT&T OTC. Run Date: 06/17/2020 Run Time: 18:65:22 Voice Usage For: Item Conn. Conn. Seizure 2T Originating Terminating ICI 1145I CT Feature Date Time Time Thaber Number (UTC) 159 04/06/20 21:08:54 0:09 5:49 NO (Ni-Fi) 160 04/06/20 21:08:54 0:09 5:49 3587080982063726 310410214827503 MT (Ni-Fi:NIOP) APPLE 'PHONES 161 04/06/20 21:15:03 0:03 12:03 NO 162 04/06/20 21:15:03 0:03 12:03 3587080982063726 310410214827503 NT (MOP) APPLE 'PHONES 163 04/06/20 22:56:05 0:01 0:00 3587080982063726 310410214827503 NO APPLE 'PHONES 164 04/06/20 22:57:06 0:21 0:00 MT (Ni-Fi:NIOP) 165 04/06/20 22:57:06 0:21 0:00 MT (Ni-Fi:NIOP) 166 04/06/20 22:57:10 0:25 0:02 MT (Ni- Fi.:NIOP:CFNA:V14) 167 04/06/20 22:57:10 0:26 0:02 3587080982063726 310410214827503 NO (Ni-Pi) APPLE 'PHONES 168 04/06/20 22:58:08 0:39 0:00 3587080982063726 310410214827503 NO (Ni-Pi) APPLE 'PHONES 169 04/06/20 23:18:27 0:23 0:00 MT (Ni-Fi:NIOP) 170 04/06/20 23:18:27 0:23 0:00 MT (Ni-Fi:NIOP) 171 04/06/20 23:18:31 0:27 0:04 MT - Fi.:NIOP:CFNA:V14) 172 04/06/20 23:18:31 0:28 0:04 3587080982063726 310410214827503 NO (Ni-Fi) APPLE 'PHONES 173 04/06/20 23:28:26 0:22 0:00 MT (Ni-Fi:NIOP) 174 04/06/20 23:28:26 0:22 0:00 MT (Ni-Fi:NIOP) 175 04/06/20 23:28:29 0:25 0:01 MT (Ni- Fi.:NIOP:CFNA:V14) 176 04/06/20 23:28:29 0:25 0:01 3587080982063726 310410214827503 NO (Ni-Pi) APPLE 'PHONES 177 04/07/20 00:15:42 0:23 0:00 3587080982063726 310410214827503 NT (Ni-Fi:NIOP) APPLE 'PHONES 178 04/07/20 00:15:44 0:25 0:07 3587080982063726 310410214827503 MT (Ni- APPLE Fi.:NIOP:CFNA:VM) 'PHONES 179 04/07/20 00:15:44 0:26 0:07 NO AT&T Proprietary Page 10 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002617 CONFIDENTIAL EFTA_00116693 EFTA01251217 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in tr ‘ini. assi i AT&T OTC. Run Data: 06/17/2020 Run Time: 16:66:22 Voice Moat:. For: Item Conn. Conn. Seizure RT Originating Terminating IIOII DUI CT Feature Date Time Time Number Number (OTC) 180 04/07/20 00:31:15 0:14 0:00 MT (141-Fi:NIOP) 181 04/07/20 00:31:15 0:14 18:52 MT (141-Fi:NIOP) 182 04/07/20 00:31:15 0:14 18:52 3587080982063726 310410214827503 MO (Ni-Fi) APPLE IPHONE8 183 04/07/20 14:35:18 0:07 48:52 3587080982063726 310410214827503 MO (1 APPLE IPHONE8 184 04/07/20 17:03:18 0:22 0:00 MT (141-Fi:NIOP) 185 04/07/20 17:03:18 0:22 0:00 MT (Ni-Fi:NIOP) 186 04/07/20 17:03:23 0:27 0:02 MT (Ni- Fi.:NIOP:CFMA:VM) 187 04/07/20 17:03:23 0:28 0:02 3587080982063726 310410214827503 MO (Ni-Fi) APPLE IPHONE8 188 04/07/20 21:49:43 0:04 0:00 3587080982063726 310410214827503 MT (1410P) APPLE IPHONE8 189 04/07/20 22:24:55 0:22 0:00 MT (141-Fi:NIOP) 190 04/07/20 22:24:55 0:22 0:00 MT (141-Fi:NIOP) 191 04/07/20 22:25:00 0:27 0:06 MT (141- Fi.:NIOP:CFNA:VM) 192 04/07/20 22:25:00 0:27 0:06 3587080982063726 310410214827503 MO (Ni-Fi) APPLE IPHONE8 193 04/08/20 19:59:50 0:03 18:27 3587080982063726 310410214827503 MO (Ni-Fi) APPLE IPHONE8 194 04/09/20 14:31:59 0:19 7:35 3587080982063726 310410214827503 MO (1 APPLE IPHONE8 195 04/09/20 19:29:43 0:16 0:00 MT (141-Fi:NIOP) 196 04/09/20 19:29:43 0:16 0:00 MT (141-Fi:NIOP) 197 04/09/20 19:29:43 0:16 0:00 3587080982063726 310410214827503 MO (1 APPLE IPHONE8 198 04/09/20 19:30:14 0:22 0:00 3587080982063726 310410214827503 MT (1410P) APPLE IPHONE8 199 04/09/20 19:30:16 0:24 0:10 MO (Ni-Fi) AT&T Proprietary Page 11 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002618 CONFIDENTIAL EFTA_001(6694 EFTA01251218 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in AT&T USG. Run Date: 06/17/2020 Run Time: Voice Usage For: Item Conn. Conn. Seizure ET Originating Terminating INEI THAI CT Feature Date Time Time Number Number (OTC) 200 04/09/20 19:30:16 0:24 0:10 3587080982063726 310410214827503 NT (NIOP:CFNA:VN) APPLE IPHONEB 201 04/09/20 19:37:50 0:23 0:00 MT (Wi-Fi:NIOP) 202 04/09/20 19:37:50 0:23 0:00 MT (Wi-Fi:NIOP) 203 04/09/20 19:37:51 0:24 0:02 MT (Wi- Pi:NIOP:CFNA:VN) 204 04/09/20 19:37:51 0:25 0:02 3587080982063726 310410214827503 MO (1 APPLE 'PHONES 205 04/09/20 19:48:23 0:01 0:00 MT (Wi-Fi:NIOP) 206 04/09/20 19:48:23 0:01 0:00 MT (NIOP) 207 04/09/20 19:48:23 0:02 0:00 3587080982063726 310410214827503 MO (1 APPLE IPHONZ8 208 04/09/20 20:39:36 0:22 0:00 MT (NIOP) 209 04/09/20 20:39:38 0:24 0:02 3587080982063726 310410214827503 MO (1 APPLE IPHONZ8 210 04/09/20 20:39:38 0:24 0:02 MT (NIOP:CFNA:VN) 211 04/09/20 21:03:46 0:10 22:09 MT (NIOP:VCORR) 212 04/09/20 21:03:46 0:11 22:09 3587080982063726 310410214827503 HO (1 APPLE IPHONZ8 213 04/09/20 21:29:49 0:05 27:57 3587080982063726 310410214827503 HO (1 APPLE IPHONZ8 214 04/09/20 22:33:59 0:06 13:20 3587080982063726 310410214827503 HO (NIOR) APPLE IN/ONES 215 04/09/20 22:49:27 0:04 4:06 3587080982063726 310410214827503 HO (1 APPLE IPHONZ8 216 04/09/20 23:32:11 0:05 0:29 3587080982063726 310410214827503 MT (NIOP:VCORR) APPLE IPHONZ8 217 04/09/20 23:32:11 0:06 0:05 MO (Ni-Pi) 218 04/09/20 23:32:16 0:00 0:13 MO (1 219 04/09/20 23:32:29 0:00 0:11 MO (Ni-Pi) 220 04/09/20 23:33:32 0:04 0:00 (14i-Ti:NIOP) AT&T Proprietary Page 12 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002619 CONFIDENTIAL EFTA_001(6695 EFTA01251219 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Tune: Voice Usage For: Item Conn. Conn. Seizure ET Originating Terminating LEI INS/ CT Feature Date Time Time Number Number (OTC) 221 04/09/20 23:33:32 0:04 0:21 MT (Wi-Fi:NIOP) 222 04/09/20 23:33:32 0:04 0:21 3587080982063726 310410214827503 MO (VCORR) APPLE 'PHONES 223 04/09/20 23:33:53 0:00 0:00 MT (NIOP:VCORR) 224 04/10/20 00:24:44 0:13 1:54 MO (Ni-Fi) 225 04/10/20 00:24:44 0:13 1:54 3587080982063726 310410214827503 MT (NIOP) APPLE 'PHONES 226 04/10/20 18:26:36 0:27 0:00 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 227 04/10/20 18:26:38 0:29 0:14 3587080982063726 310410214827503 MT (Wi- APPLE Fi:NIOP:CFNA:VM) 'PHONES 228 04/13/20 15:24:09 0:12 0:00 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 229 04/15/20 21:58:10 0:08 0:00 3587080982063726 310410214827503 MT (NIOP) APPLE 'PHONES 230 04/15/20 22:54:21 0:21 0:00 MT (Wi-Fi:NIOP) 231 04/15/20 22:54:21 0:21 0:00 MT (NIOP:CMW) 232 04/15/20 22:54:25 0:25 0:03 MT (NIOP:CFNA:CNN:VM) 233 04/15/20 22:54:25 0:25 0:03 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 234 04/15/20 23:06:43 0:10 25:16 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 235 04/15/20 23:06:43 0:10 3:54 MO () 236 04/15/20 23:10:37 0:00 13:18 MO (Ni-Fi) 237 04/15/20 23:23:55 0:00 1:52 MD () 238 04/15/20 23:25:47 0:00 6:12 MO (Ni-Fi) 239 04/16/20 22:15:29 0:22 0:00 3587080982063726 310410214827503 MT (1410P) APPLE 'PHONES 240 04/16/20 22:15:30 0:23 1:02 3587080982063726 310410214827503 MT (1410P:CFNA:VM) APPLE 'PHONES AT&T Proprietary Page 13 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002620 CONFIDENTIAL EFTA_001(6696 EFTA01251220 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm icts s a`s . AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: 06/17/2020 Run Time: 18:55:23 Voice Osage For: Item Conn. Conn. Seizure ET Originating Terminating INSI CT Feature Date Time Time Number Number (OTC) 241 04/16/20 22:30:40 0:01 0:00 3587080982063726 310410214827503 Kt (NIOP) APPLE 'PHONES 242 04/17/20 00:28:51 0:07 0:04 3587080982063726 310410214827503 NO (Nit) APPLE 'PHONES 243 04/17/20 01:54:30 0:14 41:46 MT (NIOP:VCORR) 244 04/17/20 01:54:30 0:15 41:46 3587080982063726 310410214827503 NO (Nit) APPLE 'PHONES 245 04/17/20 15:23:40 0:06 0:00 3587080982063726 310410214827503 NT (NIOP) APPLE 'PHONES 246 04/17/20 21:16:10 0:07 0:00 3587080982063726 310410214827503 MT APPLE 'PHONES 247 04/21/20 00:50:15 0:15 0:00 MT (NIOP:CMW) 248 04/21/20 00:50:15 0:16 0:00 3587080982063726 310410214827503 MO (Nit) APPLE 'PHONES 249 04/21/20 00:50:39 0:21 0:00 MT (NIOP:CMW) 250 04/21/20 00:50:42 0:24 0:32 MT (NIOP:CFNA:CMW:VM) 251 04/21/20 00:50:42 0:24 0:32 3587080982063726 310410214827503 MO (1 APPLE 'PHONES 252 04/21/20 00:53:30 0:11 0:00 3587080982063726 310410214827503 MT (NIOP) APPLE 'PHONES 253 04/21/20 00:53:31 0:12 0:09 MO (VCORR) 254 04/21/20 00:53:31 0:12 0:09 3587080982063726 310410214827503 MT (NIOP:CFNR:VM) APPLE 'PHONES 255 04/21/20 03:11:37 0:11 0:00 3587080982063726 310410214827503 MT (NIOP) APPLE 'PHONES 256 04/21/20 03:11:38 0:12 0:30 3587080982063726 310410214827503 MT (NIOP:CFNR:VN) APPLE 'PHONES 257 04/22/20 20:59:27 0:17 0:00 3587080982063726 310410214827503 MT (NIOP) APPLE 'PHONES AT&T Proprietary Page 14 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002621 CONFIDENTIAL EFTA_001(6697 EFTA01251221 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in •-tae "- .. "° AT&T UTC. Run Date: 06/17/2020 Run Time: Voice Usage For: Item Conn. Conn. Seizure ET Originating Terminating INEI 1145I CT Feature Date Time Time Number Number (UTC) 258 04/22/20 21:49:51 0:28 0:02 3587080982063726 310410214827503 MO (VCORR) APPLE 'PHONES 259 04/22/20 21:51:33 0:06 0:05 3587080982063726 310410214827503 MO (VCORR) APPLE 'PHONES 260 04/25/20 14:13:47 0:00 0:00 3587080982063726 310410214827503 MO (1 APPLE 'PHONES 261 04/25/20 14:14:08 0:01 0:14 3587080982063726 310410214827503 MO (NIOR:VN) APPLE 'PHONES 262 04/28/20 19:16:39 0:21 0:00 MT (Mi-Fi:NIOR) 263 04/28/20 19:16:39 0:21 0:00 MT (Mi-Fi:NIOR) 264 04/28/20 19:16:43 0:25 0:02 MT (Mi- Fi:NIOR:CFNA:VM) 265 04/28/20 19:16:43 0:25 0:02 3587080982063726 310410214827503 NO (Mi-Fi:NIOR) APPLE 'PHONES 266 04/28/20 19:44:14 0:03 45:03 3587080982063726 310410214827503 NO (Mi-Fi:NIOR) APPLE 'PHONES 267 04/28/20 21:03:10 0:17 36:49 3587080982063726 310410214827503 MO (Mi-Fi:NIOR) APPLE 'PHONES 268 04/28/20 23:39:52 0:24 0:00 ML (NIOR) 269 04/28/20 23:40:00 0:32 0:35 ML (NIOR:CFNA:VN) 270 04/28/20 23:40:00 0:32 0:35 3587080982063726 310410214827503 MO (Mi-Fi:NIOR) APPLE 'PHONES 271 04/28/20 23:45:33 0:22 0:00 MT (Mi-Fi:NIOR) 272 04/28/20 23:45:33 0:22 0:00 MT (Mi-Fi:NIOR) 273 04/28/20 23:45:37 0:26 0:03 MT (Mi- Fi:NIOR:CFNA:VM) 274 04/28/20 23:45:38 0:27 0:02 3587080982063726 310410214827503 MO (Mi-Fi:NIOR) APPLE 'PHONES 275 04/29/20 00:07:11 0:22 0:00 MT (Mi-Fi:NIOR) 276 04/29/20 00:07:11 0:22 0:00 MT (Mi-Fi:NIOR) 277 04/29/20 00:07:15 0:26 0:02 MT (Mi- Fi:NIOR:CFMA:VM) AT&T Proprietary Page 15 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002622 CONFIDENTIAL EFTA_001(6698 EFTA01251222 MOBILITY 410. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ••=1$ `.. -'s AT&T OTC. Run Date: 06/17/2020 Run Time: 18:53:23 Voice Usage For: Item Conn. Conn. Seizure ET Originating Terminating IMEI 1145I CT Feature Date Time Time Number Number (OTC) 278 04/29/20 00:07:15 0:26 0:02 3587080982063726 310410214827503 MO (Mi-Fi:NIOR) APPLE 'PHONES 279 04/29/20 16:53:22 0:05 0:00 MT (Mi-Fi:NIOR) 280 04/29/20 16:53:22 0:05 0:00 MT (Mi-Fi:NIOR) 281 04/29/20 16:53:22 0:05 0:00 3587080982063726 310410214827503 MO (Mi-Fi:NIOR) APPLE 'PHONES 282 04/29/20 16:54:04 0:21 0:00 (14i-Fi:NIOP) 283 04/29/20 16:54:04 0:21 0:00 MT (Mi-Fi:NIOP) 284 04/29/20 16:54:08 0:25 0:02 MT Fi:NIOP:CFNA:V14) 285 04/29/20 16:54:08 0:25 0:02 3587080982063726 310410214827503 APPLE 'PHONES 286 04/29/20 19:29:51 0:03 1:01 3587080982063726 310410214827503 NO (Mi-Fi) APPLE 'PHONES 287 04/29/20 20:52:10 0:07 0:00 (14i-Fi:NIOP) 288 04/29/20 20:52:10 0:07 19:48 3587080982063726 310410214827503 NO (Mi-Fi) APPLE 'PHONES 289 04/29/20 20:52:10 0:07 4:08 MT (Mi-Fi:NIOP) 290 04/29/20 20:56:18 0:00 15:40 MT (NIOP:VCORR) 291 04/30/20 20:14:09 0:22 0:01 MT (Mi-Fi:NIOP) 292 04/30/20 20:14:09 0:22 0:01 MT (NIOP) 293 04/30/20 20:14:13 0:26 0:05 MT (NIOP:CFNA:VN) 294 04/30/20 20:14:13 0:26 0:05 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 295 04/30/20 21:11:42 0:22 0:00 MT (Mi-Fi:NIOP) 296 04/30/20 21:11:42 0:22 0:00 MT (NIOP) 297 04/30/20 21:11:47 0:27 0:02 MT (NIOP:CFNA:VN) 298 04/30/20 21:11:47 0:28 0:01 3587080982063726 310410214827503 NO (Mi-Fi) APPLE 'PHONES 299 04/30/20 21:26:48 0:07 28:07 3587080982063726 310410214827503 NO (Mi-Fi) APPLE 'PHONES AT&T Proprietary Page 16 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002623 CONFIDENTIAL EFTA_001(6699 EFTA01251223 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ter-,4 AT&T OTC. Run Date: 06/17/2020 Run Time: 10:53:23 Voice Osage For: Item Conn. Conn. Seizure ET Originating Terminating INEI CT Feature Date Time Time Number Number (UTC) 300 04/30/20 23:47:42 0:08 5:05 3587080982063726 310410214827503 MO APPLE 'PHONES 301 05/01/20 00:19:46 0:22 0:00 MT (Ni-Fi:NIOP) 302 05/01/20 00:19:46 0:22 0:00 MT (NIOP) 303 05/01/20 00:19:50 0:26 0:01 MT (NIOP:CFNA:VM) 304 05/01/20 00:19:50 0:26 0:01 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 305 05/01/20 01:27:25 0:04 22:24 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 306 05/01/20 01:27:25 0:04 22:24 MT (NIOP:VCORR) 307 05/01/20 20:59:25 0:21 0:00 (Ni-Fi:NIOP) 308 05/01/20 20:59:25 0:21 0:00 (Ni-Fi:NIOP) 309 05/01/20 20:59:30 0:26 0:01 (Wi- Fi:NIOP:CfMA:VM) 310 05/01/20 20:59:30 0:26 0:01 3587080982063726 310410214827503 NO (Ni-Fi) APPLE 'PHONES 311 05/04/20 22:10:28 0:14 17:33 KT (NIOP:VCORR) 312 05/04/20 22:10:28 0:15 17:33 3587080982063726 310410214827503 NO (Ni-Fi) APPLE 'PHONES 313 05/04/20 22:49:00 0:22 0:00 MT (Ni-Fi:NIOP) 314 05/04/20 22:49:00 0:22 0:00 MT 315 05/04/20 22:49:04 0:26 0:02 MT Fi:NIOP:CFNA:VM) 316 05/04/20 22:49:04 0:26 0:02 3587080982063726 310410214827503 NO (Ni-Fi) APPLE 'PHONES 317 05/04/20 23:22:53 0:21 0:00 MT (Ni-Fi:NIOP) 318 05/04/20 23:22:53 0:21 0:00 MT (Ni-Fi:NIOP) 319 05/04/20 23:22:58 0:26 0:02 MT Fi:NIOP:CFNA:VM) 320 05/04/20 23:22:58 0:27 0:02 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 321 05/05/20 20:49:17 0:21 0:00 322 05/05/20 20:49:17 0:21 0:00 AT&T Proprietary Page 17 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002624 CONFIDENTIAL EFTA_00I(6700 EFTA01251224 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in tra `a.es d AT&T OTC. Run Date: 06/17/2020 Run Time: Voice Osage For: Item Conn. Conn. Seizure ET Originating Terminating SOLI DUI CT Feature Date Time Time Number Number (OTC) 323 05/05/20 20:49:21 0:25 0:02 MT (Wi- Fi:NIOP:CFMA:VM) 324 05/05/20 20:49:21 0:25 0:02 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 325 05/05/20 21:25:15 0:22 0:00 MT (Wi-Fi:NIOP) 326 05/05/20 21:25:15 0:22 0:00 MT (Wi-Fi:NIOP) 327 05/05/20 21:25:19 0:26 0:05 MT (Wi- Fi:NIOP:CFMA:VM) 328 05/05/20 21:25:19 0:27 0:05 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 329 05/05/20 21:37:14 0:38 0:03 3587080982063726 310410214827503 MO (Wi-Fi) APPLE 'PHONES 330 05/06/20 00:41:07 0:23 0:00 MT (Wi-Fi:NIOP) 331 05/06/20 00:41:07 0:23 0:00 MT (Wi-Fi:NIOP) 332 05/06/20 00:41:11 0:27 0:02 MT (Wi- Fi:NIOP:CFMA:VM) 333 05/06/20 00:41:11 0:28 0:02 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 334 05/06/20 00:41:32 0:00 0:00 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 335 05/06/20 00:41:43 0:08 0:00 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 336 05/06/20 00:41:53 0:06 0:03 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 337 05/07/20 14:49:32 0:23 0:00 MT (Wi-Fi:NIOP) 338 05/07/20 14:49:39 0:30 0:02 MT (Wi- Fi:NIOP:CFMA:VM) 339 05/07/20 14:49:39 0:31 0:02 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 340 05/07/20 17:03:16 0:23 0:00 MT (Wi-Fi:NIOP) 341 05/07/20 17:03:27 0:34 0:01 MT (Wi- Fi:NIOP:CFNA:VM) AT&T Proprietary Page 18 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002625 CONFIDENTIAL EF-EA_001(6701 EFTA01251225 MOBILITY a 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in tt-ta. AT&T OTC. Run Data: 06/17/2020 Run Time: 14:63:23 Voice Osage For: Item Conn. Conn. Seizure ET Originating Terminating IMEI INSI CT Feature Date Time Time Number Number (OTC) 342 05/07/20 17:03:27 0:34 0:01 3587080982063726 310410214827503 MO (Mi-Fi) APPLE IPHONE8 343 05/07/20 17:48:17 0:24 0:00 MT (Mi-Fi:NIOP) 344 05/07/20 17:48:23 0:30 0:02 MT (Mi- Fi.:NIOP:CFMA:VM) 345 05/07/20 17:48:23 0:31 0:02 3587080982063726 310410214827503 MO APPLE 'PHONES 346 05/07/20 19:12:18 0:22 0:00 MT (Mi-Fi:NIOP) 347 05/07/20 19:12:24 0:28 0:02 MT (Mi- Fi.:NIOP:CFMA:VM) 348 05/07/20 19:12:24 0:28 0:02 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 349 05/07/20 19:16:22 0:07 0:00 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 350 05/07/20 23:33:08 0:21 0:00 MT (Mi-Fi:NIOP) 351 05/07/20 23:33:08 0:21 0:00 MT (Mi-Fi:NIOP) 352 05/07/20 23:33:13 0:26 0:02 MT (Mi- Fi.:NIOP:CFMA:VM) 353 05/07/20 23:33:13 0:26 0:02 3587080982063726 310410214827503 M0 (Mi-Fi) APPLE 'PHONES 354 05/07/20 23:33:46 0:01 0:00 MT (Mi-Fi:NIOP) 355 05/07/20 23:33:46 0:01 0:00 MT (Mi-Fi:NIOP) 356 05/07/20 23:33:46 0:01 0:00 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 357 05/07/20 23:34:32 0:39 0:03 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 358 05/08/20 00:19:18 0:21 0:00 MT (Mi-Fi:NIOP) 359 05/08/20 00:19:18 0:21 0:00 ST (NIOP:CMM) 360 05/08/20 00:19:22 0:25 0:03 ST (NIOP:CFNA:CMN:VM) 361 05/08/20 00:19:23 0:27 0:02 3587080982063726 310410214827503 I40 (Mi-Fi) APPLE 'PHONES AT&T Proprietary Page 19 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002626 CONFIDENTIAL EFTA 00//6702 EFTA01251226 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: 18:55:23 Voice Osage For: Item Conn. Conn. Seizure ET Originating Terminating IIOII 1MSI CT Feature Date Time Time Number Number (OTC) 362 05/08/20 14:29:29 0:05 74:10 3587080982063726 310410214827503 163 (Ni-Fi) APPLE IPHONZ8 363 05/08/20 17:49:44 0:32 0:02 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONZ8 364 05/08/20 17:58:22 0:21 0:23 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONZ8 365 05/09/20 17:19:42 0:27 0:00 3587080982063726 310410214827503 MT (Ni-Fi:NIOP) APPLE IPHONZ8 366 05/09/20 17:19:44 0:29 1:16 3587080982063726 310410214827503 MT (Ni- APPLE Fi:NIOP:CFNA:VM) IPHONZ8 367 05/11/20 13:49:51 0:16 0:55 3587080982063726 310410214827503 MO (Ni-Fi) APPLE IPHONZ8 368 05/11/20 13:52:24 0:12 3:10 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONZ8 369 05/11/20 13:55:47 0:08 15:51 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONZ8 370 05/11/20 17:48:07 0:16 0:00 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONZ8 371 05/11/20 20:27:52 0:09 0:29 3587080982063726 310410214827503 MT (Ni-Fi:NIOP) APPLE IPHONZ8 372 05/11/20 21:18:16 0:11 0:30 3587080982063726 310410214827503 MT (Ni-Fi:NIOP) APPLE IPHONZ8 373 05/11/20 21:39:04 0:12 1:11 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONZ8 374 05/11/20 21:51:53 0:07 0:28 3587080982063726 310410214827503 MT (Ni-Fi:NIOP) APPLE IPHONZ8 375 05/11/20 23:14:44 0:01 0:00 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONZ8 376 05/11/20 23:15:02 0:07 33:55 MT (NIOP:VCORR) AT&T Proprietary Page 20 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002627 CONFIDENTIAL EF-EA_001(6703 EFTA01251227 MOBILITY 411111i 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: 06/17/2020 Run Time: Voice Usage For: Item Conn. Conn. Seizure ET Originating Terminating IMEI INSI CT Feature Date Time Time Number Number (UTC) 377 05/11/20 23:15:02 0:07 33:55 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONZ8 378 05/12/20 13:53:18 0:00 0:00 KT (NIOP) 379 05/12/20 13:53:19 0:01 0:11 KT (NIOP:CFNR:VM) 380 05/12/20 13:53:21 0:09 0:07 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONE8 381 05/12/20 15:01:44 0:08 30:55 MT (NIOP:VCORR) 382 05/12/20 15:01:44 0:09 30:55 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONE8 383 05/12/20 15:33:00 0:10 19:49 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONE8 384 05/12/20 16:50:53 0:27 0:00 HT 385 05/12/20 16:50:58 0:32 0:07 HT (Ni- Fi:NIOP:CFNA:VM) 386 05/12/20 16:50:58 0:33 0:07 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONE8 387 05/12/20 18:18:51 0:08 8:56 3587080982063726 310410214827503 NO APPLE IPHONE8 388 05/12/20 19:13:25 0:05 7:33 3587080982063726 310410214827503 M0 APPLE IPHONE8 389 05/12/20 19:29:15 0:23 0:00 MT (NIOR) 390 05/12/20 19:29:20 0:28 0:06 MT (NIOR:CFNA:VN) 391 05/12/20 19:29:20 0:29 0:06 3587080982063726 310410214827503 NO (Mi-Fi:NIOR) APPLE IPRONZ8 392 05/12/20 22:00:31 0:05 28:33 3587080982063726 310410214827503 MO (Mi-Fi:NIOR) APPLE IPRONZ8 393 05/12/20 22:00:31 0:05 28:33 MT (NIOR:VCORR) 394 05/13/20 18:07:12 0:39 0:03 3587080982063726 310410214827503 MO (Ni-Fi) APPLE IPHONZ8 395 05/13/20 18:08:35 0:24 0:00 MT (NIOP) AT&T Proprietary Page 21 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002628 CONFIDENTIAL EFTA 001(6704 EFTA01251228 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in tr "-se as. d AT&T OTC. Run Date: 06/17/2020 Run Time: 18:53:23 Voice Osage For: Item Conn. Conn. Seizure ET Originating Terminating MST IMI CT Feature Date Time Time Number Number (UTC) 396 05/13/20 18:08:41 0:30 0:02 3587080982063726 310410214827503 143 (Wi-Fi) APPLE 'PRONGS 397 05/13/20 18:08:41 0:30 0:02 MT (1410P:CFNA:VM) 398 05/13/20 19:00:16 0:09 15:49 3587080982063726 310410214827503 143 (NZ-Pi) APPLE IPHONZ8 399 05/13/20 19:00:16 0:09 15:49 MT (NIOP:VOORE) 400 05/13/20 19:52:36 0:22 0:00 MT (Mi-FZ:NIOP) 401 05/13/20 19:52:46 0:32 0:02 MT (Mi- Fi.:NIOP:CFMA:VM) 402 05/13/20 19:52:46 0:33 0:02 3587080982063726 310410214827503 MO (NZ-Pi) APPLE IPRONE8 403 05/13/20 19:53:03 0:06 1:39 3587080982063726 310410214827503 MT (Mi-FZ:NIOP) APPLE IPRONE8 404 05/13/20 19:54:59 0:06 4:35 3587080982063726 310410214827503 MO (Ni-Fi) APPLE IPRONE8 405 05/13/20 21:05:54 0:11 0:00 3587080982063726 310410214827503 MT (NIOP) APPLE IPRONE8 406 05/13/20 21:05:55 0:12 0:07 3587080982063726 310410214827503 MT (NIOP:CFNE:VM) APPLE IPRONE8 407 05/13/20 21:35:50 0:07 13:47 3587080982063726 310410214827503 MO (Wi-Fi) APPLE IPRONE8 408 05/13/20 22:14:50 0:23 0:00 MT (1410P) 409 05/13/20 22:14:56 0:29 0:01 MT (NIOP:CFNA:VM) 410 05/13/20 22:14:56 0:30 0:01 3587080982063726 310410214827503 MO (NZ-Pi) APPLE IPRONE8 411 05/13/20 23:54:11 0:26 0:00 ,3587080982063726 310410214827503 MT (Mi-FZ:NIOP) APPLE IPRONE8 412 05/13/20 23:54:12 0:27 0:05 3587080982063726 310410214827503 MT (Mi- APPLE Fi:NIOP:CFMA:VM) IPRONE8 413 05/13/20 23:54:12 0:27 0:05 M3 (VOOER) AT&T Proprietary Page 22 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002629 CONFIDENTIAL EFTA_00I(6705 EFTA01251229 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T'S records are stored and provided in %---s0 AT&T `' LTC. Run Date: 06/17/2020 Run Time: Voice Usage For: Item Conn. Conn. Seizure MI Originating Terminating IMEI INSI CT Feature Date Time Time Number Number (UTC) 414 05/13/20 23:54:27 0:02 17:46 3587080982063726 310410214827503 MO (M1-Fi) APPLE 'PHONES 415 05/13/20 23:54:27 0:02 17:46 MT (NIOP:VCORR) 416 05/14/20 14:39:29 0:22 0:00 MT (Mi-Fi:NIOP) 417 05/14/20 14:39:37 0:30 0:01 MT (Mi- Fi:NIOP:CFNA:VM) 418 05/14/20 14:39:37 0:31 0:01 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 419 05/14/20 14:39:48 0:10 0:00 3587080982063726 310410214827503 MT (Wi-Fi:NIOP:CMW) APPLE 'PHONES 420 05/14/20 15:52:43 0:08 1:09 3587080982063726 310410214827503 MO (Mi-Fi) APPLE IPHONE8 421 05/14/20 16:15:14 0:16 0:54 3587080982063726 310410214827503 MT (Mi-Fi:NIOP) APPLE 'PHONES 422 05/14/20 17:11:25 0:13 0:00 310410214827503 MT (1 423 05/14/20 17:11:25 0:24 0:00 ST (1410P) APPLE 'PHONES 424 05/14/20 17:11:26 0:25 0:11 ST (1410P:CFNA:VM) APPLE 'PHONES 425 05/14/20 17:20:45 0:06 0:00 MT (1410P) 426 05/14/20 17:20:45 0:06 8:46 MT (NIOP:VCORR) 427 05/14/20 17:20:45 0:06 8:46 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 428 05/14/20 17:42:04 0:10 0:01 3587080982063726 310410214827503 MT (NIOP) APPLE 'PHONES 429 05/14/20 17:42:05 0:11 0:03 3587080982063726 310410214827503 MT (NIOP:CFNR:VN) APPLE IPHONZ8 430 05/14/20 18:14:46 0:04 0:00 MT (Wi-Fi:NIOP) 431 05/14/20 18:14:46 0:04 1:31 MT (IMP) 432 05/14/20 18:14:46 0:05 1:31 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES AT&T Proprietary Page 23 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002630 CONFIDENTIAL EFTA_001(6706 EFTA01251230 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in c` `—s‘o ssisAT&T OTC. Run Date: 06/17/2020 Run Time: 16:66:23 Voice Osage For: Item Conn. Conn. Seizure ET Originating Terminating IlCI INSI CT Feature Date Time Time Number Number (OTC) 433 05/14/20 19:41:13 0:28 0:00 3587080982063726 310410214827503 MT (Ni-Fi:NIOP) APPLE 'PHONES 434 05/14/20 19:41:16 0:31 0:04 3587080982063726 310410214827503 MT (Ni- APPLE Fi:NIOP:CFNA:VM) 'PHONES 435 05/17/20 21:54:23 0:06 3:05 3587080982063726 310410214827503 MO (Ni-Fi:NIOR) APPLE 'PHONES 436 05/19/20 01:55:50 0:00 0:00 3587080982063726 310410214827503 MO (Ni-Fi:NIOR) APPLE 'PHONES 437 05/19/20 20:41:12 0:09 8:05 3587080982063726 310410214827503 MO (Ni-Fi:NIOR) APPLE 'PHONES 438 05/19/20 20:49:29 0:05 2:33 3587080982063726 310410214827503 MO (Ni-Fi:NIOR) APPLE 'PHONES 439 05/19/20 21:14:58 0:23 0:00 MT (NIOR) 440 05/19/20 21:15:04 0:29 0:03 3587080982063726 310410214827503 MO (Ni-Fi:NIOR) APPLE 'PHONES 441 05/19/20 21:15:04 0:29 0:03 MT (NIOR:CFNA:VM) 442 05/19/20 22:29:37 0:22 0:00 MT (NIOR) 443 05/19/20 22:29:44 0:29 0:02 MT (NIOR:CFNA:VM) 444 05/19/20 22:29:44 0:30 0:02 3587080982063726 310410214827503 NO (Ni-Fi:NIOR) APPLE 'PHONES 445 05/19/20 23:03:59 0:22 0:00 MT (NIOR) 446 05/19/20 23:03:59 0:22 0:00 3587080982063726 310410214827503 MO (Ni-Fi:NIOR) APPLE 'PHONES 447 05/19/20 23:04:28 0:06 2:13 MT (NIOP:VCORR) 448 05/19/20 23:04:28 0:06 2:13 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 449 05/20/20 18:53:54 0:10 0:52 3587080982063726 310410214827503 MT (Ni-Fi:NIOP) APPLE 'PHONES 450 05/20/20 21:41:19 0:23 0:00 MT (NIOP) AT&T Proprietary Page 24 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002631 CONFIDENTIAL EF-EA_00116707 EFTA01251231 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in %---s`" 1. AT&T OTC. Run Data: 06/17/2020 Run Time: 1S:53:21 Voice Osage For: Item Conn. Conn. Seizure ET Originating Terminating 122I IN21 CT Feature Date Time Time Number Number (UTC) 451 05/20/20 21:41:26 0:30 0:03 MT (210P:CFNA:VM) 452 05/20/20 21:41:26 0:30 0:03 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PRONGS 453 05/20/20 21:58:25 0:23 0:00 MT (210P) 454 05/20/20 21:58:31 0:29 0:02 MT (210P:CFNA:VM) 455 05/20/20 21:58:31 0:30 0:02 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PRONGS 456 05/20/20 21:59:01 0:01 0:00 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PRONGS 457 05/20/20 21:59:40 0:37 0:04 3587080982063726 310410214827503 MO (WL-Fi) APPLE 'PRONGS 458 05/20/20 22:00:20 0:22 0:00 MT (210P) 459 05/20/20 22:00:28 0:30 0:02 MT (210P:CFNA:VM) 460 05/20/20 22:00:28 0:31 0:02 3587080982063726 310410214827503 MO (Wi-Fi) APPLE 'PRONGS 461 05/21/20 00:31:09 0:03 35:29 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PRONGS 462 05/21/20 00:31:09 0:03 54:04 MT (210P:VCORR) 463 05/21/20 01:06:38 0:00 0:21 3587080982063727 310410214827503 MO (VCORR) APPLE 'PRONGS 464 05/21/20 01:06:59 0:00 18:14 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PRONGS 465 05/21/20 15:07:09 0:07 0:05 3587080982063726 310410214827503 MO (Wi-Fi) APPLE 'PRONGS 466 05/21/20 20:31:30 0:07 0:04 3587080982063726 310410214827503 MO (Wi-Fi) APPLE 'PRONGS 467 05/21/20 21:23:59 0:19 0:00 3587080982063726 310410214827503 MT (Mi-Fi:NIOP) APPLE 'PRONGS AT&T Proprietary Page 25 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002632 CONFIDENTIAL EF-EA_001(6708 EFTA01251232 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tr `si a. AT&T OTC. Run Date: 06/17/2020 Run Time: 16:53:23 Voice Osage For: Item Conn. Conn. Seizure ET Originating Terminating IM5I INSI CT Feature Date Time Time Number Number (OTC) 468 05/21/20 21:31:01 0:15 26:49 3587080982063726 310410214827503 NO (Wi-ri) APPLE 'PHONES 469 05/22/20 00:18:09 0:24 0:01 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 470 05/22/20 00:18:11 0:26 0:32 3587080982063726 310410214827503 MT (Wi- APPLE Fi:NIOP:CFNA:VN) 'PHONES 471 05/22/20 00:20:52 0:28 0:00 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 472 05/22/20 00:20:53 0:29 0:04 3587080982063726 310410214827503 MT (Wi- APPLE Fi:NIOP:CFNA:VM) 'PHONES 473 05/22/20 16:23:16 0:14 0:00 310410214827503 MT () 474 05/22/20 16:23:16 0:25 0:00 ST (NIOP) APPLE 'PHONES 475 05/22/20 16:23:17 0:26 0:15 ST (NIOP:CFNA:VN) APPLE 'PHONES 476 05/22/20 17:37:15 0:06 22:47 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 477 05/22/20 18:00:20 0:05 7:06 3587080982063726 310410214827503 MO (Wit) APPLE 'PHONES 478 05/22/20 18:33:59 0:23 0:00 MT (NIOP:OMW) 479 05/22/20 18:34:08 0:32 0:02 3587080982063726 310410214827503 NO (Wit) APPLE 'PHONES 480 05/22/20 18:34:08 0:32 0:02 MT (NIOP:CFNA:CMW:VM) 481 05/22/20 21:26:30 0:25 0:00 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 482 05/22/20 21:26:31 0:26 0:05 3587080982063726 310410214827503 MT (Ni- APPLE Fi:NIOP:CFNA:VM) 'PHONES 483 05/22/20 21:26:31 0:26 0:05 MO (VCORR) AT&T Proprietary Page 26 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002633 CONFIDENTIAL EFTA_001 16709 EFTA01251233 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Voice Usage For: IIIIIIIII Item Conn. Conn. Seizure ET Originating Terminating INEI INSI CT Feature Date Time Time Number Number (UTC) 484 05/22/20 21:43:41 0:13 0:40 3587080982063726 310410214827503 NO (141-Pi) APPLE 'PHONES 485 05/22/20 21:43:41 0:13 0:40 MT (NIOP:VCORR) 486 05/22/20 21:45:43 0:06 30:22 3587080982063726 310410214827503 NO (141-Fi) APPLE 'PHONES 487 05/22/20 22:26:24 0:21 0:00 MT (Ni-Fi:NIOP) 488 05/22/20 22:26:24 0:21 0:00 KT (Ni-Fi:NIOP) 489 05/22/20 22:26:29 0:26 0:01 MT (Ni- Fi:NIOP:CFMA:V14) 490 05/22/20 22:26:29 0:27 0:01 3587080982063726 310410214827503 NO (Ni-Fi) APPLE 'PHONES 491 05/22/20 22:26:36 0:07 0:45 3587080982063726 310410214827503 MT (Ni-Fi:NIOP:CMN) APPLE 'PHONES 492 05/22/20 22:26:36 0:08 0:35 NO (Wi-Fi) 493 05/22/20 22:27:11 0:00 0:12 NO (1 494 05/22/20 22:27:21 0:00 6:09 3587080982063727 310410214827503 NT (NIOP:CMM:VCORR) APPLE 'PHONES 495 05/22/20 22:27:23 0:00 6:07 NO (Wi-Fi) 496 05/22/20 22:46:06 0:18 0:00 NT (Ni-Fi:NIOP) 497 05/22/20 22:46:06 0:18 3:09 35870809820637 310410214827503 NO (Ni-Fi) APPLE 'PHONES 498 05/22/20 22:46:06 0:18 0:38 MT (Ni-Fi:NIOP) 499 05/22/20 22:46:44 0:00 0:29 MT [MOP) 500 05/22/20 22:47:13 0:00 2:01 MT (Ni-Fi:NIOP) 501 05/22/20 22:49:14 0:00 0:32 MT [MOP) 502 05/22/20 22:49:15 0:00 0:54 3587080982063727 310410214827503 M0 [VCORR) APPLE 'PHONES 503 05/22/20 22:49:46 0:00 3:10 MT (Ni-Fi:NIOP) 504 05/22/20 22:50:09 0:00 2:52 35870809820637 310410214827503 M0 (Ni-Fi) APPLE 'PHONES SOS 05/22/20 22:52:56 0:00 2:53 MT [1110P) AT&T Proprietary Page 27 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002634 CONFIDENTIAL EF-EAJVII67(0 EFTA01251234 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm tra "`s 1. AT&T d AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Data: 06/17/2020 Run Time: Voice Usage For: Item Conn. Conn. Seizure ET Originating Terminating INEI INSI CT Feature Data Time Time Number Number (OTC) 506 05/22/20 22:53:01 0:00 17:28 3587080982063727 310410214827503 NO (VCOP11) APPLE 'PHONES 507 05/22/20 22:55:49 0:00 14:40 MT 508 05/23/20 22:54:43 0:08 30:48 MT (NIOP:VCORA) 509 05/23/20 22:54:43 0:08 30:48 3587080982063727 310410214827503 NO (Ni-Fi) APPLE 'PHONES 510 05/23/20 23:25:49 0:07 11:42 MT (NIOP:VCORA) 511 05/23/20 23:25:49 0:07 11:42 3587080982063727 310410214827503 NO (Ni-Fi) APPLE 'PHONES 512 05/26/20 14:10:35 0:09 0:00 3587080982063727 310410214827503 MT APPLE 'PHONES 513 05/26/20 18:03:44 0:24 0:00 MT (NIOP) 514 05/26/20 18:03:52 0:32 0:05 MT (NIOP:CFNA:VN) 515 05/26/20 18:03:52 0:32 0:05 3587080982063727 310410214827503 MO (Ni-Fi) APPLE !PHONES 516 05/26/20 19:02:46 0:23 0:00 MT (NIOP) 517 05/26/20 19:02:52 0:29 0:00 MT (NIOP:CFNA:VN) 518 05/26/20 19:02:52 0:29 0:00 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 519 05/26/20 19:13:13 0:25 0:00 3587080982063727 310410214827503 MT APPLE 'PHONES 520 05/26/20 19:13:14 0:26 0:15 3587080982063727 310410214827503 MT (Ni- APPLE Fi:NIOP:CFNA:VM) 'PHONES 521 05/26/20 19:19:54 0:06 0:42 3587080982063727 310410214827503 NO (Ni-Fi) APPLE 'PHONES 522 05/26/20 19:20:51 0:05 0:00 3587080982063727 310410214827503 NO (Ni-Fi) APPLE 'PHONES 523 05/26/20 19:21:17 0:01 0:00 3587080982063727 310410214827503 MT (NIOP:CNN] APPLE 'PHONES AT&T Proprietary Page 28 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002635 CONFIDENTIAL EF-EA_001(67(1 EFTA01251235 MOBILITY 41111. 2996479 06/17/2020 AT&T hes queried for records from 03/01/2020 12:00:00em to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in tr "'s ads. AT&T OTC. Run Date: 06/17/2020 Run Time: Voice Osage For: MIMS Item Conn. Conn. Seizure ET Originating Terminating IMEI Ian CT Feature Date T1me Time Number Number (UTC) 524 05/26/20 19:21:17 0:01 0:04 3587080982063727 310410214827503 MT (NIOP:CFB:CMW:VM) APPLE 'PHONES 525 05/26/20 19:21:18 0:22 0:00 MT (Wi-Fi:NIOP) 526 05/26/20 19:21:25 0:29 0:03 MT (Wi- Fi:NIOP:CFMA:VM) 527 05/26/20 19:21:25 0:30 0:03 3587080982063727 310410214827503 140 (Wi-Fi) APPLE 'PHONES 528 05/26/20 19:21:36 0:06 6:58 3587080982063727 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 529 05/26/20 20:00:30 0:02 5:29 3587080982063727 310410214827503 MO (Wi-Fi) APPLE 'PHONES 530 05/26/20 20:06:12 0:02 0:42 3587080982063727 310410214827503 MO (Wi-Fi) APPLE 'PHONES 531 05/26/20 22:47:03 0:37 0:05 3587080982063727 310410214827503 MO (Wi-Fi) APPLE 'PHONES 532 05/27/20 19:58:08 0:23 0:00 MT (Wi-Fi:NIOP) 533 05/27/20 19:58:12 0:27 0:02 MT (Wi- Fi:NIOP:CFMA:VM) 534 05/27/20 19:58:13 0:28 0:01 3587080982063727 310410214827503 MO (Wi-Fi) APPLE 'PHONES 535 05/27/20 20:19:38 0:10 2:16 3587080982063727 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 536 05/27/20 20:19:38 0:11 0:09 NO (Wi-Fi) 537 05/27/20 20:19:47 0:00 0:15 MO (1 538 05/27/20 20:20:02 0:00 1:45 MO (Wi-Fi) 539 05/27/20 20:21:47 0:00 0:09 MO (VCORR) 540 05/27/20 20:21:54 0:00 0:02 3587080982063727 310410214827503 MT (NIOP:VCORA) APPLE 'PHONES 541 05/27/20 20:22:21 0:00 0:08 3587080982063727 310410214827503 140 (141-Fi.) APPLE 'PHONES AT&T Proprietary Page 29 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002636 CONFIDENTIAL EF-EAJVII6712 EFTA01251236 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in tra ‘"1.al. / AT&T OTC. Run Date: 06/17/2020 Run Time: Voice Osage For: IIIIIIIIII Item Conn. Conn. Seizure ET Originating Terminating IWCI INSI CT Feature Onto Time Time Number Number (UTC) 542 05/27/20 20:22:21 0:08 0:00 3587080982063727 310410214827503 MO (1 APPLE 'PHONES 543 05/27/20 20:22:48 0:02 0:00 MT (1410P) 544 05/27/20 20:22:49 0:18 0:00 ST (1410P) 545 05/27/20 20:22:49 0:18 0:00 3587080982063727 310410214827503 MO (Mi-Fi) APPLE 'PHONES 546 05/27/20 20:27:06 0:08 0:06 3587080982063727 310410214827503 MO (Mi-Fi) APPLE 'PHONES 547 05/27/20 20:27:17 0:02 0:09 MT (Wi-Fi:NIOP) 548 05/27/20 20:27:17 0:03 0:13 3587080982063727 310410214827503 MO (Mi-Fi) APPLE 'PHONES S49 05/27/20 20:27:26 0:00 1:25 MT (NIOP) S50 05/27/20 20:27:30 0:00 2:23 3587080982063727 310410214827503 MO (1 APPLE 'PHONES S51 05/27/20 20:28:51 0:00 0:59 MT (Wi-Fi:NIOP) S52 05/27/20 20:29:50 0:00 0:03 MT (NIOP:VCORR) S53 05/27/20 20:31:27 0:02 0:00 MT (NIOP:CMW) S54 05/27/20 20:31:27 0:03 0:00 3587080982063727 310410214827503 MO (Wi-Fi) APPLE 'PHONES 555 05/27/20 20:34:42 0:21 8:33 3587080982063727 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES S56 05/27/20 20:43:15 0:00 7:44 3587080982063727 310410214827503 MT (NIOP:VCORR) APPLE 'PHONES S57 05/27/20 20:51:20 0:10 38:47 MT (NIOP:CMW:VCORR) S58 05/27/20 20:51:20 0:10 0:02 3587080982063727 310410214827503 MO (1 APPLE 'PHONES S59 05/27/20 20:51:22 0:00 38:45 3587080982063727 310410214827503 MO (Mi-Fi) APPLE 'PHONES S60 05/27/20 21:37:25 0:22 0:00 MT (Wi-Fi:NIOP) S61 05/27/20 21:37:34 0:31 0:01 MT (Wi- Fi:NIOP:CFNA:VM) AT&T Proprietary Page 30 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002637 CONFIDENTIAL EF-EAJVII67(3 EFTA01251237 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T'S records are stored and provided in %---- `-‘0 AT&T OTC. Run Data: 06/17/2020 Run Time; Vol.:004.ga For: Item Conn. Conn. Seizure ET Originating Terminating SMEI INSI CT Feature Date Time Tine Manor Number (UTC) 562 05/27/20 21:37:34 0:31 0:01 3587080982063727 310410214827503 MO (Mi-Fi) APPLE IPNONZ8 563 05/28/20 16:49:41 0:24 0:00 MT [MOP) 564 05/28/20 16:49:50 0:33 0:02 MT (NIOP:CFNA:VM) 565 05/28/20 16:49:50 0:33 0:02 3587080982063727 310410214827503 MO (Wi-Fi) APPLE 'PHONES 566 05/28/20 16:50:02 0:00 0:00 NT INIOP:OMMI 567 05/28/20 16:50:05 0:03 0:01 NT (NIOP:CPB:OMM:VM) 568 05/28/20 16:50:05 0:04 0:01 3587080982063727 310410214827503 MO (Wi-Fi) APPLE 'PHONES 569 05/28/20 16:50:38 0:20 0:03 3587080982063727 310410214827503 MO (Mi-Fi) APPLE 'PHONES 570 05/28/20 16:50:53 0:08 0:00 MT (1410P) 571 05/28/20 16:50:53 0:08 0:00 3587080982063727 310410214827503 MO (Mi-Fi) APPLE 'PHONES 572 05/28/20 17:10:11 0:10 3:58 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE 'PHONES 573 05/28/20 17:14:19 0:05 22:33 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE 'PHONES 574 05/28/20 17:14:19 0:06 22:33 MO (VCORR) 575 05/29/20 18:23:50 0:12 8:19 3587080982063727 310410214827503 MO (Mi-Fi) APPLE 'PHONES 576 05/29/20 18:32:09 0:00 6:19 3587080982063727 310410214827503 MO (VCORR) APPLE 'PHONES 577 05/29/20 18:52:27 0:08 24:52 3587080982063727 310410214827503 NO (Mi-Fi) APPLE 'PHONES 578 05/29/20 18:52:27 0:08 27:53 MT (NIOP:VCORR) 579 05/29/20 19:17:19 0:00 3:01 3587080982063727 310410214827503 MO (VCORR) APPLE 'PHONES AT&T Proprietary Page 31 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002638 CONFIDENTIAL EF-EAJVII67(4 EFTA01251238 MOBILITY 41.1, "tittleAT&T 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/17/2020 Run Time: 18:55:26 Voice Osage For: Item Conn. Conn. Seizure ET Originating Terminating IMEI DUI CT Feature Date Time Time Number Number (OTC) 580 05/30/20 15:17:28 0:21 0:00 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE IPRONE8 581 05/30/20 15:17:29 0:22 0:14 3587080982063727 310410214827503 MT (Mi- APPLE Fi:NIOP:CFMA:VM) IPRONE8 582 05/30/20 15:23:39 0:05 36:20 3587080982063727 310410214827503 1.0 (Mi-Fi) APPLE IPRONE8 583 06/02/20 14:44:00 0:10 17:35 MT (NIOP:VCORR) 584 06/02/20 14:44:00 0:11 10:35 3587080982063727 310410214827503 1.0 (M1-Fi) APPLE IPRONE8 585 06/02/20 14:54:35 0:00 0:19 3587080982063727 310410214827503 MO (VCORR) APPLE IPRONE8 586 06/02/20 14:54:54 0:00 6:41 3587080982063727 310410214827503 1.0 APPLE IPHONE8 587 06/02/20 17:04:25 0:03 10:19 MT (NIOP:VCORR) 588 06/02/20 17:04:25 0:04 10:19 3587080982063727 310410214827503 1.0 (Mit) APPLE IPRONE8 589 06/02/20 17:33:58 0:10 0:54 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE IPRONE8 590 06/03/20 00:07:18 0:16 6:39 MT (NIOP:VCORR) 591 06/03/20 00:07:18 0:16 6:39 3587080982063727 310410214827503 1.0 (Mi-Fi) APPLE IPRONE8 592 06/03/20 19:09:20 0:23 0:00 MT (NIOP:OMM) 593 06/03/20 19:09:26 0:29 0:02 3587080982063727 310410214827503 1.0 (Mi-Fi) APPLE IPRONE8 594 06/03/20 19:09:26 0:29 0:02 MT (NIOP:CFNA:CMH:VM) 595 06/03/20 20:31:08 0:07 17:32 3587080982063727 310410214827503 1.0 (Mi-Fi) APPLE IPRONE8 596 06/03/20 20:31:08 0:07 60:39 MT (NIOP:VCORR) 597 06/03/20 20:48:40 0:00 21:03 3587080982063727 310410214827503 1.0 (1 APPLE IPHONE8 AT&T Proprietary Page 32 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002639 CONFIDENTIAL EF-EA_001(67(5 EFTA01251239 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ‘41.1° s r •si#/. ma AT&T OTC. Run Date: 06/17/2020 Run Time: 18:55:26 Voice Osage For: Item Conn. Conn. Seizure ET Originating Terminating 1EEI INSI CT Feature Date Time Time Number Number (UTCI 598 06/03/20 21:09:43 0:00 22:05 3587080982063727 310410214827503 NO (Mi-Fi) APPLE 'PHONES 599 06/04/20 14:30:08 0:11 1:42 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE 'PHONES 600 06/05/20 19:34:05 0:26 0:00 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE 'PHONES 601 06/05/20 19:34:06 0:27 0:02 NO (VCORR) 602 06/05/20 19:34:06 0:27 0:02 3587080982063727 310410214827503 MT (Mi- APPLE Fi.:NIOP:CFNA:VM) 'PHONES 603 06/05/20 19:34:36 0:25 0:00 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE 'PHONES 604 06/05/20 19:34:38 0:27 0:02 NO (VCORR) 605 06/05/20 19:34:38 0:27 0:02 3587080982063727 310410214827503 MT (Mi- APPLE Fi.:NIOP:CFMA:VM) 'PHONES 606 06/05/20 20:45:34 0:24 0:00 KT (NIOP) 607 06/05/20 20:45:41 0:31 0:02 NT (NIOP:CFNA:VM) 608 06/05/20 20:45:41 0:31 0:02 3587080982063727 310410214827503 NO (Ni-Fi) APPLE 'PHONES 609 06/05/20 20:46:31 0:24 0:00 MT (NIOPI 610 06/05/20 20:46:37 0:30 0:02 MT (NIOP:CFNA:VNI 611 06/05/20 20:46:37 0:30 0:02 3587080982063727 310410214827503 NO APPLE 'PHONES 612 06/06/20 22:41:11 0:23 0:00 MT (NIOP) 613 06/06/20 22:41:16 0:28 1:04 MT (NIOP:CFNA:VM) 614 06/06/20 22:41:16 0:28 0:06 3587080982063727 310410214827503 NO (Ni-Fi) APPLE 'PHONES 615 06/06/20 22:41:22 0:00 0:58 3587080982063727 310410214827503 MO (VCORR) APPLE 'PHONES 616 06/06/20 22:43:40 0:04 3:36 MO (VCORR) AT&T Proprietary Page 33 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002640 CONFIDENTIAL EFTA_001(67(6 EFTA01251240 MOBILITY 411., 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in %---- `-‘0 AT&T OTC. Run Data: 06/17/2020 Run Time: Voice Usage For: Item Conn. Conn. Seizure ET Originating Terminating IMEI INS/ CT Feature Data Time Time Number Number (UTC) 617 06/06/20 22:43:40 0:04 1:01 3587080982063727 310410214827503 MT (NIOP:VCORR) APPLE IPHOWE8 618 06/06/20 22:44:41 0:00 2:35 3587080982063727 310410214827503 MT (Wi-Fi:NIOP) APPLE IPHOWE8 619 06/09/20 20:00:48 0:01 2:22 3587080982063727 310410214827503 WO (Ni-Fi) APPLE IPHOWE8 620 06/09/20 20:59:57 0:10 40:05 MT (NIOP:VCORR) 621 06/09/20 20:59:57 0:11 40:05 3587080982063727 310410214827503 MO (Ni-Fi) APPLE IPHOWE8 622 06/09/20 21:46:06 0:39 0:03 3587080982063727 310410214827503 MO (Ni-Fi) APPLE IPHOWE8 623 06/09/20 21:46:34 0:11 0:00 MT (Wi-Fi:NIOP) 624 06/09/20 21:46:34 0:11 0:00 MT (NIOP) 625 06/09/20 21:46:39 0:16 0:01 MT (NIOP:CFB:VN) 626 06/09/20 21:46:39 0:17 0:01 3587080982063727 310410214827503 MO (Ni-Fi) APPLE IPHONE8 627 06/09/20 23:19:32 0:10 0:03 3587080982063727 310410214827503 NO (Ni-Fi) APPLE IPHONE8 628 06/09/20 23:19:41 0:03 0:00 MT (Wi-Fi:NIOP) 629 06/09/20 23:19:41 0:03 0:00 MT (Wi-Fi:NIOP) 630 06/09/20 23:19:46 0:08 0:02 MT (Ni-Fi:NIOP:CFB:VM) 631 06/09/20 23:19:46 0:09 0:02 3587080982063727 310410214827503 HO (Ni-Fi) APPLE IPHOWE8 632 06/09/20 23:58:57 0:02 0:00 MT (Wi-Fi:NIOP) 633 06/09/20 23:58:57 0:02 0:00 MT (Wi-Fi:NIOP) 634 06/09/20 23:59:00 0:05 0:02 MT (Ni-Fi:NIOP:CFB:VM) 635 06/09/20 23:59:00 0:06 0:02 3587080982063727 310410214827503 MO (Ni-Fi) APPLE IPHOWE8 636 06/10/20 14:55:12 0:23 0:00 MT (NIOP) 637 06/10/20 14:55:12 0:23 0:00 MT (Wi-Fi:NIOP) AT&T Proprietary Page 34 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002641 CONFIDENTIAL EF-EA_00116717 EFTA01251241 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: 18:55:26 Voice Usage For: Item Conn. Conn. Seizure RT Originating Terminating IbtEI INSI CT Feature Date Time Time Number Number (OTC) 638 06/10/20 14:55:16 0:27 0:02 MT (Ni- Fi:NIOP:CFNA:VN) 639 06/10/20 14:55:16 0:27 0:02 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 640 06/10/20 14:55:36 0:10 0:05 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 641 06/10/20 18:51:20 0:23 0:00 MT (NIOP) 642 06/10/20 18:51:27 0:30 0:02 MT (NIOP:CFNA:VN) 643 06/10/20 18:51:27 0:31 0:02 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 644 06/10/20 19:11:49 0:21 0:00 MT (NIOP) 645 06/10/20 19:11:53 0:25 0:02 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 646 06/10/20 19:11:53 0:25 0:02 MT (NIOP:CFNA:VN) 647 06/10/20 22:21:12 0:23 0:00 MT (NIOP) 648 06/10/20 22:21:17 0:28 0:02 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 649 06/10/20 22:21:17 0:28 0:02 MT (NIOP:CFNA:VN) 650 06/11/20 00:50:40 0:22 0:00 MT (NIOP) 651 06/11/20 00:50:40 0:22 0:00 MT (Ni-Fi:NIOP) 652 06/11/20 00:50:45 0:27 0:01 MT (Ni- Fi:NIOP:CFNA:VM) 653 06/11/20 00:50:45 0:27 0:01 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 654 06/11/20 01:00:17 0:06 44:39 MT (NIOP:VCORR) 655 06/11/20 01:00:17 0:07 44:39 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 656 06/11/20 14:12:28 0:38 0:03 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 657 06/11/20 23:57:41 0:00 0:00 Mr (NIOP:CNN) AT&T Proprietary Page 35 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002642 CONFIDENTIAL EF-EA_001(67(8 EFTA01251242 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Voice Osage For: Item Conn. Conn. Seizure ET Originating Terminating 1MEI 17481 CT Feature Date Time Time Number Number (OTC) 658 06/11/20 23:57:47 0:06 0:04 MT (NIOP:CFB:CMM:VM) 659 06/11/20 23:57:47 0:07 0:04 3587080982063727 310410214827503 MO [Mi-Fi) APPLE 'PHONES 660 06/12/20 00:35:53 0:39 0:04 3587080982063727 310410214827503 MO [Mi-Fi) APPLE ■ IPHONES 661 06/12/20 00:36:33 0:24 0:00 MT 11410P) 662 06/12/20 00:36:39 0:30 0:02 MT INIOP:CFNA:VM) 663 06/12/20 00:36:39 0:31 0:02 3587080982063727 310410214827503 MO [Wi-Fi) APPLE IPHONES 664 06/12/20 13:40:56 0:17 0:38 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE IPHONES 665 06/12/20 13:41:49 0:02 0:00 3587080982063727 310410214827503 MO [Wi-Fi) APPLE IPHONES 666 06/12/20 16:43:56 0:25 0:00 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE IPHONES 667 06/12/20 16:43:57 0:26 0:05 3587080982063727 310410214827503 MT (Mi- APPLE Fi:MIOP:CFMA:VM) IPHONES 668 06/12/20 16:44:48 0:06 0:00 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE IPHONE8 669 06/12/20 16:47:03 0:36 0:03 3587080982063727 310410214827503 MO (Mi-Fi) APPLE IPHONE8 670 06/12/20 16:47:08 0:00 0:00 3587080982063727 310410214827503 MO (Mi-Fi) APPLE IPHONE8 671 06/12/20 16:47:56 0:35 0:05 3587080982063727 310410214827503 MO (Mi-Fi) APPLE IPHONE8 672 06/12/20 16:48:26 0:18 0:00 3587080982063727 310410214827503 1.0 (Mi-Fi) APPLE IPHONE8 AT&T Proprietary Page 36 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002643 CONFIDENTIAL EF-EA_001(67(9 EFTA01251243 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ••-•2 `-‘0 AT&T OTC. Run Date: 06/17/2020 Run Time: 1S:53:26 Voice Usage For: Item Conn. Conn. Seizure ET Originating Terminating MEI CT Feature Date Time Time Number Number (OTC) 673 06/12/20 16:49:51 0:13 0:43 3587080982063727 310410214827503 MO APPLE 114HONE8 AT&T Proprietary Page 37 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00002644 CONFIDENTIAL EFTA 00116720 EFTA01251244 MOBILITY ap. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Tame: 10:55:33 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytoa Apn INZI INSI MARL NICOLL Date Time Number up Dn (UTC) 1 03/01/20 05:38:22 1:22 0 0 ims 3587080982063725 310410214827503 APPLE IPHOME8 2 03/01/20 05:41:28 60:00 11858 8720 ims 3587080982063725 310410214827503 APPLE IPHOME8 3 03/01/20 05:55:39 60:00 924 840 nxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 4 03/01/20 06:41:28 41:54 2580 1324 ims 3587080982063725 310410214827503 APPLE IPHOME8 5 03/01/20 06:55:39 60:00 865 525 nxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 6 03/01/20 07:23:22 60:00 11920 4220 ims 3587080982063725 310410214827503 APPLE !PHONES 7 03/01/20 07:55:39 60:00 919 1036 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 8 03/01/20 08:23:22 60:00 6956 2648 ims 3587080982063725 310410214827503 APPLE !PHONES 9 03/01/20 08:55:39 60:00 692 420 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 10 03/01/20 09:23:22 17:52 3424 1324 ims 3587080982063725 310410214827503 APPLE IPHOME8 11 03/01/20 09:44:39 60:00 11862 8772 ims 3587080982063725 310410214827503 APPLE IPHOME8 12 03/01/20 09:55:39 60:00 872 735 nxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 13 03/01/20 10:44:39 60:00 5192 2664 ims 3587080982063725 310410214827503 APPLE IPHOME8 14 03/01/20 10:55:39 60:00 635 525 nxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 15 03/01/20 11:44:39 60:00 5192 2648 ims 3587080982063725 310410214827503 APPLE IPHOME8 16 03/01/20 11:55:39 60:00 1038 630 nxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 17 03/01/20 12:44:39 27:07 2580 1324 ims 3587080982063725 310410214827503 APPLE IPHOME8 18 03/01/20 12:55:39 60:00 3838 5118 nxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 19 03/01/20 13:11:46 10:55 3424 1340 ims 3587080982063725 310410214827503 APPLE !PHONES 20 03/01/20 13:25:26 18:05 7402 6102 ims 3587080982063725 310410214827503 APPLE !PHONES 21 03/01/20 13:43:31 39:19 10252 4128 ims 3587080982063725 310410214827503 APPLE IPHOME8 22 03/01/20 13:55:39 60:00 7138 6900 nxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 23 03/01/20 14:24:05 0:19 9754 7358 ims 3587080982063725 310410214827503 APPLE IPHOME8 24 03/01/20 14:24:24 8:29 5180 1696 ims 3587080982063725 310410214827503 APPLE IPHOME8 25 03/01/20 14:38:56 60:00 13027 7566 ims -1 310410214827503 26 03/01/20 14:55:39 9:59 173 105 nxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 27 03/01/20 15:05:38 3:44 6742 4956 nxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 1 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002645 The information contained hora(F341::)N i ff::tli NTstAlt not for general distribution. EFTA 00116721 EFTA01251245 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ......,0 ••--s"" a AT&T (ITC. Run Data: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn INEI IMEI MAKE MODEL Date Time Number Up Dn (UTC) 28 03/01/20 15:09:22 0:12 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 29 03/01/20 15:09:55 2:27 5220 5991 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 30 03/01/20 15:09:56 2:27 5991 4932 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 31 03/01/20 15:12:23 19:15 8268 7175 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 32 03/01/20 15:31:38 4:48 8406 5288 nxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 33 03/01/20 15:36:25 1:43 6726 6727 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 34 03/01/20 15:36:26 1:43 6727 6438 nxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 35 03/01/20 15:38:09 1:35 7450 5003 nxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 36 03/01/20 15:38:56 60:00 3532 1324 imp -1 310410214827503 37 03/01/20 15:39:44 0:22 5221 5991 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 38 03/01/20 15:39:45 0:22 5991 4933 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 39 03/01/20 15:40:07 31:31 21318 19563 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 40 03/01/20 16:02:35 17:49 9902 6262 imp -1 310410214827503 41 03/01/20 16:11:37 2:55 4504 5759 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 42 03/01/20 16:11:38 2:55 5759 4216 nxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 43 03/01/20 16:14:33 0:05 0 Onxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 44 03/01/20 16:27:22 21:33 8365 6084 imp -1 310410214827503 45 03/01/20 16:29:19 1:40 7396 4952 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 46 03/01/20 16:30:58 1:31 5220 5991 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 47 03/01/20 16:30:59 1:31 5991 4932 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 48 03/01/20 16:32:30 6:30 6040 4939 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 49 03/01/20 16:38:56 60:00 0 0 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 2 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002646 The information contained heraCtoNeli NeTiliAL not for general distribution. EFTA 00116722 EFTA01251246 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in tr `"1° ad s. AT&T UTC. Run Date: 06/17/2020 Run Time: 18:63:33 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn IBEX INSI MARL NICOLL Date Tino Number Up Dn (UTC) 50 03/01/20 16:38:59 4:59 6299 7586 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONZ8 no 51 03/01/20 16:39:00 4:59 7586 5915 nxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 52 03/01/20 16:43:59 6:39 7933 19165 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 53 03/01/20 16:50:30 60:00 24775 18430 imp -1 310410214827503 54 03/01/20 16:50:37 0:21 288 48 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 55 03/01/20 16:50:38 0:22 48 Ormagonpho 3587080982063725 310410214827503 APPLE 1PROME8 no 56 03/01/20 16:51:00 17:39 19037 30448 nxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 57 03/01/20 17:08:38 1:08 5117 6043 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 58 03/01/20 17:08:39 1:08 6043 4829 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 59 03/01/20 17:09:47 41:45 65228 67623 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 60 03/01/20 17:38:56 12:29 0 0 imp -1 310410214827503 61 03/01/20 17:50:30 60:00 0 0 imp -1 310410214827503 62 03/01/20 17:51:25 6:34 8423 6138 imp -1 310410214827503 63 03/01/20 17:51:32 45:02 14269 13073 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 64 03/01/20 17:51:33 45:02 13073 17918 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 65 03/01/20 18:01:09 2:30 8313 6090 imp -1 310410214827503 66 03/01/20 18:06:21 5:55 11275 10058 imp -1 310410214827503 67 03/01/20 18:13:49 8:59 8187 6296 imp -1 310410214827503 68 03/01/20 18:25:49 5:48 8263 7472 imp -1 310410214827503 69 03/01/20 18:35:07 26:02 8371 6016 imp -1 310410214827503 70 03/01/20 18:36:35 8:04 43532 18469 nxtgonpho 3587080982063725 310410214827503 APPLE 1PROME8 no 71 03/01/20 18:44:38 6:14 10852 13435 nxtgonpho 3587080982063725 310410214827503 APPLE 1PROME8 no 72 03/01/20 18:44:39 6:14 13435 21886 nxtgonpho 3587080982063725 310410214827503 APPLE 1PROME8 no 73 03/01/20 18:50:30 60:00 0 0 imp -1 310410214827503 74 03/01/20 18:50:53 2:02 9758 6565 nxtgonpho 3587080982063725 310410214827503 APPLE 1PROME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 3 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002647 The information contained hereeNeli MTV& not for general distribution. EF-EAJVII6723 EFTA01251247 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in trm .IIs1 /00 AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn INCI IMBI MODEL Date Time Mambos Up On (UTC) 75 03/01/20 18:50:54 2:02 6565 9470 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 76 03/01/20 18:52:56 60:00 19262 29639 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 77 03/01/20 19:02:56 60:00 22413 16301 imo -1 310410214827503 78 03/01/20 19:50:30 60:00 0 0 ipso -1 310410214827503 79 03/01/20 19:52:56 9:07 173 105 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 80 03/01/20 19:58:23 0:05 0 3613 ipso -1 310410214827503 81 03/01/20 20:02:02 2:03 5218 5973 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 82 03/01/20 20:02:03 2:03 5973 4930 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 83 03/01/20 20:02:56 60:00 6956 2864 ipso -1 310410214827503 84 03/01/20 20:04:06 60:00 32943 15861 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 85 03/01/20 20:50:30 58:40 0 0 ipso -1 310410214827503 86 03/01/20 21:02:56 32:46 8480 3004 ipso -1 310410214827503 87 03/01/20 21:04:06 3:13 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 88 03/01/20 21:07:19 40:44 7436 11745 nxtgonpho 3587080982063725 310410214827503 APPLE 1PROME8 no 89 03/01/20 21:43:30 0:16 48 0 ipso 3587080982063725 310410214827503 APPLE 1PROME8 90 03/01/20 21:43:46 51:58 11627 7387 ipso 3587080982063725 310410214827503 APPLE 1PROME8 91 03/01/20 21:48:02 2:57 5221 6043 nxtgonpho 3587080982063725 310410214827503 APPLE 1PROME8 no 92 03/01/20 21:48:03 2:57 6043 4933 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 93 03/01/20 21:51:00 2:13 6040 4892 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 94 03/01/20 21:53:12 2:03 5221 5991 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 95 03/01/20 21:53:13 2:03 5991 4933 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 96 03/01/20 21:55:16 15:41 9091 5311 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 97 03/01/20 22:10:56 2:03 5177 6103 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 98 03/01/20 22:10:57 2:03 6103 4889 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 4 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002648 The information contained her is NeTniliAL not for general distribution. EFTA 00116724 EFTA01251248 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Tame: 16:56:33 Data Usage For: Item Conn. Conn. originating ET Bytes Bytoa Ann ANTI IMS1 (WM NICOLL Date Time Number Up Dn (UTC) 99 03/01/20 22:13:00 60:00 6976 5733 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 100 03/01/20 22:42:34 13:34 6778 6105 ims 3587080982063725 310410214827503 APPLE !PRONGS 101 03/01/20 22:56:08 40:20 7172 3696 ims 3587080982063725 310410214827503 APPLE !PHONES 102 03/01/20 23:13:00 60:00 1471 4996ruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 103 03/01/20 23:38:48 0:05 0 0 ims 3587080982063725 310410214827503 APPLE !PHONES 104 03/01/20 23:53:31 42:44 17191 8099 ims -1 310410214827503 105 03/02/20 00:13:00 60:00 4177 4210 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 106 03/02/20 00:47:05 36:22 8553 7960 ims -1 310410214827503 107 03/02/20 01:13:00 58:51 4775 11416 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 108 03/02/20 01:28:01 19:50 8228 7855 ims 3587080982063725 310410214827503 APPLE !PHONES 109 03/02/20 01:47:51 2:30 3532 1340 ims 3587080982063725 310410214827503 APPLE !PHONES 110 03/02/20 01:58:42 60:00 13603 7860 ims -1 310410214827503 111 03/02/20 02:11:50 2:11 5221 6043 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 112 03/02/20 02:11:51 2:11 6043 4933ruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 113 03/02/20 02:14:02 60:00 7529 5854ruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 114 03/02/20 02:58:42 59:06 13444 4516 ims -1 310410214827503 115 03/02/20 03:14:02 60:00 1746 1500 nxtgonpho 3587080982063725 310410214827503 APPLE !PRONGS no 116 03/02/20 03:58:49 60:00 12186 9034 ims 3587080982063725 310410214827503 APPLE !PHONES 117 03/02/20 04:14:02 60:00 1320 1250 nxtgonpho 3587080982063725 310410214827503 APPLE 1PROME8 no 118 03/02/20 04:58:49 60:00 5192 2664 ims 3587080982063725 310410214827503 APPLE DRONES 119 03/02/20 05:14:02 60:00 1095 1341ruftgonpho 3587080982063725 310410214827503 APPLE DRONES no 120 03/02/20 05:58:49 60:00 5192 2664 ims 3587080982063725 310410214827503 APPLE DRONES 121 03/02/20 06:14:02 60:00 639 375ruftgonpho 3587080982063725 310410214827503 APPLE DRONES no 122 03/02/20 06:58:49 41:03 2596 1324 ims 3587080982063725 310410214827503 APPLE DRONES 123 03/02/20 07:14:02 25:50 369 375ruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 124 03/02/20 07:39:52 0:15 495 293ruftgonpho 3587080982063725 310410214827503 APPLE !PRONGS no 125 03/02/20 07:39:52 0:07 0 0 ims 3587080982063725 310410214827503 APPLE !PRONGS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 5 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002649 The information contained hereeNyFtli NaTiliAL not for general distribution. EF-EAJVII6725 EFTA01251249 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T (ITC. Run pato: 06/17/2020 Run Time: Data usage For: Item corm. Conn. Originating ET Bytes Bytes Apn INEI IMBI taxi MODEL Date Timo Number Up on (OTC) 126 03/02/20 07:39:59 22:50 4840 1572 imp 3587080982063725 310410214827503 APPLE !PHONES 127 03/02/20 07:40:07 60:00 582 572nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 128 03/02/20 08:07:09 29:52 9262 7340 ims 3587080982063725 310410214827503 APPLE !PHONES 129 03/02/20 08:37:01 6:04 8728 7072 ims 3587080982063725 310410214827503 APPLE IPHONE8 130 03/02/20 08:40:07 2:56 252 269rumgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 131 03/02/20 12:01:08 29:41 103877 370807rumgonpho 3587080982063725 310410214827503 APPLE !PHONES no 132 03/02/20 12:01:11 29:38 14032 12064 ims 3587080982063725 310410214827503 APPLE IPRONE8 133 03/02/20 16:16:03 30:50 152117 587017rumgonpho 3587080982063725 310410214827503 APPLE IPRONE8 no 134 03/02/20 16:16:05 1:10 8816 6194 ims 3587080982063725 310410214827503 APPLE IPRONE8 135 03/02/20 16:17:15 60:00 79112 44236 ims 3587080982063725 310410214827503 APPLE IPRONE8 136 03/02/20 16:34:35 0:04 0 2210 ims 3587080982063725 310410214827503 APPLE IPRONE8 137 03/02/20 16:34:56 0:23 7149 31933 ims 3587080982063725 310410214827503 APPLE IPRONE8 138 03/02/20 16:35:59 0:06 5581 12969 ims 3587080982063725 310410214827503 APPLE IPRONE8 139 03/02/20 16:36:44 0:56 117835 139892 ims 3587080982063725 310410214827503 APPLE 'PHONES 140 03/02/20 16:43:41 0:09 11001 4562 ims 3587080982063725 310410214827503 APPLE DRONES 141 03/02/20 16:44:01 2:12 235412 454074 ims 3587080982063725 310410214827503 APPLE DRONES 142 03/02/20 16:46:52 2:07 5464 7722rumgonpho 3587080982063725 310410214827503 APPLE DRONES no 143 03/02/20 16:46:53 2:07 7722 5176rumgonpho 3587080982063725 310410214827503 APPLE IPRONE8 no 144 03/02/20 16:48:59 21:34 10832 12811rumgonpho 3587080982063725 310410214827503 APPLE !PHONES no 145 03/02/20 17:10:33 44:52 11500 13087rumgonpho 3587080982063725 310410214827503 APPLE !PHONES no 146 03/02/20 17:10:34 44:52 13087 13674rumgonpho 3587080982063725 310410214827503 APPLE !PRONGS no 147 03/02/20 17:17:15 8:46 0 0 ims 3587080982063725 310410214827503 APPLE !PHONES 148 03/02/20 17:28:07 14:50 8207 7090 ims -1 310410214827503 149 03/02/20 17:48:50 11:14 8225 6088 ims -1 310410214827503 150 03/02/20 17:55:26 3:03 7794 5274 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 151 03/02/20 17:58:28 18:22 321797 68055rumgonpho 3587080982063725 310410214827503 APPLE !PHONES no 152 03/02/20 17:58:29 18:22 68055 350874rumgonpho 3587080982063725 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 6 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002650 The information contained hereleenNyR NeTniliAL not for general distribution. EFTA 00116726 EFTA01251250 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ...,,,• ••—ss` a. AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. originating ET Bytes Bytoa Apn IND I INSI MAfl NICOLL Date Time Number Up Dn (UTC) 153 03/02/20 18:04:26 12:24 6316 6778 imp 3587080982063725 310410214827503 APPLE !PHONES 154 03/02/20 18:04:27 12:24 6670 5964 imp 3587080982063725 310410214827503 APPLE !PHONES 155 03/02/20 18:15:35 17:29 10178 6494 imp -1 310410214827503 156 03/02/20 18:16:51 8:26 5439 6387 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 157 03/02/20 18:16:52 8:26 6387 5151 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 158 03/02/20 18:25:18 15:26 8963 10970 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 159 03/02/20 18:36:22 13:47 8199 5999 imp 3587080982063725 310410214827503 APPLE !PHONES 160 03/02/20 18:40:43 2:07 13092 7135 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 161 03/02/20 18:40:44 2:07 7135 12804 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 162 03/02/20 18:42:51 60:00 11769 17044 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 163 03/02/20 18:50:09 2:18 2984 1340 imo 3587080982063725 310410214827503 APPLE 'PHONES 164 03/02/20 18:50:09 2:18 2812 1340 imo 3587080982063725 310410214827503 APPLE 'PHONES 165 03/02/20 18:52:27 4:13 3424 1448 imo 3587080982063725 310410214827503 APPLE !PHONES 166 03/02/20 18:58:32 4:46 0 0 imo -1 310410214827503 167 03/02/20 19:14:25 15:41 9323 6918 imo -1 310410214827503 168 03/02/20 19:32:47 17:39 8477 6283 imp -1 310410214827503 169 03/02/20 19:42:51 54:20 10545 9322 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 170 03/02/20 19:56:40 10:31 0 0 imp -1 310410214827503 171 03/02/20 20:09:27 60:00 16978 9252 imp -1 310410214827503 172 03/02/20 20:37:10 2:07 5578 6598 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 173 03/02/20 20:37:11 2:07 6457 5290 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 174 03/02/20 20:39:18 27:09 8245 11360 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 175 03/02/20 21:06:26 2:18 6296 8106 nxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 176 03/02/20 21:06:27 i:19 8106 6008 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 177 03/02/20 21:08:46 38:39 8309 6108 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 178 03/02/20 21:09:27 15:00 0 0 imo -1 310410214827503 179 03/02/20 21:32:03 20:42 8203 5998 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 7 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002651 The information contained heraCtoNyFti NeTniliAL not for general distribution. EFTA 00116727 EFTA01251251 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am tO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time 20ne. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: 16:53:33 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn INLI INS' NAfl NICOLL Date Time Number Up Dn (UTC) 180 03/02/20 21:47:24 12:15 17860 39013 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 181 03/02/20 21:47:25 12:16 39013 17476 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 182 03/02/20 21:58:20 30:21 0 0 ims -1 310410214827503 183 03/02/20 21:59:40 34:23 32299 48475 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 184 03/02/20 21:59:41 34:23 48475 32752 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 185 03/02/20 22:06:58 22:20 10591 8188 ims -1 310410214827503 186 03/02/20 22:28:40 5:23 6305 6732 ims 3587080982063725 310410214827503 APPLE !PHONES 187 03/02/20 22:28:41 5:23 6732 6041 ims 3587080982063725 310410214827503 APPLE !PHONES 188 03/02/20 22:31:33 6:26 10063 8268 ims -1 310410214827503 189 03/02/20 22:34:03 7:05 8089 10976 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 190 03/02/20 22:34:05 7:04 10976 7801 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 191 03/02/20 22:40:32 32:40 19107 12870 ims -1 310410214827503 192 03/02/20 22:41:09 1:04 8543 5515 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 193 03/02/20 22:42:12 2:10 5792 7397 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 194 03/02/20 22:42:13 2:10 7397 5504 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 195 03/02/20 22:44:23 12:58 8379 5971 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 196 03/02/20 22:57:20 10:17 9677 19783 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 197 03/02/20 22:57:21 10:17 19783 9389 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 198 03/02/20 23:07:38 0:51 7248 5395 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 199 03/02/20 23:08:29 99:47 12346 13625 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 200 03/02/20 23:08:30 60:00 6907 8351 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 201 03/02/20 23:13:34 94:42 9570 9722 ims 3587080982063725 310410214827503 APPLE IPHOME8 202 03/02/20 23:13:35 60:00 9614 9414 ims 3587080982063725 310410214827503 APPLE !PHONES 203 03/02/20 23:14:47 0:01 0 0 ims -1 310410214827503 204 03/02/20 23:17:19 34:17 11811 7693 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 8 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002652 The information contained heraleeNelt NeTniliAL not for general distribution. EF-EAJVII6728 EFTA01251252 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ...„,,• ••-s` a. AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Byte. Apr. INS' MAKE NODEL Date Time Number Up Dn (UTC) 205 03/02/20 23:56:48 60:00 14766 7840 imp -1 310410214827503 206 03/03/20 00:08:30 39:48 6718 6727 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 207 03/03/20 00:13:35 34:43 0 0 imp 3587080982063725 310410214827503 APPLE !PHONES 208 03/03/20 00:48:17 4:13 7806 5708 nxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 209 03/03/20 00:52:30 14:10 64691 46658 nxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 210 03/03/20 00:52:35 56:22 20187 11190 imp -1 310410214827503 211 03/03/20 00:56:48 60:00 0 0 imp -1 310410214827503 212 03/03/20 01:06:40 2:06 5584 6435 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 213 03/03/20 01:06:41 2:06 6435 5296 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 214 03/03/20 01:08:47 2:21 7926 5519 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 215 03/03/20 01:11:07 1:20 5584 6507 nxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 216 03/03/20 01:11:08 1:19 6507 5296 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 217 03/03/20 01:12:28 30:56 17894 13813 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 218 03/03/20 01:43:23 14:47 6083 6888 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 219 03/03/20 01:43:24 14:47 6888 5795 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 220 03/03/20 01:53:38 32:27 16630 8649 ism -1 310410214827503 221 03/03/20 01:56:48 60:00 0 0 imp -1 310410214827503 222 03/03/20 01:58:11 60:00 8925 7567 nxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 223 03/03/20 02:35:26 60:00 13553 7876 ism -1 310410214827503 224 03/03/20 02:56:48 60:00 0 0 imp -1 310410214827503 225 03/03/20 02:58:11 60:00 852 500 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 226 03/03/20 03:35:26 60:00 13444 4360 imp -1 310410214827503 227 03/03/20 03:56:48 45:12 0 0 imp -1 310410214827503 228 03/03/20 03:58:11 60:00 6285 9286 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 229 03/03/20 04:35:26 11:25 0 0 imp -1 310410214827503 230 03/03/20 04:54:33 26:00 11002 6192 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 9 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002653 The information contained heraCtoNyFtli NTniliAL not for general distribution. EFTAJVII6729 EFTA01251253 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ..zissi" %-—". AT&T (ITC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating IT Bytes Bytom Apn INLI IMBI MAfl NICOLL Date Time Hunter UP Dn (UTC) 231 03/03/20 04:58:11 60:00 1008 750 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 232 03/03/20 05:28:33 5:32 0 0 in -1 310410214827503 233 03/03/20 05:42:12 11:36 8451 6230 in -1 310410214827503 234 03/03/20 05:58:11 30:15 426 250 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 235 03/03/20 06:05:52 0:25 9552 7198 imp 3587080982063725 310410214827503 APPLE IPHONEB 236 03/03/20 06:06:17 60:00 12012 4560 imp 3587080982063725 310410214827503 APPLE IPHONEB 237 03/03/20 06:28:26 2:10 5221 6055 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 238 03/03/20 06:28:27 2:10 6055 4933 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 239 03/03/20 06:30:37 12:02 6265 5017 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 240 03/03/20 06:42:39 61:49 6703 7688 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 241 03/03/20 06:42:40 60:00 7515 6310 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 242 03/03/20 07:06:17 7:58 0 0 imp 3587080982063725 310410214827503 APPLE IPHONEB 243 03/03/20 07:23:35 20:53 7325 6792 imp 3587080982063725 310410214827503 APPLE IPHONEB 244 03/03/20 07:23:36 20:53 6792 7061 imp 3587080982063725 310410214827503 APPLE IPHONEB 245 03/03/20 07:23:52 10:34 11234 6390 imp -1 310410214827503 246 03/03/20 07:42:38 38:41 13368 7571 imp -1 310410214827503 247 03/03/20 07:42:40 1:49 173 105 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 248 03/03/20 07:44:29 15:24 7635 5218 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 249 03/03/20 07:59:52 8:49 7621 7231 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 250 03/03/20 07:59:53 8:49 7231 7237 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 251 03/03/20 08:08:42 0:48 6870 4955 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 252 03/03/20 08:09:29 0:48 5116 6055 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 253 03/03/20 08:09:30 0:48 6055 4828 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 254 03/03/20 08:10:18 0:40 6112 4952 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 10 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002654 The information contained heraleeNyFtli NeTniiiikE not for general distribution. EFTA_OOII6730 EFTA01251254 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage For: MS= Item Conn. Conn. Originating ET Bytes Bytoa Apn ICI IMSI MARS MOLL Date Time Number Up On (UTC) 255 03/03/20 08:10:57 2:36 5117 6055 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 256 03/03/20 08:10:58 2:36 6055 4829ruagenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 257 03/03/20 08:13:33 8:22 5113 6105ruagenpho 3587080982063725 310410214827503 APPLE !PHONES no 258 03/03/20 08:13:35 8:21 6105 4825ruagenpho 3587080982063725 310410214827503 APPLE !PHONES no 259 03/03/20 08:21:56 60:00 7213 5837roftgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 260 03/03/20 08:31:42 16:37 9802 6142 imp -1 310410214827503 261 03/03/20 08:49:57 41:51 14587 7694 imp -1 310410214827503 262 03/03/20 09:21:56 5:17 173 105ruagenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 263 03/03/20 09:27:12 2:06 5116 6055ruagenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 264 03/03/20 09:27:13 2:06 6055 4828ruagenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 265 03/03/20 09:29:19 60:00 8500 5638ruagenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 266 03/03/20 09:43:56 4:50 0 0 imp -1 310410214827503 267 03/03/20 09:58:18 3:50 11004 6250 imp -1 310410214827503 268 03/03/20 10:07:18 25:12 9679 6398 imp -1 310410214827503 269 03/03/20 10:29:19 60:00 8133 2343 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 270 03/03/20 10:47:22 0:14 48 0 imp 3587080982063725 310410214827503 APPLE IPHOME8 271 03/03/20 10:47:36 34:54 13747 8456 imp 3587080982063725 310410214827503 APPLE IPHOME8 272 03/03/20 11:29:05 33:39 13398 7586 imp -1 310410214827503 273 03/03/20 11:29:19 37:34 9542 6573 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 274 03/03/20 12:06:52 8:49 5221 6055ruagenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 275 03/03/20 12:06:54 8:48 6055 4933ruagenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 276 03/03/20 12:07:05 60:00 18679 8370 imp -1 310410214827503 277 03/03/20 12:15:42 2:09 5216 6053 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 278 03/03/20 12:15:43 2:09 6053 4928ruagenpho 3587080982063725 310410214827503 APPLE IPHOME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 11 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002655 The information contained hereCtoNeli NTntAlt not for general distribution. EF-EA_00116731 EFTA01251255 MOBILITY 4101. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in %"" ,....... a‘S ../ ° AT&T arc. Run Date: 06/17/2020 Run Time: 10:55:34 Data Osage For: Item Conn. Conn. Originating ET Sytes Bytoa Apn IKI INSI MARE MODEL Data Time Number OP Dn (um) 279 03/03/20 12:17:52 19:55 7630 6275 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 280 03/03/20 12:37:46 2:06 5532 9011 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 281 03/03/20 12:37:47 2:06 9011 5244 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 282 03/03/20 12:39:53 31:03 7586 5843 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 283 03/03/20 13:07:05 22:45 4964 1572 ims -1 310410214827503 284 03/03/20 13:10:55 0:40 5325 6280 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 285 03/03/20 13:10:56 0:40 6280 5037 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 286 03/03/20 13:11:36 7:06 9026 5966 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 287 03/03/20 13:18:41 8:16 5217 6105 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 288 03/03/20 13:18:42 8:16 6105 4929 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 289 03/03/20 13:26:58 0:46 6870 4956 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 290 03/03/20 13:27:43 2:06 10413 7087 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 291 03/03/20 13:27:44 2:06 7087 10125 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 292 03/03/20 13:29:50 38:38 13586 8797 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 293 03/03/20 13:33:07 0:25 16290 13240 ims 3587080982063725 310410214827503 APPLE IPHONEB 294 03/03/20 13:33:32 33:21 10840 10928 ims 3587080982063725 310410214827503 APPLE IPHONEB 295 03/03/20 14:08:27 6:02 5221 6055 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 296 03/03/20 14:08:28 6:02 6055 4933 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 297 03/03/20 14:14:30 46:03 26448 21682 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 298 03/03/20 14:14:32 10:03 8808 6173 ims 3587080982063725 310410214827503 APPLE IPHONEB 299 03/03/20 14:24:35 29:19 8248 3004 ims 3587080982063725 310410214827503 APPLE IPHONEB 300 03/03/20 14:54:30 0:29 8098 7128 ims 3587080982063725 310410214827503 APPLE IPHONEB 301 03/03/20 14:54:59 39:09 9804 3052 ims 3587080982063725 310410214827503 APPLE !PHONES 302 03/03/20 15:00:32 13:07 24019 14458 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 12 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained heraCteNyFtli PsiTniliAL not for general distribution. SDNCGM00002656 EFTA 00116732 EFTA01251256 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in ......, ••—•st"" e0 AT&T UTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INEI IMBI MUT MODEL Data Time Number Up Dn (OTC) 303 03/03/20 15:00:33 13:07 14458 23635 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 304 03/03/20 15:13:40 58:17 7179 6785 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 305 03/03/20 15:35:15 0:06 0 0 imp -1 310410214827503 306 03/03/20 15:43:23 5:03 18043 11424 imp -1 310410214827503 307 03/03/20 15:48:44 55:52 13475 8142 imp -1 310410214827503 308 03/03/20 16:20:12 2:10 7680 8328 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 309 03/03/20 16:20:13 2:10 8328 7392 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 310 03/03/20 16:22:23 52:40 60305 22538 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 311 03/03/20 16:45:35 60:00 12603 7786 imp -1 310410214827503 312 03/03/20 17:15:02 2:07 13534 92096 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 313 03/03/20 17:15:03 2:07 92096 13246 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 314 03/03/20 17:17:10 40:59 10564 6373 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 315 03/03/20 17:45:35 29:47 5088 1572 ism -1 310410214827503 316 03/03/20 17:58:08 11:42 11259 12573 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 317 03/03/20 17:58:09 11:42 12573 24067 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 318 03/03/20 18:09:51 35:52 6810 5733 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 319 03/03/20 18:17:26 18:56 6670 5963 imp 3587080982063725 310410214827503 APPLE IPHONEB 320 03/03/20 18:36:22 60:00 11996 4328 imp 3587080982063725 310410214827503 APPLE IPHONEB 321 03/03/20 18:45:42 2:07 5218 6105 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 322 03/03/20 18:45:43 2:07 6105 4930 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 323 03/03/20 18:47:50 2:26 9442 11383 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 324 03/03/20 18:50:15 2:15 5535 9029 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 325 03/03/20 18:50:16 2:15 9029 5247 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 326 03/03/20 18:52:31 21:26 15301 35155 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 13 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002657 The information contained heraCtopeli NeTifikE not for general distribution. EF-EA_00116733 EFTA01251257 MOBILITY ap. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T LTC. Run Date: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Bytom Apn IKI INSI MARE MODEL Date Time Number Up Dn (UTC) 327 03/03/20 19:13:55 2:25 5768 7851 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 328 03/03/20 19:13:57 2:24 7851 5480 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 329 03/03/20 19:16:20 52:45 731753 3170468 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 330 03/03/20 19:16:21 52:45 3170468 731465 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 331 03/03/20 19:36:22 60:00 6956 2880 imam 3587080982063725 310410214827503 APPLE 1PROME8 332 03/03/20 20:09:06 1:12 7245 5092 nxtgonpho 3587080982063725 310410214827503 APPLE 1PROME8 no 333 03/03/20 20:10:18 12:53 8802 7894 nxtgonpho 3587080982063725 310410214827503 APPLE 1PROME8 no 334 03/03/20 20:10:19 12:53 7894 8514 nxtgonpho 3587080982063725 310410214827503 APPLE 1PROME8 no 335 03/03/20 20:23:12 2:10 7526 5166 nxtgonpho 3587080982063725 310410214827503 APPLE 1PROME8 no 336 03/03/20 20:25:21 2:09 5345 7525 nxtgonpho 3587080982063725 310410214827503 APPLE 1PROME8 no 337 03/03/20 20:25:22 2:09 7525 5057 nxtgonpho 3587080982063725 310410214827503 APPLE 1PROME8 no 338 03/03/20 20:27:31 3:08 6340 5292 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 339 03/03/20 20:30:38 14:54 5752 7585 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 340 03/03/20 20:30:39 14:54 7585 5464 nxtgonpho 3587080982063725 310410214827503 APPLE 1PROME8 no 341 03/03/20 20:36:22 16:16 3532 1324 ims 3587080982063725 310410214827503 APPLE DRONES 342 03/03/20 20:45:32 0:06 0 48 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 343 03/03/20 20:45:34 0:05 48 Oruftgonpho 3587080982063725 310410214827503 APPLE DRONES no 344 03/03/20 20:45:47 1:55 5221 6055 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 345 03/03/20 20:45:48 1:56 6055 4933 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 346 03/03/20 20:47:44 13:12 9776 11284 nxtgonpho 3587080982063725 310410214827503 APPLE 1PROME8 no 347 03/03/20 20:53:28 0:34 19114 16639 imam 3587080982063725 310410214827503 APPLE 1PROME8 348 03/03/20 20:54:02 28:56 8836 3160 imam 3587080982063725 310410214827503 APPLE 1PROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 14 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002658 The information contained heraCteNyHt PsisTiliAL not for general distribution. EF-EA_00116734 EFTA01251258 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn IMEI DWI MARE MODEL Date Time Number Up Dn (UTC) 349 03/03/20 21:00:55 2:06 5117 6055 nxtgenpho 3587080982063725 310410214827503 APPLE !PROMS no 350 03/03/20 21:00:56 2:06 6055 4829 nxtgenpho 3587080982063725 310410214827503 APPLE !PROMS no 351 03/03/20 21:03:02 4:40 7630 5224 nxtgenpho 3587080982063725 310410214827503 APPLE !PROMS no 352 03/03/20 21:07:41 2:07 5281 6115 nxtgenpho 3587080982063725 310410214827503 APPLE TUMMIES no 353 03/03/20 21:07:42 2:07 6115 4993 nxtgenpho 3587080982063725 310410214827503 APPLE 1PRONZ8 no 354 03/03/20 21:09:49 0:05 0 Onxtgenpho 3587080982063725 310410214827503 APPLE 1PRONZ8 no 355 03/03/20 21:09:58 25:19 7879 5848 nxtgenpho 3587080982063725 310410214827503 APPLE 1PRONZ8 no 356 03/03/20 21:24:20 8:46 0 0 ims -1 310410214827503 357 03/03/20 21:35:17 113:52 6856 11128 nxtgenpho 3587080982063725 310410214827503 APPLE !PROMS no 358 03/03/20 21:35:18 60:00 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PROMS no 359 03/03/20 21:35:20 112:43 7134 6744 ims 3587080982063725 310410214827503 APPLE !PROMS 360 03/03/20 21:35:21 60:00 6744 6978 ims 3587080982063725 310410214827503 APPLE !PROMS 361 03/03/20 21:35:37 60:00 32623 20498 ims -1 310410214827503 362 03/03/20 21:35:54 30:49 5373088 4436025 ims -1 310410214827503 363 03/03/20 22:35:18 53:52 10936 6280 nxtgenpho 3587080982063725 310410214827503 APPLE !PROMS no 364 03/03/20 22:35:21 52:43 0 0 imp 3587080982063725 310410214827503 APPLE DRONES 365 03/03/20 22:35:37 37:55 3532 1340 imp -1 310410214827503 366 03/03/20 23:15:41 8:11 0 0 imp -1 310410214827503 367 03/03/20 23:27:35 0:59 6262 6666 ims 3587080982063725 310410214827503 APPLE DRONES 368 03/03/20 23:27:36 0:59 6666 5998 ims 3587080982063725 310410214827503 APPLE !PROMS 369 03/03/20 23:28:02 0:03 0 0 imp -1 310410214827503 370 03/03/20 23:28:09 1:00 7266 6862 ims 3587080982063725 310410214827503 APPLE !PROMS 371 03/03/20 23:28:10 1:00 6798 7002 ims 3587080982063725 310410214827503 APPLE DRONES 372 03/03/20 23:28:33 58:37 18422 9574 ims -1 310410214827503 373 03/03/20 23:29:10 0:36 7462 5052 nxtgenpho 3587080982063725 310410214827503 APPLE DRONES no 374 03/03/20 23:29:45 24:20 30213 52870 nxtgenpho 3587080982063725 310410214827503 APPLE !PROMS no 375 03/03/20 23:29:46 24:20 52870 29925 nxtgenpho 3587080982063725 310410214827503 APPLE !PROMS no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 15 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002659 The information contained her is WAAL not for general distribution. EF-EA_00116735 EFTA01251259 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in .....„,,,• ••-s`" 1. AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INFI ISISI teal NDDEL Date Time Number Up Dn (UTC) 376 03/03/20 23:54:06 15:46 17645 20423 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 377 03/03/20 23:54:07 15:47 20423 17069 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 378 03/04/20 00:09:54 0:46 11507 6439 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 379 03/04/20 00:10:39 52:20 56711 52938 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 380 03/04/20 00:10:40 52:20 52938 68486 nxtgonpho 3587080982063725 310410214827503 APPLE IPRONE8 no 381 03/04/20 00:32:25 2:30 0 0 ims -1 310410214827503 382 03/04/20 00:45:06 17:53 6510 8370 ims 3587080982063725 310410214827503 APPLE !PRONGS 383 03/04/20 00:45:07 17:53 8302 6354 ims 3587080982063725 310410214827503 APPLE !PRONGS 384 03/04/20 00:45:49 0:03 0 0 ims -1 310410214827503 385 03/04/20 00:46:19 60:00 15323 9894 ims -1 310410214827503 386 03/04/20 01:03:00 0:59 48 Oruagonpho 3587080982063725 310410214827503 APPLE !PRONGS no 387 03/04/20 01:03:58 30:52 55514 57373 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 388 03/04/20 01:03:59 30:52 57373 56180 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 389 03/04/20 01:34:51 0:06 0 Oruagonpho 3587080982063725 310410214827503 APPLE !PRONGS no 390 03/04/20 01:37:32 21:01 25916 28070 nxtgonpho 3587080982063725 310410214827503 APPLE !PRONGS no 391 03/04/20 01:37:33 21:01 28070 25517 nxtgonpho 3587080982063725 310410214827503 APPLE !PRONGS no 392 03/04/20 01:46:19 55:23 8620 2928 ims -1 310410214827503 393 03/04/20 01:58:34 63:59 105999 112162 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 394 03/04/20 01:58:35 60:00 111873 105108 nxtgonpho 3587080982063725 310410214827503 APPLE IPRONE8 no 395 03/04/20 02:49:16 12:28 264 112 ims 3587080982063725 310410214827503 APPLE !PHONES 396 03/04/20 02:49:17 12:28 48 0 ims 3587080982063725 310410214827503 APPLE !PHONES 397 03/04/20 02:50:28 6:33 0 0 ims -1 310410214827503 398 03/04/20 02:58:35 3:59 289 315 nxtgonpho 3587080982063725 310410214827503 APPLE !PRONGS no 399 03/04/20 03:01:22 0:25 7234 6788 ims 3587080982063725 310410214827503 APPLE !PRONGS 400 03/04/20 03:01:23 0:26 6788 6970 mos 3587080982063725 310410214827503 APPLE !PRONGS 401 03/04/20 03:01:44 0:05 2567 1210 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 16 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002660 The information contained her is PsiTifikE not for general distribution. EF-EA_00116736 EFTA01251260 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59Om AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tr '`s ad AT&T s OTC. Run Data: 06/17/2020 Run Time: Data Osage Tor: illIll'Ill Item Conn. Conn. Originating ET Bytes Byte. Apn ICI INSI MARL NICOLL Data Time Number op Dn (OTC) 402 03/04/20 03:01:47 0:46 6360 6670 ims 3587080982063725 310410214827503 APPLE 'PHONES 403 03/04/20 03:01:48 0:46 6670 6096 ims 3587080982063725 310410214827503 APPLE 'PHONES 404 03/04/20 03:02:11 39:31 14275 8051 ims -1 310410214827503 405 03/04/20 03:02:34 0:39 0 0 nxtopanpho 3587080982063725 310410214827503 APPLE 'PHONES no 406 03/04/20 03:03:12 73:18 28513 15701 nxtopanpho 3587080982063725 310410214827503 APPLE 'PHONES no 407 03/04/20 03:03:13 60:00 7682 13726nxtopanpho 3587080982063725 310410214827503 APPLE !PHONES no 408 03/04/20 03:53:13 23:17 7231 6796 ims 3587080982063725 310410214827503 APPLE 'PHONES 409 03/04/20 03:53:14 23:17 6796 7075 ims 3587080982063725 310410214827503 APPLE 'PHONES 410 03/04/20 03:54:40 14:02 9119 6273 ims -1 310410214827503 411 03/04/20 04:03:13 13:18 8019 14307 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 412 03/04/20 04:13:39 36:38 13443 7848 ims -1 310410214827503 413 03/04/20 04:16:31 6:11 6032 5599 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 414 03/04/20 04:22:41 20:00 11994 13097 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 415 03/04/20 04:22:42 60:00 65817 44943 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 416 03/04/20 04:42:41 62:23 34539 53298nxtopanpho 3587080982063725 310410214827503 APPLE 'PHONES no 417 03/04/20 04:48:51 56:13 7374 39842 ims 3587080982063725 310410214827503 APPLE 'PHONES 418 03/04/20 04:48:52 56:13 6794 7110 ims 3587080982063725 310410214827503 APPLE 'PHONES 419 03/04/20 05:05:48 60:00 15313 8908 ims -1 310410214827503 420 03/04/20 05:22:42 22:23 578 630nxtopanpho 3587080982063725 310410214827503 APPLE !PHONES no 421 03/04/20 05:45:05 2:17 5221 6023nxtopanpho 3587080982063725 310410214827503 APPLE !PHONES no 422 03/04/20 05:45:06 2:17 6023 4933nxtopanpho 3587080982063725 310410214827503 APPLE !PHONES no 423 03/04/20 05:47:23 37:45 27157 37423 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 424 03/04/20 05:47:24 37:45 37423 26773 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 425 03/04/20 06:05:48 16:56 0 0 ims -1 310410214827503 426 03/04/20 06:25:10 48:24 9251 11190 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 427 03/04/20 06:26:41 13:02 8491 6410 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 17 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002661 The information contained heraCtoNyFti NeTtikE not for general distribution. EF-EAJVII6737 EFTA01251261 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn INEI INSI MARL MODEL Date Time Number Up Dn (OTC) 428 03/04/20 06:46:22 60:00 13338 7746 ins -1 310410214827503 429 03/04/20 07:13:33 2:05 5222 6075 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 430 03/04/20 07:13:34 2:05 6075 4934 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 431 03/04/20 07:15:39 60:00 8970 6813 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 432 03/04/20 07:46:22 0:17 0 0 ins -1 310410214827503 433 03/04/20 07:51:19 6:15 48 0 ins 3587080982063725 310410214827503 APPLE !PHONES 434 03/04/20 07:57:34 60:00 15137 8951 ins 3587080982063725 310410214827503 APPLE IPHOME8 435 03/04/20 08:15:39 60:00 58544 77226 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 436 03/04/20 08:57:34 9:27 0 0 ins 3587080982063725 310410214827503 APPLE !PHONES 437 03/04/20 09:11:30 8:59 0 0 ins -1 310410214827503 438 03/04/20 09:15:39 60:00 1723 3095 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 439 03/04/20 09:25:04 60:00 16490 8950 ins -1 310410214827503 440 03/04/20 10:15:39 60:00 1384 968 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 441 03/04/20 10:25:04 49:47 8388 3036 ins -1 310410214827503 442 03/04/20 11:15:39 60:00 22590 24929 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 443 03/04/20 11:18:22 46:42 14778 8892 ins -1 310410214827503 444 03/04/20 12:09:39 15:38 8367 6072 ins -1 310410214827503 445 03/04/20 12:15:39 19:26 21920 25058 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 446 03/04/20 12:32:29 15:21 14115 12665 ins -1 310410214827503 447 03/04/20 12:35:04 2:56 5221 6023 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 448 03/04/20 12:35:05 2:56 6023 4933 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 449 03/04/20 12:38:01 11:43 7596 6216 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 450 03/04/20 12:49:44 34:12 15878 18653 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 451 03/04/20 12:49:45 34:12 18653 16658 nxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 452 03/04/20 12:49:49 2:11 8453 6430 vas -1 310410214827503 453 03/04/20 12:51:43 0:05 0 0 vas 3587080982063725 310410214827503 APPLE !PHONES 454 03/04/20 12:52:18 26:35 6262 6670 ins 3587080982063725 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 18 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002662 The information contained hereCoNfti NeTnilikk. not for general distribution. EF-EAJVII6738 EFTA01251262 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ....,„# ••-•°"" s AT&T UTC. Run Date: 06/17/2020 Run Time: 10:55:34 Data Osage Tor: Item Conn. Conn. Originating LT Bytes Bytes Apn INLI IMSI MARL MODEL Date Time Number Up On (OTC) 455 03/04/20 12:52:19 26:35 6670 6106 ims 3587080982063725 310410214827503 APPLE IPHOME8 456 03/04/20 12:52:35 16:07 8313 5982 ims -1 310410214827503 457 03/04/20 13:13:15 1:38 0 0 Sums -1 310410214827503 458 03/04/20 13:17:35 6:21 6248 6666 hams 3587080982063725 310410214827503 APPLE IPHOME8 459 03/04/20 13:17:36 6:21 6666 6092 ims 3587080982063725 310410214827503 APPLE IPHONEB 460 03/04/20 13:18:53 60:00 16575 9018 ims -1 310410214827503 461 03/04/20 13:23:57 2:15 14505 5862 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 462 03/04/20 13:26:12 1:08 5112 6021 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 463 03/04/20 13:26:13 1:08 6021 4824 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 464 03/04/20 13:27:21 2:26 6020 4893 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 465 03/04/20 13:29:46 2:07 5222 6196 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 466 03/04/20 13:29:47 2:07 6196 4934 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 467 03/04/20 13:31:54 60:00 25665 13703 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 468 03/04/20 14:18:53 46:08 8496 2820 ims -1 310410214827503 469 03/04/20 14:31:54 60:00 341 1155 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 470 03/04/20 15:04:19 60:00 0 0 ims -1 310410214827503 471 03/04/20 15:05:01 26:14 11655 7628 ims -1 310410214827503 472 03/04/20 15:31:54 9:53 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 473 03/04/20 15:42:35 60:00 16282 9102 ims -1 310410214827503 474 03/04/20 16:04:19 11:00 0 0 ims -1 310410214827503 475 03/04/20 16:08:38 60:00 16925 11000 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 476 03/04/20 16:15:18 0:07 0 0 ims -1 310410214827503 477 03/04/20 16:17:32 19:08 9817 6348 ins -1 310410214827503 478 03/04/20 16:40:18 1:19 7364 6104 ins 3587080982063725 310410214827503 APPLE !PROMS 479 03/04/20 16:41:37 60:00 12028 4220 ins 3587080982063725 310410214827503 APPLE !PROMS 480 03/04/20 16:42:35 60:00 0 0 ins -1 310410214827503 481 03/04/20 17:08:38 11:35 237 210 nxtgenpho 3587080982063725 310410214827503 APPLE !PROMS no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 19 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002663 The information contained heraleeNyFti N:FilleAsk not for general distribution. EF-EA_00116739 EFTA01251263 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 LL:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in %. %..„„" ‘"Ii. 11. 00 AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn INCI IMBI MAKE MOD= Date Time Number Up Dn (UTC) 482 03/04/20 17:20:12 2:07 5222 6023 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 483 03/04/20 17:20:13 2:07 6023 4934ruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 484 03/04/20 17:22:20 17:42 15481 6441ruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 485 03/04/20 17:40:01 21:24 22364 19777ruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 486 03/04/20 17:40:02 21:24 19777 21884ruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 487 03/04/20 17:41:37 60:00 6956 2756 imp 3587080982063725 310410214827503 APPLE !PHONES 488 03/04/20 17:42:35 60:00 0 0 imo -1 310410214827503 489 03/04/20 18:01:26 34:35 31417 25433ruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 490 03/04/20 18:36:01 10:11 123900 267707ruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 491 03/04/20 18:41:37 44:17 18788 8828 imp 3587080982063725 310410214827503 APPLE !PHONES 492 03/04/20 18:42:35 41:54 0 0 imp -1 310410214827503 493 03/04/20 18:46:11 14:32 2738331 1371751ruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 494 03/04/20 18:46:12 14:32 1371751 2737947ruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 495 03/04/20 18:52:22 1:45 146201 318486 imp 3587080982063725 310410214827503 APPLE !PHONES 496 03/04/20 19:00:44 16:05 54281 30349ruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 497 03/04/20 19:16:48 4:26 8112 8235 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 498 03/04/20 19:16:49 4:26 8235 7824 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 499 03/04/20 19:21:15 5:10 12167 13427ruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 500 03/04/20 19:21:16 5:10 13427 11783ruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 501 03/04/20 19:24:28 1:57 7266 6862 imp 3587080982063725 310410214827503 APPLE !PHONES 502 03/04/20 19:24:29 1:57 6794 7002 imp 3587080982063725 310410214827503 APPLE !PHONES 503 03/04/20 19:26:27 4:02 11620 6086ruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 504 03/04/20 19:26:28 60:00 29067 17646 imp -1 310410214827503 SOS 03/04/20 19:30:28 8:16 5707 6616 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 20 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002664 The information contained hereCtoNyFti NTailiAL not for general distribution. EFTA_00I 16740 EFTA01251264 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T arc. Run Date: 06/17/2020 Run Time: 18:55:34 Data Osage For: Item Conn. Conn. Originating ET Bytes Bytom Apn INEI INSI MAfl MODEL Date Time Number UP On (OTC) S06 03/04/20 19:30:29 8:16 6616 5419 nxtgenpho 3587080982063725 310410214827503 APPLE 18HOME8 no 507 03/04/20 19:38:45 42:09 22349 17236 nxtgenpho 3587080982063725 310410214827503 APPLE 18HOME8 no 508 03/04/20 19:46:18 0:24 27681 51638 imp -1 310410214827503 S09 03/04/20 20:20:53 7:50 7092 7276 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 510 03/04/20 20:20:54 7:50 7276 6708 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 511 03/04/20 20:26:28 55:05 8604 3036 imp -1 310410214827503 512 03/04/20 20:28:44 0:05 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 513 03/04/20 20:30:50 93:46 76696 88972 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no S14 03/04/20 20:30:51 60:00 52778 46425 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 515 03/04/20 21:25:15 39:21 8517 8866 imp 3587080982063725 310410214827503 APPLE 18HOME8 516 03/04/20 21:25:16 39:21 8758 8253 imp 3587080982063725 310410214827503 APPLE 18HOME8 517 03/04/20 21:29:51 60:00 25598 14171 imp -1 310410214827503 518 03/04/20 21:30:51 33:46 36194 29351 nxtgenpho 3587080982063725 310410214827503 APPLE DRONES no S19 03/04/20 22:04:37 4:46 6080 4929 nxtgenpho 3587080982063725 310410214827503 APPLE DRONES no S20 03/04/20 22:07:20 48:02 5023984 9542836 imp -1 310410214827503 S21 03/04/20 22:09:22 1:51 5584 6403 nxtgenpho 3587080982063725 310410214827503 APPLE !PROMS no S22 03/04/20 22:09:23 1:51 6403 5296 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no S23 03/04/20 22:11:14 4:08 7260 6155 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no S24 03/04/20 22:15:21 2:11 5436 6473 nxtgenpho 3587080982063725 310410214827503 APPLE INIONE8 no 525 03/04/20 22:15:22 2:11 6473 5148 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no S26 03/04/20 22:17:32 15:05 14750 26225 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no S27 03/04/20 22:17:33 15:05 26225 15206 nxtgenpho 3587080982063725 310410214827503 APPLE 18HOME8 no S28 03/04/20 22:29:51 60:00 20512 12964 imp -1 310410214827503 S29 03/04/20 22:32:38 18:11 11974 14957 nxtgenpho 3587080982063725 310410214827503 APPLE 18HOME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 21 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002665 The information contained heraleop+Fti N:FoleikE not for general distribution. EF-EA_00116741 EFTA01251265 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ‘ini° °M as sid AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Ilea Conn. Conn. Originating ET Bytes Bytes Apn INLI DUI MARL MOLL Date Time Number Op Dn (OTC) 530 03/04/20 22:32:39 18:11 14957 11590 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 531 03/04/20 22:50:50 3:38 9791 5778 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 532 03/04/20 22:54:27 1:02 5221 6023 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 533 03/04/20 22:54:28 1:02 6023 4933 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 534 03/04/20 22:55:30 4:48 136342 110705 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 535 03/04/20 23:00:17 9:59 16815 14603 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 536 03/04/20 23:00:19 9:58 14603 16431 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 537 03/04/20 23:04:22 0:43 92872 57448 ims -1 310410214827503 538 03/04/20 23:10:17 4:26 8747 5322 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 539 03/04/20 23:14:42 8:28 5220 6075 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 540 03/04/20 23:14:43 8:28 6075 4932 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 541 03/04/20 23:23:11 5:52 6866 5015 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 542 03/04/20 23:29:02 8:29 5282 6135 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 543 03/04/20 23:29:04 8:28 6135 4994 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 544 03/04/20 23:29:51 22:47 4980 1588 ims -1 310410214827503 545 03/04/20 23:37:32 4:06 6018 4936 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 546 03/04/20 23:41:37 8:28 6755 6847 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 547 03/04/20 23:41:38 8:28 6847 6467 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 548 03/04/20 23:50:06 35:32 11569 7003 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 549 03/04/20 23:54:57 24:22 9623 6213 ims -1 310410214827503 550 03/05/20 00:22:15 0:19 96 0 ims 3587080982063725 310410214827503 APPLE IPHONEB 551 03/05/20 00:23:33 25:46 20534 11770 ims -1 310410214827503 552 03/05/20 00:25:37 3:04 5117 6023 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 22 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained her is PsiTniliAL not for general distribution. SDNYGM00002666 EFTA 00116742 EFTA01251266 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 1L:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tra‘'`si AT&T arc. Run Date: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating LT Bytes Byte. npn ICI IMBI Min MODEL Date Time Number Up Dn (OTC) 553 03/05/20 00:25:38 3:04 6023 4829 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 554 03/05/20 00:28:41 6:06 6068 6035ruagenpho 3587080982063725 310410214827503 APPLE !PHONES no 555 03/05/20 00:28:42 6:06 6035 578Ormagenpho 3587080982063725 310410214827503 APPLE !PHONES no 556 03/05/20 00:34:48 7:20 7430 4957ruagenpho 3587080982063725 310410214827503 APPLE !PHONES no 557 03/05/20 00:42:07 0:52 5221 6075ruagenpho 3587080982063725 310410214827503 APPLE /PHONES no 558 03/05/20 00:42:08 0:52 6075 4933ruagenpho 3587080982063725 310410214827503 APPLE /PHONES no 559 03/05/20 00:43:00 2:32 6193 5009ruagenpho 3587080982063725 310410214827503 APPLE !PHONES no 560 03/05/20 00:45:31 2:07 5118 6023ruagenpho 3587080982063725 310410214827503 APPLE !PHONES no 561 03/05/20 00:45:33 2:06 6023 483Ormagenpho 3587080982063725 310410214827503 APPLE /PHONES no 562 03/05/20 00:47:40 5:43 16247 12433ruagenpho 3587080982063725 310410214827503 APPLE /PHONES no 563 03/05/20 00:51:15 0:00 0 0 imp 3587080982063725 310410214827503 APPLE !PHONES 564 03/05/20 00:51:24 11:26 31254 20844 imp -1 310410214827503 565 03/05/20 00:53:22 6:04 7012 10966ruagenpho 3587080982063725 310410214827503 APPLE /PHONES no 566 03/05/20 00:53:23 6:04 10966 6724 nxtgenpho 3587080982063725 310410214827503 APPLE /PHONES no 567 03/05/20 00:55:51 0:33 1723 0 imp -1 310410214827503 568 03/05/20 00:58:09 0:32 74020 62275 imp -1 310410214827503 569 03/05/20 00:59:27 8:23 6804 4951 nxtgenpho 3587080982063725 310410214827503 APPLE /PHONES no 570 03/05/20 01:07:12 22:51 10774 6954 imp -1 310410214827503 571 03/05/20 01:07:49 8:29 5113 6021 nxtgenpho 3587080982063725 310410214827503 APPLE /PHONES no 572 03/05/20 01:07:50 8:29 6021 4825 nxtgenpho 3587080982063725 310410214827503 APPLE /PHONES no 573 03/05/20 01:16:19 15:28 7603 5208 nxtgenpho 3587080982063725 310410214827503 APPLE /PHONES no 574 03/05/20 01:31:46 2:06 5784 6614 nxtgenpho 3587080982063725 310410214827503 APPLE /PHONES no 575 03/05/20 01:31:47 2:06 6614 5496 nxtgenpho 3587080982063725 310410214827503 APPLE /PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 23 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002667 The information contained her is NTniliAL not for general distribution. EF-EAJVII6743 EFTA01251267 MOBILITY 411111i 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in •. %.' ‘inli. ssi00 AT&T LTC. Run Date: 06/17/2020 Run Time: 10:55:34 Data Usage For: Item Conn. Conn. Originating ET Bytes Bytom Apn INC' IMBI MARL MODEL Date Time Number Up Dn (UTC) 576 03/05/20 01:32:07 1:45 6262 6666 imp 3587080982063725 310410214827503 APPLE IPHONZ8 577 03/05/20 01:32:08 1:45 6666 5998 imp 3587080982063725 310410214827503 APPLE IPHONZ8 578 03/05/20 01:33:54 35:09 33154 14141 nxtgenpho 3587080982063725 310410214827503 APPLE IPHONZ8 no 579 03/05/20 01:33:59 49:38 15602 8058 ims -1 310410214827503 580 03/05/20 02:09:03 27:21 708 1490 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 581 03/05/20 02:24:41 6:43 8962 7128 ims 3587080982063725 310410214827503 APPLE IPHONE8 582 03/05/20 02:31:24 60:00 12336 4468 ims 3587080982063725 310410214827503 APPLE IPHONE8 583 03/05/20 02:36:23 2:33 5583 6387ruftgenpho 3587080982063725 310410214827503 APPLE IPHONE8 no 584 03/05/20 02:36:24 2:33 6387 5295ruftgenpho 3587080982063725 310410214827503 APPLE IPHONE8 no 585 03/05/20 02:38:56 12:47 5709 6616ruftgenpho 3587080982063725 310410214827503 APPLE IPHONE8 no 586 03/05/20 02:38:57 12:47 6616 5421 nxtgenpho 3587080982063725 310410214827503 APPLE IPHONE8 no 587 03/05/20 02:51:44 2:18 0 Oruftgenpho 3587080982063725 310410214827503 APPLE IPHONE8 no 588 03/05/20 02:54:01 3:01 5535 6475ruftgenpho 3587080982063725 310410214827503 APPLE IPHONE8 no 589 03/05/20 02:54:02 3:01 6475 5247ruftgenpho 3587080982063725 310410214827503 APPLE IPHONE8 no 590 03/05/20 02:57:03 2:04 5435 6401 nxtgenpho 3587080982063725 310410214827503 APPLE IPHONE8 no 591 03/05/20 02:57:04 2:04 6401 5147ruftgenpho 3587080982063725 310410214827503 APPLE !PHONES no 592 03/05/20 02:59:08 13:23 6613 5266ruftgenpho 3587080982063725 310410214827503 APPLE !PHONES no 593 03/05/20 03:12:30 8:47 5499 6678ruftgenpho 3587080982063725 310410214827503 APPLE !PHONES no 594 03/05/20 03:12:31 8:47 6678 5211 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 595 03/05/20 03:21:18 10:02 8179 5715ruftgenpho 3587080982063725 310410214827503 APPLE IPHONE8 no 596 03/05/20 03:31:20 26:07 8414 6032 nxtgenpho 3587080982063725 310410214827503 APPLE IPHONE8 no 597 03/05/20 03:31:24 2:30 0 0 ims 3587080982063725 310410214827503 APPLE IPHONE8 598 03/05/20 03:41:55 22:09 10019 6550 ims -1 310410214827503 599 03/05/20 03:57:28 4:01 7810 5394 nxtgenpho 3587080982063725 310410214827503 APPLE IPHONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 24 AT&T does not retain records that can definitively show whether a transaction was NITIAL customer initiated or AT&T's network initiated the data transaction. SDNYGM00002668 The information contained hereCtoNyFti not for general distribution. EF-EA_00116744 EFTA01251268 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn IMBI MAfl NICOLL Date Time Number Up Dn (UTC) 600 03/05/20 04:01:29 16:23 7079 6004 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 601 03/05/20 04:09:31 1:17 48 0 los 3587080982063725 310410214827503 APPLE DRONES 602 03/05/20 04:10:48 43:41 13523 7927 los 3587080982063725 310410214827503 APPLE DRONES 603 03/05/20 04:17:53 0:58 6388 5102 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 604 03/05/20 04:18:50 8:54 5584 6475 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 605 03/05/20 04:18:51 8:54 6475 5296 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 606 03/05/20 04:27:44 10:33 5438 6475 nxtgonpho 3587080982063725 310410214827503 APPLE IDNONE8 no 607 03/05/20 04:27:45 10:33 6475 6150 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 608 03/05/20 04:38:18 16:10 6658 5674 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 609 03/05/20 04:54:28 5:33 6030 5595 nxtgonpho 3587080982063725 310410214827503 APPLE IDNONE8 no 610 03/05/20 04:59:22 60:00 16731 9110 ims -1 310410214827503 611 03/05/20 05:00:01 2:05 5221 6075 nxtgonpho 3587080982063725 310410214827503 APPLE IDNONZ8 no 612 03/05/20 05:00:02 2:06 6075 4933 nxtgonpho 3587080982063725 310410214827503 APPLE !DRONES no 613 03/05/20 05:02:07 7:01 7430 4955 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 614 03/05/20 05:09:08 3:15 6866 5015 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 615 03/05/20 05:12:23 6:13 6080 4953 nxtgonpho 3587080982063725 310410214827503 APPLE !DRONES no 616 03/05/20 05:18:36 2:04 5281 6083 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 617 03/05/20 05:18:37 2:04 6083 4993 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 618 03/05/20 05:20:41 13:47 7603 5112 nxtgonpho 3587080982063725 310410214827503 APPLE 110MONE8 no 619 03/05/20 05:34:29 0:29 6231 5060 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 620 03/05/20 05:34:58 4:52 6806 4955 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 621 03/05/20 05:39:49 2:06 288 48 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 25 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002669 The information contained her is not for general distribution. NaTtAti EF-EA_00116745 EFTA01251269 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T arc. Run Data: 06/17/2020 Run Tina: Data Osage For: Item Conn. Conn. Originating ET Bytes Bytes Apn IKI IN3I MARL NICOLL Data Time Number UP On (OTC) 622 03/05/20 05:39:51 2:05 48 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 623 03/05/20 05:41:56 23:40 6364 5098 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 624 03/05/20 05:59:22 15:46 0 0 ims -1 310410214827503 625 03/05/20 06:05:35 2:05 5221 6075 nxtgenpho 3587080982063725 310410214827503 APPLE IPHONZ8 no 626 03/05/20 06:05:36 2:05 6075 4933 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 627 03/05/20 06:07:41 13:59 7847 5533 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 628 03/05/20 06:16:28 8:43 0 0 imo -1 310410214827503 629 03/05/20 06:21:40 4:18 6866 5017 nxtgenpho 3587080982063725 310410214827503 APPLE IPHONZ8 no 630 03/05/20 06:25:58 14:03 7847 5582 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 631 03/05/20 06:30:52 47:56 23127 9750 imo -1 310410214827503 632 03/05/20 06:40:01 0:54 7546 5108 nxtgenpho 3587080982063725 310410214827503 APPLE IPHONZ8 no 633 03/05/20 06:40:55 0:44 48 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 634 03/05/20 06:41:38 2:06 288 48nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 635 03/05/20 06:41:40 2:05 48 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 636 03/05/20 06:43:45 12:14 6193 5044 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 637 03/05/20 06:55:58 2:17 5281 6135 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 638 03/05/20 06:56:00 2:16 6135 4993 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 639 03/05/20 06:58:16 22:26 7546 6684 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 640 03/05/20 07:08:46 1:37 0 0 imo -1 310410214827503 641 03/05/20 07:18:49 60:00 20702 10498 imo -1 310410214827503 642 03/05/20 07:34:11 10:14 8655 5731 nxtgenpho 3587080982063725 310410214827503 APPLE IPHONZ8 no 643 03/05/20 08:18:49 3:30 0 0 imo -1 310410214827503 644 03/05/20 08:29:56 16:06 8407 6169 imo -1 310410214827503 645 03/05/20 08:49:39 9:48 8187 5998 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 26 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002670 The information contained her is NeTniliAL not for general distribution. EFTAJVII6746 EFTA01251270 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T arc. Run Date: 06/17/2020 Run Time: 1S:45:34 Data Usage Tor: Itea Conn. Conn. originating Tf Bytes Bytom Apn INTI IMSI MARL NICOLL Date Time Hunter Up Dn (UTC) 646 03/05/20 09:06:19 60:00 16685 9202 imp -1 310410214827503 647 03/05/20 10:06:19 16:47 0 0 imp -1 310410214827503 648 03/05/20 10:09:57 19:22 6191 5041 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 649 03/05/20 10:28:37 60:00 15269 8862 imp -1 310410214827503 650 03/05/20 10:29:19 14:38 5326 6248 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 651 03/05/20 10:29:20 14:38 6248 5038ruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 652 03/05/20 10:43:58 55:27 7625 8243ruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 653 03/05/20 11:28:37 18:22 0 0 imp -1 310410214827503 654 03/05/20 11:39:26 60:00 12056 9665 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 655 03/05/20 11:48:45 4:26 0 0 imp 3587080982063725 310410214827503 APPLE !PHONES 656 03/05/20 11:53:11 0:00 0 0 imp 3587080982063725 310410214827503 APPLE IPMONE8 657 03/05/20 11:53:11 0:00 0 0 imp 3587080982063725 310410214827503 APPLE IPH01428 658 03/05/20 12:00:53 60:00 19677 10140 imp -1 310410214827503 659 03/05/20 12:39:26 53:45 36378 21287 nxtgonpho 3587080982063725 310410214827503 APPLE IPH01428 no 660 03/05/20 13:00:53 54:06 19612 10568 imp -1 310410214827503 661 03/05/20 13:22:35 1:24 123162 257851 imp -1 310410214827503 662 03/05/20 13:33:11 0:21 5381 6256 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 663 03/05/20 13:33:12 0:21 6256 5093ruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 664 03/05/20 13:33:33 32:14 9598 8370roftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 665 03/05/20 13:57:56 7:15 17920 16272 imp 3587080982063725 310410214827503 APPLE !PHONES 666 03/05/20 14:04:43 0:17 0 24131 imp 3587080982063725 310410214827503 APPLE IPMONE8 667 03/05/20 14:05:11 60:00 15448 4980 imp 3587080982063725 310410214827503 APPLE IPMONE8 668 03/05/20 14:05:46 2:07 5554 9296ruftgonpho 3587080982063725 310410214827503 APPLE IPMONE8 no 669 03/05/20 14:05:48 2:06 9296 5266ruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 670 03/05/20 14:07:54 35:19 26806 16478ruagonpho 3587080982063725 310410214827503 APPLE !PHONES no 671 03/05/20 14:43:12 2:07 5222 6075ruagonpho 3587080982063725 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 27 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002671 The information contained heraCtopeli WInfikE not for general distribution. EF-EA_00116747 EFTA01251271 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: 16:53:33 Data Osage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INC' DWI MARL MOLL Data Time Number Up Dn (UTC) 672 03/05/20 14:43:13 2:07 6075 4934 natmanpho 3587080982063725 310410214827503 APPLE IPHONEB no 673 03/05/20 14:45:20 9:32 6659 6136 natmanpho 3587080982063725 310410214827503 APPLE IPHONEB no 674 03/05/20 14:54:52 2:02 12120 10092 natmanpho 3587080982063725 310410214827503 APPLE !PHONES no 675 03/05/20 14:56:54 2:09 5221 6023 natmanpho 3587080982063725 310410214827503 APPLE !PHONES no 676 03/05/20 14:56:55 2:09 6023 4933 natmanpho 3587080982063725 310410214827503 APPLE !PHONES no 677 03/05/20 14:59:05 13:21 7223 5581 natmanpho 3587080982063725 310410214827503 APPLE !PHONES no 678 03/05/20 15:05:11 56:38 38340 20760 ims 3587080982063725 310410214827503 APPLE !PHONES 679 03/05/20 15:12:25 2:07 5116 6023 natmanpho 3587080982063725 310410214827503 APPLE !PHONES no 680 03/05/20 15:12:27 2:06 6023 4828 natmanpho 3587080982063725 310410214827503 APPLE !PHONES no 681 03/05/20 15:14:33 15:06 33334 21642 natmanpho 3587080982063725 310410214827503 APPLE !PHONES no 682 03/05/20 15:29:38 2:07 5117 6023 natmanpho 3587080982063725 310410214827503 APPLE IPHONEB no 683 03/05/20 15:29:39 2:07 6023 4829 natmanpho 3587080982063725 310410214827503 APPLE !PHONES no 684 03/05/20 15:31:46 13:19 7667 5217 natmanpho 3587080982063725 310410214827503 APPLE !PHONES no 685 03/05/20 15:45:05 8:11 5220 6023 natmanpho 3587080982063725 310410214827503 APPLE !PHONES no 686 03/05/20 15:45:06 8:11 6023 4932 natmanpho 3587080982063725 310410214827503 APPLE !PHONES no 687 03/05/20 15:49:25 0:22 0 1254 ims 3587080982063725 310410214827503 APPLE !PHONES 688 03/05/20 15:49:58 0:07 0 1548 ims 3587080982063725 310410214827503 APPLE !PHONES 689 03/05/20 15:53:17 15:34 12631 10152 natmanpho 3587080982063725 310410214827503 APPLE !PHONES no 690 03/05/20 16:02:35 60:00 11799 7322 ims -1 310410214827503 691 03/05/20 16:08:50 2:18 5221 6023 natmanpho 3587080982063725 310410214827503 APPLE !PHONES no 692 03/05/20 16:08:51 2:18 6023 4933 natmanpho 3587080982063725 310410214827503 APPLE !PHONES no 693 03/05/20 16:11:08 1:25 5221 6075 natmanpho 3587080982063725 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 28 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002672 The information contained heraCtoNyFti NeTniliAL not for general distribution. EF-EA_00116748 EFTA01251272 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tris"" a AT&T arc. Run Date: 06/17/2020 Run Time: 18:55:35 Data usage For: Item cone. Conn. originating ET Bytes Bytes Apn flei INSI teal NICOLL Date Time Number Op Dn (OTC) 694 03/05/20 16:11:09 1:25 6075 4933 nxtgenpho 3587080982063725 310410214827503 APPLE IPH0NZ8 no 695 03/05/20 16:12:34 0:49 12388 5896rumgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 696 03/05/20 16:13:22 14:41 5839 6939rumgonpho 3587080982063725 310410214827503 APPLE !PHONES no 697 03/05/20 16:13:23 14:41 6939 5551nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 698 03/05/20 16:28:04 1:36 0 0rumgonpho 3587080982063725 310410214827503 APPLE IPH0ME8 no 699 03/05/20 16:29:39 1:14 5218 6073rumgonpho 3587080982063725 310410214827503 APPLE IPH0ME8 no 700 03/05/20 16:29:40 1:14 6073 4930mmgonpho 3587080982063725 310410214827503 APPLE IPH0ME8 no 701 03/05/20 16:30:54 10:00 9273 7536mmgonpho 3587080982063725 310410214827503 APPLE IPH0ME8 no 702 03/05/20 16:40:53 8:56 12853 8449mmgonpho 3587080982063725 310410214827503 APPLE IPH0ME8 no 703 03/05/20 16:40:54 8:56 8449 12565mmgonpho 3587080982063725 310410214827503 APPLE !PHONES no 704 03/05/20 16:49:50 0:05 0 0mmgonpho 3587080982063725 310410214827503 APPLE !PHONES no 705 03/05/20 16:50:18 23:43 11746 8806mmgonpho 3587080982063725 310410214827503 APPLE IPH0ME8 no 706 03/05/20 17:02:35 60:00 30884 17448 ims -1 310410214827503 707 03/05/20 17:14:00 0:51 5118 6023 rumgonpho 3587080982063725 310410214827503 APPLE IPH0ME8 no 708 03/05/20 17:14:02 0:50 6023 4830rumgonpho 3587080982063725 310410214827503 APPLE IPH0ME8 no 709 03/05/20 17:14:10 0:37 24028 73435 imam -1 310410214827503 710 03/05/20 17:14:52 9:12 39449 28212rumgonpho 3587080982063725 310410214827503 APPLE IPH0ME8 no 711 03/05/20 17:15:25 0:08 3465 13132 imam -1 310410214827503 712 03/05/20 17:24:04 6:01 14748 12013rumgonpho 3587080982063725 310410214827503 APPLE IPH0ME8 no 713 03/05/20 17:30:04 2:10 8275 9000rumgonpho 3587080982063725 310410214827503 APPLE !PHONES no 714 03/05/20 17:30:06 2:09 9000 7891rumgonpho 3587080982063725 310410214827503 APPLE !PHONES no 715 03/05/20 17:32:15 48:36 34297 24332rumgonpho 3587080982063725 310410214827503 APPLE IPH0ME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 29 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002673 The information contained heraleeNelt not for general distribution. NaTtAti EFTA_OOI 16749 EFTA01251273 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T (ITC. Run Date: 06/17/2020 Run Time: 10:56:16 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn IN= IMSI MARX MOD= Date Time Numbor Up On (UTC) 716 03/05/20 18:02:35 52:23 43408 28432 imp -1 310410214827503 717 03/05/20 18:20:51 1:46 5318 6071 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 718 03/05/20 18:20:52 1:46 6071 4934 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 719 03/05/20 18:22:38 27:23 63753 41374 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 720 03/05/20 18:27:15 0:24 12736 49564 ins -1 310410214827503 721 03/05/20 18:28:56 0:24 15889 46520 ins -1 310410214827503 722 03/05/20 18:42:22 0:24 16574 44337 imp -1 310410214827503 723 03/05/20 18:50:00 2:09 5113 6073 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 724 03/05/20 18:50:01 2:09 6073 4825 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 725 03/05/20 18:52:10 1:34 6020 4941 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 726 03/05/20 18:53:43 15:50 377833 92026 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 727 03/05/20 18:53:44 15:50 91974 379105 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 728 03/05/20 18:54:57 10:21 7160 6814 imp 3587080982063725 310410214827503 APPLE !PHONES 729 03/05/20 18:54:58 10:21 6746 7004 imp 3587080982063725 310410214827503 APPLE !PHONES 730 03/05/20 19:02:11 10:31 11538 6746 imp -1 310410214827503 731 03/05/20 19:05:18 4:15 6316 6646 ins 3587080982063725 310410214827503 APPLE !PHONES 732 03/05/20 19:05:19 4:15 6646 5964 imp 3587080982063725 310410214827503 APPLE !PHONES 733 03/05/20 19:09:34 16:58 56922 89719 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 734 03/05/20 19:09:37 16:55 8904 7985 imp 3587080982063725 310410214827503 APPLE !PHONES 735 03/05/20 19:26:32 0:41 2654 4560 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 736 03/05/20 19:26:32 0:41 0 0 imp 3587080982063725 310410214827503 APPLE !PHONES 737 03/05/20 19:27:13 0:42 3250 7682 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 738 03/05/20 19:27:13 0:42 0 0 imp 3587080982063725 310410214827503 APPLE !PHONES 739 03/05/20 19:27:55 0:30 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 740 03/05/20 19:27:55 0:30 0 0 imp 3587080982063725 310410214827503 APPLE !PROMS 741 03/05/20 19:28:25 21:30 1429910 18614505 nxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 742 03/05/20 19:28:25 60:00 7788 4128 imp 3587080982063725 310410214827503 APPLE !PROMS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 30 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002674 The information contained her is NeTniliAL not for general distribution. EFTA_00I 16750 EFTA01251274 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ....., `•—•°"" e0• AT&T UTC. Run Data: 06/17/2020 Run Time: Data Osage For: Itea Conn. Conn. Originating ET Bytes Byte. Apn INSI taltE NICOLL Data Time Number Up Dn (OTC) 743 03/05/20 19:49:55 32:08 1214122 3567455 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONZ8 no 744 03/05/20 20:22:03 5:52 351921 19649061 nxtgonpho 3587080982063725 310410214827503 APPLE IPM0NE8 no 745 03/05/20 20:27:55 35:39 1936311 18204765 nxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 746 03/05/20 20:28:25 60:00 23956 16172 imp 3587080982063725 310410214827503 APPLE !PROMS 747 03/05/20 20:38:36 9:14 1550472 1193028 imp 3587080982063725 310410214827503 APPLE IPM0NE8 748 03/05/20 20:51:31 0:04 2449 10497 imp 3587080982063725 310410214827503 APPLE IPM0NE8 749 03/05/20 21:03:34 20:51 824545 926983 nxtgonpho 3587080982063725 310410214827503 APPLE IPM0NE8 no 750 03/05/20 21:24:25 9:16 676408 792894 nxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 751 03/05/20 21:28:25 5:16 0 0 imp 3587080982063725 310410214827503 APPLE IPM0NE8 752 03/05/20 21:33:41 0:50 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PROMS no 753 03/05/20 21:33:41 0:50 0 0 imp 3587080982063725 310410214827503 APPLE !PROMS 754 03/05/20 21:34:31 1:02 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PROMS no 755 03/05/20 21:34:31 1:02 0 0 imp 3587080982063725 310410214827503 APPLE IPM0NE8 756 03/05/20 21:35:33 1:43 0 Oruftgonpho 3587080982063725 310410214827503 APPLE IPM0NE8 no 757 03/05/20 21:35:33 1:43 0 0 imp 3587080982063725 310410214827503 APPLE !PROMS 758 03/05/20 21:37:16 8:54 22653 43544 nxtgonpho 3587080982063725 310410214827503 APPLE IPM0NE8 no 759 03/05/20 21:37:16 8:54 0 0 imp 3587080982063725 310410214827503 APPLE !PROMS 760 03/05/20 21:46:09 3:53 21998 14343 nxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 761 03/05/20 21:46:10 3:52 6246 6668 imp 3587080982063725 310410214827503 APPLE !PROMS 762 03/05/20 21:46:10 3:53 14343 21710 nxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 763 03/05/20 21:46:11 3:52 6668 5982 imp 3587080982063725 310410214827503 APPLE !PROMS 764 03/05/20 21:50:03 1:12 13504 14911 nxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 765 03/05/20 21:50:05 1:10 6666 5964 imp 3587080982063725 310410214827503 APPLE !PROMS 766 03/05/20 21:51:14 8:20 913741 108412 nxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 767 03/05/20 21:51:16 8:18 6226 6774 imp 3587080982063725 310410214827503 APPLE !PROMS 768 03/05/20 21:51:16 8:19 108412 927006 nxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 31 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002675 The information contained horeOiNyFtit WAAL not for general distribution. EF-EA_00116751 EFTA01251275 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in \-77 ‘6"11. S "61# AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating 2T Bytes Bytom Apn IKE I ISIS I MAfl NICOLL Date Time Humber UP Dn (UTC) 769 03/05/20 21:51:17 8:18 6666 5962 ims 3587080982063725 310410214827503 APPLE !PROMS 770 03/05/20 21:59:34 1:24 15373 13467 nxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 771 03/05/20 21:59:35 1:23 6316 6778 ims 3587080982063725 310410214827503 APPLE DRONES 772 03/05/20 21:59:35 1:24 13467 20245 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 773 03/05/20 21:59:37 1:22 6670 5964 ims 3587080982063725 310410214827503 APPLE DRONES 774 03/05/20 22:00:58 5:42 5220 6023 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 775 03/05/20 22:00:59 5:42 6023 4932 nxtgonpho 3587080982063725 310410214827503 APPLE 1PROME8 no 776 03/05/20 22:01:03 10:56 8523 6446 vas -1 310410214827503 777 03/05/20 22:04:31 2:09 7114 6846 vas 3587080982063725 310410214827503 APPLE DRONES 778 03/05/20 22:04:32 2:09 6738 6850 vas 3587080982063725 310410214827503 APPLE DRONES 779 03/05/20 22:06:41 0:06 0 Onxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 780 03/05/20 22:08:13 16:17 20308 20681 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 781 03/05/20 22:08:14 14:56 6262 6782 ims 3587080982063725 310410214827503 APPLE DRONES 782 03/05/20 22:08:14 16:18 20681 39271 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 783 03/05/20 22:08:15 14:56 6674 5998 ims 3587080982063725 310410214827503 APPLE DRONES 784 03/05/20 22:23:11 0:00 0 0 ims 3587080982063725 310410214827503 APPLE DRONES 785 03/05/20 22:23:12 1:18 6263 6674 ims 3587080982063725 310410214827503 APPLE DRONES 786 03/05/20 22:23:13 1:19 6674 5999 ims 3587080982063725 310410214827503 APPLE DRONES 787 03/05/20 22:24:32 5:58 9126 5538 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 788 03/05/20 22:24:34 4:29 8898 8820 ims 3587080982063725 310410214827503 APPLE DRONES 789 03/05/20 22:29:07 1:23 7958 6082 ims 3587080982063725 310410214827503 APPLE DRONES 790 03/05/20 22:30:29 3:34 7691 8133 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 791 03/05/20 22:30:31 3:32 7136 6852 ims 3587080982063725 310410214827503 APPLE DRONES 792 03/05/20 22:30:31 3:33 8133 9592 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 793 03/05/20 22:30:32 3:32 6744 6872 ims 3587080982063725 310410214827503 APPLE DRONES 794 03/05/20 22:33:37 0:33 144 144 ims 3587080982063725 310410214827503 APPLE DRONES 795 03/05/20 22:34:04 15:16 19427 29128 nxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 796 03/05/20 22:34:10 1:36 8070 6138 ims 3587080982063725 310410214827503 APPLE !PROMS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 32 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002676 The information contained her is NTifikE not for general distribution. EF-EAJVII6752 EFTA01251276 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tr " . 200 I.1 I AT&T arc. Run Date: 06/17/2020 Run Timo: 1A:55:15 Data Osage For: Item Cows. Conn. Originating 22 Bytes Bytoa Apn INEI IMBI teat MOLL Date Time Number Up Dn (OTC) 797 03/05/20 22:34:10 1:36 8006 6138 imp 3587080982063725 310410214827503 APPLE !PHONES 798 03/05/20 22:35:46 6:23 3408 1340 imp 3587080982063725 310410214827503 APPLE !PHONES 799 03/05/20 22:42:09 7:11 3344 1464 imp 3587080982063725 310410214827503 APPLE 1PRONE8 800 03/05/20 22:42:09 7:11 3280 1464 imp 3587080982063725 310410214827503 APPLE 1PRONE8 801 03/05/20 22:49:20 17:10 7929 6401 nxtgonpho 3587080982063725 310410214827503 APPLE 1PRONE8 no 802 03/05/20 22:49:21 17:09 6458 7404 imp 3587080982063725 310410214827503 APPLE IPRONE8 803 03/05/20 22:49:21 17:10 6401 8586ruftgonpho 3587080982063725 310410214827503 APPLE IPRONE8 no 804 03/05/20 22:49:22 17:09 7404 6214 imp 3587080982063725 310410214827503 APPLE !PRONGS 805 03/05/20 22:54:28 7:36 16014 11770 imp -1 310410214827503 806 03/05/20 23:06:31 42:29 1120699 1146855ruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 807 03/05/20 23:06:34 42:26 10802 10151 ins 3587080982063725 310410214827503 APPLE IPRONE8 808 03/05/20 23:48:59 12:42 13580 47470ruftgonpho 3587080982063725 310410214827503 APPLE IPRONE8 no 809 03/05/20 23:49:00 12:42 46210 16744ruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 810 03/05/20 23:49:01 12:40 6248 31006 imp 3587080982063725 310410214827503 APPLE !PHONES 811 03/05/20 23:49:02 12:40 6670 6092 imp 3587080982063725 310410214827503 APPLE !PHONES 812 03/05/20 23:56:25 60:00 18177 10135 imp -1 310410214827503 813 03/06/20 00:01:42 39:39 13061 11748ruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 814 03/06/20 00:41:22 60:00 14747 12058ruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 815 03/06/20 00:56:25 48:52 7032 2772 imp -1 310410214827503 816 03/06/20 01:41:22 60:00 11245 7612 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 817 03/06/20 01:47:30 20:33 10047 6550 ims 3587080982063725 310410214827503 APPLE IPRONE8 818 03/06/20 02:08:03 0:01 0 0 ims 3587080982063725 310410214827503 APPLE IPRONE8 819 03/06/20 02:08:03 0:01 0 0 ims 3587080982063725 310410214827503 APPLE !PHONES 820 03/06/20 02:08:08 4:01 8573 6344 imp -1 310410214827503 821 03/06/20 02:14:21 21:21 8307 6048 imp -1 310410214827503 822 03/06/20 02:38:29 41:02 16240 8162 imp -1 310410214827503 823 03/06/20 02:41:22 60:00 1322 1155 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 824 03/06/20 03:25:05 7:24 0 0 imp -1 310410214827503 825 03/06/20 03:37:25 60:00 16650 9085 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 33 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained hereCtoNelt PsiTniliAL not for general distribution. SDNYGM00002677 EF-EA_00116753 EFTA01251277 MOBILITY `-'s 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in t— ase,0AT&T ''..mmes0/ arc. Run Date: 06/17/2020 Run Time: 18:55:35 Data Usage For: Itea Conn. Conn. Originating ET Bytes Bytom Apn EMI IMBI MAKE MODEL Date Time Number Up On (OTC) 826 03/06/20 03:41:22 60:00 49981 10993 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONZ8 no 827 03/06/20 04:37:25 22:28 4964 1588 ims -1 310410214827503 828 03/06/20 04:41:22 60:00 1433 1513 nxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 829 03/06/20 05:06:31 30:16 8371 6046 ims -1 310410214827503 830 03/06/20 05:41:22 60:00 1270 1050 nxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 831 03/06/20 05:45:39 34:57 8373 6162 ims -1 310410214827503 832 03/06/20 06:24:30 5:56 0 0 ims -1 310410214827503 833 03/06/20 06:37:01 60:00 16695 9034 ims -1 310410214827503 834 03/06/20 06:41:22 60:00 1211 735 nxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 835 03/06/20 07:37:01 13:53 0 0 ims -1 310410214827503 836 03/06/20 07:41:22 60:00 1270 1050 nxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 837 03/06/20 07:52:58 11:23 8199 5962 ims -1 310410214827503 838 03/06/20 08:07:51 60:00 11735 7554 ims -1 310410214827503 839 03/06/20 08:41:22 60:00 865 525 nxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 840 03/06/20 09:07:51 13:42 3424 1340 ims -1 310410214827503 841 03/06/20 09:25:04 26:28 8311 6214 ims -1 310410214827503 842 03/06/20 09:41:22 60:00 1038 630 nxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 843 03/06/20 09:58:33 60:00 11769 7519 ims -1 310410214827503 844 03/06/20 10:41:22 60:00 986 589 nxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 845 03/06/20 10:58:33 13:38 3532 1324 ims -1 310410214827503 846 03/06/20 11:14:49 60:00 11623 7556 ims -1 310410214827503 847 03/06/20 11:41:22 5:25 510 3082 nxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 848 03/06/20 11:46:46 1:46 5440 6475 nxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 849 03/06/20 11:46:47 1:46 6475 5152 nxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 850 03/06/20 11:48:33 14:26 7666 5214 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 851 03/06/20 12:02:58 12:46 28108 29261 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 34 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002678 The information contained herself:04R NeTniliAL not for general distribution. EFTA_00I16754 EFTA01251278 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in tras '"s d AT&T OTC. Run Date: 06/17/2020 Run Time: 10:55:35 Data Usage For: Item Conn. Conn. Originating ET Bytes Bytom Apn Tier ISIS I MAKE NICOLL Date Time Number Up Dn (UTC) 852 03/06/20 12:02:59 12:46 29261 27532 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 853 03/06/20 12:14:49 17:54 5072 1572 ims -1 310410214827503 854 03/06/20 12:15:45 18:55 8345 5919 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 855 03/06/20 12:34:17 60:00 15887 8782 ims -1 310410214827503 856 03/06/20 12:34:40 2:06 5931 10717 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 857 03/06/20 12:34:41 2:06 10717 5643 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 858 03/06/20 12:36:47 60:00 8424 7148 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 859 03/06/20 13:34:17 33:45 3424 1324 ims -1 310410214827503 860 03/06/20 13:36:47 60:00 2159 5574 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 861 03/06/20 14:11:36 33:17 11410 7501 ims 3587080982063725 310410214827503 APPLE DRONES 862 03/06/20 14:36:47 31:10 11189 6538 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 863 03/06/20 14:44:53 28:56 20364 11140 ims 3587080982063725 310410214827503 APPLE DRONES 864 03/06/20 15:07:56 1:30 5668 7321 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 865 03/06/20 15:07:57 1:30 7321 5380 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 866 03/06/20 15:08:13 1:12 183147 212153 ims 3587080982063725 310410214827503 APPLE DRONES 867 03/06/20 15:09:27 4:49 7244 5221 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 868 03/06/20 15:14:15 8:18 5583 6403 nxtgonpho 3587080982063725 310410214827503 APPIB DRONES no 869 03/06/20 15:14:16 8:18 6403 5295 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 870 03/06/20 15:15:16 4:51 8435 6304 ins -1 310410214827503 871 03/06/20 15:22:34 3:06 7244 5269 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 872 03/06/20 15:22:49 10:49 8203 5938 ims -1 310410214827503 873 03/06/20 15:25:40 4:52 5644 6401 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 874 03/06/20 15:25:41 4:52 6401 5356 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 875 03/06/20 15:30:33 28:38 19589 13840 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 35 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained her is PsiTathE not for general distribution. SDNY_GML00002679 EF-EA_00116755 EFTA01251279 MOBILITY 411., 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in ....., ••-isà.0 AT&T OTC. Run Data: 06/17/2020 Run Tina: Data Osage For: SIM Item Conn. Conn. Originating ET Bytes Bytom Apn IND I INSI MARL NICOLL Data Time Number Up Dn (OTC) 876 03/06/20 15:40:47 4:29 7400 6103 imo 3587080982063725 310410214827503 APPLE IPMONE8 877 03/06/20 15:45:16 12:01 5072 1572 imo 3587080982063725 310410214827503 APPLE IPMONE8 878 03/06/20 15:58:22 0:24 8256 7072 imo 3587080982063725 310410214827503 APPLE IPMONE8 879 03/06/20 15:58:46 60:00 10688 4144 imo 3587080982063725 310410214827503 APPLE IPMONE8 880 03/06/20 15:59:10 2:07 5236 6256 nxtgenpho 3587080982063725 310410214827503 APPLE IPMONE8 no 881 03/06/20 15:59:11 2:07 6256 4948 nxtgenpho 3587080982063725 310410214827503 APPLE IPMONE8 no 882 03/06/20 16:01:18 44:18 16273 12620 nxtgenpho 3587080982063725 310410214827503 APPLE IPMONE8 no 883 03/06/20 16:45:35 2:10 10586 7639 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 884 03/06/20 16:45:36 2:10 7639 10298 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 885 03/06/20 16:47:46 60:00 12772 15399 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 886 03/06/20 16:58:46 2:08 0 0 ims 3587080982063725 310410214827503 APPLE IPMONE8 887 03/06/20 17:47:46 24:54 369 1125 nxtgenpho 3587080982063725 310410214827503 APPLE IPMONE8 no 888 03/06/20 18:01:13 3:34 11022 6113 ims -1 310410214827503 889 03/06/20 18:12:39 30:26 36081 41844 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 890 03/06/20 18:12:40 30:26 41844 39403 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 891 03/06/20 18:12:47 11:23 0 0 ims -1 310410214827503 892 03/06/20 18:23:51 19:14 6426 8082 imo 3587080982063725 310410214827503 APPLE IPMONE8 893 03/06/20 18:23:52 19:14 8082 6162 imo 3587080982063725 310410214827503 APPLE IPMONE8 894 03/06/20 18:24:10 60:00 16795 9035 imo -1 310410214827503 895 03/06/20 18:43:06 6:32 9119 5813 nxtgenpho 3587080982063725 310410214827503 APPLE IPMONE8 no 896 03/06/20 18:49:37 4:09 7995 10045 nxtgenpho 3587080982063725 310410214827503 APPLE IPMONE8 no 897 03/06/20 18:49:38 4:10 10045 7611 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 898 03/06/20 18:53:48 3:51 15430 12196 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 899 03/06/20 18:57:38 8:24 7732 18371 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 900 03/06/20 18:57:40 8:23 18371 7444 nxtgenpho 3587080982063725 310410214827503 APPLE IPMONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 36 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002680 The information contained hereCtoNe PsiTifikE not for general distribution. EF-EA_00116756 EFTA01251280 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T'S records ere stored and provided in ters„,„01"AT&T arc. Run Date: 06/17/2020 Run Time: 10:55:35 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn INEI INS I NAfl NICOLL Date Time Number Up Dn (UTC) 901 03/06/20 19:06:03 7:13 8502 6668 nxtgonpho 3587080982063725 310410214827503 APPLE 110)(0=8 no 902 03/06/20 19:13:16 1:04 6478 5616 nxtgonpho 3587080982063725 310410214827503 APPLE 110)(0=8 no 903 03/06/20 19:14:19 2:09 5117 6075 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 904 03/06/20 19:14:20 2:09 6075 4829 nxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 905 03/06/20 19:16:29 35:51 7480 6950 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 906 03/06/20 19:24:10 21:10 3424 1340 ims -1 310410214827503 907 03/06/20 19:48:01 31:02 23529 15801 ims 3587080982063725 310410214827503 APPLE 'PHONES 908 03/06/20 19:52:19 1:11 7184 7637 nxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 909 03/06/20 19:52:20 1:11 7637 6896 nxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 910 03/06/20 19:53:31 4:27 9262 7982 nxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 911 03/06/20 19:57:58 8:17 10717 21377 nxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 912 03/06/20 19:57:59 8:17 21377 10429 nxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 913 03/06/20 20:02:36 0:25 13104 53930 ims -1 310410214827503 914 03/06/20 20:06:16 16:56 14116 29041 nxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 915 03/06/20 20:19:03 0:15 6520 1432 ims 3587080982063725 310410214827503 APPLE DRONES 916 03/06/20 20:19:03 0:15 2920 1432 ims 3587080982063725 310410214827503 APPLE DRONES 917 03/06/20 20:19:18 12:10 3424 1324 ims 3587080982063725 310410214827503 APPLE !PROMS 918 03/06/20 20:23:11 24:11 394055 54947 nxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 919 03/06/20 20:23:12 24:11 54947 400921 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 920 03/06/20 20:43:57 3:25 6245 6668 ims 3587080982063725 310410214827503 APPLE DRONES 921 03/06/20 20:43:58 3:25 6668 5981 ims 3587080982063725 310410214827503 APPLE 'PHONES 922 03/06/20 20:47:23 1:05 0 Onatgonpho 3587080982063725 310410214827503 APPLE !PROMS no 923 03/06/20 20:47:28 1:00 11916 9299 ims 3587080982063725 310410214827503 APPLE !PROMS 924 03/06/20 20:48:27 5:26 192 Onmtgonpho 3587080982063725 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 37 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002681 The information contained heraleoNeli NTAtikE not for general distribution. EF-EA_00116757 EFTA01251281 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage Tor: MN= Ilea Conn. Conn. Originating ET Byte. Byte. Apn IKE' IMSI MARL MODEL Date Time Number UP on moo) 925 03/06/20 20:48:28 5:25 6572 6657 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 926 03/06/20 20:48:28 5:26 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 927 03/06/20 20:48:29 5:25 6657 6284 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 928 03/06/20 20:48:35 60:00 95655 55560 ims -1 310410214827503 929 03/06/20 20:51:21 1:02 137665 211390 ims -1 310410214827503 930 03/06/20 20:53:54 10:42 6979 5113 nxtgonpho 3587080982063725 310410214827503 APPLE !PRONGS no 931 03/06/20 21:03:26 0:13 0 22616 ims -1 310410214827503 932 03/06/20 21:03:56 0:05 0 14202 ims -1 310410214827503 933 03/06/20 21:04:30 0:19 18001 51945 ims -1 310410214827503 934 03/06/20 21:04:35 3:32 5374 9015 nxtgonpho 3587080982063725 310410214827503 APPLE !PRONGS no 935 03/06/20 21:04:36 3:32 9015 5086 nxtgonpho 3587080982063725 310410214827503 APPLE !PRONGS no 936 03/06/20 21:08:08 1:34 7428 4951 nxtgonpho 3587080982063725 310410214827503 APPLE !PRONGS no 937 03/06/20 21:09:30 0:53 98149 136719 ims -1 310410214827503 938 03/06/20 21:09:41 2:20 5116 6023 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 939 03/06/20 21:09:42 2:20 6023 4828 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 940 03/06/20 21:12:01 2:32 192 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 941 03/06/20 21:12:02 2:31 5222 6075 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 942 03/06/20 21:12:03 2:32 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 943 03/06/20 21:12:03 2:32 6075 4934 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 944 03/06/20 21:14:34 1:26 6212 6824 nxtgonpho 3587080982063725 310410214827503 APPLE !PRONGS no 945 03/06/20 21:14:35 1:26 6824 5924 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 946 03/06/20 21:16:01 1:08 6400 5239 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 947 03/06/20 21:17:09 20:41 16484 135032 nxtgonpho 3587080982063725 310410214827503 APPLE !PRONGS no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 38 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002682 The information contained heraCtoNyFti not for general distribution. EF-EA_00116758 EFTA01251282 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T arc. Run Data: 06/17/2020 Run Tama: 1S:55:15 Data Usage For: Item Conn. Conn. Originating ET Bytes Bytom Apn INEI IMBI MAKE MODEL Data Tina Number UP Dn (UTC) 948 03/06/20 21:17:10 20:41 135032 16196ruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 949 03/06/20 21:32:33 1:15 142654 181807 ims -1 310410214827503 950 03/06/20 21:37:51 13:04 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 951 03/06/20 21:48:35 20:48 0 108 ims -1 310410214827503 952 03/06/20 21:50:54 7:15 192 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 953 03/06/20 21:50:55 7:15 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 954 03/06/20 21:58:10 60:00 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 955 03/06/20 22:10:04 0:00 0 0 ims 3587080982063725 310410214827503 APPLE !PHONES 956 03/06/20 22:13:03 60:00 15339 9716 ims -1 310410214827503 957 03/06/20 22:58:10 60:00 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 958 03/06/20 23:13:03 23:49 3532 1448 ims -1 310410214827503 959 03/06/20 23:37:22 0:00 0 0 ims 3587080982063725 310410214827503 APPLE !PHONES 960 03/06/20 23:37:36 12:30 10990 7899 ims -1 310410214827503 961 03/06/20 23:56:38 3:34 12230 6730 ims -1 310410214827503 962 03/06/20 23:58:10 8:40 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 963 03/07/20 00:03:08 0:16 8078 6944 ims 3587080982063725 310410214827503 APPLE !PHONES 964 03/07/20 00:03:24 60:00 12120 4328 ims 3587080982063725 310410214827503 APPLE !PHONES 965 03/07/20 00:06:49 8:17 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 966 03/07/20 00:06:50 8:17 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 967 03/07/20 00:15:07 16:29 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 968 03/07/20 00:31:35 20:57 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 969 03/07/20 00:31:36 20:57 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 970 03/07/20 00:52:34 3:34 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 971 03/07/20 00:56:07 2:06 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 972 03/07/20 00:56:08 2:06 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 39 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002683 The information contained hereCtoNelt not for general distribution. EF-EA_00116759 EFTA01251283 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ...,,,•AT&T ••-s`' UTC. Run Date: 06/17/2020 Run Time: 18:55:35 Data Osage For: Item cone. Conn. Originating ET Byte. Byte. Apn fun INSI MAKE Date Time Number Up on (UTC) 973 03/07/20 00:58:14 39:51 0 0 rumgenpho 3587080982063725 310410214827503 APPLE !PROMS no 974 03/07/20 01:03:24 0:24 0 0 ims 3587080982063725 310410214827503 APPLE SPROUTS 975 03/07/20 01:19:41 4:34 8150 6944 ims 3587080982063725 310410214827503 APPLE !PHONES 976 03/07/20 01:24:15 8:15 12056 6904 ims 3587080982063725 310410214827503 APPLE 1PROME8 977 03/07/20 01:33:01 0:45 17026 8556 ims -1 310410214827503 978 03/07/20 01:34:01 16:43 9644 6054 ims -1 310410214827503 979 03/07/20 01:38:05 3:37 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE 1PROME8 no 980 03/07/20 01:41:41 3:20 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 981 03/07/20 01:41:42 3:20 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 982 03/07/20 01:45:02 60:00 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE 1PROME8 no 983 03/07/20 01:56:42 0:00 0 0 ims 3587080982063725 310410214827503 APPLE 1PROME8 984 03/07/20 01:56:50 34:11 11647 9620 ims -1 310410214827503 985 03/07/20 02:34:49 0:00 0 0 ims 3587080982063725 310410214827503 APPLE 1PROME8 986 03/07/20 02:35:17 2:31 9694 6126 ims -1 310410214827503 987 03/07/20 02:42:07 60:00 18887 9464 ims -1 310410214827503 988 03/07/20 02:45:02 60:00 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE 1PROME8 no 989 03/07/20 03:42:07 1:22 0 0 ims -1 310410214827503 990 03/07/20 03:45:02 60:00 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE 1PROME8 no 991 03/07/20 03:47:37 3:47 9867 6478 ims -1 310410214827503 992 03/07/20 03:55:04 16:39 8367 6072 ims -1 310410214827503 993 03/07/20 04:13:11 60:00 15051 8988 ims -1 310410214827503 994 03/07/20 04:45:02 60:00 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE 1PROME8 no 995 03/07/20 05:13:11 59:03 6848 2664 ims -1 310410214827503 996 03/07/20 05:45:02 0:02 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE 1PROME8 no 997 03/07/20 05:45:06 60:00 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE 1PROME8 no 998 03/07/20 06:16:12 6:17 8203 6000 ims -1 310410214827503 999 03/07/20 06:31:28 60:00 15055 8878 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 40 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SIDNYGM1100002684 The information contained hereleeNe NeTniliAL not for general distribution. EF-EA_00116760 EFTA01251284 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in is.. ‘inli. alt sof AT&T arc. Run Date: 06/17/2020 Run Time: 10:55:14 Data Osage for: Item Conn. Conn. Originating ET Bytes Bytoa Apn INEI IMBI MAKE MODEL Dote Time Number Up Dn (OTC) 1000 03/07/20 06:45:06 60:00 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1001 03/07/20 07:31:28 24:58 3408 1448 imp -1 310410214827503 1002 03/07/20 07:45:06 60:00 0 Oruftgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1003 03/07/20 08:02:56 3:28 8315 6122 imp -1 310410214827503 1004 03/07/20 08:11:04 60:00 16811 9252 imp -1 310410214827503 1005 03/07/20 08:45:06 60:01 0 Onxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1006 03/07/20 09:11:04 5:47 0 0 imp -1 310410214827503 1007 03/07/20 09:20:15 60:00 18679 10125 men -1 310410214827503 1008 03/07/20 09:45:09 60:00 0 Onxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1009 03/07/20 10:20:15 37:07 3424 1324 men -1 310410214827503 1010 03/07/20 10:45:09 60:00 0 Onxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1011 03/07/20 11:05:29 22:12 8311 6104 men -1 310410214827503 1012 03/07/20 11:32:57 0:00 0 0 men 3587080982063725 310410214827503 APPLE !PRONGS 1013 03/07/20 11:35:38 12:17 8455 6338 men -1 310410214827503 1014 03/07/20 11:45:09 60:00 0 Onxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1015 03/07/20 11:51:55 56:14 21443 9826 imp -1 310410214827503 1016 03/07/20 12:45:09 60:00 0 Oruftgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1017 03/07/20 12:48:09 6:31 8453 6214 imp -1 310410214827503 1018 03/07/20 12:57:22 47:41 13399 7751 imp -1 310410214827503 1019 03/07/20 13:45:09 0:01 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1020 03/07/20 13:45:12 14:28 0 Oruftgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1021 03/07/20 13:47:32 60:00 17165 9495 imp -1 310410214827503 1022 03/07/20 13:59:40 60:00 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1023 03/07/20 14:47:32 38:17 5072 1572 imp -1 310410214827503 1024 03/07/20 14:59:40 12:27 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1025 03/07/20 15:12:06 8:21 192 Onxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1026 03/07/20 15:12:08 8:20 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 41 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002685 The information contained hereCtoNeli PsisTfikE not for general distribution. EF-EAJVII6761 EFTA01251285 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ....., ••-s`'0• AT&T OTC. Run pato: 06/17/2020 Run Time: 18:55:36 Data Osage for: Item Conn. Conn. Originating ET Bytes Byte. Apn per IMBI MAKE MOLL Date Time Number Up Dn (OTC) 1027 03/07/20 15:20:28 57:46 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1028 03/07/20 15:32:55 0:00 0 0 ins 3587080982063725 310410214827503 APPLE IPHONE8 1029 03/07/20 15:33:04 16:06 9491 6883 ins -1 310410214827503 1030 03/07/20 15:59:08 16:46 11990 6446 ins -1 310410214827503 1031 03/07/20 16:18:14 0:52 0 Oruftgonpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1032 03/07/20 16:18:18 14:21 8203 5996 ins -1 310410214827503 1033 03/07/20 16:19:05 1:52 192 Oruftgonpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1034 03/07/20 16:19:06 1:52 0 Oruftgonpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1035 03/07/20 16:20:58 2:59 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1036 03/07/20 16:23:56 2:09 192 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1037 03/07/20 16:23:57 2:09 0 Oruftgonpho 3587080982063725 310410214827503 APPLE IPRONE8 no 1038 03/07/20 16:26:06 23:35 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1039 03/07/20 16:36:56 0:15 7488 5572 ins 3587080982063725 310410214827503 APPLE IPHONE8 1040 03/07/20 16:37:11 59:00 14696 8116 ins 3587080982063725 310410214827503 APPLE IPHONE8 1041 03/07/20 16:49:40 8:18 192 Oruftgonpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1042 03/07/20 16:49:42 8:17 0 Oruftgonpho 3587080982063725 310410214827503 APPLE IPRONE8 no 1043 03/07/20 16:57:59 1:02 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1044 03/07/20 16:59:00 2:18 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1045 03/07/20 16:59:01 2:18 0 Onxtgonpho 3587080982063725 310410214827503 APPLE IPRONE8 no 1046 03/07/20 17:01:18 6:06 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1047 03/07/20 17:01:19 6:06 0 Onxtgonpho 3587080982063725 310410214827503 APPLE IPRONE8 no 1048 03/07/20 17:07:25 3:58 0 Onxtgonpho 3587080982063725 310410214827503 APPLE IPRONE8 no 1049 03/07/20 17:11:22 8:26 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 42 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002686 The information contained hereCtoNyFti N s not for general distribution. EFTA 00/16762 EFTA01251286 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ....,,,• ••--s"" e AT&T OTC. Run Date: 06/17/2020 Run Time: 1S:55:36 Data Osage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn IKI IMS1 MARL MODEL Date Time Number Up Dn (Uc) 1050 03/07/20 17:11:23 8:26 0 Onxtgenpho 3587080982063725 310410214827503 APPLE 'PHONES no 1051 03/07/20 17:19:49 11:27 0 Oruftgenpho 3587080982063725 310410214827503 APPLE 'PHONES no 1052 03/07/20 17:31:15 0:50 192 Oruftgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1053 03/07/20 17:31:17 0:49 0 Oruftgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1054 03/07/20 17:32:06 3:19 0 Oruftgenpho 3587080982063725 310410214827503 APPLE 'PHONES no 1055 03/07/20 17:35:24 2:06 192 Oruftgenpho 3587080982063725 310410214827503 APPLE 'PHONES no 1056 03/07/20 17:35:25 2:06 0 Oruftgenpho 3587080982063725 310410214827503 APPLE 'PHONES no 1057 03/07/20 17:35:52 1:38 7318 8814 imp 3587080982063725 310410214827503 APPLE 'PHONES 1058 03/07/20 17:35:54 1:37 8814 7054 imp 3587080982063725 310410214827503 APPLE !PHONES 1059 03/07/20 17:36:11 60:00 45387 23034 imp -1 310410214827503 1060 03/07/20 17:37:31 34:49 0 Oruftgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1061 03/07/20 18:12:19 2:41 192 Oruftgenpho 3587080982063725 310410214827503 APPLE 'PHONES no 1062 03/07/20 18:12:20 2:41 0 Oruftgenpho 3587080982063725 310410214827503 APPLE 'PHONES no 1063 03/07/20 18:15:01 4:44 192 Oruftgenpho 3587080982063725 310410214827503 APPLE 'PHONES no 1064 03/07/20 18:15:02 4:44 0 Oruftgenpho 3587080982063725 310410214827503 APPLE 'PHONES no 1065 03/07/20 18:19:46 7:15 0 Oruftgenpho 3587080982063725 310410214827503 APPLE 'PHONES no 1066 03/07/20 18:21:16 0:34 61632 26652 imp -1 310410214827503 1067 03/07/20 18:27:00 1:05 192 Oruftgenpho 3587080982063725 310410214827503 APPLE 'PHONES no 1068 03/07/20 18:27:02 1:04 0 Oruftgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1069 03/07/20 18:28:06 13:15 0 Oruftgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1070 03/07/20 18:36:11 30:45 13316 7812 imp -1 310410214827503 1071 03/07/20 18:39:44 0:05 0 2318 imp -1 310410214827503 1072 03/07/20 18:41:19 2:07 192 Oruftgenpho 3587080982063725 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 43 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002687 The information contained heraCtoNyFti PsiTniliAL not for general distribution. EF-EA_00116763 EFTA01251287 NOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run pato: 06/17/2020 Run Time: 18:55:36 Data Osage for: Item Conn. Conn. Originating ET Bytes Bytes Apn ICI INSt ten tarn Date Time Number Up on (UTC) 1073 03/07/20 18:41:21 2:06 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1074 03/07/20 18:43:27 26:50 0 Onxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1075 03/07/20 19:10:16 2:07 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1076 03/07/20 19:10:17 2:07 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 1077 03/07/20 19:10:35 1:48 7213 6790 mss 3587080982063725 310410214827503 APPLE !PHONES 1078 03/07/20 19:10:36 1:48 6790 6949 mss 3587080982063725 310410214827503 APPLE !PHONES 1079 03/07/20 19:11:08 15:58 8311 6213 I. -1 310410214827503 1080 03/07/20 19:12:24 4:40 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1081 03/07/20 19:17:03 8:47 192 Oruftgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1082 03/07/20 19:17:05 8:46 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1083 03/07/20 19:25:50 2:22 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 1084 03/07/20 19:25:52 2:21 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1085 03/07/20 19:28:12 6:09 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PRONGS no 1086 03/07/20 19:28:13 6:09 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 1087 03/07/20 19:34:23 0:37 0 Onxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1088 03/07/20 19:34:29 60:00 19394 10386 mes -1 310410214827503 1089 03/07/20 19:35:00 21:20 192 Onxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1090 03/07/20 19:35:01 21:20 0 Oruftgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1091 03/07/20 19:56:20 2:09 192 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1092 03/07/20 19:56:21 2:09 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 1093 03/07/20 19:58:30 1:27 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1094 03/07/20 19:59:57 21:10 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PRONGS no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 44 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002688 The information contained hereCtoNe not for general distribution. EFTA 00116764 EFTA01251288 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ..... ••-s` aa.• AT&T OTC. Run Data: 06/17/2020 Run Time: 18:55:36 Data Osage Tor: Item Conn. Conn. Originating LT Bytes Byte. Apn ICI IMBI MAfl NICOLL Date SLAW Rumbas Up Dn (OTC) 1095 03/07/20 19:59:58 21:10 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE 1PHONE8 no 1096 03/07/20 20:21:07 2:24 192 Ormtganpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1097 03/07/20 20:21:08 2:24 0 Ormtganpho 3587080982063725 310410214827503 APPLE !PHONES no 1098 03/07/20 20:23:31 6:07 192 Onatgarapho 3587080982063725 310410214827503 APPLE !PRONGS no 1099 03/07/20 20:23:33 6:06 0 Onatganpho 3587080982063725 310410214827503 APPLE IPRONE8 no 1100 03/07/20 20:29:39 4:48 0 Onatganpho 3587080982063725 310410214827503 APPLE IPRONE8 no 1101 03/07/20 20:34:26 71:33 192 Onatganpho 3587080982063725 310410214827503 APPLE IPRONE8 no 1102 03/07/20 20:34:27 60:00 0 Ormtganpho 3587080982063725 310410214827503 APPLE IPRONE8 no 1103 03/07/20 20:34:29 3:10 0 0 ins -1 310410214827503 1104 03/07/20 20:43:44 52:50 6354 6668 ins 3587080982063725 310410214827503 APPLE DRONES 1105 03/07/20 20:43:45 52:50 6668 6090 ins 3587080982063725 310410214827503 APPLE DRONES 1106 03/07/20 20:47:45 30:08 14287 8338 ins -1 310410214827503 1107 03/07/20 21:32:01 13:58 7228 6718 ins 3587080982063725 310410214827503 APPLE IPHONE8 1108 03/07/20 21:32:02 13:58 6718 6964 ins 3587080982063725 310410214827503 APPLE IPHONE8 1109 03/07/20 21:34:27 11:33 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1110 03/07/20 21:36:33 4:51 11664 7557 ins -1 310410214827503 1111 03/07/20 21:46:00 3:06 0 Ormtganpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1112 03/07/20 21:49:05 2:10 192 Onatganpho 3587080982063725 310410214827503 APPLE IPRONE8 no 1113 03/07/20 21:49:07 2:09 0 Onatganpho 3587080982063725 310410214827503 APPLE IPRONE8 no 1114 03/07/20 21:49:18 1:57 7112 6720 ins 3587080982063725 310410214827503 APPLE IPHONE8 1115 03/07/20 21:49:19 1:57 6720 6848 ins 3587080982063725 310410214827503 APPLE IPHONE8 1116 03/07/20 21:51:16 0:39 0 Onatganpho 3587080982063725 310410214827503 APPLE !PHONES no 1117 03/07/20 21:51:18 0:00 0 0 ins 3587080982063725 310410214827503 APPLE !PHONES 1118 03/07/20 21:51:54 27:15 192 Onatganpho 3587080982063725 310410214827503 APPLE !PHONES no 1119 03/07/20 21:51:55 27:15 0 Onxtganpho 3587080982063725 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 45 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained hereCtoNels PsiTniliAL not for general distribution. SDNYGM 00002689 EF-EA_00116765 EFTA01251289 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in tt ‘"S° as# gO AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn INE' IMEI HAKE MODEL Date Time Number Up Dn (OTC) 1120 03/07/20 21:52:20 26:49 7262 6854 imo 3587080982063725 310410214827503 APPLE !PHONES 1121 03/07/20 21:52:21 26:49 6746 6998 imo 3587080982063725 310410214827503 APPLE !PHONES 1122 03/07/20 21:53:58 14:15 10099 6418 imo -1 310410214827503 1123 03/07/20 22:19:10 2:09 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 1124 03/07/20 22:19:11 2:08 6246 6672 imo 3587080982063725 310410214827503 APPLE 'PHONES 1125 03/07/20 22:19:11 2:09 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1126 03/07/20 22:19:12 2:08 6672 5982 imp 3587080982063725 310410214827503 APPLE !PHONES 1127 03/07/20 22:21:20 0:37 0 Oruftgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 1128 03/07/20 22:21:21 0:01 0 0 imp 3587080982063725 310410214827503 APPLE 'PHONES 1129 03/07/20 22:21:29 10:12 11698 6686 imo -1 310410214827503 1130 03/07/20 22:21:57 21:16 192 Onxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 1131 03/07/20 22:21:58 21:16 0 Onxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 1132 03/07/20 22:37:29 5:44 6316 6778 imp 3587080982063725 310410214827503 APPLE 'PHONES 1133 03/07/20 22:37:30 5:44 6670 5964 imp 3587080982063725 310410214827503 APPLE 'PHONES 1134 03/07/20 22:41:47 33:34 15774 8758 imo -1 310410214827503 1135 03/07/20 22:43:14 0:36 0 Onxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 1136 03/07/20 22:43:49 15:04 192 Onxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 1137 03/07/20 22:43:50 15:04 0 Onxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 1138 03/07/20 22:58:54 27:38 192 Oruftgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 1139 03/07/20 22:58:55 27:38 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1140 03/07/20 23:26:32 34:00 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1141 03/07/20 23:26:33 34:00 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1142 03/07/20 23:26:37 33:55 6370 6674 imp 3587080982063725 310410214827503 APPLE 'PHONES 1143 03/07/20 23:26:38 33:55 6674 6106 imp 3587080982063725 310410214827503 APPLE 'PHONES 1144 03/07/20 23:27:04 39:15 42891 24018 imo -1 310410214827503 1145 03/08/20 00:00:33 5:46 0 Oruftgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 1146 03/08/20 00:00:45 0:16 0 55513 imo -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 46 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGMJ10002690 The information contained heraCteNelt NTnilikk not for general distribution. EFTAJVII6766 EFTA01251290 MOBILITY • 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in trts AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage for: Item Conn. Conn. Originating CT Bytes Byte. Apn IME1 IMBI MA= NADEL Date Time Number Up On (Inc) 1147 03/08/20 15:41:04 60:00 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1148 03/08/20 15:41:06 0:17 8148 6924 imp 3587080982063725 310410214827503 APPLE !PHONES 1149 03/08/20 15:41:23 60:00 14740 4576 imp 3587080982063725 310410214827503 APPLE !PHONES 1150 03/08/20 16:41:04 60:00 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1151 03/08/20 16:41:23 60:00 10020 3144 imp 3587080982063725 310410214827503 APPLE !PHONES 1152 03/08/20 17:41:04 43:30 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1153 03/08/20 17:41:23 60:00 42980 20732 imp 3587080982063725 310410214827503 APPLE !PHONES 1154 03/08/20 18:09:35 0:06 0 6927 imp 3587080982063725 310410214827503 APPLE !PHONES 1155 03/08/20 18:23:21 0:07 0 7700 imp 3587080982063725 310410214827503 APPLE !PHONES 1156 03/08/20 18:24:33 2:09 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1157 03/08/20 18:24:34 2:09 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1158 03/08/20 18:26:43 14:23 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1159 03/08/20 18:41:06 3:35 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1160 03/08/20 18:41:23 60:00 3408 1432 imp 3587080982063725 310410214827503 APPLE !PHONES 1161 03/08/20 18:44:41 16:06 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1162 03/08/20 18:55:40 0:00 0 0 imp 3587080982063725 310410214827503 APPLE !PHONES 1163 03/08/20 18:55:48 60:00 16793 8983 imp -1 310410214827503 1164 03/08/20 19:00:46 7:34 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1165 03/08/20 19:00:47 7:34 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1166 03/08/20 19:08:21 0:32 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1167 03/08/20 19:08:51 5:10 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1168 03/08/20 19:08:53 5:09 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1169 03/08/20 19:14:02 0:06 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1170 03/08/20 19:14:24 3:41 192 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 47 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002691 The information contained heraCtoNyFti PsisTfikE not for general distribution. EF-EA_00116767 EFTA01251291 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage for: Item Conn. Conn. Originating LT Byte. Byte. Apn INLI INBI teUtt SCOTS Date Time Hurter Op On /OTC) 1171 03/08/20 19:14:25 3:42 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONZ8 no 1172 03/08/20 19:18:06 5:01 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 1173 03/08/20 19:18:07 5:01 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 1174 03/08/20 19:23:08 13:33 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1175 03/08/20 19:23:09 13:34 0 Onxtgonpho 3587080982063725 310410214827503 APPLE IPHONZ8 no 1176 03/08/20 19:36:43 1:33 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1177 03/08/20 19:38:15 2:10 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1178 03/08/20 19:38:17 2:09 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1179 03/08/20 19:40:26 3:26 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1180 03/08/20 19:41:23 60:00 0 0 ims 3587080982063725 310410214827503 APPLE !PHONES 1181 03/08/20 19:43:52 16:56 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1182 03/08/20 19:43:53 16:56 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1183 03/08/20 19:55:48 60:00 12652 3408 ims -1 310410214827503 1184 03/08/20 20:00:49 16:17 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1185 03/08/20 20:17:06 4:04 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1186 03/08/20 20:17:07 4:04 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1187 03/08/20 20:21:11 0:56 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1188 03/08/20 20:22:06 2:38 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1189 03/08/20 20:22:07 2:38 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1190 03/08/20 20:24:44 6:10 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1191 03/08/20 20:24:46 6:09 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are.powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 48 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002692 The information contained her is PsisTiliAL not for general distribution. EF-EA_00116768 EFTA01251292 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time lone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn INEI INBI tun NICOLL Date Time Number Up Dn (OTC) 1192 03/08/20 20:30:55 4:54 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE 1PHONZ8 no 1193 03/08/20 20:35:48 14:11 192 Ormtganpho 3587080982063725 310410214827503 APPLE !PHONES no 1194 03/08/20 20:35:49 14:11 0 Ormtganpho 3587080982063725 310410214827503 APPLE !PHONES no 1195 03/08/20 20:41:23 60:00 0 0 imp 3587080982063725 310410214827503 APPLE !PHONES 1196 03/08/20 20:50:00 12:34 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1197 03/08/20 20:50:01 12:34 0 Ormtganpho 3587080982063725 310410214827503 APPLE !PHONES no 1198 03/08/20 20:55:48 60:00 10580 4096 imp -1 310410214827503 1199 03/08/20 21:02:34 6:10 192 Ormtganpho 3587080982063725 310410214827503 APPLE IPHOME8 no 1200 03/08/20 21:02:35 6:10 0 Onatganpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1201 03/08/20 21:08:45 60:00 0 Onatgarapho 3587080982063725 310410214827503 APPLE !PHONES no 1202 03/08/20 21:41:23 60:00 0 0 imp 3587080982063725 310410214827503 APPLE !PHONES 1203 03/08/20 21:55:48 60:00 6924 2772 imp -1 310410214827503 1204 03/08/20 22:08:45 0:58 0 Onatganpho 3587080982063725 310410214827503 APPLE IPHOME8 no 1205 03/08/20 22:09:43 1:38 0 Onatganpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1206 03/08/20 22:11:22 22:21 0 Onatganpho 3587080982063725 310410214827503 APPLE !PHONES no 1207 03/08/20 22:33:42 2:10 192 Onatganpho 3587080982063725 310410214827503 APPLE IPHOME8 no 1208 03/08/20 22:33:43 2:10 0 Onatganpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1209 03/08/20 22:35:53 6:31 0 Onatganpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1210 03/08/20 22:41:23 18:00 0 0 imp 3587080982063725 310410214827503 APPLE IPHOME8 1211 03/08/20 22:42:23 2:10 192 Onatganpho 3587080982063725 310410214827503 APPLE IPHOME8 no 1212 03/08/20 22:42:25 2:09 0 Onatganpho 3587080982063725 310410214827503 APPLE !PHONES no 1213 03/08/20 22:44:34 4:14 0 Onatganpho 3587080982063725 310410214827503 APPLE !PHONES no 1214 03/08/20 22:48:47 2:27 192 Onatganpho 3587080982063725 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 49 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002693 The information contained her is N:FroliAL not for general distribution. EFTA_OOI 16769 EFTA01251293 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in AT&T OTC. Run pato: 06/17/2020 Run Time: 18:53:36 Data Osage For: Item Conn. Conn. Originating ET Bytes Bytom Ann IBEX INSI NAfl MODEL Date Time Number Up Dn (OTC) 1215 03/08/20 22:48:48 2:27 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1216 03/08/20 22:51:14 12:30 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1217 03/08/20 22:51:15 12:30 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1218 03/08/20 22:55:48 60:00 10160 3144 inn -1 310410214827503 1219 03/08/20 23:03:45 2:05 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1220 03/08/20 23:05:49 8:43 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPRONZ8 no 1221 03/08/20 23:05:50 8:43 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPRONZ8 no 1222 03/08/20 23:14:33 60:00 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1223 03/08/20 23:55:48 55:14 51404 17880 inn -1 310410214827503 1224 03/09/20 00:14:33 36:44 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1225 03/09/20 00:44:58 0:23 0 43856 inn -1 310410214827503 1226 03/09/20 00:51:16 22:51 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1227 03/09/20 00:51:17 22:51 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1228 03/09/20 00:51:17 4:16 7160 6810 inn 3587080982063725 310410214827503 APPLE IPRONZ8 1229 03/09/20 00:51:18 4:16 6742 6896 imo 3587080982063725 310410214827503 APPLE IPRONZ8 1230 03/09/20 00:55:02 0:31 756 0 imo -1 310410214827503 1231 03/09/20 00:55:32 18:35 7376 6794 imo 3587080982063725 310410214827503 APPLE IPRONZ8 1232 03/09/20 00:55:33 18:35 6794 7112 inn 3587080982063725 310410214827503 APPLE IPRONZ8 1233 03/09/20 00:56:28 60:00 24207 16162 inn -1 310410214827503 1234 03/09/20 01:14:08 2:02 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1235 03/09/20 01:16:09 14:18 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1236 03/09/20 01:16:10 14:18 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1237 03/09/20 01:30:23 18:53 3007685 3052551 imo -1 310410214827503 1238 03/09/20 01:30:29 10:30 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1239 03/09/20 01:40:58 18:18 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 50 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002694 The information contained hereetoNelt NeTniliAL not for general distribution. EFTA_00I 16770 EFTA01251294 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in te.,-. `"Ie as s. AT&T arc. Run pato: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn IMBI MARL MODEL Data Time Number Up Dn (OTC) 1240 03/09/20 01:40:59 18:18 0 Onxtgonpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1241 03/09/20 01:56:28 60:00 6940 2896 ins -1 310410214827503 1242 03/09/20 01:59:17 0:54 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1243 03/09/20 02:00:10 5:09 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1244 03/09/20 02:00:11 5:09 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1245 03/09/20 02:05:19 8:38 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1246 03/09/20 02:05:20 8:38 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1247 03/09/20 02:13:58 5:51 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1248 03/09/20 02:13:59 5:51 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1249 03/09/20 02:19:50 55:27 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1250 03/09/20 02:56:28 60:00 6848 2788 ins -1 310410214827503 1251 03/09/20 03:15:16 20:00 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1252 03/09/20 03:15:17 59:01 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1253 03/09/20 03:56:28 60:00 8496 2928 imo -1 310410214827503 1254 03/09/20 04:14:18 60:00 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1255 03/09/20 04:56:28 60:00 16884 6232 ins -1 310410214827503 1256 03/09/20 05:14:18 60:00 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1257 03/09/20 05:56:28 60:00 8496 2928 imo -1 310410214827503 1258 03/09/20 06:14:18 60:00 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1259 03/09/20 06:56:28 60:00 8496 3160 Imo -1 310410214827503 1260 03/09/20 07:14:18 60:00 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1261 03/09/20 07:56:28 60:00 8496 2928 imo -1 310410214827503 1262 03/09/20 08:14:18 0:01 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1263 03/09/20 08:47:44 2:23 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 51 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002695 The information contained her is N:FroliAL not for general distribution. EF-EA_00116771 EFTA01251295 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .... •--ssif AT&T `'a OTC. Run Date: 06/17/2020 Run Time: 18:65:36 Data Usage For: Item Conn. Conn. Originating LT Bytes Bytoa Apn IBEX INBI teat NICOLL Date Time Number Up Dn (OTC) 1264 03/09/20 08:47:46 2:22 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1265 03/09/20 08:50:07 6:02 192 Onxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1266 03/09/20 08:50:08 6:03 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 1267 03/09/20 08:56:10 3:22 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1268 03/09/20 08:56:11 3:22 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1269 03/09/20 08:56:28 60:00 11812 4484 ism -1 310410214827503 1270 03/09/20 08:59:33 60:00 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1271 03/09/20 09:56:28 60:00 12044 4552 imp -1 310410214827503 1272 03/09/20 09:59:33 51:11 0 Onxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1273 03/09/20 10:50:44 10:15 192 Onxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1274 03/09/20 10:50:45 10:15 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1275 03/09/20 10:56:28 60:00 6832 2680 imp -1 310410214827503 1276 03/09/20 11:01:00 56:23 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 1277 03/09/20 11:56:28 60:00 13352 4732 imp -1 310410214827503 1278 03/09/20 11:57:22 2:59 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 1279 03/09/20 11:57:23 2:59 0 Onxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1280 03/09/20 12:00:21 20:57 192 Onxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1281 03/09/20 12:00:22 20:57 0 Onxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1282 03/09/20 12:21:18 7:42 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 1283 03/09/20 12:21:20 7:41 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1284 03/09/20 12:29:01 13:08 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1285 03/09/20 12:29:02 13:08 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 52 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002696 The information contained hereCtoNyFti NeTniiiikE not for general distribution. EFTA 00116772 EFTA01251296 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T (ITC. Run Data: 06/17/2020 Run Tame: Data Osage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn INLI 'NIX Mal MODEL Date Time Number Up Dn (OTC) 1286 03/09/20 12:42:11 23:32 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1287 03/09/20 12:56:28 60:00 7064 2804 ims -1 310410214827503 1288 03/09/20 13:05:42 8:24 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1289 03/09/20 13:05:43 8:24 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1290 03/09/20 13:14:07 13:42 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1291 03/09/20 13:27:48 2:10 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1292 03/09/20 13:27:50 2:09 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1293 03/09/20 13:29:59 14:10 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1294 03/09/20 13:44:08 5:25 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1295 03/09/20 13:44:09 5:25 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1296 03/09/20 13:49:34 5:02 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1297 03/09/20 13:54:35 9:50 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1298 03/09/20 13:54:36 9:50 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1299 03/09/20 13:56:28 60:00 23568 10996 ims -1 310410214827503 1300 03/09/20 14:04:25 5:32 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1301 03/09/20 14:04:27 5:31 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1302 03/09/20 14:09:58 9:08 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1303 03/09/20 14:19:05 0:44 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1304 03/09/20 14:19:06 0:44 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1305 03/09/20 14:19:50 60:00 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1306 03/09/20 14:52:26 0:10 0 6685 ims -1 310410214827503 1307 03/09/20 14:56:28 60:00 29368 14756 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 53 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002697 The information contained her is not for general distribution. NTroleiNE EF-EAJVII6773 EFTA01251297 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in / .....,,,• 1 4 "" -ss AT&T OTC. Run Dato: 06/17/2020 Run Time: 14:63:37 Data Usage Tor: Itea Conn. Conn. Originating Cr Bytes Bytom Apn Tarr IH3I ten NICOLL Date Time Humber OP Dn (UTC) 1308 03/09/20 15:19:50 52:16 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1309 03/09/20 15:46:20 0:04 0 8568 ins -1 310410214827503 1310 03/09/20 15:56:28 50:29 8820 3468 ins -1 310410214827503 1311 03/09/20 16:37:57 2:26 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1312 03/09/20 16:37:58 2:26 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1313 03/09/20 16:40:24 6:23 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1314 03/09/20 16:46:46 18:32 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1315 03/09/20 16:46:47 18:32 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1316 03/09/20 16:46:56 18:22 7240 7554 ins 3587080982063725 310410214827503 APPLE !PHONES 1317 03/09/20 16:46:57 18:22 7486 6976 ins 3587080982063725 310410214827503 APPLE !PHONES 1318 03/09/20 17:05:19 14:42 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1319 03/09/20 17:05:21 7:10 7406 6121 ins 3587080982063725 310410214827503 APPLE IPHONE8 1320 03/09/20 17:12:31 10:30 5180 1696 ins 3587080982063725 310410214827503 APPLE IPHONE8 1321 03/09/20 17:14:37 60:00 16620 9004 ins -1 310410214827503 1322 03/09/20 17:20:00 9:52 288 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1323 03/09/20 17:20:01 9:52 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1324 03/09/20 17:29:53 5:29 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1325 03/09/20 17:29:54 5:29 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1326 03/09/20 17:35:23 3:53 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1327 03/09/20 17:39:15 2:16 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1328 03/09/20 17:39:16 2:16 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1329 03/09/20 17:41:32 15:20 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1330 03/09/20 17:41:33 15:20 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1331 03/09/20 17:56:53 60:00 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 54 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002698 The information contained her NTratAL not for general distribution. EF-EA_00116774 EFTA01251298 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T arc. Run Date: 06/17/2020 Run Time: 1S:53:37 Data Osage for: Item Conn. Conn. Originating ET Bytes Bytes, Min INCI INSI MUM MOLL Data rime Number OP Dn (OTC) 1332 03/09/20 18:14:37 60:00 14340 6952 ims -1 310410214827503 1333 03/09/20 18:49:56 0:04 0 104 ims -1 310410214827503 1334 03/09/20 18:56:53 29:12 0 Oruftgenpho 3587080982063725 310410214827503 APPLE IPHONEB no 1335 03/09/20 19:14:37 60:00 9960 3144 ims -2 310410214827503 1336 03/09/20 19:26:04 2:09 192 Oruftgenpho 3587080982063725 310410214827503 APPLE IPHONEB no 1337 03/09/20 19:26:05 2:09 0 Oruftgenpho 3587080982063725 310410214827503 APPLE IPHONEB no 1338 03/09/20 19:28:14 37:51 0 Onxtgenpho 3587080982063725 310410214827503 APPLE IPHONEB no 1339 03/09/20 20:06:04 2:10 192 Onxtgenpho 3587080982063725 310410214827503 APPLE IPHONEB no 1340 03/09/20 20:06:06 2:09 0 Onxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1341 03/09/20 20:08:15 0:47 0 Onxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1342 03/09/20 20:09:01 8:34 192 Oruftgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1343 03/09/20 20:09:02 8:34 0 Oruftgenpho 3587080982063725 310410214827503 APPLE IPHONEB no 1344 03/09/20 20:14:37 60:00 8604 3020 ims -2 310410214827503 1345 03/09/20 20:17:36 0:59 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPHONEB no 1346 03/09/20 20:18:35 15:42 192 Oruftgenpho 3587080982063725 310410214827503 APPLE IPHONEB no 1347 03/09/20 20:18:36 15:42 0 Onxtgenpho 3587080982063725 310410214827503 APPLE IPHONEB no 1348 03/09/20 20:34:18 5:53 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPHONEB no 1349 03/09/20 20:40:11 3:12 192 Onxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1350 03/09/20 20:40:12 3:12 0 Onxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1351 03/09/20 20:43:24 6:12 0 Oruftgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1352 03/09/20 20:49:35 8:31 192 Oruftgenpho 3587080982063725 310410214827503 APPLE IPHONEB no 1353 03/09/20 20:49:36 8:31 0 Oruftgenpho 3587080982063725 310410214827503 APPLE IPHONEB no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 55 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002699 The information contained her is NTroliAL not for general distribution. EFTA_00116775 EFTA01251299 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Tame: 14:54:37 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn ICI INSI NUM NICOLL Date Time Number UP Dn (UTC) 1354 03/09/20 20:58:07 9:29 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 1355 03/09/20 21:07:35 1:02 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1356 03/09/20 21:07:36 1:02 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1357 03/09/20 21:08:38 3:54 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1358 03/09/20 21:12:31 2:56 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 1359 03/09/20 21:12:32 2:56 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1360 03/09/20 21:14:37 18:28 3408 1324 ins -1 310410214827503 1361 03/09/20 21:15:28 1:22 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1362 03/09/20 21:16:49 2:09 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1363 03/09/20 21:16:50 2:09 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1364 03/09/20 21:18:59 10:53 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1365 03/09/20 21:29:52 20:16 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1366 03/09/20 21:29:53 20:15 6244 6740 ins 3587080982063725 310410214827503 APPLE !PHONES 1367 03/09/20 21:29:53 20:16 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 1368 03/09/20 21:29:54 20:15 6672 5980 ins 3587080982063725 310410214827503 APPLE IPHOME8 1369 03/09/20 21:46:37 60:00 18655 9854 ins -1 310410214827503 1370 03/09/20 21:50:09 2:03 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1371 03/09/20 21:52:11 9:24 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1372 03/09/20 21:52:12 9:25 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1373 03/09/20 22:01:37 30:59 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1374 03/09/20 22:32:36 17:41 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 1375 03/09/20 22:32:36 17:42 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 1376 03/09/20 22:46:37 46:07 10160 6456 ins -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 56 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002700 The information contained hereeNyFtli PsiTifikE not for general distribution. EFTA_00116776 EFTA01251300 MOBILITY • 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: 10:54:37 Data Usage for: Item Conn. Conn. Originating ET Bytes Rytoa Rpn INE1 IMS1 ten MODEL Data Time Number Up Dn (OTC) 1377 03/09/20 22:50:17 1:16 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 1378 03/09/20 22:50:18 1:16 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1379 03/09/20 22:51:34 5:52 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1380 03/09/20 22:57:25 3:58 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1381 03/09/20 22:57:27 3:57 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1382 03/09/20 23:01:24 4:13 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1383 03/09/20 23:05:36 3:35 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1384 03/09/20 23:05:37 3:35 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1385 03/09/20 23:09:12 11:34 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1386 03/09/20 23:20:45 2:21 192 Onxtgonpho 3587080982063725 310410214827503 APPLE 1PROME8 no 1387 03/09/20 23:20:46 2:21 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1388 03/09/20 23:23:07 11:56 0 OruMgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1389 03/09/20 23:33:05 0:34 840 72 ims 3587080982063725 310410214827503 APPLE !PHONES 1390 03/09/20 23:33:39 0:00 0 0 ims 3587080982063725 310410214827503 APPLE DRONES 1391 03/09/20 23:33:39 0:01 0 0 ims 3587080982063725 310410214827503 APPLE DRONES 1392 03/09/20 23:33:43 60:00 18363 9389 ims -1 310410214827503 1393 03/09/20 23:35:02 7:16 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1394 03/09/20 23:35:03 7:16 0 OruMgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1395 03/09/20 23:42:19 5:00 0 Oructgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1396 03/09/20 23:47:18 1:15 192 OruMgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1397 03/09/20 23:47:20 1:14 0 OruMgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1398 03/09/20 23:48:34 3:06 0 OruMgonpho 3587080982063725 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 57 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002701 The information contained hereeNyFtli NTatiadt not for general distribution. EFTA_00116777 EFTA01251301 MOBILITY ap. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tr ""‘ ad est AT&T OTC. Run pato: 06/17/2020 Run Time: 18:55:37 Data usage For: Item cone. Conn. originating ET Bytes Bytom Apn INEI INBI tun won Date Time Number Up on (UTC) 1399 03/09/20 23:51:40 5:17 192 0 ructgonpho 3587080982063725 310410214827503 APPLE 11)4(0=8 no 1400 03/09/20 23:51:41 5:17 0 0 natgonpho 3587080982063725 310410214827503 APPLE 110)(0=8 no 1401 03/09/20 23:56:58 8:46 192 0 natgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1402 03/09/20 23:56:59 8:46 0 0 natgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1403 03/10/20 00:05:45 12:31 192 0 natgonpho 3587080982063725 310410214827503 APPLE 110)(0=8 no 1404 03/10/20 00:05:46 12:31 0 0 natgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1405 03/10/20 00:18:17 23:13 0 0 ructgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1406 03/10/20 00:33:43 60:00 8604 3052 ims -1 310410214827503 1407 03/10/20 00:41:29 8:25 192 0 ructgonpho 3587080982063725 310410214827503 APPLE 110)(0=8 no 1408 03/10/20 00:41:31 8:24 0 0 ructgonpho 3587080982063725 310410214827503 APPLE 110)(0=8 no 1409 03/10/20 00:49:55 17:25 0 0 ructgonpho 3587080982063725 310410214827503 APPLE 110)(0=8 no 1410 03/10/20 01:07:20 58:34 192 0 ructgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1411 03/10/20 01:07:21 58:34 0 0 ructgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1412 03/10/20 01:33:43 60:00 9928 3176 ims -1 310410214827503 1413 03/10/20 02:05:55 60:00 0 0 ructgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1414 03/10/20 02:33:43 60:00 8496 3160 ims -1 310410214827503 1415 03/10/20 03:05:55 50:07 0 0 ructgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1416 03/10/20 03:33:43 60:00 8012 2804 ims -1 310410214827503 1417 03/10/20 03:56:02 16:34 192 0 natgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1418 03/10/20 03:56:03 16:34 0 0 natgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1419 03/10/20 04:12:37 41:56 192 0 natgonpho 3587080982063725 310410214827503 APPLE 110)(0=8 no 1420 03/10/20 04:12:38 41:56 0 0 natgonpho 3587080982063725 310410214827503 APPLE 110)(0=8 no 1421 03/10/20 04:33:43 60:00 16636 6232 ins -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 58 AT&T does not retain records that can definitively show whether a transaction was PsisTfikE customer initiated or AT&T's network initiated the data transaction. SDNYGML00002702 The information contained heraleOuNe not for general distribution. EF-EAJVII6778 EFTA01251302 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T arc. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytom Apn INEI INSI MAKE NICOLL Data Time Number UP On (OTC) 1422 03/10/20 04:54:34 60:00 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1423 03/10/20 05:33:43 60:00 8604 3252 imo -1 310410214827503 1424 03/10/20 05:54:34 50:23 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1425 03/10/20 06:33:43 60:00 6848 2680 imo -1 310410214827503 1426 03/10/20 06:44:57 28:57 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1427 03/10/20 06:44:58 28:57 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1428 03/10/20 07:13:55 60:00 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1429 03/10/20 07:33:43 60:00 8496 3052 imo -1 310410214827503 1430 03/10/20 08:13:55 49:45 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1431 03/10/20 08:33:43 60:00 11596 4160 imo -1 310410214827503 1432 03/10/20 09:03:39 2:23 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1433 03/10/20 09:03:40 2:23 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1434 03/10/20 09:06:03 9:09 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1435 03/10/20 09:06:04 9:09 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1436 03/10/20 09:15:12 9:23 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1437 03/10/20 09:15:13 9:23 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE 1PHONE8 no 1438 03/10/20 09:24:36 6:46 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE 1PHONE8 no 1439 03/10/20 09:24:37 6:46 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1440 03/10/20 09:31:23 56:05 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1441 03/10/20 09:33:43 60:00 15092 4908 imo -1 310410214827503 1442 03/10/20 10:27:27 14:56 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1443 03/10/20 10:27:28 14:56 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1444 03/10/20 10:33:43 60:00 9928 3176 imo -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 59 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002703 The information contained her NeTtikE not for general distribution. EFTA_00116779 EFTA01251303 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in / ......„,„• 1 4 `' -ss AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Ilea Conn. Conn. Originating ET Bytes Bytoa Apn IKI IMSI MAKE MODEL Date Time Number Up Dn (UTC) 1445 03/10/20 10:42:24 2:10 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1446 03/10/20 10:44:34 60:00 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1447 03/10/20 10:44:34 84:53 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1448 03/10/20 11:33:43 60:00 6956 2680 imp -1 310410214827503 1449 03/10/20 11:44:34 24:54 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1450 03/10/20 12:09:28 34:27 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1451 03/10/20 12:33:43 60:00 9928 3176 imp -1 310410214827503 1452 03/10/20 12:43:54 2:10 192 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1453 03/10/20 12:43:55 2:10 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1454 03/10/20 12:46:05 60:00 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1455 03/10/20 13:33:43 60:00 8604 3052 imp -1 310410214827503 1456 03/10/20 13:46:05 19:47 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1457 03/10/20 14:05:51 0:40 192 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1458 03/10/20 14:05:52 0:40 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1459 03/10/20 14:06:32 1:23 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1460 03/10/20 14:07:54 8:25 192 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1461 03/10/20 14:07:56 8:24 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1462 03/10/20 14:16:20 58:09 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1463 03/10/20 14:33:43 60:00 13912 6092 imp -1 310410214827503 1464 03/10/20 15:14:28 1:16 192 Oruftgonpho 3587080982063725 310410214827503 APPLE 1PRONE8 no 1465 03/10/20 15:14:30 1:16 0 Oruftgonpho 3587080982063725 310410214827503 APPLE 1PRONE8 no 1466 03/10/20 15:15:46 2:14 0 Oruftgonpho 3587080982063725 310410214827503 APPLE 1PRONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 60 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002704 The information contained her is PsiTniliAL not for general distribution. EFTA_00116780 EFTA01251304 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .....,./AT&T `•-s"" OTC. Run Date: 06/17/2020 Run Time: 10:55:37 Data Osage Tor: Itea Conn. Conn. Originating ET Bytes Bytes Apn INC1 IMBI MARL MOLL Date Time Number Up Dn (UTC) 1467 03/10/20 15:17:59 0:57 192 Onxtgenpho 3587080982063725 310410214827503 APPLE 1PHONE8 no 1468 03/10/20 15:18:00 0:57 0 Orumgenpho 3587080982063725 310410214827503 APPLE 1PHONE8 no 1469 03/10/20 15:18:57 4:52 0 Orumgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1470 03/10/20 15:23:48 20:00 192 Orumgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1471 03/10/20 15:23:49 27:14 0 Orumgenpho 3587080982063725 310410214827503 APPLE 1PHONE8 no 1472 03/10/20 15:33:43 53:28 16092 5276 imo -1 310410214827503 1473 03/10/20 15:51:03 36:17 0 Onamgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1474 03/10/20 16:27:20 1:23 192 Onamgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1475 03/10/20 16:27:21 1:22 7232 6864 mos 3587080982063725 310410214827503 APPLE !PHONES 1476 03/10/20 16:27:21 1:23 0 Onamgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1477 03/10/20 16:27:22 1:22 6796 6968 mos 3587080982063725 310410214827503 APPLE !PHONES 1478 03/10/20 16:28:35 60:00 18395 12138 mos -1 310410214827503 1479 03/10/20 16:28:44 0:05 0 Onamgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1480 03/10/20 16:29:06 1:09 192 Onamgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1481 03/10/20 16:29:07 1:09 0 Onamgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1482 03/10/20 16:30:16 7:18 0 Onamgenpho 3587080982063725 310410214827503 APPLE 1PHONE8 no 1483 03/10/20 16:37:33 2:30 192 Onamgenpho 3587080982063725 310410214827503 APPLE 1PHONE8 no 1484 03/10/20 16:37:34 2:31 0 Orumgenpho 3587080982063725 310410214827503 APPLE 1PHONE8 no 1485 03/10/20 16:40:04 24:25 192 Orumgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1486 03/10/20 16:40:05 24:25 0 Orumgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1487 03/10/20 17:04:31 0:36 0 Orumgenpho 3587080982063725 310410214827503 APPLE 1PHONE8 no 1488 03/10/20 17:05:06 2:10 192 Orumgenpho 3587080982063725 310410214827503 APPLE 1PHONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 61 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002705 The information contained heraleeNe NTifikE not for general distribution. EF-EA_00116781 EFTA01251305 MOBILITY 411., 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T arc. Run Date: 06/17/2020 Run Tame: Data Osage For: Item Conn. Conn. Originating ET Byte. Byte. Apn INLI INBI HAKE MOLL Date Time Hunter Up Dn (UTC) 1489 03/10/20 17:05:07 2:10 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1490 03/10/20 17:07:17 6:45 0 Oruftgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1491 03/10/20 17:14:01 2:09 192 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1492 03/10/20 17:14:02 2:09 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1493 03/10/20 17:16:11 1:26 0 Oruftgonpho 3587080982063725 310410214827503 APPLE 1PRONE8 no 1494 03/10/20 17:17:36 4:47 192 Oruftgonpho 3587080982063725 310410214827503 APPLE 1PRONE8 no 1495 03/10/20 17:17:37 4:47 0 Oruftgonpho 3587080982063725 310410214827503 APPLE 1PRONE8 no 1496 03/10/20 17:22:25 2:41 0 Oruftgonpho 3587080982063725 310410214827503 APPLE 1PRONE8 no 1497 03/10/20 17:25:06 18:51 0 Oruftgonpho 3587080982063725 310410214827503 APPLE 1PRONE8 no 1498 03/10/20 17:28:35 60:00 25256 17492 imo -1 310410214827503 1499 03/10/20 17:41:29 0:04 0 4743 imo -1 310410214827503 1500 03/10/20 17:43:37 0:21 0 40524 imp -1 310410214827503 1501 03/10/20 17:43:57 38:21 192 Oruftgonpho 3587080982063725 310410214827503 APPLE 1PRONE8 no 1502 03/10/20 17:43:58 38:21 0 Oruftgonpho 3587080982063725 310410214827503 APPLE 1PRONE8 no 1503 03/10/20 18:22:19 2:30 0 Oruftgonpho 3587080982063725 310410214827503 APPLE 1PRONE8 no 1504 03/10/20 18:24:49 0:40 192 Oruftgonpho 3587080982063725 310410214827503 APPLE 1PRONE8 no 1505 03/10/20 18:24:50 0:40 0 Oruftgonpho 3587080982063725 310410214827503 APPLE 1PRONE8 no 1506 03/10/20 18:25:30 4:37 0 Oruftgonpho 3587080982063725 310410214827503 APPLE 1PRONE8 no 1507 03/10/20 18:28:35 60:00 16008 10668 imp -1 310410214827503 1508 03/10/20 18:30:06 2:10 192 Oruftgonpho 3587080982063725 310410214827503 APPLE 1PRONE8 no 1509 03/10/20 18:30:07 2:10 0 Oruftgonpho 3587080982063725 310410214827503 APPLE 1PRONE8 no 1510 03/10/20 18:32:17 5:41 0 Onxtgonpho 3587080982063725 310410214827503 APPLE 1PRONE8 no 1511 03/10/20 18:36:19 0:03 0 4743 in -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 62 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002706 The information contained her is not for general distribution. NeTilikk EF-EAJVII6782 EFTA01251306 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T (ITC. Run Data: 06/17/2020 Run Time: 10:66:37 Data Usage For: Item Conn. Conn. Originating ET Bytes Byte. Apn INEI IMBI MARL NICOLL Date Time Humber Up Dn (OTC) 1512 03/10/20 18:37:58 52:57 192 Onxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1513 03/10/20 18:37:59 52:57 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1514 03/10/20 19:28:35 60:00 13460 4500 imp -1 310410214827503 1515 03/10/20 19:30:56 54:37 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1516 03/10/20 20:25:32 2:14 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1517 03/10/20 20:25:33 2:14 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1518 03/10/20 20:27:47 19:12 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1519 03/10/20 20:28:35 60:00 6924 2788 imp -1 310410214827503 1520 03/10/20 20:46:58 15:19 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1521 03/10/20 20:46:59 15:19 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1522 03/10/20 21:02:18 21:25 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1523 03/10/20 21:23:42 3:11 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1524 03/10/20 21:23:43 3:11 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1525 03/10/20 21:26:53 8:23 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1526 03/10/20 21:26:54 8:23 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1527 03/10/20 21:28:35 60:00 10656 4288 imp -1 310410214827503 1528 03/10/20 21:35:17 1:15 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1529 03/10/20 21:36:32 7:33 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1530 03/10/20 21:44:05 10:19 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1531 03/10/20 21:44:06 10:19 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1532 03/10/20 21:54:25 2:09 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1533 03/10/20 21:54:26 2:09 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 63 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002707 The information contained hereCtoNeli not for general distribution. EF-EA_00116783 EFTA01251307 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T arc. Run Data: 06/17/2020 Run Time: 16:53:37 Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn INEZ IMEI MARL NADEL Data Time flusher 017 Dn (OTC) 1534 03/10/20 21:56:35 27:45 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE 'PHONES no 1535 03/10/20 22:24:20 64:28 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE 'PHONES no 1536 03/10/20 22:24:21 60:00 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE 'PHONES no 1537 03/10/20 22:28:35 60:00 24512 11828 imo -1 310410214827503 1538 03/10/20 23:20:52 0:01 0 0 imo -1 310410214827503 1539 03/10/20 23:20:55 0:03 0 1356 imo -1 310410214827503 1540 03/10/20 23:24:21 4:28 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1541 03/10/20 23:28:35 60:00 11796 4376 imo -1 310410214827503 1542 03/10/20 23:28:49 47:34 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1543 03/11/20 00:16:23 0:54 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1544 03/11/20 00:17:16 2:09 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE 'PHONES no 1545 03/11/20 00:17:17 2:10 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1546 03/11/20 00:19:26 5:58 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE 'PHONES no 1547 03/11/20 00:25:23 5:22 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE 'PHONES no 1548 03/11/20 00:25:24 5:22 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1549 03/11/20 00:28:35 60:00 7048 2912 imo -1 310410214827503 1550 03/11/20 00:30:46 60:00 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1551 03/11/20 01:28:35 59:42 8604 3160 imo -1 310410214827503 1552 03/11/20 01:30:46 52:17 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1553 03/11/20 02:24:15 2:47 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1554 03/11/20 02:27:01 70:00 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE 'PHONES no 1555 03/11/20 02:27:02 60:00 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE 'PHONES no 1556 03/11/20 02:27:28 15:13 6353 33200 imp 3587080982063725 310410214827503 APPLE !PHONES 1557 03/11/20 02:27:29 15:13 6672 6089 ims 3587080982063725 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 64 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002708 The information contained her is PsisTfikE not for general distribution. EF-EAJVII6784 EFTA01251308 MOBILITY • 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ••-..„,e "."1.d AT&T OTC. Run Date: 06/17/2020 Run Tama: 10:56:37 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn INEZ IMISI MARL MODEL Data Time Number Up Dn (UTC) 1558 03/11/20 02:28:17 60:00 8371 6178 imp -1 310410214827503 1559 03/11/20 02:42:36 60:00 15069 8676 imp -1 310410214827503 1560 03/11/20 03:27:02 60:00 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1561 03/11/20 03:28:17 60:00 0 0 imp -1 310410214827503 1562 03/11/20 03:42:36 56:47 13320 5856 imp -1 310410214827503 1563 03/11/20 04:27:02 4:24 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PRONGS no 1564 03/11/20 04:28:17 3:12 0 0 imp -1 310410214827503 1565 03/11/20 04:31:26 3:35 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1566 03/11/20 04:31:29 0:00 0 0 imp 3587080982063725 310410214827503 APPLE !PHONES 1567 03/11/20 04:35:00 7:56 192 Oruftgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1568 03/11/20 04:35:01 7:56 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1569 03/11/20 04:39:23 60:00 16467 9128 imp -1 310410214827503 1570 03/11/20 04:42:57 21:02 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1571 03/11/20 05:03:58 8:20 192 Onxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1572 03/11/20 05:03:59 8:20 0 Oruftgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 1573 03/11/20 05:12:19 8:19 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1574 03/11/20 05:20:37 21:06 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1575 03/11/20 05:20:38 21:06 0 Onxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 1576 03/11/20 05:39:23 60:00 7032 2756 imp -1 310410214827503 1577 03/11/20 05:41:44 29:04 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1578 03/11/20 06:10:47 2:09 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1579 03/11/20 06:10:49 2:08 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1580 03/11/20 06:12:58 60:00 0 Onxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 1581 03/11/20 06:39:23 60:00 6816 2540 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 65 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002709 The information contained her is NsToliAL not for general distribution. EF-EA_00116785 EFTA01251309 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T arc. Run Data: 06/17/2020 Run Tama: Data usage For: Item Conn. Conn. Originating Er Ayres Bytom Apn IKI IMBI mon Data Time ',umber Op on (UTC) 1582 03/11/20 07:12:58 60:00 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE no 1583 03/11/20 07:39:23 60:00 8388 3144 imo -1 310410214827503 1584 03/11/20 08:12:58 33:16 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1585 03/11/20 08:39:23 60:00 6816 2896 imp -1 310410214827503 1586 03/11/20 08:46:13 2:09 192 Onatgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1587 03/11/20 08:46:14 2:09 0 Onatgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1588 03/11/20 08:48:23 55:08 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1589 03/11/20 09:39:23 60:00 13524 5520 imp -1 310410214827503 1590 03/11/20 09:43:30 2:09 192 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1591 03/11/20 09:43:31 2:09 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1592 03/11/20 09:45:40 60:00 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1593 03/11/20 10:39:23 60:00 7140 2788 into -1 310410214827503 1594 03/11/20 10:45:40 60:00 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1595 03/11/20 11:39:23 44:33 3516 1340 into -1 310410214827503 1596 03/11/20 11:45:40 36:54 0 Onatgonpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1597 03/11/20 12:22:33 2:10 192 Onatgonpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1598 03/11/20 12:22:34 2:10 0 Onatgonpho 3587080982063725 310410214827503 APPLE TPRONE8 no 1599 03/11/20 12:22:38 2:05 6439 8606 into 3587080982063725 310410214827503 APPLE !PHONES 1600 03/11/20 12:22:39 2:05 8462 6175 into 3587080982063725 310410214827503 APPLE !PHONES 1601 03/11/20 12:23:56 60:00 16789 9202 into -1 310410214827503 1602 03/11/20 12:24:44 22:13 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1603 03/11/20 12:46:56 8:20 192 Oruftgonpho 3587080982063725 310410214827503 APPLE IPHONE8 no 1604 03/11/20 12:46:57 8:20 0 Onatgonpho 3587080982063725 310410214827503 APPLE TPRONE8 no 1605 03/11/20 12:55:17 60:00 0 Onatgonpho 3587080982063725 310410214827503 APPLE IPHONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 66 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002710 The information contained her is N:FroliAL not for general distribution. EFTAJVII6786 EFTA01251310 MOBILITY ap. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage For: ISM Item Conn. Conn. Originating LT Bytes Bytes Apn INZI INS' MARL NICOLL Date Time Number UP Dn (OTC) 1606 03/11/20 13:23:56 60:00 6956 2988 ins -1 310410214827503 1607 03/11/20 13:55:17 60:00 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1608 03/11/20 14:23:56 60:00 6940 2756 ins -1 310410214827503 1609 03/11/20 14:55:17 19:02 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1610 03/11/20 15:14:18 2:01 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1611 03/11/20 15:14:19 2:01 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1612 03/11/20 15:16:20 0:32 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1613 03/11/20 15:16:51 2:10 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1614 03/11/20 15:16:52 2:10 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1615 03/11/20 15:19:02 32:43 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1616 03/11/20 15:23:56 16:09 3532 1324 ins 3587080982063725 310410214827503 APPLE IPMONE8 1617 03/11/20 15:40:05 0:24 2768 1324 ins 3587080982063725 310410214827503 APPLE IPMONE8 1618 03/11/20 15:40:05 0:24 2704 1324 ins 3587080982063725 310410214827503 APPLE IPMONE8 1619 03/11/20 15:40:29 11:44 4964 1680 ins 3587080982063725 310410214827503 APPLE IPMONE8 1620 03/11/20 15:51:45 2:09 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1621 03/11/20 15:51:46 2:09 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1622 03/11/20 15:52:12 1:05 6370 7972 ins 3587080982063725 310410214827503 APPLE IPMONE8 1623 03/11/20 15:52:13 1:05 7972 6106 ins 3587080982063725 310410214827503 APPLE IPMONE8 1624 03/11/20 15:52:58 0:21 11358 6562 ins -1 310410214827503 1625 03/11/20 15:53:16 0:38 6244 6668 ins 3587080982063725 310410214827503 APPLE IPMONE8 1626 03/11/20 15:53:17 0:38 6668 5980 ins 3587080982063725 310410214827503 APPLE IPMONE8 1627 03/11/20 15:53:46 0:56 8511 6170 ins -1 310410214827503 1628 03/11/20 15:53:55 0:42 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1629 03/11/20 15:54:36 2:10 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1630 03/11/20 15:54:37 2:10 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1631 03/11/20 15:54:40 2:06 6262 6666 imp 3587080982063725 310410214827503 APPLE IPMONE8 1632 03/11/20 15:54:42 2:05 6666 5998 imp 3587080982063725 310410214827503 APPLE IPMONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 67 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002711 The information contained her is not for general distribution. NeTtAdti EF-EA_00116787 EFTA01251311 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in tra ""i AT&T s OTC. Run Date: 06/17/2020 Run Time: 10:66:37 Data Usage For: Item Conn. Conn. originating ET Bytes Bytes Apn INEZ IMSI MARL MODEL Date Time Number Up Dn (UTC) 1633 03/11/20 15:55:34 60:00 18402 10186 ims -1 310410214827503 1634 03/11/20 15:56:47 23:07 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1635 03/11/20 16:19:54 2:19 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1636 03/11/20 16:19:55 2:20 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1637 03/11/20 16:22:15 31:18 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1638 03/11/20 16:53:32 8:20 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1639 03/11/20 16:53:33 8:21 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPHONEB no 1640 03/11/20 16:55:34 60:00 8496 3144 ims -1 310410214827503 1641 03/11/20 17:01:53 7:53 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1642 03/11/20 17:09:46 0:47 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1643 03/11/20 17:10:32 2:09 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1644 03/11/20 17:10:33 2:09 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1645 03/11/20 17:12:42 30:27 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1646 03/11/20 17:43:08 2:10 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1647 03/11/20 17:43:10 2:09 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1648 03/11/20 17:45:19 11:39 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE /PHONES no 1649 03/11/20 17:55:34 60:00 8496 3036 ims -1 310410214827503 1650 03/11/20 17:56:58 61:35 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1651 03/11/20 17:56:59 60:00 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1652 03/11/20 18:55:34 60:00 8588 3052 ims -1 310410214827503 1653 03/11/20 18:56:59 1:35 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1654 03/11/20 18:58:34 6:44 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 68 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002712 The information contained her is not for general distribution. EF-EAJVII6788 EFTA01251312 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ....., ••—••• `"Ie 0 AT&T OTC. Run Data: 06/17/2020 Run Time: 18:55:38 Data Osage For: Ilea Conn. Conn. originating ET Bytes Byte. Apn IIBI IMBI MAfl SCOEL Data Time Sumter Up On (OTC) 1655 03/11/20 19:05:17 21:01 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1656 03/11/20 19:05:18 21:01 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1657 03/11/20 19:26:19 14:15 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1658 03/11/20 19:40:33 2:09 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1659 03/11/20 19:40:34 2:09 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPROME8 no 1660 03/11/20 19:42:43 10:04 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1661 03/11/20 19:52:46 2:10 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1662 03/11/20 19:52:48 2:09 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1663 03/11/20 19:54:57 27:31 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1664 03/11/20 19:55:34 60:00 7188 2804 ims -1 310410214827503 1665 03/11/20 20:22:27 4:17 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1666 03/11/20 20:22:28 4:17 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1667 03/11/20 20:26:45 31:09 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1668 03/11/20 20:55:34 60:00 41608 20964 ims -1 310410214827503 1669 03/11/20 20:57:06 0:24 19460 45298 ims -1 310410214827503 1670 03/11/20 20:57:54 5:20 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1671 03/11/20 20:57:55 5:20 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1672 03/11/20 21:03:16 24:05 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1673 03/11/20 21:27:20 2:10 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1674 03/11/20 21:27:21 2:10 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1675 03/11/20 21:29:31 5:23 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1676 03/11/20 21:34:53 2:45 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE 11080=8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 69 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002713 The information contained her is not for general distribution. EFTA_00116789 EFTA01251313 MOBILITY 4110. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT4T'S records ere stored and provided in tera ‘ing°ei d AT&T (ITC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating TT Bytes Bytom Apn Tier IMBI teUtr MODEL Data Time Number Up On (UTC) 1677 03/11/20 21:34:54 2:45 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 1678 03/11/20 21:36:21 0:24 16926 44638 ims -1 310410214827503 1679 03/11/20 21:37:38 8:33 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE INIONZ8 no 1680 03/11/20 21:37:39 8:33 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONEB no 1681 03/11/20 21:46:12 2:53 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1682 03/11/20 21:48:10 0:24 36612 45576 ims -1 310410214827503 1683 03/11/20 21:49:04 1:41 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE INIONZ8 no 1684 03/11/20 21:49:05 1:41 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONEB no 1685 03/11/20 21:50:45 2:09 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONEB no 1686 03/11/20 21:50:46 2:09 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 1687 03/11/20 21:52:55 4:37 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1688 03/11/20 21:55:34 60:00 23372 11084 ipso -1 310410214827503 1689 03/11/20 21:56:29 0:24 15044 47925 ipso -1 310410214827503 1690 03/11/20 21:57:31 2:32 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE INIONZ8 no 1691 03/11/20 21:57:32 2:32 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1692 03/11/20 22:00:04 16:53 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONEB no 1693 03/11/20 22:16:57 2:09 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONEB no 1694 03/11/20 22:16:58 2:09 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 1695 03/11/20 22:19:08 33:25 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1696 03/11/20 22:52:32 8:24 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONEB no 1697 03/11/20 22:52:33 8:24 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONEB no 1698 03/11/20 22:55:34 11:56 0 0 imp -1 310410214827503 1699 03/11/20 23:00:57 1:54 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 70 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002714 The information contained hereleoNeli not for general distribution. EF-EA_00116790 EFTA01251314 MOBILITY 411111i 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in AT&T arc. Run Date: 06/17/2020 Run Time: 16:55:36 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn INZI IMaI MARL NICOLL Date Time Number Up On (OTC) 1700 03/11/20 23:02:51 14:31 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 1701 03/11/20 23:02:52 14:32 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE 110MONE8 no 1702 03/11/20 23:03:05 14:17 6204 6742 imo 3587080982063725 310410214827503 APPLE 110MONE8 1703 03/11/20 23:03:06 14:18 6674 5940 ims 3587080982063725 310410214827503 APPLE DRONES 1704 03/11/20 23:17:24 10:02 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1705 03/11/20 23:17:29 60:00 16825 9216 imo -1 310410214827503 1706 03/11/20 23:27:25 8:34 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE /DRONES no 1707 03/11/20 23:27:26 8:34 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1708 03/11/20 23:36:00 40:21 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1709 03/12/20 00:16:20 6:06 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1710 03/12/20 00:16:21 6:06 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1711 03/12/20 00:17:29 9:41 0 0 ims -1 310410214827503 1712 03/12/20 00:22:27 39:48 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1713 03/12/20 00:32:04 0:00 0 0 ims 3587080982063725 310410214827503 APPLE DRONES 1714 03/12/20 00:32:10 0:16 6670 5998 ims 3587080982063725 310410214827503 APPLE DRONES 1715 03/12/20 00:32:26 3:19 13976 7532 ims 3587080982063725 310410214827503 APPLE DRONES 1716 03/12/20 00:35:45 0:32 4276 1696 ims 3587080982063725 310410214827503 APPLE DRONES 1717 03/12/20 00:36:17 60:00 12136 4376 ims 3587080982063725 310410214827503 APPLE DRONES 1718 03/12/20 01:02:14 14:09 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1719 03/12/20 01:02:15 14:10 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1720 03/12/20 01:16:25 20:21 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1721 03/12/20 01:36:17 54:55 8388 3020 ims 3587080982063725 310410214827503 APPLE !PHONES 1722 03/12/20 01:36:46 14:19 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1723 03/12/20 01:51:04 2:35 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1724 03/12/20 01:51:05 2:35 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constahtly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 71 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002715 The information contained heraleeNe NeTiliAL not for general distribution. EF-EA_00116791 EFTA01251315 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ..ze / 1 4 `'.o AT&T OTC. Run Date: 06/17/2020 Run Time: 111:65:38 Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INEI IMSI Ma= MODEL Data Time Number Up Dn (UTC) 1725 03/12/20 01:53:40 8:44 192 Onxtgonpho 3587080982063725 310410214827503 APPLE IPHONZ8 no 1726 03/12/20 01:53:41 8:44 0 Onxtgonpho 3587080982063725 310410214827503 APPLE IPHOME8 no 1727 03/12/20 02:02:25 4:58 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1728 03/12/20 02:07:22 90:00 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1729 03/12/20 02:07:23 60:00 0 Onxtgonpho 3587080982063725 310410214827503 APPLE IPROME8 no 1730 03/12/20 02:31:11 70:00 6226 6646 ins 3587080982063725 310410214827503 APPLE IPROME8 1731 03/12/20 02:31:12 60:00 6646 6070 ins 3587080982063725 310410214827503 APPLE IPROME8 1732 03/12/20 02:33:14 60:00 16043 9169 ins -1 310410214827503 1733 03/12/20 03:07:23 60:00 0 Onxtgonpho 3587080982063725 310410214827503 APPLE IPROME8 no 1734 03/12/20 03:31:12 55:35 0 0 ins 3587080982063725 310410214827503 APPLE IPROME8 1735 03/12/20 03:33:14 60:00 6816 2648 ins -1 310410214827503 1736 03/12/20 04:07:23 19:24 0 Onxtgonpho 3587080982063725 310410214827503 APPLE IPROME8 no 1737 03/12/20 04:26:46 240:03 192 Onxtgonpho 3587080982063725 310410214827503 APPLE IPROME8 no 1738 03/12/20 04:26:47 60:00 0 Onxtgonpho 3587080982063725 310410214827503 APPLE IPROME8 no 1739 03/12/20 04:33:14 60:00 6816 2788 imp -1 310410214827503 1740 03/12/20 05:26:47 60:00 0 Oruftgonpho 3587080982063725 310410214827503 APPLE IPROME8 no 1741 03/12/20 05:33:14 60:00 8836 3144 imp -1 310410214827503 1742 03/12/20 06:26:47 60:00 0 Onxtgonpho 3587080982063725 310410214827503 APPLE IPROME8 no 1743 03/12/20 06:33:14 60:00 6816 2680 ims -1 310410214827503 1744 03/12/20 07:26:47 60:00 0 Onxtgonpho 3587080982063725 310410214827503 APPLE IPROME8 no 1745 03/12/20 07:33:14 60:00 15312 6108 ims -1 310410214827503 1746 03/12/20 08:26:47 0:03 0 Oruftgonpho 3587080982063725 310410214827503 APPLE IPROME8 no 1747 03/12/20 08:33:14 60:00 6924 2680 ims -1 310410214827503 1748 03/12/20 08:48:31 114:46 192 Oruftgonpho 3587080982063725 310410214827503 APPLE IPROME8 no 1749 03/12/20 08:48:32 60:00 0 Oruftgonpho 3587080982063725 310410214827503 APPLE IPROME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 72 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002716 The information contained heraleeNeli PsiTifikE not for general distribution. EF-EAJVII6792 EFTA01251316 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T'S records are stored and provided in tt ‘"I°amaii/ AT&T OTC. Run Data: 06/17/2020 Run Time: Data Osage for: Item Conn. Conn. Originating ET Bytes Byte. Apn IMEI INSI MARL MODEL Date Time Number Op Dn (OTC) 1750 03/12/20 09:33:14 60:00 6816 '2680 ims -1 310410214827503 1751 03/12/20 09:48:32 54:46 0 Onxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1752 03/12/20 10:33:14 60:00 13352 4716 ims -1 310410214827503 1753 03/12/20 10:43:18 55:17 192 Onxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1754 03/12/20 10:43:19 55:17 0 Onxtgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1755 03/12/20 11:33:14 60:00 7048 2696 ims -1 310410214827503 1756 03/12/20 11:38:36 60:00 0 Oruftgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1757 03/12/20 12:33:14 46:01 23828 16392 ims -1 310410214827503 1758 03/12/20 12:38:36 10:29 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1759 03/12/20 12:49:04 1:58 192 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1760 03/12/20 12:49:06 1:57 0 Oruftgonpho 3587080982063725 310410214827503 APPLE IPRONE8 no 1761 03/12/20 12:51:03 4:18 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1762 03/12/20 12:55:20 2:13 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1763 03/12/20 12:55:21 2:13 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1764 03/12/20 12:57:34 5:28 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1765 03/12/20 13:03:01 3:17 192 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1766 03/12/20 13:03:02 3:17 0 Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1767 03/12/20 13:06:19 0:37 0 Oruftgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1768 03/12/20 13:06:55 8:47 192 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1769 03/12/20 13:06:56 8:48 0 Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1770 03/12/20 13:15:43 2:19 192 Oruftgonpho 3587080982063725 310410214827503 APPLE IPHONEB no 1771 03/12/20 13:15:44 2:19 0 Oruftgonpho 3587080982063725 310410214827503 APPLE IPHONEB no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 73 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002717 The information contained hereCtoNfti PsiTniliAL not for general distribution. EF-EAJVII6793 EFTA01251317 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn INTI IMBI Han MOTS Data Time Number Up On (UTC) 1772 03/12/20 13:18:03 2:44 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 1773 03/12/20 13:20:16 1:19 19792 12737 ins -1 310410214827503 1774 03/12/20 13:20:46 1:39 192 Oruftgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 1775 03/12/20 13:20:48 1:38 0 Oruftgonpho 3587080982063725 310410214827503 APPLE 110)(01428 no 1776 03/12/20 13:22:26 2:48 0 Oruftgonpho 3587080982063725 310410214827503 APPLE 110)(01428 no 1777 03/12/20 13:22:28 2:46 8904 7088 imp 3587080982063725 310410214827503 APPLE 110)(01428 1778 03/12/20 13:25:14 2:09 192 Oruftgonpho 3587080982063725 310410214827503 APPLE 110)(01428 no 1779 03/12/20 13:25:15 2:08 7096 6742 ims 3587080982063725 310410214827503 APPLE INIONE8 1780 03/12/20 13:25:15 2:09 0 Oruftgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 1781 03/12/20 13:25:16 2:08 6742 6832 ims 3587080982063725 310410214827503 APPLE INIONE8 1782 03/12/20 13:26:04 60:00 16699 9051 ims -1 310410214827503 1783 03/12/20 13:27:24 60:00 0 Oruftgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 1784 03/12/20 14:26:04 60:00 7188 2896 ims -1 310410214827503 1785 03/12/20 14:27:24 60:00 0 Oruftgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 1786 03/12/20 15:26:04 60:00 24520 13060 ins -1 310410214827503 1787 03/12/20 15:27:24 60:00 0 Oruftgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 1788 03/12/20 16:00:27 7:27 1180538 1151123 ins -1 310410214827503 1789 03/12/20 16:26:04 60:00 7064 2896 ins -1 310410214827503 1790 03/12/20 16:27:24 60:01 0 Oruftgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 1791 03/12/20 17:26:04 60:00 12044 4672 ins -1 310410214827503 1792 03/12/20 17:27:26 45:17 0 Oruftgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 1793 03/12/20 18:08:59 0:00 0 0 ins 3587080982063725 310410214827503 APPLE INIONE8 1794 03/12/20 18:09:58 60:00 25799 15893 ins -1 310410214827503 1795 03/12/20 18:12:16 0:23 30532 40404 ins -1 310410214827503 1796 03/12/20 18:12:42 8:26 192 Oruftgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 1797 03/12/20 18:12:43 8:26 0 Oruftgonpho 3587080982063725 310410214827503 APPLE 110)(01428 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 74 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002718 The information contained her is NeTtikE not for general distribution. EF-EA_00116794 EFTA01251318 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in c•-' `ssad AT&T OTC. Run Date: 06/17/2020 Run Time: 10:55:38 Data Osage Tor: Item Conn. Conn. Originating CT Bytes Bytes Apn INEZ IMSI NIUM MOLL Date Time Number Up Dn (OTC) 1798 03/12/20 18:21:09 55:07 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1799 03/12/20 18:26:04 55:32 0 0 ims -1 310410214827503 1800 03/12/20 19:09:58 9:30 4856 2712 ims -1 310410214827503 1801 03/12/20 19:16:15 2:10 192 Ormagenpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1802 03/12/20 19:16:16 2:10 0 Onmtgenpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1803 03/12/20 19:18:26 1:37 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1804 03/12/20 19:20:02 6:01 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1805 03/12/20 19:20:03 6:00 6352 6648 ims 3587080982063725 310410214827503 APPLE IPMONE8 1806 03/12/20 19:20:03 6:01 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1807 03/12/20 19:20:04 6:00 6648 6088 ims 3587080982063725 310410214827503 APPLE IPMONE8 1808 03/12/20 19:21:36 0:56 15122 11060 ims -1 310410214827503 1809 03/12/20 19:22:44 0:30 13547 10699 ims -1 310410214827503 1810 03/12/20 19:23:30 60:00 44687 29586 ims -1 310410214827503 1811 03/12/20 19:26:04 7:32 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1812 03/12/20 19:33:35 2:10 192 Ormagenpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1813 03/12/20 19:33:36 2:10 0 Ormagenpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1814 03/12/20 19:34:21 1:15 167363 118968 ims -1 310410214827503 1815 03/12/20 19:35:46 5:54 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1816 03/12/20 19:39:03 0:14 0 0 ims -1 310410214827503 1817 03/12/20 19:41:40 2:09 192 Onmtgenpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1818 03/12/20 19:41:41 2:09 0 Onmtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1819 03/12/20 19:43:50 1:07 0 Onmtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1820 03/12/20 19:44:56 2:12 192 Ormagenpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1821 03/12/20 19:44:57 2:12 0 Ormagenpho 3587080982063725 310410214827503 APPLE IPMONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 75 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002719 The information contained hereCtoNyFti NeTniiiikE not for general distribution. EF-EAJVII6795 EFTA01251319 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T (ITC. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating TT Bytes Byte. Apn IKI IMBI MAfl MOLL Data Time Number Up Dn (OTC) 1822 03/12/20 19:47:09 2:44 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1823 03/12/20 19:49:32 0:24 51463 45228 ins -1 310410214827503 1824 03/12/20 19:49:52 0:43 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1825 03/12/20 19:49:53 0:43 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 1826 03/12/20 19:50:36 30:57 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 1827 03/12/20 20:21:32 2:09 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 1828 03/12/20 20:21:33 2:09 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 1829 03/12/20 20:23:30 60:00 7048 3004 ins -1 310410214827503 1830 03/12/20 20:23:42 42:51 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 1831 03/12/20 21:06:32 14:44 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 1832 03/12/20 21:06:33 14:44 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1833 03/12/20 21:21:17 8:01 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PHONES no 1834 03/12/20 21:23:30 60:00 6924 2788 ins -1 310410214827503 1835 03/12/20 21:29:18 60:00 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 1836 03/12/20 22:23:30 60:00 13476 4500 ins -1 310410214827503 1837 03/12/20 22:29:18 45:03 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 1838 03/12/20 23:14:22 60:00 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 1839 03/12/20 23:23:30 60:00 10300 3408 imp -1 310410214827503 1840 03/13/20 00:14:22 51:33 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 1841 03/13/20 00:23:30 60:00 14864 4872 imp -1 310410214827503 1842 03/13/20 01:05:54 92:25 192 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 1843 03/13/20 01:05:55 60:00 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no 1844 03/13/20 01:23:30 60:00 14600 4656 ims -1 310410214827503 1845 03/13/20 02:05:55 32:25 0 0 nxtgenpho 3587080982063725 310410214827503 APPLE IPHOME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 76 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002720 The information contained heraleeNeli NeTniliAL not for general distribution. EFTA_00116796 EFTA01251320 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Ilea Conn. Conn. originating ET Bytes Byte. Apn INZI INS' KARL NICOLL Date Time Number Up Dn (UTC) 1846 03/13/20 02:23:30 60:00 8820 3252 ins -1 310410214827503 1847 03/13/20 02:38:20 60:00 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE DRONES no 1848 03/13/20 02:38:21 60:00 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1849 03/13/20 03:23:30 40:50 12092 6752 ins -1 310410214827503 1850 03/13/20 03:38:21 12:11 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1851 03/13/20 03:50:31 2:55 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1852 03/13/20 03:50:32 2:55 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1853 03/13/20 03:53:27 10:51 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1854 03/13/20 03:53:28 10:51 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1855 03/13/20 04:08:13 34:28 192 0 nxtgonpho 3587080982063725 310410214827503 APPLE IPMONE8 no 1856 03/13/20 04:08:14 34:28 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 1857 03/13/20 04:08:52 0:44 7459 8824 ins 3587080982063725 310410214827503 APPLE !PHONES 1858 03/13/20 04:08:53 0:44 8824 7107 ins 3587080982063725 310410214827503 APPLE IPMONE8 1859 03/13/20 04:09:08 0:01 0 0 ins -1 310410214827503 1860 03/13/20 04:09:21 0:19 6244 6754 in 3587080982063725 310410214827503 APPLE IPMONE8 1861 03/13/20 04:09:22 0:19 6690 5980 in 3587080982063725 310410214827503 APPLE !PHONES 1862 03/13/20 04:09:37 0:03 2565 1210 in -1 310410214827503 1863 03/13/20 04:09:39 0:20 6344 6674 in 3587080982063725 310410214827503 APPLE !PHONES 1864 03/13/20 04:09:40 0:20 6674 6080 in 3587080982063725 310410214827503 APPLE !PHONES 1865 03/13/20 04:09:56 0:04 2565 1212 in -1 310410214827503 1866 03/13/20 04:09:59 0:36 8342 8629 1ms 3587080982063725 310410214827503 APPLE !PHONES 1867 03/13/20 04:10:00 0:36 8629 8078 ime 3587080982063725 310410214827503 APPLE !PHONES 1868 03/13/20 04:10:14 0:01 0 0 ins -1 310410214827503 1869 03/13/20 04:10:19 32:22 7376 6864 imp 3587080982063725 310410214827503 APPLE IPMONE8 1870 03/13/20 04:10:20 32:22 6800 7112 imp 3587080982063725 310410214827503 APPLE IPMONE8 1871 03/13/20 04:10:35 60:00 15405 9050 imp -1 310410214827503 1872 03/13/20 04:42:08 0:35 3412 9535 nxtgonpho -1 310410214827503 no 1873 03/13/20 04:42:42 82:11 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 77 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002721 The information contained her is not for general distribution. EF-EAJVII6797 EFTA01251321 MOBILITY 411.1 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in tr '`s asd AT&T UTC. Run Data: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Bytes Apn ICI IMSI MARL MOLL Date Time Number Up Dn (OTC) 1874 03/13/20 04:42:43 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONE8 no 1875 03/13/20 05:10:35 60:00 6848 2664 imp -1 310410214827503 1876 03/13/20 05:42:43 22:11 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPMONE8 no 1877 03/13/20 06:04:53 2:22 192 Onxtgenpho 3587080982063726 310410214827503 APPLE IPMONE8 no 1878 03/13/20 06:04:54 2:22 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 1879 03/13/20 06:07:15 6:06 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 1880 03/13/20 06:07:17 6:05 0 Onxtgenpho 3587080982063726 310410214827503 APPLE IPMONE8 no 1881 03/13/20 06:10:35 60:00 8372 2912 imp -1 310410214827503 1882 03/13/20 06:13:22 0:47 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONE8 no 1883 03/13/20 06:14:09 18:41 192 Oruftgenpho 3587080982063726 310410214827503 APPLE IPMONE8 no 1884 03/13/20 06:14:10 18:41 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 1885 03/13/20 06:32:51 58:16 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 1886 03/13/20 07:10:35 60:00 6956 2788 imo -1 310410214827503 1887 03/13/20 08:10:35 60:00 17084 7312 imo -1 310410214827503 1888 03/13/20 09:10:35 60:00 8496 3036 imo -1 310410214827503 1889 03/13/20 10:10:35 60:00 9912 3176 in -1 310410214827503 1890 03/13/20 11:10:35 60:00 10052 3284 ims -1 310410214827503 1891 03/13/20 12:10:35 60:00 11920 4268 isms -1 310410214827503 1892 03/13/20 12:38:02 9:35 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 1893 03/13/20 12:38:03 9:35 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 1894 03/13/20 12:47:37 25:08 192 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 1895 03/13/20 12:47:38 25:08 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 1896 03/13/20 13:10:35 10:57 0 0 imp -1 310410214827503 1897 03/13/20 13:12:46 2:03 192 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 78 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002722 The information contained her is NeTniliAL not for general distribution. EF-EA_00116798 EFTA01251322 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in .....al 46.4.."1. s# AT&T OTC. Run Date: 06/17/2020 Run Time: 14:55:38 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn IKEI INSI MODEL Date Time Number Up Dn (UTC) 1898 03/13/20 13:12:47 2:03 0 Onxtgonpho 3587080982063726 310410214827503 APPLE ITMONE8 no 1899 03/13/20 13:14:50 21:25 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110)(0=8 no 1900 03/13/20 13:21:33 60:00 15267 8752 lee -1 310410214827503 1901 03/13/20 13:36:15 4:11 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110)(0=8 no 1902 03/13/20 13:40:25 120:00 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110)(0=8 no 1903 03/13/20 13:40:26 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110)(0=8 no 1904 03/13/20 14:21:33 60:00 8372 3112 lee -1 310410214827503 1905 03/13/20 14:40:26 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110)(0=8 no 1906 03/13/20 15:21:33 60:00 8512 3912 lee -1 310410214827503 1907 03/13/20 15:40:26 55:16 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110)(0=8 no 1908 03/13/20 16:21:33 59:35 18408 11284 lee -1 310410214827503 1909 03/13/20 16:33:05 0:25 42857 50460 lee -1 310410214827503 1910 03/13/20 16:35:42 1:50 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110)(0=8 no 1911 03/13/20 16:37:31 2:17 192 Onxtgonpho 3587080982063726 310410214827503 APPLE 110)(0=8 no 1912 03/13/20 16:37:32 2:17 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110)(0=8 no 1913 03/13/20 16:39:49 22:25 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110)(0=8 no 1914 03/13/20 16:54:03 22:47 15237 10960 imo -1 310410214827503 1915 03/13/20 17:02:13 5:32 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110)(0=8 no 1916 03/13/20 17:02:14 5:32 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110)(0=8 no 1917 03/13/20 17:07:46 13:19 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110)(0=8 no 1918 03/13/20 17:07:47 13:19 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110)(0=8 no 1919 03/13/20 17:17:55 8:43 8193 6048 lee -1 310410214827503 1920 03/13/20 17:21:06 39:09 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110)(0=8 no 1921 03/13/20 17:21:07 39:09 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110)(0=8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 79 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002723 The information contained hereCoNftli NeTnilikk not for general distribution. EFTA_00116799 EFTA01251323 MOBILITY 411., 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Byte. apn fuzz INS I MAKE NICOLL Data Time Number Up Dn (UTC) 1922 03/13/20 17:21:08 0:00 0 0 imp 3587080982063726 310410214827503 APPLE INIONE8 1923 03/13/20 17:21:15 39:00 6372 6676 imp 3587080982063726 310410214827503 APPLE INIONE8 1924 03/13/20 17:21:16 39:00 6676 6108 imp 3587080982063726 310410214827503 APPLE INIONE8 1925 03/13/20 17:29:41 60:00 25131 14008 imp -1 310410214827503 1926 03/13/20 17:59:27 0:23 14717 40025 imp -1 310410214827503 1927 03/13/20 18:00:17 10:30 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 1928 03/13/20 18:10:46 79:05 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 1929 03/13/20 18:10:47 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 1930 03/13/20 18:29:41 60:00 7156 2988 imp -1 310410214827503 1931 03/13/20 19:10:47 19:05 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IrMONZ8 no 1932 03/13/20 19:29:41 60:00 6816 2756 imp -1 310410214827503 1933 03/13/20 19:29:51 53:02 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IrMONZ8 no 1934 03/13/20 19:29:52 53:02 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 1935 03/13/20 20:22:54 8:56 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 1936 03/13/20 20:29:41 30:16 3640 1448 imp -1 310410214827503 1937 03/13/20 20:31:49 2:04 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IrMONZ8 no 1938 03/13/20 20:31:50 2:04 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 1939 03/13/20 20:33:54 3:23 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 1940 03/13/20 20:37:16 2:03 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 1941 03/13/20 20:37:17 2:03 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 1942 03/13/20 20:39:20 5:40 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 1943 03/13/20 20:44:59 2:04 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 1944 03/13/20 20:45:00 2:04 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 1945 03/13/20 20:47:04 0:37 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 80 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002724 The information contained heraleeNyFtli PsiTniliAL not for general distribution. EF-EA_00116800 EFTA01251324 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ..„,,,• ••-s` a. AT&T OTC. Run Data: 06/17/2020 Run Time: 18:55:38 Data Usage For: Ilea Conn. Conn. Originating TT Bytes Byte. Min INBI teUtt NICOLL Data Time Rumbas Up Dn (UTC) 1946 03/13/20 20:47:40 2:04 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 1947 03/13/20 20:47:41 2:04 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 1948 03/13/20 20:49:45 1:18 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 1949 03/13/20 20:51:02 8:51 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 1950 03/13/20 20:51:03 8:51 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 2880=8 no 1951 03/13/20 20:51:10 13:44 8373 6106 ins -1 310410214827503 1952 03/13/20 20:59:54 2:10 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 1953 03/13/20 20:59:55 2:11 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 1954 03/13/20 20:59:56 2:08 7136 6746 ins 3587080982063726 310410214827503 APPLE 1880=8 1955 03/13/20 20:59:57 2:09 6746 6872 ins 3587080982063726 310410214827503 APPLE 1880=8 1956 03/13/20 21:02:06 3:47 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1880=8 no 1957 03/13/20 21:05:53 5:41 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 1958 03/13/20 21:05:54 5:42 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 1959 03/13/20 21:07:53 2:08 5700 4896 ins -1 310410214827503 1960 03/13/20 21:09:59 1:35 8160 6868 ins 3587080982063726 310410214827503 APPLE !PHONES 1961 03/13/20 21:10:00 1:36 6868 7896 Ins 3587080982063726 310410214827503 APPLE !PHONES 1962 03/13/20 21:11:36 0:34 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 1963 03/13/20 21:12:09 26:51 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1880=8 no 1964 03/13/20 21:12:10 26:51 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1880=8 no 1965 03/13/20 21:17:20 10:53 8073 10078 ins -1 310410214827503 1966 03/13/20 21:24:14 6:02 0 0 ins -1 310410214827503 1967 03/13/20 21:28:12 3:25 14031 10764 ins -1 310410214827503 1968 03/13/20 21:32:41 2:10 7138 6754 ins 3587080982063726 310410214827503 APPLE !PHONES 1969 03/13/20 21:32:42 2:10 6754 6874 ins 3587080982063726 310410214827503 APPLE !PHONES 1970 03/13/20 21:34:37 1:31 84 288 ins -1 310410214827503 1971 03/13/20 21:34:50 2:14 7116 6744 ins 3587080982063726 310410214827503 APPLE !PHONES 1972 03/13/20 21:34:51 2:14 6744 6852 ins 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 81 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002725 The information contained here(34E:)upSiyf::tli not for general distribution. WAAL EFTA_00116801 EFTA01251325 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in trio` a. AT&T OTC. Run Data: 06/17/2020 Run Time: 18:55:38 Data Osage For: Item Conn. Conn. Originating Er Bytes Byte. Apn INZI INSI MARL MODEL Data flea Number Up Dn (OTC) 1973 03/13/20 21:36:09 0:56 6601 5083 ism -1 310410214827503 1974 03/13/20 21:37:04 1:56 7234 6798 ism 3587080982063726 310410214827503 APPLE !PHONES 1975 03/13/20 21:37:05 1:56 6798 6970 ins 3587080982063726 310410214827503 APPLE !PHONES 1976 03/13/20 21:39:01 1:17 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 1977 03/13/20 21:39:06 1:12 8122 6924 ins 3587080982063726 310410214827503 APPLE !PHONES 1978 03/13/20 21:40:17 2:04 192 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 1979 03/13/20 21:40:18 2:03 6056 6330 ins 3587080982063726 310410214827503 APPLE !PHONES 1980 03/13/20 21:40:18 2:04 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 1981 03/13/20 21:40:19 2:03 6330 5792 imp 3587080982063726 310410214827503 APPLE !PHONES 1982 03/13/20 21:42:22 0:06 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 1983 03/13/20 21:42:39 0:45 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 1984 03/13/20 21:42:41 0:43 7940 7712 ins 3587080982063726 310410214827503 APPLE !PHONES 1985 03/13/20 21:43:23 8:15 192 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 1986 03/13/20 21:43:24 8:14 6202 6676 ins 3587080982063726 310410214827503 APPLE !PHONES 1987 03/13/20 21:43:24 8:15 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 1988 03/13/20 21:43:25 8:14 6676 5938 ins 3587080982063726 310410214827503 APPLE !PHONES 1989 03/13/20 21:51:39 12:14 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 1990 03/13/20 21:51:43 12:10 19770 12004 ins 3587080982063726 310410214827503 APPLE !PHONES 1991 03/13/20 22:03:52 2:10 192 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 1992 03/13/20 22:03:53 2:09 6225 6776 ins 3587080982063726 310410214827503 APPLE !PHONES 1993 03/13/20 22:03:53 2:10 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 1994 03/13/20 22:03:54 2:09 6668 5961 ins 3587080982063726 310410214827503 APPLE !PHONES 1995 03/13/20 22:06:03 6:11 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 1996 03/13/20 22:06:06 6:08 12060 9324 ins 3587080982063726 310410214827503 APPLE !PHONES 1997 03/13/20 22:12:13 2:16 192 Oruftgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no 1998 03/13/20 22:12:14 2:15 6228 6774 ins 3587080982063726 310410214827503 APPLE IPRONE8 1999 03/13/20 22:12:14 2:16 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 82 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002726 The information contained hereCtoNyFti N s not for general distribution. EF-EA_00II6802 EFTA01251326 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in tr: ‘"Ii° ma ed / AT&T UTC. Run Date: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn Tier IMBI RAMC MODEL Data Time Number Up Dn (OTC) 2000 03/13/20 22:12:16 2:14 6666 1964 imp 3587080982063726 310410214827503 APPLE !PHONES 2001 03/13/20 22:14:30 2:24 0 0 natgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2002 03/13/20 22:14:34 2:20 18586 10968 imp 3587080982063726 310410214827503 APPLE /PHONES 2003 03/13/20 22:16:53 2:04 192 Onatgonpho 3587080982063726 310410214827503 APPLE /PHONES no 2004 03/13/20 22:16:55 2:02 7268 6904 imp 3587080982063726 310410214827503 APPLE /PHONES 2005 03/13/20 22:16:55 2:03 0 Oruftgonpho 3587080982063726 310410214827503 APPLE /PHONES no 2006 03/13/20 22:16:56 2:02 6796 7004 imp 3587080982063726 310410214827503 APPLE /PHONES 2007 03/13/20 22:18:58 1:09 0 Oruftgonpho 3587080982063726 310410214827503 APPLE /PHONES no 2008 03/13/20 22:19:00 1:07 8992 6178 imp 3587080982063726 310410214827503 APPLE /PHONES 2009 03/13/20 22:20:06 5:12 192 Oruftgonpho 3587080982063726 310410214827503 APPLE /PHONES no 2010 03/13/20 22:20:07 3:30 7136 6846 imp 3587080982063726 310410214827503 APPLE /PHONES 2011 03/13/20 22:20:07 5:12 0 Onatgonpho 3587080982063726 310410214827503 APPLE /PHONES no 2012 03/13/20 22:20:08 3:30 6738 6872 imp 3587080982063726 310410214827503 APPLE /PHONES 2013 03/13/20 22:23:40 1:38 6242 6670 imp 3587080982063726 310410214827503 APPLE /PHONES 2014 03/13/20 22:23:42 1:37 6670 5978 imp 3587080982063726 310410214827503 APPLE 'PROMS 2015 03/13/20 22:25:19 2:37 0 Oruftgonpho 3587080982063726 310410214827503 APPLE /PHONES no 2016 03/13/20 22:25:21 2:35 6676 5999 imp 3587080982063726 310410214827503 APPLE /PHONES 2017 03/13/20 22:27:55 2:07 192 Oruftgonpho 3587080982063726 310410214827503 APPLE /PHONES no 2018 03/13/20 22:27:56 2:06 6386 7516 imp 3587080982063726 310410214827503 APPLE /PHONES 2019 03/13/20 22:27:56 2:07 0 Oruftgonpho 3587080982063726 310410214827503 APPLE /PHONES no 2020 03/13/20 22:27:58 2:05 7408 6122 imp 3587080982063726 310410214827503 APPLE IPHOME8 2021 03/13/20 22:30:03 0:05 0 Onatgonpho 3587080982063726 310410214827503 APPLE /PHONES no 2022 03/13/20 22:30:19 16:13 0 Onatgonpho 3587080982063726 310410214827503 APPLE /PHONES no 2023 03/13/20 22:30:22 12:57 7408 6122 lam 3587080982063726 310410214827503 APPLE /PHONES 2024 03/13/20 22:43:19 0:12 640 372 lam 3587080982063726 310410214827503 APPLE /PHONES 2025 03/13/20 22:46:31 24:52 192 Oruftgonpho 3587080982063726 310410214827503 APPLE /PHONES no 2026 03/13/20 22:46:32 24:52 0 Oruftgonpho 3587080982063726 310410214827503 APPLE /PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 83 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002727 The information contained her is PIETIAL not for general distribution. EF-EA_00116803 EFTA01251327 NOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: 1S:53:39 Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn IEI IMEI MARE MODEL Date Time fluster Up Dn (UTC) 2027 03/13/20 22:46:32 1:30 6244 6670 imo 3587080982063726 310410214827503 APPLE IPHONZ8 2028 03/13/20 22:46:33 1:30 6670 5980 Sins 3587080982063726 310410214827503 APPLE IPHONZ8 2029 03/13/20 22:46:52 11:25 9869 7850 ins -1 310410214827503 2030 03/13/20 22:48:02 23:21 7320 6790 imp 3587080982063726 310410214827503 APPLE IPHONZ8 2031 03/13/20 22:48:03 23:21 6790 7056 imp 3587080982063726 310410214827503 APPLE !PHONES 2032 03/13/20 22:58:17 20:53 12027 6926 imp -1 310410214827503 2033 03/13/20 23:11:24 1:05 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2034 03/13/20 23:12:28 3:14 192 Ommtgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 2035 03/13/20 23:12:29 3:14 0 Ommtgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 2036 03/13/20 23:14:33 0:07 0 0 imp -1 310410214827503 2037 03/13/20 23:15:43 12:51 0 Ommtgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 2038 03/13/20 23:15:47 5:59 9909 6354 imp -1 310410214827503 2039 03/13/20 23:19:10 60:00 0 0 imp -1 310410214827503 2040 03/13/20 23:21:46 60:00 15283 8910 imp -1 310410214827503 2041 03/13/20 23:28:33 1:36 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 2042 03/13/20 23:28:35 1:35 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 2043 03/13/20 23:30:10 1:48 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 2044 03/13/20 23:31:58 31:47 192 Oruftgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 2045 03/13/20 23:31:59 31:47 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 2046 03/14/20 00:03:45 8:26 192 Ommtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2047 03/14/20 00:03:46 8:26 0 Ommtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2048 03/14/20 00:12:12 3:18 192 Ommtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2049 03/14/20 00:12:13 3:18 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 2050 03/14/20 00:15:31 0:59 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 2051 03/14/20 00:16:29 4:05 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1PRONG8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 84 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002728 The information contained hereCtoNe not for general distribution. EFTA 00116804 EFTA01251328 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tr "-s asi. AT&T OTC. Run pato: 06/17/2020 Run Time: 18:55:39 Data Osage For: Itom Conn. Conn. Originating Cr Bytes Bytoa Apn IND I INSI War MODEL Date Time Number UP Dn (U2C) 2052 03/14/20 00:16:30 4:05 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 2053 03/14/20 00:19:10 60:00 0 0 ins -1 310410214827503 2054 03/14/20 00:20:35 0:40 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 2055 03/14/20 00:21:14 15:25 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 2056 03/14/20 00:21:15 15:25 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 2057 03/14/20 00:21:46 60:00 6816 2648 imp -1 310410214827503 2058 03/14/20 00:36:39 12:26 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 2059 03/14/20 00:36:40 12:26 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2060 03/14/20 00:49:06 1:08 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2061 03/14/20 00:50:14 12:34 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 2062 03/14/20 00:50:14 12:35 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 2063 03/14/20 01:02:48 1:18 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 2064 03/14/20 01:02:50 1:17 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 2065 03/14/20 01:04:06 36:37 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 2066 03/14/20 01:04:07 36:37 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 2067 03/14/20 01:19:10 60:00 0 0 imp -1 310410214827503 2068 03/14/20 01:21:46 60:00 7156 2880 imp -1 310410214827503 2069 03/14/20 01:40:44 34:01 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 2070 03/14/20 02:14:44 2:09 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 2071 03/14/20 02:14:46 2:08 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 2072 03/14/20 02:16:54 15:31 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 2073 03/14/20 02:19:10 60:00 0 0 imp -1 310410214827503 2074 03/14/20 02:21:46 60:00 16096 4716 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 85 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002729 The information contained hereetlaNyR PsiTnilikk not for general distribution. EF-EA_00116805 EFTA01251329 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in .....,,,• `•—•st‘' s AT&T OTC. Run Data: 06/17/2020 Run Time: 18:55:39 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn INEI IMBI HARM MODEL Data Time Buster Up Dn (OTC) 2075 03/14/20 02:32:24 2:32 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2076 03/14/20 02:32:25 2:32 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2077 03/14/20 02:34:56 6:04 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2078 03/14/20 02:34:57 6:04 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2079 03/14/20 02:41:01 11:31 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 2080 03/14/20 02:52:32 2:14 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 2081 03/14/20 02:52:33 2:14 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 2082 03/14/20 02:54:47 28:35 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2083 03/14/20 03:19:10 0:01 0 0 imo -1 310410214827503 2084 03/14/20 03:21:46 60:00 6940 3740 imo -1 310410214827503 2085 03/14/20 03:23:21 8:26 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 2086 03/14/20 03:23:22 8:27 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 2087 03/14/20 03:31:49 1:43 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 2088 03/14/20 03:33:31 2:10 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 2089 03/14/20 03:33:32 2:10 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 2090 03/14/20 03:35:42 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2091 03/14/20 04:21:46 60:00 11904 4612 imo -1 310410214827503 2092 03/14/20 04:35:42 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2093 03/14/20 05:21:46 60:00 6924 2648 imo -1 310410214827503 2094 03/14/20 05:35:42 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 2095 03/14/20 06:21:46 60:00 10068 3144 as -1 310410214827503 2096 03/14/20 06:35:42 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 2097 03/14/20 07:21:46 60:00 8388 2896 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 86 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00002730 The information contained her is PsiTniliAL not for general distribution. EFTA_00116806 EFTA01251330 MOBILITY 411111i 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Tame: 1S:53:39 Data Usage For: Item Conn. Conn. Originating ET Bytes Bytoa Apn IKI IMSI MARL MODEL Date Time Number Up Dn (OTC) 2098 03/14/20 07:35:42 0:01 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2099 03/14/20 07:35:45 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 2100 03/14/20 08:21:46 60:00 11580 4112 imp -1 310410214827503 2101 03/14/20 08:35:45 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2102 03/14/20 09:21:46 60:00 16496 5124 imp -1 310410214827503 2103 03/14/20 09:35:45 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2104 03/14/20 10:21:46 60:00 8496 2896 imp -1 310410214827503 2105 03/14/20 10:35:45 60:01 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2106 03/14/20 11:21:46 60:00 6924 2756 imp -1 310410214827503 2107 03/14/20 11:35:47 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 2108 03/14/20 12:21:46 21:19 3408 1324 imp -1 310410214827503 2109 03/14/20 12:35:47 2:40 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 2110 03/14/20 12:38:26 0:27 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 2111 03/14/20 12:38:27 0:27 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2112 03/14/20 12:38:54 1:51 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 2113 03/14/20 12:39:01 1:58 8327 7901 imp 3587080982063726 310410214827503 APPLE 'PHONES 2114 03/14/20 12:40:45 1:14 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 2115 03/14/20 12:40:59 0:33 5864 2431 imp 3587080982063726 310410214827503 APPLE 'PHONES 2116 03/14/20 12:40:59 0:33 5800 2431 imp 3587080982063726 310410214827503 APPLE 'PHONES 2117 03/14/20 12:41:32 5:59 32741 23233 imp 3587080982063726 310410214827503 APPLE 'PHONES 2118 03/14/20 12:41:58 2:04 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 2119 03/14/20 12:41:59 2:04 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 2120 03/14/20 12:43:33 0:29 8162 8180 imp 3587080982063726 310410214827503 APPLE 'PHONES 2121 03/14/20 12:43:34 0:29 6872 7898 imp 3587080982063726 310410214827503 APPLE 'PHONES 2122 03/14/20 12:44:04 1:27 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 2123 03/14/20 12:44:07 1:24 8138 8664 imp 3587080982063726 310410214827503 APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 87 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002731 The information contained heraleeNelt PsiTifiNE not for general distribution. EF-EA_00116807 EFTA01251331 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T'S records ere stored and provided in ...,,,,f `•-s` a. AT&T OTC. Run pato: 06/17/2020 Run T1mo: 18:55:39 Data Osage For: Itea Conn. Conn. Originating ST Sytes Bytes Apn IMLI IMSI MUM MODEL Date Time Number Up Dn (OTC) 2124 03/14/20 12:45:31 1:59 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 2125 03/14/20 12:45:36 0:34 756 0 vas 3587080982063726 310410214827503 APPLE 'PHONES 2126 03/14/20 12:46:10 0:27 172 0 vas 3587080982063726 310410214827503 APPLE 'PHONES 2127 03/14/20 12:46:10 0:27 0 0 vas 3587080982063726 310410214827503 APPLE 'PHONES 2128 03/14/20 12:46:37 60:00 8917 6504 was 3587080982063726 310410214827503 APPLE 'PHONES 2129 03/14/20 12:47:29 2:04 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 2130 03/14/20 12:47:30 2:03 6224 6666 ims 3587080982063726 310410214827503 APPLE 'PHONES 2131 03/14/20 12:47:30 2:04 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 2132 03/14/20 12:47:32 2:02 6666 5960 ims 3587080982063726 310410214827503 APPLE 'PHONES 2133 03/14/20 12:49:34 0:35 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 2134 03/14/20 12:49:38 27:19 15352 14059 ims -1 310410214827503 2135 03/14/20 12:50:08 8:34 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2136 03/14/20 12:50:09 8:34 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2137 03/14/20 12:58:43 55:56 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2138 03/14/20 13:28:54 0:01 0 0 ims -1 310410214827503 2139 03/14/20 13:46:37 13:30 0 0 ims 3587080982063726 310410214827503 APPLE 'PHONES 2140 03/14/20 13:54:38 2:03 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 2141 03/14/20 13:54:39 2:03 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 2142 03/14/20 13:54:45 9:09 8607 6380 ims -1 310410214827503 2143 03/14/20 13:56:42 0:58 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 2144 03/14/20 13:57:39 16:49 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 2145 03/14/20 13:57:40 16:49 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2146 03/14/20 14:00:06 14:22 6366 6792 ims 3587080982063726 310410214827503 APPLE !PHONES 2147 03/14/20 14:00:07 14:22 6684 6102 ims 3587080982063726 310410214827503 APPLE !PHONES 2148 03/14/20 14:03:54 23:55 14461 10712 ims -1 310410214827503 2149 03/14/20 14:14:29 12:50 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 88 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002732 The information contained her is not for general distribution. EF-EA_00116808 EFTA01251332 MOBILITY 4.11, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in '...„, ‘"I°.11. 00 AT&T arc. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Origlnatirq TT Bytes Bytes Apn INLI MODAL Date Time Number Up Dn (UTC) 2150 03/14/20 14:27:18 1:57 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE ITHOME8 no 2151 03/14/20 14:27:19 1:57 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE ITHOME8 no 2152 03/14/20 14:27:48 1:27 6262 6672 imp 3587080982063726 310410214827503 APPLE DRONES 2153 03/14/20 14:27:49 1:27 6672 5998 imp 3587080982063726 310410214827503 APPLE STRUMS 2154 03/14/20 14:29:16 31:24 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE STRUMS no 2155 03/14/20 14:29:18 10:23 8170 6962 imp 3587080982063726 310410214827503 APPLE STRUMS 2156 03/14/20 14:39:41 60:00 3532 1340 imp 3587080982063726 310410214827503 APPLE STRUMS 2157 03/14/20 15:00:39 0:35 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE STRUMS no 2158 03/14/20 15:00:41 0:34 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE STRUMS no 2159 03/14/20 15:01:15 0:44 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE STRUMS no 2160 03/14/20 15:01:20 0:39 8898 7086 imp 3587080982063726 310410214827503 APPLE ITMONZ8 2161 03/14/20 15:01:59 0:59 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE ITMONZ8 no 2162 03/14/20 15:01:59 0:59 7134 6746 imp 3587080982063726 310410214827503 APPLE ITROME8 2163 03/14/20 15:02:00 0:59 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 2164 03/14/20 15:02:01 0:58 6746 6870 imp 3587080982063726 310410214827503 APPLE DRONES 2165 03/14/20 15:02:59 2:41 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 2166 03/14/20 15:03:01 0:18 1690 6443 imp 3587080982063726 310410214827503 APPLE DRONES 2167 03/14/20 15:03:19 60:00 33670 22735 imp 3587080982063726 310410214827503 APPLE DRONES 2168 03/14/20 15:05:39 20:24 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 2169 03/14/20 15:05:40 20:24 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 2170 03/14/20 15:26:04 4:38 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 2171 03/14/20 15:30:41 2:26 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 2172 03/14/20 15:30:43 2:25 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 2173 03/14/20 15:33:07 10:00 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 89 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002733 The information contained heraleeNeli NeTniiiikE not for general distribution. EFTA_001 16809 EFTA01251333 NOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm c̀,s ""ets AT&T AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in OTC. Run Date: 06/17/2020 Run Time: Data Usage for: Item Conn. Conn. Originating ET Bytes Bytom Apn ICI INSI MAL MODEL Date Time Number Up On (OTC) 2174 03/14/20 15:33:08 14:57 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2175 03/14/20 15:39:23 0:22 0 30887 ims 3587080982063726 310410214827503 APPLE !PHONES 2176 03/14/20 15:39:41 60:00 0 0 ims 3587080982063726 310410214827503 APPLE !PHONES 2177 03/14/20 15:48:05 53:21 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 2178 03/14/20 15:48:06 53:21 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 2179 03/14/20 16:03:19 60:00 8512 3988 ims 3587080982063726 310410214827503 APPLE !PHONES 2180 03/14/20 16:39:41 60:00 0 0 ims 3587080982063726 310410214827503 APPLE !PHONES 2181 03/14/20 16:41:27 64:11 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2182 03/14/20 16:41:28 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2183 03/14/20 17:03:19 60:00 7064 2880 imp 3587080982063726 310410214827503 APPLE !PHONES 2184 03/14/20 17:39:41 60:00 0 0 imp 3587080982063726 310410214827503 APPLE 'PHONES 2185 03/14/20 17:41:28 4:11 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 2186 03/14/20 17:45:39 40:01 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2187 03/14/20 17:45:40 40:01 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2188 03/14/20 18:03:19 60:00 7064 2772 imp 3587080982063726 310410214827503 APPLE !PHONES 2189 03/14/20 18:25:41 2:43 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2190 03/14/20 18:28:23 8:21 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2191 03/14/20 18:28:24 8:21 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 2192 03/14/20 18:36:45 1:40 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2193 03/14/20 18:38:24 108:33 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2194 03/14/20 18:38:25 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2195 03/14/20 18:39:41 2:22 0 0 imp 3587080982063726 310410214827503 APPLE !PHONES 2196 03/14/20 19:03:19 60:00 17008 6092 imp 3587080982063726 310410214827503 APPLE !PHONES 2197 03/14/20 19:38:25 48:33 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2198 03/14/20 20:03:19 60:00 44644 28772 imp 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. Thesd communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 90 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002734 The information contained hereCtoNyFti NTailiAL not for general distribution. EF-EA_O0116810 EFTA01251334 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in tr ‘"le. asO ssi. AT&T OTC. Run Date: 06/17/2020 Run Time: 18:55:39 Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Min IM41 IMSI Ma1Q MODEL Date Time Butter Up Dn (UTC) 2199 03/14/20 20:26:58 9:01 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 2200 03/14/20 20:35:58 2:04 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 2201 03/14/20 20:35:59 2:04 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2202 03/14/20 20:38:03 6:44 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2203 03/14/20 20:44:46 9:04 192 Onxtgonpho 3587080982063726 310410214827503 APPLE 1PRO1428 no 2204 03/14/20 20:44:47 9:04 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 2205 03/14/20 20:53:51 0:52 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2206 03/14/20 20:54:42 2:17 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2207 03/14/20 20:54:43 2:17 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 2208 03/14/20 20:56:02 0:05 4279 12317 ins 3587080982063726 310410214827503 APPLE !PHONES 2209 03/14/20 20:56:08 0:05 2482 11716 ins 3587080982063726 310410214827503 APPLE DRONES 2210 03/14/20 20:56:15 0:08 4618 14384 ins 3587080982063726 310410214827503 APPLE DRONES 2211 03/14/20 20:56:41 0:04 3092 10606 ins 3587080982063726 310410214827503 APPLE DRONES 2212 03/14/20 20:57:00 0:55 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2213 03/14/20 20:57:55 16:22 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 2214 03/14/20 20:57:56 16:23 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2215 03/14/20 21:03:19 39:39 3532 3952 imp 3587080982063726 310410214827503 APPLE !PHONES 2216 03/14/20 21:14:18 163:28 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2217 03/14/20 21:14:19 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2218 03/14/20 21:38:59 22:35 7232 6866 imp 3587080982063726 310410214827503 APPLE DRONES 2219 03/14/20 21:39:00 22:35 6798 6968 imp 3587080982063726 310410214827503 APPLE !PHONES 2220 03/14/20 21:58:06 3:29 8874 10570 imp -1 310410214827503 2221 03/14/20 22:01:34 3:23 7356 6800 imp 3587080982063726 310410214827503 APPLE !PHONES 2222 03/14/20 22:01:35 3:23 6800 7004 imp 3587080982063726 310410214827503 APPLE DRONES 2223 03/14/20 22:04:21 0:37 4618 4712 imp -1 310410214827503 2224 03/14/20 22:04:56 13:03 7474 6796 imp 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 91 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002735 The information contained hereCtoNeli ?eV& not for general distribution. EF-EA_00ll6811 EFTA01251335 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in tr `"I a° s. d AT&T UTC. Run Data: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating LT Bytes Bytes Apn INC' IMISI MARL MOLL Data Time Buster Up Dn (UTC) 2225 03/14/20 22:04:57 13:03 6796 7210 1ms 3587080982063726 310410214827503 APPLE IPHONZ8 2226 03/14/20 22:08:30 0:39 5686 4904 ims -1 310410214827503 2227 03/14/20 22:11:41 8:46 6261 6676 ims 3587080982063726 310410214827503 APPLE IPHONZ8 2228 03/14/20 22:11:43 8:45 6676 5997 ims 3587080982063726 310410214827503 APPLE IPHONZ8 2229 03/14/20 22:14:19 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2230 03/14/20 22:18:29 4:24 10009 10506 ims -1 310410214827503 2231 03/14/20 22:20:27 31:59 6226 6672 ims 3587080982063726 310410214827503 APPLE !PHONES 2232 03/14/20 22:20:27 32:00 6672 6070 ims 3587080982063726 310410214827503 APPLE !PHONES 2233 03/14/20 22:22:53 32:36 24446 33790 ims -1 310410214827503 2234 03/14/20 22:52:25 65:21 6371 6672 ims 3587080982063726 310410214827503 APPLE !PHONES 2235 03/14/20 22:52:26 60:00 6672 6107 ims 3587080982063726 310410214827503 APPLE !PHONES 2236 03/14/20 22:55:29 60:00 32305 24638 ims -1 310410214827503 2237 03/14/20 23:14:19 43:28 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2238 03/14/20 23:33:09 0:09 0 7031 ims -1 310410214827503 2239 03/14/20 23:52:26 5:21 0 0 ims 3587080982063726 310410214827503 APPLE !PHONES 2240 03/14/20 23:55:29 35:09 4964 1804 ims -1 310410214827503 2241 03/14/20 23:57:47 0:34 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 2242 03/14/20 23:58:20 8:13 192 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 2243 03/14/20 23:58:21 8:13 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2244 03/15/20 00:06:35 4:30 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2245 03/15/20 00:11:04 34:40 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 2246 03/15/20 00:11:05 34:40 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2247 03/15/20 00:28:17 17:27 6264 6676 ims 3587080982063726 310410214827503 APPLE !PHONES 2248 03/15/20 00:28:18 17:27 6676 6108 ims 3587080982063726 310410214827503 APPLE !PHONES 2249 03/15/20 00:30:39 10:18 9704 6134 ims -1 310410214827503 2250 03/15/20 00:40:57 60:00 22558 16428 ims -1 310410214827503 2251 03/15/20 00:45:44 1:24 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2252 03/15/20 00:45:45 1:24 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. Thesb communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 92 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002736 The information contained her is Nei-4AL not for general distribution. EF-EA_00ll6812 EFTA01251336 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T arc. Run Date: 06/17/2020 Run Time: 10:55:40 Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn INLI IMSI NUM MOLL Date Time Number Up Dn (OTC) 2253 03/15/20 00:47:09 21:54 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2254 03/15/20 00:47:10 21:54 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2255 03/15/20 01:09:04 0:59 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2256 03/15/20 01:10:02 58:23 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2257 03/15/20 01:10:03 58:23 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2258 03/15/20 01:40:57 60:00 10176 3252 imp -1 310410214827503 2259 03/15/20 02:08:26 6:18 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2260 03/15/20 02:14:44 2:17 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2261 03/15/20 02:14:45 2:17 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2262 03/15/20 02:17:02 6:28 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2263 03/15/20 02:23:29 80:00 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2264 03/15/20 02:23:30 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 2265 03/15/20 02:40:57 60:00 7016 2540 imp -1 310410214827503 2266 03/15/20 03:23:30 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2267 03/15/20 03:40:57 60:00 6800 2756 imp -1 310410214827503 2268 03/15/20 04:23:30 60:00 0 Oruftgon0o 3587080982063726 310410214827503 APPLE !PHONES no 2269 03/15/20 04:40:57 60:00 16652 5952 imp -1 310410214827503 2270 03/15/20 05:23:30 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2271 03/15/20 05:40:57 60:00 3624 1448 imp -1 310410214827503 2272 03/15/20 06:18:55 60:00 19980 10414 ins -1 310410214827503 2273 03/15/20 06:23:30 0:02 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2274 03/15/20 06:40:57 60:00 0 0 imp -1 310410214827503 2275 03/15/20 07:18:55 60:00 6816 3004 imp -1 310410214827503 2276 03/15/20 07:40:57 60:00 0 0 imp -1 310410214827503 2277 03/15/20 08:18:55 60:00 8496 3144 ism -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do notemecessarily indicate a customer initiated a transaction. Page 93 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002737 The information contained her is not for general distribution. EF-EA_O0116813 EFTA01251337 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in •---.,.. `",e 0 1.1 ,0. AT&T OTC. Run pato: 06/17/2020 Run Time: 10:45:40 Data Osage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INZI IMSI NUM MOLL Date Time Nutter UP on (LTC) 2278 03/15/20 08:40:57 60:00 0 0 ims -1 310410214827503 2279 03/15/20 09:18:55 50:48 7172 2944 ims -1 310410214827503 2280 03/15/20 09:37:51 11:04 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 2281 03/15/20 09:37:52 11:04 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 2282 03/15/20 09:40:57 24:11 0 0 ims -1 310410214827503 2283 03/15/20 09:48:56 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 2284 03/15/20 10:05:07 60:00 0 0 imp -1 310410214827503 2285 03/15/20 10:09:42 60:00 18781 9775 imp -1 310410214827503 2286 03/15/20 10:48:56 2:47 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 2287 03/15/20 10:51:42 0:42 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 2288 03/15/20 10:51:43 0:42 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 2289 03/15/20 10:52:25 27:29 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 2290 03/15/20 11:05:07 60:00 0 0 imp -1 310410214827503 2291 03/15/20 11:09:42 60:00 8480 2896 imp -1 310410214827503 2292 03/15/20 11:19:54 14:38 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 2293 03/15/20 11:19:55 14:38 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2294 03/15/20 11:34:33 45:07 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2295 03/15/20 12:05:07 17:00 0 0 imp -1 310410214827503 2296 03/15/20 12:09:42 10:37 3580 1852 ins -1 310410214827503 2297 03/15/20 12:19:39 1:03 192 Onxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 2298 03/15/20 12:19:40 1:03 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 2299 03/15/20 12:20:43 0:36 0 OruMgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 2300 03/15/20 12:21:18 7:53 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 2301 03/15/20 12:21:19 7:52 6229 6670 as 3587080982063726 310410214827503 APPLE 1PRONE8 2302 03/15/20 12:21:20 7:52 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 94 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002738 The information contained heraCtoNeli NTniliAL not for general distribution. EF-EA_O0116814 EFTA01251338 MOBILITY 411111i 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ...,,,• ••-s` a. AT&T (ITC. Run Date: 06/17/2020 Run Time: 1S:53:40 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn ISM' IMSI NAfl NICOLL Date Time Number Up Dn (UTC) 2303 03/15/20 12:21:21 7:51 6670 6073 imam 3587080982063726 310410214827503 APPLE 'PHONES 2304 03/15/20 12:22:07 14:05 10288 6713 imam -1 310410214827503 2305 03/15/20 12:29:12 2:10 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 2306 03/15/20 12:31:20 10:33 10716 12922 ims -1 310410214827503 2307 03/15/20 12:31:21 2:04 192 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2308 03/15/20 12:31:22 2:05 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2309 03/15/20 12:33:26 1:09 0 Onxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 2310 03/15/20 12:34:34 8:20 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 2311 03/15/20 12:34:35 8:20 0 Oruagenpho 3587080982063726 310410214827503 APPLE 'PHONES no 2312 03/15/20 12:36:10 6:44 6246 6666 ims 3587080982063726 310410214827503 APPLE 'PHONES 2313 03/15/20 12:36:11 6:44 6666 5982 ims 3587080982063726 310410214827503 APPLE !PHONES 2314 03/15/20 12:42:55 42:16 0 Oruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 2315 03/15/20 12:42:57 42:14 9358 8200 ims 3587080982063726 310410214827503 APPLE 'PHONES 2316 03/15/20 13:25:11 14:44 0 Onxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 2317 03/15/20 13:25:13 1:31 6646 5899 ims 3587080982063726 310410214827503 APPLE 'PHONES 2318 03/15/20 13:26:44 0:21 11780 13060 ims 3587080982063726 310410214827503 APPLE 'PHONES 2319 03/15/20 13:35:22 10:29 1491 132 ims -1 310410214827503 2320 03/15/20 13:39:54 8:21 192 Oruagenpho 3587080982063726 310410214827503 APPLE 'PHONES no 2321 03/15/20 13:39:55 8:21 0 Oruagenpho 3587080982063726 310410214827503 APPLE 'PHONES no 2322 03/15/20 13:40:00 8:15 8434 9028 ims 3587080982063726 310410214827503 APPLE 'PHONES 2323 03/15/20 13:40:01 8:15 8968 8170 ims 3587080982063726 310410214827503 APPLE 'PHONES 2324 03/15/20 13:46:03 60:00 16716 9893 ims -1 310410214827503 2325 03/15/20 13:48:16 4:58 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 2326 03/15/20 13:53:13 2:14 192 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2327 03/15/20 13:53:15 2:14 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2328 03/15/20 13:55:29 43:50 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 95 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002739 The information contained hereeNyFtli not for general distribution. NaTtikEl EF-EA_00ll6815 EFTA01251339 MOBILITY • 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T (ITC. Run Data: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating 2T Bytes Bytes Apn pa= IMBI teUtT NICOLL Data Time Humber Up Dn (OTC) 2329 03/15/20 14:37:06 1:42 6666 5959 ims 3587080982063726 310410214827503 APPLE IrMONZ8 2330 03/15/20 14:38:48 60:00 12476 4360 ims 3587080982063726 310410214827503 APPLE IrMONZ8 2331 03/15/20 14:39:18 21:07 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IrMONZ8 no 2332 03/15/20 14:39:19 21:07 0 Onxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 2333 03/15/20 14:46:03 60:00 0 0 ims -1 310410214827503 2334 03/15/20 15:00:26 22:52 0 Oruftgonpho 3587080982063726 310410214827503 APPLE DRONES no 2335 03/15/20 15:23:17 20:00 192 Oruftgonpho 3587080982063726 310410214827503 APPLE IrROME8 no 2336 03/15/20 15:23:18 21:30 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IrROME8 no 2337 03/15/20 15:38:48 60:00 22664 10248 ims 3587080982063726 310410214827503 APPLE DRONES 2338 03/15/20 15:44:48 1:01 0 Onxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 2339 03/15/20 15:45:48 1:32 192 Onxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 2340 03/15/20 15:45:49 1:32 0 Onxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 2341 03/15/20 15:46:02 0:14 0 6648 ims 3587080982063726 310410214827503 APPLE DRONES 2342 03/15/20 15:46:03 60:00 0 0 ims -1 310410214827503 2343 03/15/20 15:47:21 59:34 0 Oruftgonpho 3587080982063726 310410214827503 APPLE DRONES no 2344 03/15/20 16:38:48 36:33 3872 1572 ims 3587080982063726 310410214827503 APPLE DRONES 2345 03/15/20 16:46:03 24:31 0 0 ims -1 310410214827503 2346 03/15/20 16:46:54 172:16 192 Onxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 2347 03/15/20 16:46:55 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE DRONES no 2348 03/15/20 17:10:33 0:10 440 144 ims 3587080982063726 310410214827503 APPLE DRONES 2349 03/15/20 17:10:34 0:10 144 0 ims 3587080982063726 310410214827503 APPLE DRONES 2350 03/15/20 17:10:46 22:56 7340 6794 ims 3587080982063726 310410214827503 APPLE DRONES 2351 03/15/20 17:10:46 22:57 6794 7076 ims 3587080982063726 310410214827503 APPLE DRONES 2352 03/15/20 17:15:21 18:56 8373 6012 ims -1 310410214827503 2353 03/15/20 17:33:42 125:28 13506 17240 ims 3587080982063726 310410214827503 APPLE DRONES 2354 03/15/20 17:33:43 60:00 12048 10594 ims 3587080982063726 310410214827503 APPLE DRONES 2355 03/15/20 17:34:18 10:22 0 0 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 96 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002740 The information contained heraleeNelt not for general distribution. EF-EA_00116816 EFTA01251340 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm tra "`s 1° d AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytoa Apn MCI IMBI MARC MODEL Data Time Muster Up Dn (DSC) 2356 03/15/20 17:46:55 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PROSES no 2357 03/15/20 18:33:43 60:00 5192 2648 was 3587080982063726 310410214827503 APPLE !PRONGS 2358 03/15/20 18:46:55 52:16 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 2359 03/15/20 19:28:15 60:00 16707 8924 was -1 310410214827503 2360 03/15/20 19:33:43 5:28 0 0 was 3587080982063726 310410214827503 APPLE !PHONES 2361 03/15/20 19:39:11 18:26 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2362 03/15/20 19:57:36 2:09 192 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2363 03/15/20 19:57:37 2:10 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2364 03/15/20 19:59:47 14:14 0 Onxtgenpho 3587080982063726 310410214827503 APPLE /PHONES no 2365 03/15/20 20:14:00 68:02 192 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2366 03/15/20 20:14:01 60:00 0 Onxtgenpho 3587080982063726 310410214827503 APPLE /PHONES nm 2367 03/15/20 20:28:15 0:34 0 0 was -1 310410214827503 2368 03/15/20 20:28:49 60:00 0 0 was -1 310410214827503 2369 03/15/20 20:32:18 60:00 19964 9565 was -1 310410214827503 2370 03/15/20 21:14:01 8:02 0 Onxtgenpho 3587080982063726 310410214827503 APPLE /PHONES no 2371 03/15/20 21:22:03 6:02 0 Onxtgenpho 3587080982063726 310410214827503 APPLE /PHONES no 2372 03/15/20 21:28:04 2:05 192 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2373 03/15/20 21:28:06 2:04 0 Onxtgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 2374 03/15/20 21:28:49 60:00 0 0 was -1 310410214827503 2375 03/15/20 21:30:10 18:17 0 Onxtgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 2376 03/15/20 21:32:18 60:00 7032 2680 was -1 310410214827503 2377 03/15/20 21:48:27 42:37 192 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2378 03/15/20 21:48:28 42:37 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2379 03/15/20 22:28:49 60:00 0 0 was -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 97 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002741 The information contained hereCtoNeli NaTiliAL not for general distribution. EF-EA_O0116817 EFTA01251341 NOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ...,,,,• ••—est `' . AT&T OTC. Run Date: 06/17/2020 Run Time: 16:56:40 Data Osage For: Item Conn. Conn. originating ET Byte. Byte. Apn INLI IMBI NAZI MOLL Date Time Hunter Op Dn (OTC) 2380 03/15/20 22:31:05 2:50 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 2381 03/15/20 22:32:18 60:00 8604 3052 ims -1 310410214827503 2382 03/15/20 22:33:54 8:19 192 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 2383 03/15/20 22:33:55 8:19 0 Onxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 2384 03/15/20 22:42:14 60:00 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 2385 03/15/20 23:28:49 60:00 0 0 ims -1 310410214827503 2386 03/15/20 23:32:18 60:00 6924 2788 ims -1 310410214827503 2387 03/15/20 23:42:14 11:41 0 Onxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 2388 03/15/20 23:53:54 0:37 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 2389 03/15/20 23:53:55 0:37 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2390 03/15/20 23:54:32 2:37 288 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 2391 03/15/20 23:54:33 2:37 0 Onxtgenpho 3587080982063726 310410214827503 APPLE IPROME8 no 2392 03/15/20 23:57:10 1:22 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPROME8 no 2393 03/15/20 23:58:31 7:13 192 Oruftgenpho 3587080982063726 310410214827503 APPLE IPROME8 no 2394 03/15/20 23:58:32 7:13 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPROME8 no 2395 03/16/20 00:05:45 2:43 192 Oruftgenpho 3587080982063726 310410214827503 APPLE IPROME8 no 2396 03/16/20 00:05:46 2:43 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPROME8 no 2397 03/16/20 00:08:29 1:58 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPROME8 no 2398 03/16/20 00:10:26 2:04 192 Oruftgenpho 3587080982063726 310410214827503 APPLE IPROME8 no 2399 03/16/20 00:10:28 2:03 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2400 03/16/20 00:12:32 4:09 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2401 03/16/20 00:16:40 3:53 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPROME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 98 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002742 The information contained her is NTroliAL not for general distribution. EF-EA_00116818 EFTA01251342 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ...r •- "" se ai AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INZI IMSI MARL NICOLL Date Time Number UP Dn (OTC) 2402 03/16/20 00:16:41 3:53 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 2403 03/16/20 00:20:33 4:14 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 2404 03/16/20 00:20:34 4:14 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2405 03/16/20 00:24:47 2:05 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2406 03/16/20 00:24:48 2:05 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 2407 03/16/20 00:26:53 9:29 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2408 03/16/20 00:28:49 0:01 0 0 ins -1 310410214827503 2409 03/16/20 00:32:18 13:27 5088 2084 ins -1 310410214827503 2410 03/16/20 00:36:22 3:12 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 2411 03/16/20 00:39:34 16:30 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 2412 03/16/20 00:39:35 16:30 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 2413 03/16/20 00:51:49 3:35 13841 10953 ins -1 310410214827503 2414 03/16/20 00:55:27 25:51 20087 13330 ins -1 310410214827503 2415 03/16/20 00:56:05 3:43 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2416 03/16/20 00:59:47 8:32 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2417 03/16/20 00:59:49 8:31 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 2418 03/16/20 01:08:20 3:17 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 2419 03/16/20 01:11:36 2:09 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 2420 03/16/20 01:11:37 2:09 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2421 03/16/20 01:13:46 10:15 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2422 03/16/20 01:22:33 60:00 19156 9476 ins -1 310410214827503 2423 03/16/20 01:24:01 19:07 192 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2424 03/16/20 01:24:02 19:07 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 99 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002743 The information contained her is NTifikE not for general distribution. EFTA_OOI 16819 EFTA01251343 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .....„ `•-s`' 0/ AT&T OTC. Run Date: 06/17/2020 Run Time: 1S:53:40 Data Usage For: Item Conn. Conn. originating CT Bytes Bytom Apn MCI INSI MARL NICOLL Date Timo Number UP Dn (OTC) 2425 03/16/20 01:43:09 22:23 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 2426 03/16/20 02:05:31 2:05 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 2427 03/16/20 02:05:33 2:04 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2428 03/16/20 02:07:37 1:08 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2429 03/16/20 02:08:44 2:04 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1PRONZ8 no 2430 03/16/20 02:08:45 2:04 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2431 03/16/20 02:10:49 47:51 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2432 03/16/20 02:22:33 60:00 8496 3036 ism -1 310410214827503 2433 03/16/20 02:58:39 11:57 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2434 03/16/20 02:58:40 11:57 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1PRONZ8 no 2435 03/16/20 03:10:37 3:19 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1PRONZ8 no 2436 03/16/20 03:13:56 19:28 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2437 03/16/20 03:13:57 19:28 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2438 03/16/20 03:22:33 60:00 7048 2804 ism -1 310410214827503 2439 03/16/20 03:33:25 11:15 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2440 03/16/20 03:44:39 5:34 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2441 03/16/20 03:44:40 5:34 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2442 03/16/20 03:50:14 2:57 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2443 03/16/20 03:53:10 93:54 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1PRONZ8 no 2444 03/16/20 03:53:11 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1PRONZ8 no 2445 03/16/20 04:22:33 60:00 8388 2928 ism -1 310410214827503 2446 03/16/20 04:53:11 33:54 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 100 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002744 The information contained hereSCONels NeTnilikk not for general distribution. EF-EA_O0116820 EFTA01251344 MOBILITY 411.1 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in tr.20‘I"`1 AT&T OTC. Run Data: 06/17/2020 Run Tame: Data Usage For: Item Conn. Conn. Originating ET Sye•• Byte. Apn INLI INBI MAKE MODEL Data Time Number UP Dn (OTC) 2447 03/16/20 05:22:33 60:00 11580 4160 ims -1 310410214827503 2448 03/16/20 05:27:04 129:59 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2449 03/16/20 05:27:05 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2450 03/16/20 06:22:33 60:00 10624 4396 ims -1 310410214827503 2451 03/16/20 06:27:05 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 2452 03/16/20 07:22:33 60:00 8388 2928 ims -1 310410214827503 2453 03/16/20 07:27:05 9:59 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2454 03/16/20 07:37:04 240:01 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2455 03/16/20 07:37:05 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2456 03/16/20 08:22:33 60:00 8388 3036 ims -1 310410214827503 2457 03/16/20 08:37:05 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 2458 03/16/20 09:22:33 60:00 8388 2928 ims -1 310410214827503 2459 03/16/20 09:37:05 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 2460 03/16/20 10:22:33 60:00 10564 4252 ims -1 310410214827503 2461 03/16/20 10:37:05 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 2462 03/16/20 11:22:33 60:00 11796 4536 ims -1 310410214827503 2463 03/16/20 11:37:05 0:01 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 2464 03/16/20 11:37:14 61:22 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 2465 03/16/20 11:37:15 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 2466 03/16/20 12:22:33 60:00 8388 2928 ims -1 310410214827503 2467 03/16/20 12:37:15 1:22 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 2468 03/16/20 12:38:37 11:24 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2469 03/16/20 12:50:01 47:24 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2470 03/16/20 12:50:02 47:24 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not neceksarily indicate a customer initiated a transaction. Page 101 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002745 The information contained hereCtoNelt PsisTiliAL not for general distribution. EF-EA_O0116821 EFTA01251345 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tr `" ases. d AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INC' INSI MARL NICOLL Data Time I. all,. Up Dn (OTC) 2471 03/16/20 13:22:33 60:00 8496 2928 ims -1 310410214827503 2472 03/16/20 13:37:26 12:23 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 2473 03/16/20 13:49:48 2:05 192 Onxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 2474 03/16/20 13:49:49 2:05 0 Onxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 2475 03/16/20 13:51:54 7:21 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2476 03/16/20 13:59:14 6:36 192 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2477 03/16/20 13:59:15 6:36 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no . 2478 03/16/20 14:05:51 1:15 0 Onxtgenpho 3587080982063726 310410214827503 AMA !PHONES no 2479 03/16/20 14:07:05 3:27 192 Onxtgenpho 3587080982063726 310410214827503 AMA IPHOME8 no 2480 03/16/20 14:07:06 3:27 0 Onxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 2481 03/16/20 14:10:33 2:06 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 2482 03/16/20 14:12:38 8:31 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 2483 03/16/20 14:12:39 8:31 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 2484 03/16/20 14:21:10 4:53 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 2485 03/16/20 14:22:33 60:00 8388 2928 ims -1 310410214827503 2486 03/16/20 14:26:02 20:41 192 0 nxtgenpho 3587080982063726 310410214827503 AMA !PHONES no 2487 03/16/20 14:26:03 20:41 0 Onxtgenpho 3587080982063726 310410214827503 AMA !PHONES no 2488 03/16/20 14:46:44 0:40 0 Onxtgenpho 3587080982063726 310410214827503 AMA IPHOME8 no 2489 03/16/20 14:47:23 8:22 192 Onxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 2490 03/16/20 14:47:25 8:21 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 2491 03/16/20 14:55:46 0:38 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 102 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002746 The information contained hereCtoNelt NTroliAL not for general distribution. EF-EA_00ll6822 EFTA01251346 MOBILITY ap. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ....,,,,• ••-•°"" s AT&T OTC. Run Date: 06/17/2020 Run Time: 18:55:40 Data Usage For: INIMPOOPOPM. Item Conn. Conn. Originating ET Bytes Byte. npn INEI IMBI MARL NADEL Date Time Number Up Dn (UTC) 2492 03/16/20 14:56:23 14:42 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2493 03/16/20 14:56:24 14:42 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2494 03/16/20 15:11:06 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2495 03/16/20 15:22:33 60:00 15156 4872 ipso -1 310410214827503 2496 03/16/20 16:11:06 18:59 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2497 03/16/20 16:22:33 60:00 6940 2804 ipso -1 310410214827503 2498 03/16/20 16:30:04 8:21 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2499 03/16/20 16:30:05 8:21 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2500 03/16/20 16:38:26 2:54 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2501 03/16/20 16:41:20 2:03 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2502 03/16/20 16:41:21 2:03 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2503 03/16/20 16:43:24 10:32 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2504 03/16/20 16:53:55 2:15 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2505 03/16/20 16:53:56 2:15 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2506 03/16/20 16:56:11 1:06 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2507 03/16/20 16:57:16 4:52 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2508 03/16/20 16:57:17 4:52 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2509 03/16/20 17:02:09 0:33 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2510 03/16/20 17:02:41 14:45 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2511 03/16/20 17:02:42 14:45 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2512 03/16/20 17:17:27 0:50 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 103 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002747 The information contained horaCtoNyFtli NsToliAL not for general distribution. EF-EA_00ll6823 EFTA01251347 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. Run Data: 06/17/2020 Run Time: Data Usage For: Si= Item Conn. Conn. Originating LT Bytes Byte. Apn ICI IMBI MAC NICOLL Data Time Rumbas UP Dn (OTC) 2513 03/16/20 17:18:16 53:17 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2514 03/16/20 17:18:17 53:17 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2515 03/16/20 17:22:33 60:00 12120 4660 ins -1 310410214827503 2516 03/16/20 18:11:34 2:55 0 Onxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 2517 03/16/20 18:14:28 1:08 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2518 03/16/20 18:14:29 1:08 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 2519 03/16/20 18:15:37 7:10 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 2520 03/16/20 18:22:33 60:00 8388 3712 imp -1 310410214827503 2521 03/16/20 18:22:46 204:00 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 2522 03/16/20 18:22:47 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2523 03/16/20 19:22:33 60:00 15172 5888 ins -1 310410214827503 2524 03/16/20 19:22:47 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 2525 03/16/20 20:22:33 60:00 10068 3408 imp -1 310410214827503 2526 03/16/20 20:22:47 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 2527 03/16/20 21:22:33 39:47 13568 5136 imp -1 310410214827503 2528 03/16/20 21:22:47 24:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 2529 03/16/20 21:46:47 0:06 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2530 03/16/20 21:47:15 40:04 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2531 03/16/20 21:47:16 40:04 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2532 03/16/20 22:09:00 18:19 7689 12910 imp 3587080982063726 310410214827503 APPLE !PHONES 2533 03/16/20 22:09:01 18:19 12842 7533 imp 3587080982063726 310410214827503 APPLE !PHONES 2534 03/16/20 22:09:17 0:01 0 0 imp -1 310410214827503 2535 03/16/20 22:10:19 23:51 10036 6592 imp -1 310410214827503 2536 03/16/20 22:27:20 0:35 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 104 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002748 The information contained her is PsiTifikE not for general distribution. EFTA 00116824 EFTA01251348 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Tama: 16:55:40 Data Usage For: Item Conn. Conn. Originating ET Bytes Byte, Apn IN= INBI HARE MODEL Date Time Humber UP Dn (UTC) 2537 03/16/20 22:27:55 40:08 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2538 03/16/20 22:27:56 40:08 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2539 03/16/20 22:31:07 36:56 7604 10041 ins 3587080982063726 310410214827503 APPLE !PHONES 2540 03/16/20 22:31:08 36:56 9952 7340 ins 3587080982063726 310410214827503 APPLE !PHONES 2541 03/16/20 23:08:04 0:41 0 Oruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 2542 03/16/20 23:08:06 0:39 8822 7071 ins 3587080982063726 310410214827503 APPLE !PHONES 2543 03/16/20 23:08:44 8:33 192 Oruagenpho 3587080982063726 310410214827503 APPLE 'PHONES no 2544 03/16/20 23:08:45 8:32 7158 6748 ins 3587080982063726 310410214827503 APPLE DRONES 2545 03/16/20 23:08:45 8:33 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 2546 03/16/20 23:08:46 8:32 6748 6894 ins 3587080982063726 310410214827503 APPLE DRONES 2547 03/16/20 23:17:18 0:49 0 Oruagenpho 3587080982063726 310410214827503 APPLE DRONES no 2548 03/16/20 23:17:20 0:47 12596 13562 ins 3587080982063726 310410214827503 APPLE !PHONES 2549 03/16/20 23:18:07 53:36 288 Oruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 2550 03/16/20 23:18:08 53:35 9000 11994 ins 3587080982063726 310410214827503 APPLE !PHONES 2551 03/16/20 23:18:08 53:36 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2552 03/16/20 23:18:09 53:35 11866 8736 ins 3587080982063726 310410214827503 APPLE !PHONES 2553 03/17/20 00:11:44 22:41 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2554 03/17/20 00:11:55 60:00 19480 9443 ins -2 310410214827503 2555 03/17/20 00:34:24 2:03 192 Oruagenpho 3587080982063726 310410214827503 APPLE DRONES no 2556 03/17/20 00:34:25 2:03 0 Oruagenpho 3587080982063726 310410214827503 APPLE DRONES no 2557 03/17/20 00:36:28 10:12 0 Oruagenpho 3587080982063726 310410214827503 APPLE DRONES no 2558 03/17/20 00:46:39 2:10 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2559 03/17/20 00:46:41 2:09 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2560 03/17/20 00:48:50 28:49 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2561 03/17/20 01:11:55 60:00 8388 2928 ins -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 105 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002749 The information contained her is N:infiNE not for general distribution. EF-EA_O0116825 EFTA01251349 MOBILITY 411., 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ..... •---s`' as f AT&T OTC. Run Date: 06/17/2020 Run Time: 10:55:40 Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn IKE' IMSI MARL MOLL Date Time Number UP Dn (UTC) 2562 03/17/20 01:17:39 27:32 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2563 03/17/20 01:17:40 27:32 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2564 03/17/20 01:45:12 1:07 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2565 03/17/20 01:46:18 8:35 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2566 03/17/20 01:46:19 8:35 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2567 03/17/20 01:54:54 8:15 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2568 03/17/20 02:03:08 6:37 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2569 03/17/20 02:03:09 6:37 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2570 03/17/20 02:09:46 4:54 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2571 03/17/20 02:11:55 60:00 9928 3376 imp -1 310410214827503 2572 03/17/20 02:14:40 2:03 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2573 03/17/20 02:14:41 2:03 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2574 03/17/20 02:16:44 0:34 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2575 03/17/20 02:17:17 2:18 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2576 03/17/20 02:17:18 2:18 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2577 03/17/20 02:19:35 3:07 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2578 03/17/20 02:19:37 3:06 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2579 03/17/20 02:22:43 9:31 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2580 03/17/20 02:32:14 3:31 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2581 03/17/20 02:35:44 8:26 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2582 03/17/20 02:35:45 8:26 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 106 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002750 The information contained heraCtoNyFti not for general distribution. EFTA 00116826 EFTA01251350 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T arc. Run Date: 06/17/2020 Run Time: 18:56:40 Data Osage For: Item Conn. Conn. Originating ET Bytes Bytes Apn IKI IMSI MARL MODEL Date Time Number Op Dn (OTC) 2583 03/17/20 02:44:11 4:18 0 Onxtgenpho 3587080982063726 310410214827503 APPLE IPMONE8 no 2584 03/17/20 02:48:29 0:44 0 Orumgenpho 3587080982063726 310410214827503 APPLE IPMONE8 no 2585 03/17/20 02:49:13 34:19 192 Orumgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2586 03/17/20 02:49:14 34:19 0 Orumgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2587 03/17/20 03:11:55 15:38 3424 1340 ims -1 310410214827503 2588 03/17/20 03:23:33 17:56 0 Orumgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 2589 03/17/20 03:28:08 0:26 6930 4178 ims 3587080982063726 310410214827503 APPLE DRONES 2590 03/17/20 03:28:34 60:00 17131 11098 ims 3587080982063726 310410214827503 APPLE DRONES 2591 03/17/20 03:41:28 27:16 192 Orumgenpho 3587080982063726 310410214827503 APPLE DRONES no 2592 03/17/20 03:41:29 27:16 0 Orumgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2593 03/17/20 04:08:45 9:13 0 Orumgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2594 03/17/20 04:17:58 8:29 192 Onamgenpho 3587080982063726 310410214827503 APPLE DRONES no 2595 03/17/20 04:17:59 8:29 0 Onamgenpho 3587080982063726 310410214827503 APPLE DRONES no 2596 03/17/20 04:26:28 23:45 0 Onamgenpho 3587080982063726 310410214827503 APPLE DRONES no 2597 03/17/20 04:28:34 24:06 5072 1572 ims 3587080982063726 310410214827503 APPLE DRONES 2598 03/17/20 04:50:12 55:06 192 Onamgenpho 3587080982063726 310410214827503 APPLE DRONES no 2599 03/17/20 04:50:13 60:00 0 Orumgenpho 3587080982063726 310410214827503 APPLE DRONES no 2600 03/17/20 04:54:18 60:00 15007 8738 I. -1 310410214827503 2601 03/17/20 05:50:13 60:00 0 Orumgenpho 3587080982063726 310410214827503 APPLE DRONES no 2602 03/17/20 05:54:18 3:03 0 0 I. -1 310410214827503 2603 03/17/20 06:05:16 1:38 0 0 I. -1 310410214827503 2604 03/17/20 06:09:29 14:57 8629 6424 I. -1 310410214827503 2605 03/17/20 06:35:42 11:59 8189 6016 I. -1 310410214827503 2606 03/17/20 06:50:13 60:00 0 Orumgenpho 3587080982063726 310410214827503 APPLE DRONES no 2607 03/17/20 06:53:34 11:08 8249 6072 I. -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 107 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002751 The information contained heraleeNyEti PsisTiliAL not for general distribution. EF-EA_O0116827 EFTA01251351 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run pato: 06/17/2020 Run Time: 18:55:40 Data Osage For: Item Conn. Conn. originating LT Bytes Byte. Apn INr2 IMSI ten MODEL Date Time Number UP Dn (OTC) 2608 03/17/20 07:06:33 1:38 0 0 ins -1 310410214827503 2609 03/17/20 07:10:15 11:07 9759 6207 ins -1 310410214827503 2610 03/17/20 07:26:34 0:07 O 0 ins -1 310410214827503 2611 03/17/20 07:31:09 3:34 8189 6046 ins -1 310410214827503 2612 03/17/20 07:42:29 60:00 15005 8986 ins -1 310410214827503 2613 03/17/20 07:50:13 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2614 03/17/20 08:42:29 60:00 6924 2680 imp -1 310410214827503 2615 03/17/20 08:50:13 0:02 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2616 03/17/20 09:42:29 9:49 0 0 imp -1 310410214827503 2617 03/17/20 09:56:08 60:00 16577 9082 imp -1 310410214827503 2618 03/17/20 10:56:08 53:28 8496 2928 imp -1 310410214827503 2619 03/17/20 11:52:58 20:02 8351 6051 imp -1 310410214827503 2620 03/17/20 12:19:55 20:03 8361 5998 ins -1 310410214827503 2621 03/17/20 12:30:21 0:05 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONZ8 no 2622 03/17/20 12:31:17 0:06 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 2623 03/17/20 12:31:29 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 2624 03/17/20 12:42:30 13:58 9768 6196 imp -1 310410214827503 2625 03/17/20 13:03:49 59:58 19046 9302 ins -1 310410214827503 2626 03/17/20 13:31:29 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONZ8 no 2627 03/17/20 14:14:13 60:00 19300 9472 ins -1 310410214827503 2628 03/17/20 14:31:29 11:04 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONZ8 no 2629 03/17/20 14:42:33 30:03 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 2630 03/17/20 14:42:34 30:03 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 2631 03/17/20 15:12:37 0:33 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 2632 03/17/20 15:13:09 2:14 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 2633 03/17/20 15:13:11 2:13 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 2634 03/17/20 15:14:13 60:00 8744 5976 ins -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 108 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002752 The information contained her is not for general distribution. EF-EAJVII6828 EFTA01251352 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Dato: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating TT Bytes Bytoa Apn INCI INSt teUtT NICOLL Date Time Number UP Dn (OTC) 2635 03/17/20 15:15:24 0:35 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2636 03/17/20 15:15:58 2:03 192 e Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2637 03/17/20 15:15:59 2:03 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2638 03/17/20 15:18:02 1:55 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2639 03/17/20 15:19:56 2:09 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2640 03/17/20 15:19:58 2:08 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 2641 03/17/20 15:22:06 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 2642 03/17/20 16:14:13 6:00 0 0 imp -1 310410214827503 2643 03/17/20 16:20:14 60:00 21092 10632 imp -1 310410214827503 2644 03/17/20 16:22:06 3:35 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 2645 03/17/20 16:25:40 20:42 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2646 03/17/20 16:25:41 20:42 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2647 03/17/20 16:46:23 4:40 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2648 03/17/20 16:51:02 2:06 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 2649 03/17/20 16:51:04 2:05 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2650 03/17/20 16:53:09 2:58 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2651 03/17/20 16:56:06 31:00 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 2652 03/17/20 16:56:07 31:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 2653 03/17/20 17:20:14 60:00 9944 3408 ins -1 310410214827503 2654 03/17/20 17:27:07 51:24 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2655 03/17/20 18:18:30 155:32 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2656 03/17/20 18:18:31 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 109 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002753 The information contained hereCtoNelt N:FrliAL not for general distribution. EF-EA_00ll6829 EFTA01251353 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: 16:53:41 Data Usage For: Item Conn. Conn. Originating LT Bytes Bytes Apn INZI IMSI NUM MODEL Data 21mo Number Up Dn (USC) 2657 03/17/20 18:20:14 60:00 11516 4300 ims -1 310410214827503 2658 03/17/20 19:18:31 60:00 0 Ommtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2659 03/17/20 19:20:14 55:38 12244 4408 imo -1 310410214827503 2660 03/17/20 20:15:28 38:34 7306 6810 imo 3587080982063726 310410214827503 APPLE !PHONES 2661 03/17/20 20:15:28 38:35 6742 6954 am 3587080982063726 310410214827503 APPLE !PHONES 2662 03/17/20 20:15:51 60:00 20945 14596 am -1 310410214827503 2663 03/17/20 20:18:31 35:32 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES c no 2664 03/17/20 20:54:03 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2665 03/17/20 21:15:51 60:00 8604 3052 ins -1 310410214827503 2666 03/17/20 21:54:03 4:43 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2667 03/17/20 21:58:45 8:40 192 Onatgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2668 03/17/20 21:58:46 8:40 0 Onatgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2669 03/17/20 22:07:26 31:55 0 Onatgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2670 03/17/20 22:15:51 60:00 10268 3424 ins -1 310410214827503 2671 03/17/20 22:39:20 2:10 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2672 03/17/20 22:39:21 2:10 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2673 03/17/20 22:41:31 1:10 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2674 03/17/20 22:42:41 68:13 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 2675 03/17/20 22:42:42 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2676 03/17/20 23:15:51 60:00 11844 3624 ins -1 310410214827503 2677 03/17/20 23:42:42 8:13 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2678 03/17/20 23:50:54 18:33 192 Onatgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2679 03/17/20 23:50:55 18:33 0 Onatgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2680 03/18/20 00:09:28 8:46 0 Onatgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 110 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002754 The information contained hereleoNyFti not for general distribution. NaTtAdti EF-EA_O0116830 EFTA01251354 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ....,,f ••-s"" s AT&T OTC. Run Data: 06/17/2020 Run Tama: 10:55:41 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apr. INZI INSI MAKE MODEL Data Time Number Up Dn (UTC) 2681 03/18/20 00:15:51 60:00 13804 6628 isms -1 310410214827503 2682 03/18/20 00:18:14 10:53 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2683 03/18/20 00:18:14 10:54 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2684 03/18/20 00:29:08 56:10 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 2685 03/18/20 01:15:51 60:00 10036 3176 ins -1 310410214827503 2686 03/18/20 01:25:18 21:55 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2687 03/18/20 01:25:19 21:55 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2688 03/18/20 01:47:13 19:14 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2689 03/18/20 01:47:14 19:14 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2690 03/18/20 02:06:28 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2691 03/18/20 02:15:51 60:00 10252 3300 ins -1 310410214827503 2692 03/18/20 03:06:28 6:23 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2693 03/18/20 03:12:50 28:42 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2694 03/18/20 03:12:51 28:42 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2695 03/18/20 03:15:51 60:00 10380 4252 ins -1 310410214827503 2696 03/18/20 03:41:33 15:21 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2697 03/18/20 03:56:54 0:05 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2698 03/18/20 04:15:51 60:00 6848 2896 ins -1 310410214827503 2699 03/18/20 05:15:51 60:00 12028 4536 ins -1 310410214827503 2700 03/18/20 06:15:51 60:00 10272 4236 ins -1 310410214827503 2701 03/18/20 07:15:51 60:00 6956 2912 ins -1 310410214827503 2702 03/18/20 08:15:51 60:00 6956 2788 ins -1 310410214827503 2703 03/18/20 09:15:51 60:00 8496 3160 ins -1 310410214827503 2704 03/18/20 10:15:51 60:00 8604 3160 ins -1 310410214827503 2705 03/18/20 11:15:51 31:46 15236 6264 lms -1 310410214827503 2706 03/18/20 11:47:31 5:19 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 111 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002755 The information contained her is not for general distribution. EF-EA_O0116831 EFTA01251355 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tr `"" ad s. AT&T OTC. Run Date: 06/17/2020 Run Time: 1S:55:41 Data Osage For: Itea Conn. Conn. Originating ET Bytes Bytes Apn INS' NAfl NICOLL Date Time Number Up Dn (UTC) 2707 03/18/20 11:52:50 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2708 03/18/20 11:52:52 60:00 14426 11616 ins 3587080982063726 310410214827503 APPLE IPHONE8 2709 03/18/20 12:52:50 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 2710 03/18/20 12:52:52 60:00 5408 2756 • ins 3587080982063726 310410214827503 APPLE IPHONE8 2711 03/18/20 13:52:50 36:19 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 2712 03/18/20 13:52:52 26:54 2596 1324 ins 3587080982063726 310410214827503 APPLE !PHONES 2713 03/18/20 14:19:46 3:57 3316 1324 imo 3587080982063726 310410214827503 APPLE !PHONES 2714 03/18/20 14:23:43 4:05 3952 1448 ins 3587080982063726 310410214827503 APPLE IPHONE8 2715 03/18/20 14:27:48 60:00 8012 2772 imo 3587080982063726 310410214827503 APPLE IPHONE8 2716 03/18/20 14:29:08 2:23 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 2717 03/18/20 14:29:09 2:23 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 2718 03/18/20 14:31:31 3:00 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2719 03/18/20 14:31:33 2:59 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2720 03/18/20 14:34:31 52:23 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2721 03/18/20 15:02:33 60:00 18492 9824 ins -1 310410214827503 2722 03/18/20 15:26:53 2:31 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2723 03/18/20 15:26:54 2:31 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2724 03/18/20 15:27:48 4:43 0 0 ins 3587080982063726 310410214827503 APPLE IPHONE8 2725 03/18/20 15:29:25 43:06 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2726 03/18/20 15:32:31 60:00 22853 16088 ins -1 310410214827503 2727 03/18/20 16:02:33 55:23 0 0 ins -1 310410214827503 2728 03/18/20 16:12:31 1:13 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2729 03/18/20 16:12:32 1:13 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2730 03/18/20 16:13:44 2:04 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2731 03/18/20 16:13:46 2:03 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 112 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002756 The information contained her is NsToliAL not for general distribution. EF-EA_O0116832 EFTA01251356 MOBILITY • 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in e AT&T .._____,, %•—•°"" OTC. Run pato: 06/17/2020 Run Time: Data Osage for: Item Conn. Conn. Originating ET Bytes Bytes Apn INEZ INSI KAM MODEL Date Time Number Up Dn (OTC) 2732 03/18/20 16:15:49 43:56 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 2733 03/18/20 16:32:31 60:00 5072 1696 ism -1 310410214827503 2734 03/18/20 16:57:55 60:00 19408 10910 ism -1 310410214827503 2735 03/18/20 16:59:44 8:18 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONZ8 no 2736 03/18/20 16:59:45 8:18 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONZ8 no 2737 03/18/20 17:08:03 49:11 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONZ8 no 2738 03/18/20 17:32:31 29:42 0 0 ins -1 310410214827503 2739 03/18/20 17:57:13 6:34 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONZ8 no 2740 03/18/20 17:57:14 6:34 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONZ8 no 2741 03/18/20 17:57:55 4:18 0 0 ins -1 310410214827503 2742 03/18/20 18:02:11 1:36 6264 6820 ins 3587080982063726 310410214827503 APPLE IPRONZ8 2743 03/18/20 18:02:13 1:35 6676 6000 ins 3587080982063726 310410214827503 APPLE IPRONZ8 2744 03/18/20 18:03:04 60:00 18853 10233 ins -1 310410214827503 2745 03/18/20 18:03:48 3:10 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONZ8 no 2746 03/18/20 18:06:57 9:07 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONZ8 no 2747 03/18/20 18:06:59 9:06 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONZ8 no 2748 03/18/20 18:16:05 2:18 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONZ8 no 2749 03/18/20 18:18:22 8:15 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONZ8 no 2750 03/18/20 18:18:23 8:15 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONZ8 no 2751 03/18/20 18:26:38 1:07 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONZ8 no 2752 03/18/20 18:27:44 2:03 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONZ8 no 2753 03/18/20 18:27:45 2:03 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONZ8 no 2754 03/18/20 18:29:48 21:07 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONZ8 no 2755 03/18/20 18:50:54 8:34 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONZ8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 113 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002757 The information contained heralCONelt NToliAlt not for general distribution. EF-EA_O0116833 EFTA01251357 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: 10:56:41 Data Usage For: Item Conn. Conn. Originating ET Bytes Bytom Apn Urn IMSI Man Date Time Number Op Dn (UTC) 2756 03/18/20 18:50:55 8:34 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2757 03/18/20 18:59:29 39:33 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2758 03/18/20 19:03:04 58:01 8048 3588 imp -1 310410214827503 2759 03/18/20 19:39:01 14:50 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2760 03/18/20 19:39:02 14:50 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2761 03/18/20 19:53:52 5:18 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2762 03/18/20 19:59:09 8:18 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2763 03/18/20 19:59:10 8:18 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2764 03/18/20 20:00:39 1:21 7096 6816 imp 3587080982063726 310410214827503 APPLE !PHONES 2765 03/18/20 20:00:40 1:21 6748 6832 imp 3587080982063726 310410214827503 APPLE !PHONES 2766 03/18/20 20:01:05 2:01 8095 5982 imp -1 310410214827503 2767 03/18/20 20:01:59 5:28 6334 6666 imp 3587080982063726 310410214827503 APPLE !PHONES 2768 03/18/20 20:02:01 5:27 6666 6070 imp 3587080982063726 310410214827503 APPLE !PHONES 2769 03/18/20 20:03:06 20:56 11686 8040 imp -1 310410214827503 2770 03/18/20 20:07:28 0:05 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2771 03/18/20 20:07:44 39:49 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2772 03/18/20 20:18:47 28:46 6666 5980 vas 3587080982063726 310410214827503 APPLE !PHONES 2773 03/18/20 20:47:32 4:12 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2774 03/18/20 20:47:33 4:12 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2775 03/18/20 20:51:44 13:13 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2776 03/18/20 20:51:45 13:13 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2777 03/18/20 20:52:00 12:57 6336 6988 vas 3587080982063726 310410214827503 APPLE !PHONES 2778 03/18/20 20:52:01 12:57 6864 6072 vas 3587080982063726 310410214827503 APPLE !PHONES 2779 03/18/20 21:04:58 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2780 03/18/20 21:39:56 0:01 0 0 imp -1 310410214827503 2781 03/18/20 21:46:22 50:48 25152 16800 imp 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 114 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002758 The information contained heraleop+Ftli NTailiAL not for general distribution. EF-EA_00ll6834 EFTA01251358 MOBILITY 410. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in tr.. mgSa# 1/4 AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes arm INEI DMZ MUM MODEL Date Time Number Up Dn (UTC) 2782 03/18/20 22:04:58 60:00 0 Ommtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2783 03/18/20 22:37:10 60:00 15448 5088 ins 3587080982063726 310410214827503 APPLE 'PHONES 2784 03/18/20 23:04:58 40:02 0 Ommtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 2785 03/18/20 23:37:10 30:08 5072 1572 ins 3587080982063726 310410214827503 APPLE 'PHONES 2786 03/18/20 23:44:59 19:47 192 Ommtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2787 03/18/20 23:45:00 19:47 0 Ommtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2788 03/19/20 00:04:47 1:21 0 Ommtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2789 03/19/20 00:06:07 8:21 192 Ommtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2790 03/19/20 00:06:08 8:21 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2791 03/19/20 00:06:19 8:09 7226 6814 ins 3587080982063726 310410214827503 APPLE 'PHONES 2792 03/19/20 00:06:20 8:09 6746 6962 ins 3587080982063726 310410214827503 APPLE 'PHONES 2793 03/19/20 00:07:18 15:11 9894 8570 ins -1 310410214827503 2794 03/19/20 00:14:29 6:44 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 2795 03/19/20 00:21:12 8:04 192 Ommtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2796 03/19/20 00:21:13 8:04 0 Ommtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2797 03/19/20 00:22:27 1:34 6263 6744 ims 3587080982063726 310410214827503 APPLE 'PHONES 2798 03/19/20 00:22:29 1:33 6676 5999 ims 3587080982063726 310410214827503 APPLE 'PHONES 2799 03/19/20 00:24:02 17:34 8528 6160 ims 3587080982063726 310410214827503 APPLE 'PHONES 2800 03/19/20 00:29:17 2:55 0 Ommtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2801 03/19/20 00:32:12 6:23 192 Ommtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2802 03/19/20 00:32:13 6:23 0 Ommtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2803 03/19/20 00:38:36 3:08 0 Ommtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2804 03/19/20 00:41:43 2:03 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 2805 03/19/20 00:41:44 2:02 6225 6672 ims 3587080982063726 310410214827503 APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 115 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002759 The information contained her is not for general distribution. EF-EAJVII6835 EFTA01251359 NOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in •---_:e0AT&T ".,."1° OTC. Run Data: 06/17/2020 Run Tuna: Data Osage Tor: Item Conn. Conn. Originating ET Bytes Byte. Rpn IN= IMPI ten NOD= Data Time Rumbas Up on (Inc) 2806 03/19/20 00:41:44 2:03 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 2807 03/19/20 00:41:45 2:02 6672 5961 imp 3587080982063726 310410214827503 APPLE IPHONE8 2808 03/19/20 00:43:47 3:06 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 2809 03/19/20 00:43:49 1:05 6692 6000 imp 3587080982063726 310410214827503 APPLE IPM01428 2810 03/19/20 00:44:54 0:20 3872 1572 ins 3587080982063726 310410214827503 APPLE IPHONE8 2811 03/19/20 00:45:14 1:39 2644 1324 ins 3587080982063726 310410214827503 APPLE !PHONES 2812 03/19/20 00:46:52 19:04 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2813 03/19/20 00:46:53 19:04 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2814 03/19/20 00:46:54 19:02 6351 6674 ins 3587080982063726 310410214827503 APPLE !PHONES 2815 03/19/20 00:46:55 19:02 6674 6087 ins 3587080982063726 310410214827503 APPLE !PHONES 2816 03/19/20 00:47:12 60:00 20306 9690 ins -1 310410214827503 2817 03/19/20 01:05:57 7:41 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2818 03/19/20 01:13:37 2:15 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2819 03/19/20 01:13:38 2:15 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2820 03/19/20 01:15:53 2:58 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2821 03/19/20 01:18:50 2:14 192 Onattgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2822 03/19/20 01:18:51 2:14 0 Onattgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2823 03/19/20 01:21:05 0:47 0 Onattgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 2824 03/19/20 01:21:51 8:14 192 Onattgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2825 03/19/20 01:21:52 8:14 0 Onattgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2826 03/19/20 01:30:06 5:35 0 Onattgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2827 03/19/20 01:35:40 14:38 192 Onattgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2828 03/19/20 01:35:41 14:38 0 Onattgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2829 03/19/20 01:47:12 60:00 7064 2880 ins -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 116 AT&T does not retain records that can definitively show whether a transaction was PsisTiliAL customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002760 The information contained her is not for general distribution. EF-EA_O0116836 EFTA01251360 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in % C.7,, ‘ing° 4a AT&T arc. Run Data: 06/17/2020 Run Tuna: Data Osage For: Item Conn. Conn. Originating LT Bytes Byte. Apn ICI INSI MARL MODEL Data Time Number UP Dn (OTC) 2830 03/19/20 01:50:19 2:48 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2831 03/19/20 01:53:06 2:10 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2832 03/19/20 01:53:07 2:10 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2833 03/19/20 01:55:17 3:05 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 2834 03/19/20 01:58:21 2:05 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 2835 03/19/20 01:58:23 2:04 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2836 03/19/20 02:00:27 4:49 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2837 03/19/20 02:05:15 18:26 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2838 03/19/20 02:05:16 18:26 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2839 03/19/20 02:23:41 7:51 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2840 03/19/20 02:23:42 7:51 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2841 03/19/20 02:31:33 8:23 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2842 03/19/20 02:31:34 8:23 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2843 03/19/20 02:39:56 6:12 192 Onxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 2844 03/19/20 02:39:57 6:12 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 2845 03/19/20 02:46:09 12:23 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2846 03/19/20 02:47:12 60:00 8388 2896 imp -1 310410214827503 2847 03/19/20 02:58:31 2:11 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2848 03/19/20 02:58:32 2:11 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2849 03/19/20 03:00:43 0:34 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2850 03/19/20 03:01:16 40:00 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 117 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002761 The information contained her is not for general distribution. EFIA_OCIII6837 EFTA01251361 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ...,,,,•AT&T ••-s`' OTC. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating Cr Bytes Byte. Apn INLI INS/ KAM NICOLL Data Time Rumbas UP Dn (UTC) 2851 03/19/20 03:01:17 52:53 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 2852 03/19/20 03:47:12 60:00 11596 4004 ins -1 310410214827503 2853 03/19/20 03:54:10 2:09 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 2854 03/19/20 03:54:11 2:09 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 2855 03/19/20 03:56:20 0:34 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 2856 03/19/20 03:56:53 8:33 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 2857 03/19/20 03:56:54 8:33 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 2858 03/19/20 04:05:26 8:32 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 2859 03/19/20 04:05:28 8:31 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 2860 03/19/20 04:13:59 19:14 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2861 03/19/20 04:33:12 14:52 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 2862 03/19/20 04:33:13 14:52 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 2863 03/19/20 04:47:12 60:00 8604 3112 imp -1 310410214827503 2864 03/19/20 04:48:05 1:29 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 2865 03/19/20 04:49:34 21:18 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 2866 03/19/20 04:49:34 21:19 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 2867 03/19/20 05:10:52 27:29 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 2868 03/19/20 05:10:53 27:29 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 2869 03/19/20 05:38:22 0:34 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2870 03/19/20 05:38:55 72:10 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 2871 03/19/20 05:38:56 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 2872 03/19/20 05:47:12 36:19 6848 2932 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 118 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002762 The information contained her is not for general distribution. NaTtAdti EF-EA_O0116838 EFTA01251362 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ......„0 ••-s`" 1. AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating CT Byte. Bytoa Apn INEI IMSI MUM MODEL Date Timo Number Up On (OTC) 2873 03/19/20 06:24:17 26:48 6246 6666 imp 3587080982063726 310410214827503 APPLE IPHONEB 2874 03/19/20 06:24:18 26:48 6666 5982 imp 3587080982063726 310410214827503 APPLE IPHONEB 2875 03/19/20 06:38:56 12:10 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 2876 03/19/20 06:51:06 0:51 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 2877 03/19/20 06:51:56 21:18 192 Onmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2878 03/19/20 06:51:57 21:18 0 Onmtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2879 03/19/20 06:56:36 60:00 16703 9200 imp -1 310410214827503 2880 03/19/20 07:13:15 8:39 192 Onmtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2881 03/19/20 07:13:16 8:39 0 Onatgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 2882 03/19/20 07:21:55 46:41 192 Onatgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2883 03/19/20 07:21:56 46:41 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2884 03/19/20 07:56:36 60:00 6972 2664 imp -1 310410214827503 2885 03/19/20 08:08:36 21:07 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2886 03/19/20 08:08:37 21:07 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2887 03/19/20 08:29:44 0:36 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 2888 03/19/20 08:30:19 40:22 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 2889 03/19/20 08:30:20 40:22 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 2890 03/19/20 08:56:36 60:00 10236 3360 imp -1 310410214827503 2891 03/19/20 09:10:42 14:55 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2892 03/19/20 09:10:43 14:55 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2893 03/19/20 09:25:37 33:55 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 2894 03/19/20 09:25:38 33:55 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 2895 03/19/20 09:56:36 60:00 9928 3252 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 119 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002763 The information contained her is not for general distribution. EF-EA_O0116839 EFTA01251363 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T arc. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating CT Byte. Bytom Apn TM= IMS1 NICOLL Date Time Number Up Dn (UTC) 2896 03/19/20 09:59:33 0:38 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2897 03/19/20 10:00:10 2:49 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2898 03/19/20 10:00:11 2:49 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 2899 03/19/20 10:03:00 0:33 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 2900 03/19/20 10:03:32 28:46 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2901 03/19/20 10:03:33 28:46 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2902 03/19/20 10:32:19 55:25 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2903 03/19/20 10:56:36 60:00 8264 2772 ims -1 310410214827503 2904 03/19/20 11:27:43 31:53 192 Onatgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2905 03/19/20 11:27:44 31:53 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2906 03/19/20 11:56:36 60:00 13568 4752 ims -1 310410214827503 2907 03/19/20 11:59:37 11:37 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2908 03/19/20 11:59:38 11:37 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2909 03/19/20 12:11:15 8:01 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 2910 03/19/20 12:19:15 15:40 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2911 03/19/20 12:19:16 15:40 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2912 03/19/20 12:34:55 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2913 03/19/20 12:47:26 60:00 18813 9516 imo -1 310410214827503 2914 03/19/20 12:56:36 60:00 0 0 imp -1 310410214827503 2915 03/19/20 13:34:55 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 2916 03/19/20 13:47:26 60:00 8372 3036 imo -1 310410214827503 2917 03/19/20 13:56:36 60:00 0 0 imp -1 310410214827503 2918 03/19/20 14:34:55 32:28 0 Onatgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 2919 03/19/20 14:47:26 60:00 4748 2248 imo -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 120 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002764 The information contained heraleeNeli s bn mild is not for general distribution. EF-EAJVII6840 EFTA01251364 MOBILITY 2996479 06/17/2020 ATET has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ....,,,• ••-"s" -". AT&T (ITC. Run Data: 06/17/2020 Run Time: la:SS:41 Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Min IN= IM9I MKT MOD= Data Time Number Up Dn (UTC) 2920 03/19/20 14:56:36 4:16 0 0 ims -1 310410214827503 2921 03/19/20 15:00:52 60:00 19541 11190 ins -1 310410214827503 2922 03/19/20 15:07:22 2:06 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2923 03/19/20 15:07:23 2:06 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2924 03/19/20 15:09:29 2:19 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2925 03/19/20 15:11:48 2:02 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2926 03/19/20 15:11:49 2:03 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2927 03/19/20 15:13:52 1:14 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2928 03/19/20 15:15:05 1:56 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2929 03/19/20 15:15:06 1:56 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2930 03/19/20 15:17:02 4:44 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2931 03/19/20 15:21:45 20:00 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2932 03/19/20 15:21:46 35:07 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2933 03/19/20 15:47:26 60:00 0 0 ims -1 310410214827503 2934 03/19/20 15:56:53 0:34 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2935 03/19/20 15:57:27 38:59 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2936 03/19/20 15:57:27 39:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2937 03/19/20 16:00:52 60:00 15244 12636 ims -1 310410214827503 2938 03/19/20 16:29:56 0:40 1857 0 ims -1 310410214827503 2939 03/19/20 16:36:27 12:41 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2940 03/19/20 16:47:26 23:01 0 0 ims -1 310410214827503 2941 03/19/20 16:49:07 2:21 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2942 03/19/20 16:49:09 2:20 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 121 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002765 The information contained her is NTifikE not for general distribution. EF-EA_00116841 EFTA01251365 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T UTC. Run pato: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating CT Byte. Byte. Apn INSI MARL MODEL Date Time Number UP Dn (OTC) 2943 03/19/20 16:51:29 0:42 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2944 03/19/20 16:52:10 2:41 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2945 03/19/20 16:52:11 2:41 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2946 03/19/20 16:54:52 2:22 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2947 03/19/20 16:54:53 2:22 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 2948 03/19/20 16:57:15 41:17 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2949 03/19/20 17:00:52 14:42 4840 2680 imp -1 310410214827503 2950 03/19/20 17:10:27 43:09 15853 12072 imp -1 310410214827503 2951 03/19/20 17:38:32 17:57 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2952 03/19/20 17:38:33 17:57 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2953 03/19/20 17:53:12 3:17 7220 6844 imp 3587080982063726 310410214827503 APPLE !PHONES 2954 03/19/20 17:53:13 3:17 6736 6956 imp 3587080982063726 310410214827503 APPLE !PHONES 2955 03/19/20 17:53:36 60:00 11309 6742 imp -1 310410214827503 2956 03/19/20 17:56:30 8:45 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2957 03/19/20 18:05:14 2:18 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2958 03/19/20 18:05:16 2:17 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2959 03/19/20 18:07:11 0:21 6244 6674 imp 3587080982063726 310410214827503 APPLE !PHONES 2960 03/19/20 18:07:12 0:21 6674 5980 imp 3587080982063726 310410214827503 APPLE !PHONES 2961 03/19/20 18:07:33 1:34 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 2962 03/19/20 18:07:34 0:01 0 0 as 3587080982063726 310410214827503 APPLE 1PROME8 2963 03/19/20 18:07:42 0:40 6672 5964 as 3587080982063726 310410214827503 APPLE !PHONES 2964 03/19/20 18:08:22 60:00 13768 4700 as 3587080982063726 310410214827503 APPLE !PHONES 2965 03/19/20 18:09:06 5:51 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2966 03/19/20 18:09:07 5:51 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2967 03/19/20 18:14:58 0:32 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 122 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002766 The information contained her is not for general distribution. EF-EAJVII6842 EFTA01251366 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage for: Item Conn. Conn. Originating ST Bytes Bytes Apn IMBI NICOLL Date Time Number Up Dn (um) 2968 03/19/20 18:15:29 81:06 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2969 03/19/20 18:15:30 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2970 03/19/20 18:53:36 54:41 0 0 ims -1 310410214827503 2971 03/19/20 19:08:22 45:19 13716 7424 ims 3587080982063726 310410214827503 APPLE !PHONES 2972 03/19/20 19:15:30 21:06 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2973 03/19/20 19:26:32 0:19 0 520 ims 3587080982063726 310410214827503 APPLE !PHONES 2974 03/19/20 19:36:36 5:02 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2975 03/19/20 19:41:37 2:10 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2976 03/19/20 19:41:38 2:10 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2977 03/19/20 19:43:48 2:12 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2978 03/19/20 19:45:59 2:09 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2979 03/19/20 19:46:00 2:09 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2980 03/19/20 19:48:09 40:37 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 2981 03/19/20 19:48:16 0:01 0 0 ims 3587080982063726 310410214827503 APPLE !PHONES 2982 03/19/20 19:48:30 0:04 48 0 ims 3587080982063726 310410214827503 APPLE !PHONES 2983 03/19/20 19:54:35 60:00 26556 11232 ims -1 310410214827503 2984 03/19/20 20:28:45 8:30 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2985 03/19/20 20:28:46 8:30 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2986 03/19/20 20:37:16 6:10 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2987 03/19/20 20:43:26 8:26 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 2988 03/19/20 20:43:27 8:26 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2989 03/19/20 20:51:53 39:04 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2990 03/19/20 20:54:35 47:17 3424 1340 ims -1 310410214827503 2991 03/19/20 21:30:57 61:25 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 123 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002767 The information contained heraleeNeli not for general distribution. EF-EA_00116843 EFTA01251367 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tri sO ‘ AT&T OTC. Run Oato: 06/17/2020 Run Time: 16:55:45 Data Osage For: Item Conn. Conn. Originating ET Bytes Bytes Apn ItCEI INS' MARL MODEL Date Time Number UP Dn (OTC) 2992 03/19/20 21:30:58 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2993 03/19/20 21:51:45 40:37 8164 6868 ins 3587080982063726 310410214827503 APPLE !PHONES 2994 03/19/20 21:51:46 40:37 6868 8008 ins 3587080982063726 310410214827503 APPLE !PHONES 2995 03/19/20 21:52:05 9:49 10815 8812 isms -1 310410214827503 2996 03/19/20 22:01:54 30:28 9700 10530 isms 3587080982063726 310410214827503 APPLE !PHONES 2997 03/19/20 22:01:55 30:28 10530 9436 isms 3587080982063726 310410214827503 APPLE !PHONES 2998 03/19/20 22:30:58 1:25 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2999 03/19/20 22:32:23 1:26 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3000 03/19/20 22:33:48 8:41 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3001 03/19/20 22:33:49 8:41 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 3002 03/19/20 22:36:21 60:00 21342 12618 isms -1 310410214827503 3003 03/19/20 22:42:30 0:05 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 3004 03/19/20 22:42:59 37:24 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 3005 03/19/20 22:43:00 37:24 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 3006 03/19/20 23:20:24 8:28 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 3007 03/19/20 23:28:52 43:12 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 3008 03/19/20 23:28:53 43:12 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 3009 03/19/20 23:36:21 60:00 8496 3020 isms -1 310410214827503 3010 03/20/20 00:12:05 17:27 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 3011 03/20/20 00:29:32 11:20 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 3012 03/20/20 00:29:33 11:20 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3013 03/20/20 00:36:21 60:00 8728 3128 ins -1 310410214827503 3014 03/20/20 00:40:53 4:32 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3015 03/20/20 00:45:24 2:11 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 124 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002768 The information contained her is PsiTniliAL not for general distribution. EFTA_00116844 EFTA01251368 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in tri ng° sit AT&T UTC. Run Date: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn IKE' IMS1 MARE MODEL Date Time Number Up On (OTC) 3016 03/20/20 00:45:25 2:11 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3017 03/20/20 00:47:36 0:39 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3018 03/20/20 00:48:15 8:45 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 3019 03/20/20 00:48:16 8:45 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3020 03/20/20 00:57:01 1:40 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3021 03/20/20 00:58:40 2:03 192 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3022 03/20/20 00:58:41 2:03 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3023 03/20/20 01:00:44 14:40 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3024 03/20/20 01:15:24 14:56 192 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3025 03/20/20 01:15:24 14:57 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3026 03/20/20 01:30:21 1:11 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3027 03/20/20 01:31:31 39:34 192 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3028 03/20/20 01:31:32 39:34 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3029 03/20/20 01:36:21 24:43 3424 1432 ims -1 310410214827503 3030 03/20/20 02:01:02 10:03 7228 6804 ims 3587080982063726 310410214827503 APPLE IPHOME8 3031 03/20/20 02:01:03 10:03 6736 6964 ims 3587080982063726 310410214827503 APPLE IPHOME8 3032 03/20/20 02:02:44 60:00 15057 8834 I. -1 310410214827503 3033 03/20/20 02:11:05 2:11 192 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3034 03/20/20 02:11:06 2:11 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 3035 03/20/20 02:13:17 10:19 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3036 03/20/20 02:23:35 8:16 192 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3037 03/20/20 02:23:36 8:16 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 125 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002769 The information contained heralCoNyFtli NTroliAL not for general distribution. EF-EA_00116845 EFTA01251369 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ...., ••--s`' s0• AT&T OTC. Run Data: 06/17/2020 Run Time: 18:55:45 Data Osage For: Item Conn. Conn. originating ET Bytes Bytes Apn INDI INSI MARL MODEL Data Time Number op Dn (OTC) 3038 03/20/20 02:31:52 39:29 0 OruMgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3039 03/20/20 03:02:44 60:00 8388 3004 ims -1 310410214827503 3040 03/20/20 03:11:21 30:00 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3041 03/20/20 03:11:22 35:10 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 3042 03/20/20 03:46:32 2:09 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 3043 03/20/20 03:46:33 2:09 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 3044 03/20/20 03:48:42 1:14 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 3045 03/20/20 03:49:55 21:12 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 3046 03/20/20 03:49:56 21:12 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 3047 03/20/20 04:02:44 60:00 8388 3020 ims -1 310410214827503 3048 03/20/20 04:11:08 50:01 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3049 03/20/20 05:01:08 28:52 192 OruMgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3050 03/20/20 05:01:09 28:52 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 3051 03/20/20 05:02:44 60:00 10036 3176 ims -1 310410214827503 3052 03/20/20 05:30:02 21:58 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 3053 03/20/20 05:51:59 14:46 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 3054 03/20/20 05:52:00 14:46 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 3055 03/20/20 06:02:44 60:00 16992 6140 ims -1 310410214827503 3056 03/20/20 06:06:46 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 3057 03/20/20 07:02:44 60:00 7064 2788 imp -1 310410214827503 3058 03/20/20 07:06:46 8:54 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 3059 03/20/20 07:15:39 2:04 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 3060 03/20/20 07:15:41 2:03 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 126 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002770 The information contained her is not for general distribution. NaTtAdti EF-EAJVII6846 EFTA01251370 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in •.,..., ‘..S. sa m% AT&T OTC. Run Date: 06/17/2020 Run Time: 16:55:45 Data Osage For: Item Conn. Conn. Originating Cr Bytes Byte. Alan INLI INBI Mal MODEL Date Time Number UP Dn (DSC) 3061 03/20/20 07:17:44 3:06 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3062 03/20/20 07:20:49 3:21 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3063 03/20/20 07:20:50 3:21 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3064 03/20/20 07:24:11 34:08 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3065 03/20/20 07:24:12 34:08 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3066 03/20/20 07:58:20 54:41 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3067 03/20/20 08:02:44 60:00 8388 2928 ins -1 310410214827503 3068 03/20/20 08:53:00 15:29 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3069 03/20/20 08:53:01 15:29 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3070 03/20/20 09:02:44 60:00 7172 2912 ins -1 310410214827503 3071 03/20/20 09:08:30 8:35 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3072 03/20/20 09:08:31 8:35 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3073 03/20/20 09:17:06 0:53 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3074 03/20/20 09:17:58 9:12 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3075 03/20/20 09:17:59 9:12 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3076 03/20/20 09:27:11 162:37 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3077 03/20/20 09:27:12 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3078 03/20/20 10:02:44 60:00 10256 4236 ins -1 310410214827503 3079 03/20/20 10:27:12 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3080 03/20/20 11:02:44 60:00 15016 4924 ins -1 310410214827503 3081 03/20/20 11:27:12 42:37 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3082 03/20/20 12:02:44 60:00 6956 2896 imp -1 310410214827503 3083 03/20/20 12:09:48 9:26 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 127 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002771 The information contained heraleop+Fti NTroliAL not for general distribution. EF-EA_00116847 EFTA01251371 MOBILITY • 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in tr,"`"Ird AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage Tor: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn INCI IMSI MARL I03DLL Date Time Number Op Dn (OTC) 3084 03/20/20 12:09:50 9:25 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPH01428 no 3085 03/20/20 12:19:14 6:07 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPH01428 no 3086 03/20/20 12:19:15 6:07 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3087 03/20/20 12:25:22 0:05 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3088 03/20/20 12:25:38 40:55 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPH01428 no 3089 03/20/20 13:02:44 60:00 11580 4252 ims -1 310410214827503 3090 03/20/20 13:06:32 2:04 192 Oruagonpho 3587080982063726 310410214827503 APPLE IPH01428 no 3091 03/20/20 13:06:34 2:03 0 Oruagonpho 3587080982063726 310410214827503 APPLE IPH01428 no 3092 03/20/20 13:08:37 42:12 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPH01428 no 3093 03/20/20 13:50:48 2:21 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPH01428 no 3094 03/20/20 13:50:50 2:20 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPH01428 no 3095 03/20/20 13:53:10 21:26 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPH01428 no 3096 03/20/20 14:02:44 60:00 9784 3300 ims -1 310410214827503 3097 03/20/20 14:14:36 8:05 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPH01428 no 3098 03/20/20 14:14:37 8:05 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPH01428 no 3099 03/20/20 14:22:42 5:08 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPH01428 no 3100 03/20/20 14:27:49 18:33 192 Oruagonpho 3587080982063726 310410214827503 APPLE IPH01428 no 3101 03/20/20 14:27:50 18:33 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPH01428 no 3102 03/20/20 14:46:23 5:23 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPH01428 no 3103 03/20/20 14:51:45 15:28 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPH01428 no 3104 03/20/20 14:51:46 15:28 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPH01428 no 3105 03/20/20 15:02:44 60:00 8668 4176 ims 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 128 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002772 The information contained herceoNftli PsiTniliAL not for general distribution. EF-EAJVII6848 EFTA01251372 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating Er Bytes Bytoa Apn INC' INSI MARL NICOLL Data Time Number Up Dn (UTC) 3106 03/20/20 15:07:13 20:57 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 3107 03/20/20 15:07:14 20:58 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 3108 03/20/20 15:28:12 9:32 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3109 03/20/20 15:37:44 14:50 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3110 03/20/20 15:37:45 14:50 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3111 03/20/20 15:52:36 11:36 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3112 03/20/20 16:02:44 60:00 18056 6404 as -1 310410214827503 3113 03/20/20 16:04:11 2:04 192 Onmtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3114 03/20/20 16:04:12 2:04 0 Onmtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3115 03/20/20 16:06:16 0:34 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3116 03/20/20 16:06:49 8:17 192 Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 3117 03/20/20 16:06:50 8:17 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 3118 03/20/20 16:15:07 7:04 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3119 03/20/20 16:22:10 27:08 192 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3120 03/20/20 16:22:11 27:08 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3121 03/20/20 16:49:19 5:38 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 3122 03/20/20 16:54:56 14:56 192 Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 3123 03/20/20 16:54:57 14:56 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3124 03/20/20 17:02:44 60:00 8744 4680 ims -1 310410214827503 3125 03/20/20 17:09:53 0:47 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3126 03/20/20 17:10:39 8:26 192 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 129 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002773 The information contained heraleeNe NTniliAL not for general distribution. EF-Dk_00116849 EFTA01251373 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59nm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .....,„# ••-••• `" 1° AT&T arc. Run Date: 06/17/2020 Run Time: 1S:55:45 Data Usage Tor: Item Conn. Conn. Originating TT Bytes Byte. arm INLI INS' MAKE NICOLL Data Time Number Op Dn (UTC) 3127 03/20/20 17:10:40 8:26 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3128 03/20/20 17:19:06 3:40 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3129 03/20/20 17:22:46 15:11 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3130 03/20/20 17:22:47 15:11 0 0 nmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3131 03/20/20 17:37:57 2:23 192 0 nmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3132 03/20/20 17:37:58 2:23 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3133 03/20/20 17:40:21 6:09 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3134 03/20/20 17:40:22 6:09 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3135 03/20/20 17:46:31 1:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3136 03/20/20 17:47:30 8:23 192 0 nmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3137 03/20/20 17:47:31 8:23 0 0 nmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3138 03/20/20 17:55:54 44:08 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3139 03/20/20 18:02:44 60:00 8156 3712 ims -1 310410214827503 3140 03/20/20 18:40:02 2:04 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3141 03/20/20 18:40:03 2:04 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3142 03/20/20 18:42:07 55:32 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3143 03/20/20 19:02:44 60:00 16436 5228 ims -1 310410214827503 3144 03/20/20 19:37:38 8:36 192 0 nmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3145 03/20/20 19:37:40 8:36 0 0 nmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3146 03/20/20 19:46:15 6:04 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3147 03/20/20 19:46:16 6:04 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 130 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002774 The information contained heraleeNeli WV& not for general distribution. EF-EA_O0116850 EFTA01251374 MOBILITY ap. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 ii:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Bytom Apn INEI IMISI MARL MODEL Date Time I. all,. Up Dn (OTC) 3148 03/20/20 19:52:20 9:41 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3149 03/20/20 20:02:00 2:03 192 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3150 03/20/20 20:02:01 2:03 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3151 03/20/20 20:02:44 60:00 5072 1588 imo -1 310410214827503 3152 03/20/20 20:04:04 57:34 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3153 03/20/20 20:36:24 1:34 7802 6302 was 3587080982063726 310410214827503 APPLE !PHONES 3154 03/20/20 20:37:58 60:00 13672 5576 was 3587080982063726 310410214827503 APPLE !PHONES 3155 03/20/20 21:01:37 13:48 192 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3156 03/20/20 21:01:38 13:48 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3157 03/20/20 21:02:44 60:00 0 0 was -1 310410214827503 3158 03/20/20 21:15:26 2:04 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3159 03/20/20 21:17:30 2:10 192 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3160 03/20/20 21:17:31 2:10 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3161 03/20/20 21:19:41 0:05 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3162 03/20/20 21:20:02 60:00 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3163 03/20/20 21:37:58 60:00 8728 3020 vas 3587080982063726 310410214827503 APPLE !PHONES 3164 03/20/20 22:02:44 60:00 0 0 vas -1 310410214827503 3165 03/20/20 22:20:02 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3166 03/20/20 22:37:58 60:00 13768 4824 was 3587080982063726 310410214827503 APPLE !PHONES 3167 03/20/20 23:02:44 60:00 0 0 ims -1 310410214827503 3168 03/20/20 23:20:02 29:13 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3169 03/20/20 23:37:58 60:00 8604 3128 ims 3587080982063726 310410214827503 APPLE !PHONES 3170 03/20/20 23:49:14 7:42 192 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3171 03/20/20 23:49:15 7:42 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. Thiele communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 131 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002775 The information contained hereCtoNeli N:FroliAL not for general distribution. EF-EA_00ll6851 EFTA01251375 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: 18:55:46 Data Osage For: Item Conn. Conn. Originating ET Bytes Bytoa Apn INLI IMSI Men Date Time Number Op Dn (Inc) 3172 03/20/20 23:56:57 22:40 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3173 03/21/20 00:02:44 24:06 0 0 ims -1 310410214827503 3174 03/21/20 00:19:36 2:11 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3175 03/21/20 00:19:38 2:10 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no • 3176 03/21/20 00:21:48 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3177 03/21/20 00:37:58 60:00 10036 3268 ims 3587080982063726 310410214827503 APPLE !PHONES 3178 03/21/20 01:21:48 36:26 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3179 03/21/20 01:37:58 60:00 13568 4752 ims 3587080982063726 310410214827503 APPLE !PHONES 3180 03/21/20 01:58:13 13:55 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3181 03/21/20 01:58:14 13:55 0 Onmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3182 03/21/20 02:12:08 1:21 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3183 03/21/20 02:12:09 1:21 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3184 03/21/20 02:13:30 11:29 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3185 03/21/20 02:24:59 4:09 0 Onmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3186 03/21/20 02:29:07 47:53 192 Onmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3187 03/21/20 02:29:08 47:53 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3188 03/21/20 02:37:58 16:32 5072 1572 ims 3587080982063726 310410214827503 APPLE 'PHONES 3189 03/21/20 02:54:03 22:57 6228 6736 ims 3587080982063726 310410214827503 APPLE 'PHONES 3190 03/21/20 02:54:04 22:57 6668 6072 ims 3587080982063726 310410214827503 APPLE 'PHONES 3191 03/21/20 02:54:30 60:00 16504 9140 ims -1 310410214827503 3192 03/21/20 03:17:01 20:00 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3193 03/21/20 03:17:02 31:06 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3194 03/21/20 03:48:08 8:34 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3195 03/21/20 03:54:30 60:00 10036 3392 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 132 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002776 The information contained hereCtoNftli not for general distribution. NaTtAdti EF-EA_O0116852 EFTA01251376 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm tra d s""s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Data: 06/17/2020 Run Time: 18:55:46 Data Osage Tor: Item Conn. Conn. Originating ET Bytes Bytes, Apr. IMBI teal NICOLL Data Time Humber UP Dn (OTC) 3196 03/21/20 03:56:41 97:16 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 3197 03/21/20 03:56:42 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 3198 03/21/20 04:54:30 60:00 9928 3268 imo -1 310410214827503 3199 03/21/20 04:56:42 37:16 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 3200 03/21/20 05:33:58 0:06 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 3201 03/21/20 05:49:12 3:35 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 3202 03/21/20 05:49:13 3:35 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 3203 03/21/20 05:52:48 4:43 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 3204 03/21/20 05:54:30 60:00 8496 3128 imo -1 310410214827503 3205 03/21/20 05:57:30 13:55 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 3206 03/21/20 05:57:31 13:55 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3207 03/21/20 06:11:26 24:31 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3208 03/21/20 06:35:56 8:15 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 3209 03/21/20 06:35:57 8:15 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 3210 03/21/20 06:44:12 14:22 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 3211 03/21/20 06:44:13 14:22 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 3212 03/21/20 06:54:30 60:00 10828 4484 ins -1 310410214827503 3213 03/21/20 06:58:35 4:51 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 3214 03/21/20 07:03:26 4:01 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 3215 03/21/20 07:07:26 9:27 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3216 03/21/20 07:07:27 9:27 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3217 03/21/20 07:16:54 1:37 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. Tiara communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 133 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002777 The information contained her is not for general distribution. EF-EAJVII6853 EFTA01251377 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T arc. Run Date: 06/17/2020 Run Time: 18.55.46 Data Usage For: Itea Conn. Conn. originating Cr Bytes Byte. Apn rust IMBI min mom. Date Time Number up on (OTC) 3218 03/21/20 07:18:31 57:10 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 3219 03/21/20 07:18:32 57:10 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 3220 03/21/20 07:54:30 60:00 12244 4860 imp -1 310410214827503 3221 03/21/20 08:15:42 30:53 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3222 03/21/20 08:46:35 8:02 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3223 03/21/20 08:54:30 60:00 7172 3128 ims -1 310410214827503 3224 03/21/20 08:54:36 3:11 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3225 03/21/20 08:54:37 3:11 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3226 03/21/20 08:57:48 28:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3227 03/21/20 09:25:47 3:13 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 3228 03/21/20 09:25:48 3:13 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3229 03/21/20 09:29:01 21:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3230 03/21/20 09:50:01 2:51 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 3231 03/21/20 09:52:52 0:06 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3232 03/21/20 09:54:30 60:00 13908 4996 ims -1 310410214827503 3233 03/21/20 09:54:31 7:58 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3234 03/21/20 10:02:28 1:13 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3235 03/21/20 10:02:29 1:13 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3236 03/21/20 10:03:42 3:48 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 3237 03/21/20 10:07:31 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 3238 03/21/20 10:54:30 60:00 10036 3392 ims -1 310410214827503 3239 03/21/20 11:07:31 2:38 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 134 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002778 The information contained hereCtoNyFti NeTniliAL not for general distribution. EFTA_00116854 EFTA01251378 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run pato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Byte. Ann INCI ISIS I teal NICOLL Date 21mo Number Up Dn (U2C) 3240 03/21/20 11:10:09 1:25 0 0 ructgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3241 03/21/20 11:11:33 2:44 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3242 03/21/20 11:11:34 2:44 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3243 03/21/20 11:14:18 19:09 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3244 03/21/20 11:33:28 14:25 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3245 03/21/20 11:47:53 26:28 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 3246 03/21/20 11:54:30 60:00 8728 3052 into -1 310410214827503 3247 03/21/20 12:14:21 10:50 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 3248 03/21/20 12:25:11 16:19 0 Onatgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3249 03/21/20 12:41:30 0:44 192 Onatgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3250 03/21/20 12:41:31 0:44 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3251 03/21/20 12:42:15 29:50 0 Onatgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3252 03/21/20 12:54:30 60:00 12028 4640 into -1 310410214827503 3253 03/21/20 13:12:04 2:03 192 Onatgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 3254 03/21/20 13:12:05 2:03 0 Onatgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3255 03/21/20 13:14:08 60:00 0 Onatgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3256 03/21/20 13:54:30 60:00 8496 3036 ins -1 310410214827503 3257 03/21/20 14:14:08 14:56 0 Onatgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3258 03/21/20 14:29:03 2:04 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3259 03/21/20 14:29:04 2:04 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3260 03/21/20 14:31:08 60:00 0 Onatgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 3261 03/21/20 14:54:30 60:00 8728 3160 ins -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 135 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002779 The information contained heraleeNelt not for general distribution. NeTtAti EF-EA_O0116855 EFTA01251379 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in %---.,r,•/`"" .. e AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating LT Bytes Bytom Apn Tier INS I NA= NICOLL Date Time Number op Dn (UTC) 3262 03/21/20 15:31:08 53:21 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 3263 03/21/20 15:54:30 60:00 15496 5476 imo -1 310410214827503 3264 03/21/20 16:24:29 6:53 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110H014Z8 no 3265 03/21/20 16:31:22 34:11 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 110H014Z8 no 3266 03/21/20 16:54:30 60:00 7188 2804 imo -1 310410214827503 3267 03/21/20 17:05:32 12:47 192 Onxtgonpho 3587080982063726 310410214827503 APPLE 110H014Z8 no 3268 03/21/20 17:05:33 12:47 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110H014Z8 no 3269 03/21/20 17:18:20 58:17 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110H014Z8 no 3270 03/21/20 17:54:30 60:00 10252 3408 imo -1 310410214827503 3271 03/21/20 18:22:28 42:10 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110HONZ8 no 3272 03/21/20 18:22:29 42:10 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3273 03/21/20 18:54:30 60:00 11796 4484 imp -1 310410214827503 3274 03/21/20 19:04:38 4:18 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110HONZ8 no 3275 03/21/20 19:04:40 4:17 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110H014Z8 no 3276 03/21/20 19:08:57 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110H014Z8 no 3277 03/21/20 19:54:30 60:00 8496 3144 imp -1 310410214827503 3278 03/21/20 20:08:57 16:46 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 110H014Z8 no 3279 03/21/20 20:25:42 37:54 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3280 03/21/20 20:25:43 37:54 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 110H014Z8 no 3281 03/21/20 20:54:30 60:00 13460 4624 ins -1 310410214827503 3282 03/21/20 21:03:37 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IrRONE8 no 3283 03/21/20 21:54:30 60:00 10252 3300 ins -1 310410214827503 3284 03/21/20 22:03:37 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 110H014Z8 no 3285 03/21/20 22:54:30 46:10 3440 1464 imo 3587080982063726 310410214827503 APPLE 110H014Z8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 136 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002780 The information contained her is NT4AL not for general distribution. EF-EA_00ll6856 EFTA01251380 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ..... `•-s`"I‘ a f AT&T OTC. Run Data: 06/17/2020 Run Time: 18:55:46 Data Usage For: Item Conn. Conn. Originating ET Bytes Bytom Apn INEI INBI ten NICOLL Data Time Number Up Dn (OTC) 3286 03/21/20 23:03:37 17:19 0 0 nmtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 3287 03/21/20 23:20:55 2:03 192 -Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 3288 03/21/20 23:20:56 2:03 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 3289 03/21/20 23:22:59 60:00 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 3290 03/21/20 23:40:40 3:35 6668 5859 imp 3587080982063726 310410214827503 APPLE 'PHONES 3291 03/21/20 23:40:40 3:35 6604 5859 imp 3587080982063726 310410214827503 APPLE 'PHONES 3292 03/21/20 23:44:15 60:00 13892 4716 imp 3587080982063726 310410214827503 APPLE 'PHONES 3293 03/22/20 00:22:59 7:07 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 3294 03/22/20 00:30:05 2:03 192 Oruftgerapho 3587080982063726 310410214827503 APPLE 'PHONES no 3295 03/22/20 00:30:06 2:03 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 3296 03/22/20 00:32:09 18:47 0 Onxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 3297 03/22/20 00:44:15 60:00 6848 2788 imp 3587080982063726 310410214827503 APPLE 'PHONES 3298 03/22/20 00:50:55 8:14 192 Onxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 3299 03/22/20 00:50:56 8:14 0 Onxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 3300 03/22/20 00:59:10 1:16 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3301 03/22/20 01:00:25 0:57 192 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3302 03/22/20 01:00:26 0:57 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3303 03/22/20 01:01:23 4:58 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 3304 03/22/20 01:06:20 13:22 192 Oruftgerapho 3587080982063726 310410214827503 APPLE 'PHONES no 3305 03/22/20 01:06:21 13:22 0 Oruftgerapho 3587080982063726 310410214827503 APPLE 'PHONES no 3306 03/22/20 01:19:43 2:02 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 3307 03/22/20 01:21:44 2:11 192 Oruftgerapho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 137 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002781 The information contained heralCoNelt NeTniliAL not for general distribution. EF-EA_O0116857 EFTA01251381 MOBILITY 411111i 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run pato: 06/17/2020 Run Time: Data Osage for: OM= Item Conn. Conn. Originating ET Bytes Bytoa Apn INSI MARL NICOLL Date Time Butter op Dn (OTC) 3308 03/22/20 01:21:45 2:11 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 3309 03/22/20 01:23:56 0:44 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 3310 03/22/20 01:24:39 2:04 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3311 03/22/20 01:24:41 2:03 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3312 03/22/20 01:26:44 0:35 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 3313 03/22/20 01:27:19 2:03 192 Oruftgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 3314 03/22/20 01:27:20 2:03 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 3315 03/22/20 01:29:23 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 3316 03/22/20 01:44:15 32:14 5180 1804 ins 3587080982063726 310410214827503 APPLE IPRONE8 3317 03/22/20 02:11:05 60:00 11882 8628 ins 3587080982063726 310410214827503 APPLE IPRONE8 3318 03/22/20 02:29:23 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 3319 03/22/20 03:11:05 47:00 2596 1324 ins 3587080982063726 310410214827503 APPLE IPRONE8 3320 03/22/20 03:29:23 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 3321 03/22/20 03:58:05 60:00 11888 4220 ins 3587080982063726 310410214827503 APPLE IPRONE8 3322 03/22/20 04:29:23 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 3323 03/22/20 04:58:05 60:00 8712 3020 ins 3587080982063726 310410214827503 APPLE IPRONE8 3324 03/22/20 05:29:23 0:01 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 3325 03/22/20 05:29:27 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 3326 03/22/20 05:58:05 60:00 6956 2648 ins 3587080982063726 310410214827503 APPLE !PHONES 3327 03/22/20 06:29:27 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 3328 03/22/20 06:58:05 60:00 13228 4520 ins 3587080982063726 310410214827503 APPLE IPRONE8 3329 03/22/20 07:29:27 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 3330 03/22/20 07:58:05 60:00 8496 3004 ins 3587080982063726 310410214827503 APPLE IPRONE8 3331 03/22/20 08:29:27 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 138 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002782 The information contained heralCoNyFti NTifikE not for general distribution. EF-EA_00116858 EFTA01251382 NOBILITY arn. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in c•`"1. ,„,,,0adAT&T arc. Run Date: 06/17/2020 Run Time: 18:55:46 Data Osage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn fuzz INS I teal NICOLL Date Time Number Op Dn (OTC) 3332 03/22/20 08:58:05 60:00 10488 4312 imp 3587080982063726 310410214827503 APPLE !PHONES 3333 03/22/20 09:29:27 0:01 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3334 03/22/20 09:29:31 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3335 03/22/20 09:58:05 60:00 6956 2880 imp 3587080982063726 310410214827503 APPLE 'PHONES 3336 03/22/20 10:29:31 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3337 03/22/20 10:58:05 60:00 6848 2540 imp 3587080982063726 310410214827503 APPLE 'PHONES 3338 03/22/20 11:29:31 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3339 03/22/20 11:58:05 60:00 13696 5472 imp 3587080982063726 310410214827503 APPLE !PHONES 3340 03/22/20 12:29:31 2:36 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3341 03/22/20 12:32:07 41:03 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3342 03/22/20 12:58:05 60:00 8388 3004 imp 3587080982063726 310410214827503 APPLE 'PHONES 3343 03/22/20 13:13:09 2:21 192 Onxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3344 03/22/20 13:13:11 2:20 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3345 03/22/20 13:15:31 6:03 192 Onxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3346 03/22/20 13:15:32 6:03 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3347 03/22/20 13:21:35 32:01 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3348 03/22/20 13:53:36 0:03 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3349 03/22/20 13:53:39 58:11 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3350 03/22/20 13:58:05 60:00 10036 3176 imp 3587080982063726 310410214827503 APPLE !PHONES 3351 03/22/20 14:54:13 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3352 03/22/20 14:58:05 60:00 9912 3020 imp 3587080982063726 310410214827503 APPLE 'PHONES 3353 03/22/20 15:54:13 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3354 03/22/20 15:58:05 60:00 13352 4576 imp 3587080982063726 310410214827503 APPLE 'PHONES 3355 03/22/20 16:54:13 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 139 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002783 The information contained her is NeTniliAL not for general distribution. EF-EA_00116859 EFTA01251383 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: 18:55:46 Data Osage Tor: Item Conn. Conn. Originating CT Bytes Bytes Apn INZI INSI MARL NICOLL Date Time Number UP On (OTC) 3356 03/22/20 16:58:05 60:00 6956 2756 ims 3587080982063726 310410214827503 APPLE !PHONES 3357 03/22/20 17:54:13 39:58 0 Ormagonpho 3587080982063726 310410214827503 APPLE !PHONES no 3358 03/22/20 17:58:05 60:00 11812 4720 ims 3587080982063726 310410214827503 APPLE !PHONES 3359 03/22/20 18:34:10 0:42 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3360 03/22/20 18:34:11 0:42 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3361 03/22/20 18:34:53 3:14 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3362 03/22/20 18:38:06 23:03 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3363 03/22/20 18:38:07 23:04 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3364 03/22/20 18:58:05 60:00 15020 4716 ims 3587080982063726 310410214827503 APPLE !PHONES 3365 03/22/20 19:01:11 1:37 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3366 03/22/20 19:02:47 12:30 192 Ormtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3367 03/22/20 19:02:48 12:30 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3368 03/22/20 19:15:18 44:20 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3369 03/22/20 19:58:05 60:00 10036 3144 ims 3587080982063726 310410214827503 APPLE !PHONES 3370 03/22/20 19:59:37 2:10 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3371 03/22/20 19:59:39 2:09 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3372 03/22/20 20:01:48 9:18 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3373 03/22/20 20:11:05 1:23 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3374 03/22/20 20:11:06 1:23 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3375 03/22/20 20:12:28 9:21 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3376 03/22/20 20:12:29 9:21 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3377 03/22/20 20:21:49 6:09 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 140 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002784 The information contained heraleeNyFti PsiTniliAL not for general distribution. EFTA_00I 16860 EFTA01251384 MOBILITY 4011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 LL:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .....„ ••-s`" a0/ AT&T OTC. Run Dato: 06/17/2020 Run Time: 1S:53:46 Data Osage For: Item Conn. Conn. Originating ET Byte. Bytom Apn par IN6I ten MODEL Date Time ',umber Op Dn /OTC) 3378 03/22/20 20:21:50 6:09 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3379 03/22/20 20:27:59 17:03 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3380 03/22/20 20:45:01 7:26 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 3381 03/22/20 20:45:02 7:27 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3382 03/22/20 20:52:29 14:32 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 3383 03/22/20 20:58:05 18:40 14120 3456 ins 3587080982063726 310410214827503 APPLE DRONES 3384 03/22/20 21:07:00 9:46 192 Oruftgonpho 3587080982063726 310410214827503 APPLE DRONES no 3385 03/22/20 21:07:01 9:46 0 Oruftgonpho 3587080982063726 310410214827503 APPLE DRONES no 3386 03/22/20 21:16:47 11:17 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3387 03/22/20 21:16:50 0:03 0 0 ins 3587080982063726 310410214827503 APPLE !PHONES 3388 03/22/20 21:16:59 60:00 21488 9906 ins -1 310410214827503 3389 03/22/20 21:28:03 4:51 192 Onxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 3390 03/22/20 21:28:05 4:50 0 Oruftgonpho 3587080982063726 310410214827503 APPLE DRONES no 3391 03/22/20 21:32:55 3:36 0 Oruftgonpho 3587080982063726 310410214827503 APPLE DRONES no 3392 03/22/20 21:36:31 2:03 192 Oruftgonpho 3587080982063726 310410214827503 APPLE DRONES no 3393 03/22/20 21:36:32 2:03 0 Oruftgonpho 3587080982063726 310410214827503 APPLE DRONES no 3394 03/22/20 21:38:35 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE DRONES no 3395 03/22/20 22:16:59 60:00 6848 2772 ins -1 310410214827503 3396 03/22/20 22:38:35 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 3397 03/22/20 23:16:59 60:00 7064 2664 ins -1 310410214827503 3398 03/22/20 23:38:35 48:53 0 Oruftgonpho 3587080982063726 310410214827503 APPLE DRONES no 3399 03/23/20 00:16:59 60:00 7388 2928 ins -1 310410214827503 3400 03/23/20 00:27:27 2:17 192 Oruftgonpho 3587080982063726 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 141 AT&T does not retain records that can definitively show whether a transaction was PsiTniliAL customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002785 The information contained hereCtoNfti not for general distribution. EFTAJVII6861 EFTA01251385 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ....,,,•AT&T ••-s`' (ITC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating 22 Bytes Byte. Apn IRE' Mal MARE MODEL Date Time Number Up Dn (UTC) 3401 03/23/20 00:27:29 2:16 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3402 03/23/20 00:29:45 6:04 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3403 03/23/20 00:29:46 6:04 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 3404 03/23/20 00:35:50 2:09 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3405 03/23/20 00:37:58 2:04 192 Onxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 3406 03/23/20 00:38:00 2:04 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3407 03/23/20 00:40:03 0:50 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3408 03/23/20 00:40:52 2:03 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3409 03/23/20 00:40:53 2:03 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3410 03/23/20 00:42:56 28:33 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3411 03/23/20 01:11:28 2:03 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3412 03/23/20 01:11:29 2:03 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3413 03/23/20 01:13:32 9:15 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3414 03/23/20 01:16:59 60:00 7280 2912 imp -1 310410214827503 3415 03/23/20 01:22:47 9:04 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3416 03/23/20 01:22:48 9:04 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3417 03/23/20 01:31:52 13:32 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3418 03/23/20 01:45:23 2:04 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3419 03/23/20 01:45:24 2:04 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3420 03/23/20 01:47:28 47:29 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3421 03/23/20 01:56:45 0:00 0 0 imp 3587080982063726 310410214827503 APPLE !PHONES 3422 03/23/20 01:56:56 60:00 18301 9608 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 142 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002786 The information contained her is NTifikE not for general distribution. EF-EAJVII6862 EFTA01251386 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tez- `"Ia° ai. AT&T UTC. Run pato: 06/17/2020 Run Time: Data usage For: Item cone. Conn. originating ET Bytes eytoa Apn INEI INS I MAKE NICOLL Date Time Number Up on (LTC) 3423 03/23/20 02:16:59 60:00 0 0 ims -1 310410214827503 3424 03/23/20 02:34:56 2:04 192 0 netgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3425 03/23/20 02:34:57 2:04 0 0 netgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3426 03/23/20 02:37:01 7:01 0 Onetgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 3427 03/23/20 02:44:01 2:03 192 Onetgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 3428 03/23/20 02:44:02 2:03 0 Onetgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 3429 03/23/20 02:46:05 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3430 03/23/20 02:56:56 60:00 8496 3500 ims -1 310410214827503 3431 03/23/20 03:16:59 60:00 0 0 ims -1 310410214827503 3432 03/23/20 03:46:05 17:46 0 0 netgonpho 3587080982063726 310410214827503 APPLE IPRONZ8 no 3433 03/23/20 03:56:56 60:00 21140 10312 ims -1 310410214827503 3434 03/23/20 04:01:14 0:23 0 1749 ins -2 310410214827503 3435 03/23/20 04:03:50 20:27 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 3436 03/23/20 04:03:51 20:27 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 3437 03/23/20 04:16:59 60:00 0 0 ins -1 310410214827503 3438 03/23/20 04:24:18 3:45 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 3439 03/23/20 04:28:03 8:33 192 Onetgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3440 03/23/20 04:28:04 8:33 0 Onetgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3441 03/23/20 04:36:37 0:05 0 Onetgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 3442 03/23/20 04:36:56 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 3443 03/23/20 04:56:56 60:00 8512 3036 ims -1 310410214827503 3444 03/23/20 05:16:59 25:30 0 0 ims -1 310410214827503 3445 03/23/20 05:36:56 60:00 0 Onetgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 3446 03/23/20 05:56:56 60:00 10380 4144 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 143 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002787 The information contained heraleeNftit not for general distribution. EF-EA_00116863 EFTA01251387 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: 18:55:46 Data Usage For: Item Conn. Conn. originating ET Bytes Byte. Apn INEI 'BSI MAKE MODEL Date Time Number Op Dn (OTC) 3447 03/23/20 06:36:56 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3448 03/23/20 06:56:56 60:00 10380 4036 ims -1 310410214827503 3449 03/23/20 07:36:56 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3450 03/23/20 07:56:56 60:00 6848 2880 inn -1 310410214827503 3451 03/23/20 08:36:56 0:01 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3452 03/23/20 08:36:58 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3453 03/23/20 08:56:56 60:00 11812 4376 inn -1 310410214827503 3454 03/23/20 09:36:58 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3455 03/23/20 09:56:56 60:00 7064 2912 inn -1 310410214827503 3456 03/23/20 10:36:58 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3457 03/23/20 10:56:56 60:00 6848 2788 inn -1 310410214827503 3458 03/23/20 11:36:58 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3459 03/23/20 11:56:56 60:00 15344 5732 inn -1 310410214827503 3460 03/23/20 12:36:58 0:01 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3461 03/23/20 12:37:01 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3462 03/23/20 12:56:56 60:00 6848 2788 inn -1 310410214827503 3463 03/23/20 13:37:01 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3464 03/23/20 13:56:56 42:04 4964 1588 inn -1 310410214827503 3465 03/23/20 14:22:56 1:03 6852 6179 inn 3587080982063726 310410214827503 APPLE !PHONES 3466 03/23/20 14:23:59 15:01 5180 1712 inn 3587080982063726 310410214827503 APPLE !PHONES 3467 03/23/20 14:37:01 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3468 03/23/20 14:39:00 15:49 6674 5980 inn 3587080982063726 310410214827503 APPLE !PRONGS 3469 03/23/20 14:54:49 46:05 8404 3988 inn 3587080982063726 310410214827503 APPLE !PHONES 3470 03/23/20 15:37:01 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3471 03/23/20 15:40:54 60:00 11840 8718 inn 3587080982063726 310410214827503 APPLE !PHONES 3472 03/23/20 16:37:01 0:01 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3473 03/23/20 16:40:54 4:01 0 0 inn 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 144 AT&T does not retain records thAt can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002788 The information contained hereleeNeli N:FroliAL not for general distribution. EFTA 00116864 EFTA01251388 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .....,„#AT&T ••-••• "" s OTC. Run Data: 06/17/2020 Run Tama: 18:55:46 Data Osage For: Item Conn. Conn. originating ET Bytes Bytes Apn INEI INSI MAKE MODEL Data Time Number Up On /OTC) 3474 03/23/20 16:44:55 55:42 8852 3468 ipso 3587080982063726 310410214827503 APPLE &PHONES 3475 03/23/20 17:28:56 7:41 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE &PHONES no 3476 03/23/20 17:36:37 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE &PHONES no 3477 03/23/20 17:36:42 5:20 8156 6944 imo 3587080982063726 310410214827503 APPLE &PHONES 3478 03/23/20 17:42:02 60:00 13584 4608 imo 3587080982063726 310410214827503 APPLE &PHONES 3479 03/23/20 18:36:37 19:50 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE &PHONES no 3480 03/23/20 18:42:02 14:26 124 372 imo 3587080982063726 310410214827503 APPLE &PHONES 3481 03/23/20 18:56:26 4:33 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE &PHONES no 3482 03/23/20 18:56:27 4:32 6184 6738 imo 3587080982063726 310410214827503 APPLE &PHONES 3483 03/23/20 18:56:27 4:33 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE &PHONES no 3484 03/23/20 18:56:28 4:32 6670 5920 imo 3587080982063726 310410214827503 APPLE &PHONES 3485 03/23/20 19:01:00 22:42 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE &PHONES no 3486 03/23/20 19:01:23 1:26 6646 5904 ins 3587080982063726 310410214827503 APPLE &PHONES 3487 03/23/20 19:02:49 11:48 3532 1432 ins 3587080982063726 310410214827503 APPLE &PHONES 3488 03/23/20 19:14:37 9:05 9586 6195 imp 3587080982063726 310410214827503 APPLE &PHONES 3489 03/23/20 19:23:42 2:51 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 3490 03/23/20 19:23:43 2:51 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 3491 03/23/20 19:26:34 6:22 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 3492 03/23/20 19:32:55 2:23 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 3493 03/23/20 19:32:56 2:23 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 3494 03/23/20 19:35:19 3:26 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 3495 03/23/20 19:38:44 1:10 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE &PHONES no 3496 03/23/20 19:38:45 1:10 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 3497 03/23/20 19:39:55 10:36 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 145 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002789 The information contained heraleeNe not for general distribution. NsFYNE EF-EA_00116865 EFTA01251389 MOBILITY 411M, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ......„0 AT&T ••-sà. arc. Run Date: 06/17/2020 Run Time: Data Osage for: Item Conn. Conn. originating ET Bytes Byte. Apn INC' INSI NUT MODEL Date Time Number op Dn /OTC) 3498 03/23/20 19:50:30 0:23 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3499 03/23/20 19:50:32 0:22 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3500 03/23/20 19:50:54 0:58 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3501 03/23/20 19:51:51 8:53 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3502 03/23/20 19:51:52 8:54 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3503 03/23/20 20:00:45 0:06 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3504 03/23/20 20:01:02 5:27 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3505 03/23/20 20:04:58 12:20 9917 6442 ins -1 310410214827503 3506 03/23/20 20:06:28 2:04 192 Onatgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3507 03/23/20 20:06:29 2:04 0 Onatgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3508 03/23/20 20:08:33 9:55 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3509 03/23/20 20:15:42 2:46 6690 5980 ins 3587080982063726 310410214827503 APPLE 'PHONES 3510 03/23/20 20:18:27 2:04 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3511 03/23/20 20:18:29 2:03 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3512 03/23/20 20:20:05 0:26 6246 6666 ins 3587080982063726 310410214827503 APPLE 'PHONES 3513 03/23/20 20:20:06 0:26 6666 5982 ins 3587080982063726 310410214827503 APPLE 'PHONES 3514 03/23/20 20:20:32 2:58 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3515 03/23/20 20:20:38 60:00 18680 11564 ins -1 310410214827503 3516 03/23/20 20:23:30 21:03 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3517 03/23/20 20:23:31 21:04 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3518 03/23/20 20:44:34 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3519 03/23/20 21:18:04 27:23 6648 5998 ins 3587080982063726 310410214827503 APPLE 'PHONES 3520 03/23/20 21:20:38 2:51 0 0 ins -1 310410214827503 3521 03/23/20 21:44:34 0:53 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 146 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002790 The information contained hereCtoNe PsisTIAL not for general distribution. EFTAJVII6866 EFTA01251390 MOBILITY ap. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in .....„ `•-•° `"s0/ AT&T OTC. Run Data: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn INLI DUI MARL MOLL Data Time Number Up Dn (OTC) 3522 03/23/20 21:45:26 2:04 192 0 natgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3523 03/23/20 21:45:27 2:04 0 0 natgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3524 03/23/20 21:47:31 1:36 0 0 natgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3525 03/23/20 21:48:32 0:35 7332 6052 imo 3587080982063726 310410214827503 APPLE !PHONES 3526 03/23/20 21:49:06 2:17 192 0 natgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3527 03/23/20 21:49:08 2:16 0 0 nmtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3528 03/23/20 21:51:24 6:04 192 0 nmtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3529 03/23/20 21:51:25 6:04 0 0 natgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3530 03/23/20 21:53:02 22:28 11369 6710 imo -1 310410214827503 3531 03/23/20 21:57:29 3:45 0 0 natgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3532 03/23/20 22:01:13 12:50 192 0 natgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3533 03/23/20 22:01:14 12:51 0 0 natgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3534 03/23/20 22:10:08 3:55 7160 6848 imo 3587080982063726 310410214827503 APPLE IPHONEB 3535 03/23/20 22:10:10 3:55 6740 6896 imo 3587080982063726 310410214827503 APPLE IPMONE8 3536 03/23/20 22:14:05 1:26 0 0 natgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3537 03/23/20 22:15:30 8:28 192 0 natgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3538 03/23/20 22:15:31 8:28 0 0 natgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3539 03/23/20 22:16:08 7:50 8234 6882 imo 3587080982063726 310410214827503 APPLE !PHONES 3540 03/23/20 22:16:09 7:50 6882 7970 imo 3587080982063726 310410214827503 APPLE !PROMS 3541 03/23/20 22:21:24 8:15 13552 7570 I. -1 310410214827503 3542 03/23/20 22:23:59 13:41 0 0 nmtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3543 03/23/20 22:36:39 1:01 7982 6106 imo 3587080982063726 310410214827503 APPLE IPMONE8 3544 03/23/20 22:37:39 4:14 192 0 nmtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3545 03/23/20 22:37:41 4:13 0 0 nmtgenpho 3587080982063726 310410214827503 APPLE !PROMS no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 147 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002791 The information contained her is not for general distribution. NaTtAti EF-EAJVII6867 EFTA01251391 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn INEI IMEI MAKE MODEL Data Time Number Up Dn (UTC) 3546 03/23/20 22:40:10 1:43 7136 6758 ims 3587080982063726 310410214827503 APPLE IPHONZ8 3547 03/23/20 22:40:11 1:43 6758 6872 ims 3587080982063726 310410214827503 APPLE IPHONZ8 3548 03/23/20 22:41:54 1:34 0 Opatgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3549 03/23/20 22:43:27 2:27 192 Onatgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3550 03/23/20 22:43:28 2:27 0 Oruagenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3551 03/23/20 22:45:00 0:54 8221 6934 ims 3587080982063726 310410214827503 APPLE !PHONES 3552 03/23/20 22:45:01 0:54 6934 7957 ims 3587080982063726 310410214827503 APPLE !PHONES 3553 03/23/20 22:45:55 1:30 0 Oruagenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3554 03/23/20 22:46:06 1:19 6346 5812 ims 3587080982063726 310410214827503 APPLE !PHONES 3555 03/23/20 22:47:24 0:37 192 Oruagenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3556 03/23/20 22:47:25 0:37 0 Onatgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3557 03/23/20 22:48:02 41:42 0 Oruagenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3558 03/23/20 22:48:21 18:31 7402 6103 ims 3587080982063726 310410214827503 APPLE !PHONES 3559 03/23/20 23:06:52 60:00 18688 5212 ims 3587080982063726 310410214827503 APPLE !PHONES 3560 03/23/20 23:29:43 2:04 192 Oruagenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3561 03/23/20 23:29:44 2:04 0 Oruagenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3562 03/23/20 23:31:48 6:59 0 Onatgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3563 03/23/20 23:38:46 2:03 192 Onatgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3564 03/23/20 23:38:47 2:03 0 Onatgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3565 03/23/20 23:40:50 4:36 0 Onatgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3566 03/23/20 23:45:25 2:04 192 Onatgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3567 03/23/20 23:45:27 2:03 0 Onatgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3568 03/23/20 23:47:30 5:32 0 Onatgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3569 03/23/20 23:53:01 8:37 192 Oruagenpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 148 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002792 The information contained her is NeTifikE not for general distribution. EFTA_00I 16868 EFTA01251392 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. Run Date: 06/17/2020 Run Time: 1S:55:47 Data Usage Tor: ONSNINIME Item Conn. Conn. Originating ET Bytes Bytes Apn IMEI IMSI MARE MODEL Date Time Number UM Dn (UTC) 3570 03/23/20 23:53:02 8:37 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3571 03/24/20 00:01:39 60:00 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3572 03/24/20 00:06:52 60:00 30384 14136 ins 3587080982063726 310410214827503 APPLE !PHONES 3573 03/24/20 00:20:08 0:35 5279 27348 ins 3587080982063726 310410214827503 APPLE !PHONES 3574 03/24/20 01:01:39 53:19 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3575 03/24/20 01:06:52 49:46 10128 3252 ins 3587080982063726 310410214827503 APPLE !PHONES 3576 03/24/20 01:46:13 0:00 0 0 ins 3587080982063726 310410214827503 APPLE !PHONES 3577 03/24/20 01:46:21 8:37 6674 5904 ins 3587080982063726 310410214827503 APPLE !PHONES 3578 03/24/20 01:54:57 2:03 192 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3579 03/24/20 01:54:58 2:03 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3580 03/24/20 01:57:01 1:24 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 3581 03/24/20 01:57:20 1:05 8148 6948 ins 3587080982063726 310410214827503 APPLE !PHONES 3582 03/24/20 01:58:24 2:10 192 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3583 03/24/20 01:58:25 2:10 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3584 03/24/20 01:58:36 1:58 6244 6690 ins 3587080982063726 310410214827503 APPLE !PHONES 3585 03/24/20 01:58:37 1:58 6690 5980 ins 3587080982063726 310410214827503 APPLE DRONES 3586 03/24/20 02:00:35 18:49 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 3587 03/24/20 02:01:26 12:34 13808 7971 ins -1 310410214827503 3588 03/24/20 02:05:28 1:09 6674 5980 ins 3587080982063726 310410214827503 APPLE !PHONES 3589 03/24/20 02:06:37 7:23 5056 1572 ins 3587080982063726 310410214827503 APPLE !PHONES 3590 03/24/20 02:14:00 0:57 6672 5997 ins 3587080982063726 310410214827503 APPLE !PHONES 3591 03/24/20 02:14:57 44:43 10484 3408 ins 3587080982063726 310410214827503 APPLE !PHONES 3592 03/24/20 02:19:23 2:03 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3593 03/24/20 02:19:24 2:03 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3594 03/24/20 02:21:27 47:19 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3595 03/24/20 02:54:19 13:51 6676 5998 ins 3587080982063726 310410214827503 APPLE !PHONES 3596 03/24/20 03:08:10 60:00 15232 5748 ins 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 149 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002793 The information contained hereCtoNelt NeTniliAL not for general distribution. EF-EA_00116869 EFTA01251393 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in ....., ••—ss` a.0• AT&T UTC. Run Date: 06/17/2020 Run Tina: 10:44:47 Data Usage Tor: 'tom Conn. Conn. Originating ET Bytes Bytom Apn INC' IM31 MARL MODEL Data Time Number Up Dn (UTC) 3597 03/24/20 03:08:45 2:10 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3598 03/24/20 03:08:46 2:10 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3599 03/24/20 03:10:56 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3600 03/24/20 04:01:33 37:51 9266 7304 ims 3587080982063726 310410214827503 APPLE !PHONES 3601 03/24/20 04:08:10 3:35 0 0 ims 3587080982063726 310410214827503 APPLE 'PHONES 3602 03/24/20 04:10:56 28:28 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3603 03/24/20 04:39:23 130:17 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3604 03/24/20 04:39:24 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3605 03/24/20 05:39:24 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3606 03/24/20 05:50:02 40:18 12957 7433 ims -1 310410214827503 3607 03/24/20 06:39:24 10:17 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3608 03/24/20 06:54:54 60:00 18413 10174 ipso -1 310410214827503 3609 03/24/20 07:54:54 60:00 8960 3160 ipso -1 310410214827503 3610 03/24/20 08:54:54 60:00 11532 4316 ipso -1 310410214827503 3611 03/24/20 09:54:54 60:00 8388 2928 ipso -1 310410214827503 3612 03/24/20 10:02:03 127:28 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3613 03/24/20 10:02:04 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3614 03/24/20 10:54:54 60:00 15188 5060 ipso -1 310410214827503 3615 03/24/20 11:02:04 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3616 03/24/20 11:54:54 60:00 16512 4844 ipso -1 310410214827503 3617 03/24/20 12:02:04 7:28 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3618 03/24/20 12:09:32 17:15 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3619 03/24/20 12:26:46 2:16 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3620 03/24/20 12:26:48 2:15 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 150 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002794 The information contained heraCtoNelt not for general distribution. EFTA_00I 16870 EFTA01251394 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in sc,s ""s ad AT&T arc. Run Date: 06/17/2020 Run Time: 1S:53:47 Data Usage For: Item Conn. Conn. Originating LT Bytes Bytoa Apn INZI INSI MARL NICOLL Date Time Number Op Dn (UTC) 3621 03/24/20 12:29:03 8:08 0 0 mmtgonpho 3587080982063726 310410214827503 APPLE IPH0NZ8 no 3622 03/24/20 12:37:11 2:05 192 0ruftgonpho 3587080982063726 310410214827503 APPLE IPH0NE8 no 3623 03/24/20 12:37:12 2:05 0 0ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3624 03/24/20 12:39:17 4:35 0 0ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3625 03/24/20 12:43:51 8:56 192 0ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3626 03/24/20 12:43:52 8:56 0 0ruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 3627 03/24/20 12:52:48 1:51 0 0ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3628 03/24/20 12:54:38 17:44 192 0ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3629 03/24/20 12:54:39 17:44 0 0ruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 3630 03/24/20 12:54:54 60:00 7388 2928 ims -1 310410214827503 3631 03/24/20 13:12:23 0:39 0 0ruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 3632 03/24/20 13:13:01 2:04 192 0ruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 3633 03/24/20 13:13:02 2:04 0 0ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3634 03/24/20 13:15:06 1:20 0 0ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3635 03/24/20 13:16:25 4:53 192 0ruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 3636 03/24/20 13:16:27 4:52 0 0ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3637 03/24/20 13:21:19 24:18 0 0ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3638 03/24/20 13:45:36 2:05 192 0ruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 3639 03/24/20 13:45:38 2:04 0 0ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3640 03/24/20 13:47:42 14:39 0 0ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3641 03/24/20 13:54:54 11:31 3516 1340 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 151 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002795 The information contained heraleoNyFti PsiTnilikk not for general distribution. EF-EA_O0116871 EFTA01251395 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in t7ass gli° AT&T OTC. Run Date: 06/17/2020 Run Time: 1S:53:47 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn INEZ IMISI MARL MOLL Date Time Number Op Dn (UTC) 3642 03/24/20 14:02:20 2:42 192 0 ructgonpho 3587080982063726 310410214827503 APPLE ITHONZ8 no 3643 03/24/20 14:02:21 2:42 0 Oructgonpho 3587080982063726 310410214827503 APPLE ITHONZ8 no 3644 03/24/20 14:05:03 68:36 192 Oructgonpho 3587080982063726 310410214827503 APPLE DRONES no 3645 03/24/20 14:05:04 60:00 0 Oructgonpho 3587080982063726 310410214827503 APPLE DRONES no 3646 03/24/20 14:06:04 8:43 7264 6720 in 3587080982063726 310410214827503 APPLE ITRONZ8 3647 03/24/20 14:06:05 8:43 6720 7000 in 3587080982063726 310410214827503 APPLE ITRONZ8 3648 03/24/20 14:06:25 11:13 12288 7988 in -1 310410214827503 3649 03/24/20 14:14:47 35:50 7264 6748 ins 3587080982063726 310410214827503 APPLE ITRONZ8 3650 03/24/20 14:14:48 35:50 6748 7000 imp 3587080982063726 310410214827503 APPLE ITRONZ8 3651 03/24/20 14:17:38 33:40 21172 10440 imp -1 310410214827503 3652 03/24/20 14:50:37 23:02 7248 6746 imp 3587080982063726 310410214827503 APPLE ITRONZ8 3653 03/24/20 14:50:38 23:02 6746 6984 imp 3587080982063726 310410214827503 APPLE DRONES 3654 03/24/20 14:51:18 60:00 17051 9621 imp -1 310410214827503 3655 03/24/20 15:05:04 8:36 0 Onmtgonpho 3587080982063726 310410214827503 APPLE DRONES no 3656 03/24/20 15:13:40 3:00 0 Onmtgonpho 3587080982063726 310410214827503 APPLE DRONES no 3657 03/24/20 15:16:39 2:21 192 Onmtgonpho 3587080982063726 310410214827503 APPLE DRONES no 3658 03/24/20 15:16:41 2:20 0 Onatgonpho 3587080982063726 310410214827503 APPLE DRONES no 3659 03/24/20 15:19:01 22:37 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 3660 03/24/20 15:41:37 2:09 192 Onatgonpho 3587080982063726 310410214827503 APPLE DRONES no 3661 03/24/20 15:41:38 2:09 0 Onatgonpho 3587080982063726 310410214827503 APPLE DRONES no 3662 03/24/20 15:43:48 11:43 0 Onatgonpho 3587080982063726 310410214827503 APPLE DRONES no 3663 03/24/20 15:51:18 29:34 4856 2572 imp -1 310410214827503 3664 03/24/20 15:55:29 2:04 192 Onatgonpho 3587080982063726 310410214827503 APPLE DRONES no 3665 03/24/20 15:55:31 2:03 0 Onatgonpho 3587080982063726 310410214827503 APPLE DRONES no 3666 03/24/20 15:57:34 23:48 0 0 natgonpho 3587080982063726 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 152 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002796 The information contained hereetop+Ftli PsisTiliAL not for general distribution. EF-EA_00ll6872 EFTA01251396 MOBILITY 41111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in •.,rna /14 eals# 4"1° AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage Tor: Items Conn. Conn. Originating ET Bytes Bytoa Apn INLI INSI MAKE NICOLL Date Time Number Up Dn (OTC) 3667 03/24/20 16:13:25 0:07 0 0 imo 3587080982063726 310410214827503 APPLE IPHOME8 3668 03/24/20 16:14:29 6:53 7398 6106 imo 3587080982063726 310410214827503 APPLE IPHOME8 3669 03/24/20 16:21:21 8:54 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3670 03/24/20 16:21:23 8:53 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3671 03/24/20 16:23:53 6:22 6244 6674 imo 3587080982063726 310410214827503 APPLE IPHOME8 3672 03/24/20 16:23:54 6:22 6674 5980 imo 3587080982063726 310410214827503 APPLE IPHOME8 3673 03/24/20 16:30:16 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3674 03/24/20 16:30:26 0:59 8150 6962 imo 3587080982063726 310410214827503 APPLE IPHOME8 3675 03/24/20 16:31:25 6:14 3748 1464 imo 3587080982063726 310410214827503 APPLE IPHOME8 3676 03/24/20 16:37:39 15:42 7408 6122 imo 3587080982063726 310410214827503 APPLE IPHOME8 3677 03/24/20 16:53:21 60:00 12244 5252 imo 3587080982063726 310410214827503 APPLE IPHOME8 3678 03/24/20 17:30:16 41:13 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3679 03/24/20 17:53:21 60:00 8620 3192 imo 3587080982063726 310410214827503 APPLE IPHOME8 3680 03/24/20 18:11:28 1:48 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3681 03/24/20 18:11:29 1:48 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3682 03/24/20 18:13:17 14:27 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3683 03/24/20 18:13:18 14:27 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3684 03/24/20 18:27:45 1:04 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3685 03/24/20 18:28:48 15:14 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3686 03/24/20 18:28:49 15:14 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3687 03/24/20 18:44:03 0:41 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3688 03/24/20 18:44:43 8:25 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3689 03/24/20 18:44:45 8:24 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3690 03/24/20 18:53:09 13:16 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3691 03/24/20 18:53:21 21:37 5104 2068 imo 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 153 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002797 The information contained hereelaNyFti not for general distribution. EF-EA_O0116873 EFTA01251397 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in .....,,,• ••-s`" 1° AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn IRE' IASI MA= MODEL Date Time Number Up Dn (OTC) 3692 03/24/20 19:06:24 14:58 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3693 03/24/20 19:06:25 14:58 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3694 03/24/20 19:10:03 11:19 6228 6732 ins 3587080982063726 310410214827503 APPLE !PHONES 3695 03/24/20 19:10:04 11:19 6664 5964 ins 3587080982063726 310410214827503 APPLE !PHONES 3696 03/24/20 19:21:23 6:31 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3697 03/24/20 19:27:53 2:03 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3698 03/24/20 19:27:54 2:03 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 3699 03/24/20 19:29:57 19:58 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3700 03/24/20 19:40:37 9:18 9188 8084 ims 3587080982063726 310410214827503 APPLE !PHONES 3701 03/24/20 19:49:54 8:17 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3702 03/24/20 19:49:55 8:17 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3703 03/24/20 19:53:52 4:19 6244 6670 ins 3587080982063726 310410214827503 APPLE 1PROME8 3704 03/24/20 19:53:53 4:19 6670 5980 ins 3587080982063726 310410214827503 APPLE !PHONES 3705 03/24/20 19:57:07 60:00 20581 10944 ins -1 310410214827503 3706 03/24/20 19:58:12 2:08 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3707 03/24/20 20:00:20 0:59 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 3708 03/24/20 20:01:19 20:59 192 Onxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 3709 03/24/20 20:01:20 20:59 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 3710 03/24/20 20:22:19 9:12 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 2PROME8 no 3711 03/24/20 20:31:30 2:57 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3712 03/24/20 20:31:31 2:57 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3713 03/24/20 20:34:28 0:05 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3714 03/24/20 20:36:13 35:36 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 154 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002798 The information contained heraCtoNyF NTifikE not for general distribution. EF-EA_00ll6874 EFTA01251398 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in te `- t'sti AT&T OTC. Run Date: 06/17/2020 Run Time: 10:53:47 Data Usage For: Item Conn. Conn. originating ET Bytes Bytes Ann INLI INSI MAfl NICOLL Date Time Number op Dn (U2C) 3715 03/24/20 20:36:14 35:36 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3716 03/24/20 20:57:07 50:26 0 0 ims -1 310410214827503 3717 03/24/20 21:03:22 60:00 14972 9410 imp -1 310410214827503 3718 03/24/20 21:11:50 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3719 03/24/20 21:47:33 1:31 6674 5979 imp 3587080982063726 310410214827503 APPLE !PHONES 3720 03/24/20 21:49:04 16:16 3640 1432 imp 3587080982063726 310410214827503 APPLE !PHONES 3721 03/24/20 22:03:22 1:58 0 0 imp -1 310410214827503 3722 03/24/20 22:05:20 18:30 6672 5998 imp 3587080982063726 310410214827503 APPLE !PHONES 3723 03/24/20 22:11:50 33:01 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3724 03/24/20 22:23:50 60:00 15968 4888 imp 3587080982063726 310410214827503 APPLE !PHONES 3725 03/24/20 22:44:50 2:16 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3726 03/24/20 22:44:51 2:16 0 0 nxtganpho 3587080982063726 310410214827503 APPLE !PHONES no 3727 03/24/20 22:47:07 19:34 0 0 nxtganpho 3587080982063726 310410214827503 APPLE !PHONES no 3728 03/24/20 23:06:40 24:26 192 0 nxtganpho 3587080982063726 310410214827503 APPLE !PHONES no 3729 03/24/20 23:06:41 24:26 0 0 nxtganpho 3587080982063726 310410214827503 APPLE !PHONES no 3730 03/24/20 23:23:50 60:00 31544 23152 imp 3587080982063726 310410214827503 APPLE !PHONES 3731 03/24/20 23:31:07 14:04 0 0 nxtganistls 3587080982063726 310410214827503 APPLE !PHONES no 3732 03/24/20 23:44:21 0:12 15211 33872 as 3587080982063726 310410214827503 APPLE !PHONES 3733 03/24/20 23:44:43 0:34 14704 31615 as 3587080982063726 310410214827503 APPLE !PHONES 3734 03/24/20 23:45:10 2:17 192 0 nxtganpho 3587080982063726 310410214827503 APPLE !PHONES no 3735 03/24/20 23:45:12 2:16 0 0 nxtganpho 3587080982063726 310410214827503 APPLE !PHONES no 3736 03/24/20 23:47:28 35:37 0 0 nxtganpho 3587080982063726 310410214827503 APPLE !PHONES no 3737 03/25/20 00:23:04 2:10 192 0 nxtganpho 3587080982063726 310410214827503 APPLE !PHONES no 3738 03/25/20 00:23:06 2:09 0 0 nxtganpho 3587080982063726 310410214827503 APPLE !PHONES no 3739 03/25/20 00:23:50 60:00 8496 3036 as 3587080982063726 310410214827503 APPLE 1PHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 155 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_000027G9 The information contained her is N:FroliAL not for general distribution. EF-EA_00116875 EFTA01251399 MOBILITY 411.1 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Bytea Apn IMEI 'BSI 14871 MODEL Date Time Number Op Dn (OTC) 3740 03/25/20 00:25:15 50:25 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3741 03/25/20 01:15:40 14:26 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3742 03/25/20 01:15:41 14:26 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3743 03/25/20 01:23:50 41:29 12904 3780 ins 3587080982063726 310410214827503 APPLE !PHONES 3744 03/25/20 01:30:07 25:21 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3745 03/25/20 01:55:27 2:04 192 Onxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3746 03/25/20 01:55:28 2:04 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3747 03/25/20 01:57:32 1:59 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3748 03/25/20 01:59:30 8:33 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3749 03/25/20 01:59:32 8:32 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3750 03/25/20 02:00:26 7:37 6243 6742 ins 3587080982063726 310410214827503 APPLE 'PHONES 3751 03/25/20 02:00:28 7:36 6674 5979 ins 3587080982063726 310410214827503 APPLE 'PHONES 3752 03/25/20 02:08:04 55:21 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3753 03/25/20 02:09:11 5:58 8830 7985 ins 3587080982063726 310410214827503 APPLE 'PHONES 3754 03/25/20 02:15:09 6:05 3640 1464 ins 3587080982063726 310410214827503 APPLE 'PHONES 3755 03/25/20 02:21:15 42:10 12156 9242 ins 3587080982063726 310410214827503 APPLE 'PHONES 3756 03/25/20 03:03:24 40:00 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3757 03/25/20 03:03:25 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3758 03/25/20 03:04:07 16:25 9741 6354 ins -1 310410214827503 3759 03/25/20 03:17:41 20:00 7337 8822 ins 3587080982063726 310410214827503 APPLE 'PHONES 3760 03/25/20 03:17:42 31:54 11418 8397 ins 3587080982063726 310410214827503 APPLE 'PHONES 3761 03/25/20 03:37:41 11:54 1324 2596 ins 3587080982063726 310410214827503 APPLE 'PHONES 3762 03/25/20 03:48:27 5:50 8437 6426 ins -1 310410214827503 3763 03/25/20 03:49:35 12:57 7374 6800 ins 3587080982063726 310410214827503 APPLE !PHONES 3764 03/25/20 03:49:36 12:57 6800 7110 ins 3587080982063726 310410214827503 APPLE !PHONES 3765 03/25/20 03:54:17 10:12 9261 6696 ins -1 310410214827503 3766 03/25/20 04:02:32 14:03 6370 6676 in 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 156 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002800 The information contained hereCtoNyFti NTniliAL not for general distribution. EF-EA_00ll6876 EFTA01251400 MOBILITY ap. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T (ITC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating IT Bytes Bytes Apn IMMI IMBI tan MODEL Date Time Number Up Dn (UTC) 3767 03/25/20 04:02:33 14:03 6676 6106 imo 3587080982063726 310410214827503 APPLE IPHOME8 3768 03/25/20 04:03:25 60:00 0 0 natgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3769 03/25/20 04:07:15 14:19 8261 6177 imo -1 310410214827503 3770 03/25/20 04:16:34 75:27 9874 12042 imo 3587080982063726 310410214827503 APPLE IPHOME8 3771 03/25/20 04:16:35 60:00 11934 9610 imo 3587080982063726 310410214827503 APPLE IPHOME8 3772 03/25/20 05:03:25 28:37 0 0 natgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3773 03/25/20 05:16:35 15:27 0 0 imo 3587080982063726 310410214827503 APPLE !PROMS 3774 03/25/20 05:32:01 0:23 192 0 natgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3775 03/25/20 05:32:03 0:22 0 0 natgonpho 3587080982063726 310410214827503 APPLE !PROMS no 3776 03/25/20 05:32:25 19:15 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 3777 03/25/20 05:32:29 17:46 6780 5938 moo 3587080982063726 310410214827503 APPLE IPROME8 3778 03/25/20 05:50:15 60:00 11920 4500 Sins 3587080982063726 310410214827503 APPLE IPROME8 3779 03/25/20 05:51:39 2:42 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 3780 03/25/20 05:51:40 2:42 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 3781 03/25/20 05:54:22 0:34 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 3782 03/25/20 05:54:56 2:04 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 3783 03/25/20 05:54:57 2:04 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 3784 03/25/20 05:57:00 4:19 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 3785 03/25/20 06:01:18 35:56 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 3786 03/25/20 06:01:19 35:56 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 3787 03/25/20 06:37:15 29:02 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 3788 03/25/20 06:50:15 60:00 6956 2912 ims 3587080982063726 310410214827503 APPLE IPROME8 3789 03/25/20 07:06:16 2:03 192 Oruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 3790 03/25/20 07:06:17 2:03 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 157 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002801 The information contained here(341)(N ff::ti i NeTiliAL not for general distribution. EF-EA_00116877 EFTA01251401 MOBILITY dal 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T arc. Run pato: 06/17/2020 Run Time: 10:55:48 Data Usage For: Item Conn. Conn. Originating ET Byte. Bytoa Apn INEI INSI MARE MODEL Date Time Number Up Dn (OTC) 3791 03/25/20 07:08:20 24:31 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3792 03/25/20 07:32:50 7:25 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3793 03/25/20 07:32:51 7:25 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3794 03/25/20 07:40:16 3:48 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3795 03/25/20 07:44:03 14:49 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3796 03/25/20 07:44:04 14:49 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3797 03/25/20 07:50:15 60:00 8372 2928 ims 3587080982063726 310410214827503 APPLE 'PHONES 3798 03/25/20 07:58:53 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3799 03/25/20 08:50:15 60:00 8388 3036 ims 3587080982063726 310410214827503 APPLE 'PHONES 3800 03/25/20 08:58:53 42:29 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3801 03/25/20 09:41:21 180:48 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3802 03/25/20 09:41:22 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3803 03/25/20 09:50:15 60:00 13804 6060 vas 3587080982063726 310410214827503 APPLE 'PHONES 3804 03/25/20 10:41:22 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3805 03/25/20 10:50:15 60:00 7064 3036 vas 3587080982063726 310410214827503 APPLE 'PHONES 3806 03/25/20 11:41:22 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3807 03/25/20 11:50:15 60:00 8712 3160 vas 3587080982063726 310410214827503 APPLE !PHONES 3808 03/25/20 12:41:22 0:48 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3809 03/25/20 12:42:10 3:38 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3810 03/25/20 12:45:48 135:22 192 Onxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3811 03/25/20 12:45:49 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3812 03/25/20 12:50:15 60:00 11920 4268 vas 3587080982063726 310410214827503 APPLE 'PHONES 3813 03/25/20 13:45:49 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 3814 03/25/20 13:50:15 37:01 6148 1480 vas 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 158 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002802 The information contained her is not for general distribution. EF-EA_00ll6878 EFTA01251402 NOBILITY 4am. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: 18:55:48 Data Osage Tor: Item Conn. Conn. Originating ET Syto• Bytes Apn IICI INBI MAfl NICOLL Date Time Number UP Dn (OTC) 3815 03/25/20 14:25:56 35:14 6334 6648 ins 3587080982063726 310410214827503 APPLE MIMES 3816 03/25/20 14:25:57 35:14 6648 6070 ins 3587080982063726 310410214827503 APPLE MIMES 3817 03/25/20 14:27:16 60:00 23909 10568 Lno -1 310410214827503 3818 03/25/20 14:45:49 15:22 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE MIMES no 3819 03/25/20 15:01:11 40:00 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3820 03/25/20 15:01:12 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3821 03/25/20 15:22:06 20:00 7373 6800 Lno 3587080982063726 310410214827503 APPLE DRONES 3822 03/25/20 15:22:07 60:00 6800 7109 Lno 3587080982063726 310410214827503 APPLE MIMES 3823 03/25/20 15:27:16 2:33 0 0 Lno -1 310410214827503 3824 03/25/20 15:29:49 60:00 17160 9341 Lno -1 310410214827503 3825 03/25/20 16:01:12 46:50 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3826 03/25/20 16:22:07 25:55 0 0 Lois 3587080982063726 310410214827503 APPLE !PHONES 3827 03/25/20 16:29:49 60:00 9804 3160 Lois -1 310410214827503 3828 03/25/20 16:48:02 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3829 03/25/20 17:12:59 60:00 19697 10560 Lno -1 310410214827503 3830 03/25/20 17:29:49 60:00 0 0 Lno -1 310410214827503 3831 03/25/20 17:48:02 20:35 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 3832 03/25/20 18:08:36 3:40 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3833 03/25/20 18:08:37 3:40 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3834 03/25/20 18:12:17 9:16 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE MIMES no 3835 03/25/20 18:12:18 9:16 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE MIMES no 3836 03/25/20 18:12:59 60:00 13168 6992 Lno -1 310410214827503 3837 03/25/20 18:21:34 2:10 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 3838 03/25/20 18:23:43 9:06 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3839 03/25/20 18:23:44 9:06 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3840 03/25/20 18:29:49 60:00 0 0 Lno -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 159 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002803 The information contained hereCtoNyFti NTifikE not for general distribution. EF-EA_O0116879 EFTA01251403 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tri `' sd AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Bytom Apn Der IMBI NICOLL Date Time Number Up Dn (OTC) 3841 03/25/20 18:32:50 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 3842 03/25/20 19:12:59 60:00 13368 4764 ims -1 310410214827503 3843 03/25/20 19:29:49 57:37 0 0 ims -1 310410214827503 3844 03/25/20 19:32:50 8:17 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 3845 03/25/20 19:41:06 2:06 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 3846 03/25/20 19:41:07 2:06 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 3847 03/25/20 19:43:13 1:41 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 3848 03/25/20 19:44:53 3:52 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 3849 03/25/20 19:44:54 3:52 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3850 03/25/20 19:48:46 0:06 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3851 03/25/20 19:49:14 0:06 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 3852 03/25/20 19:49:42 2:28 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3853 03/25/20 19:49:43 2:28 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 3854 03/25/20 19:52:10 7:46 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 3855 03/25/20 19:52:11 7:46 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 3856 03/25/20 19:59:57 9:08 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 3857 03/25/20 19:59:58 9:08 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 3858 03/25/20 20:09:06 3:38 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 3859 03/25/20 20:09:07 3:38 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3860 03/25/20 20:12:45 22:16 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3861 03/25/20 20:12:59 19:28 216 108 ims -1 310410214827503 3862 03/25/20 20:27:23 60:00 11861 7496 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 160 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002804 The information contained heraCtoNels NeTniliAL not for general distribution. EFTA_00I 16880 EFTA01251404 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: 10:55:46 Data Osage For: Item Conn. Conn. Originating ET Bytes Bytoa Apn IKE' IMS1 MARL MODEL Date Time Number Op Dn (OTC) 3863 03/25/20 20:35:00 15:10 192 Onxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3864 03/25/20 20:35:01 15:10 0 Onxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 3865 03/25/20 20:50:11 1:03 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3866 03/25/20 20:51:13 8:28 192 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3867 03/25/20 20:51:14 8:28 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3868 03/25/20 20:59:42 15:47 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3869 03/25/20 21:14:38 0:00 0 0 vas 3587080982063726 310410214827503 APPLE !PHONES 3870 03/25/20 21:15:28 8:31 192 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3871 03/25/20 21:15:29 8:31 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3872 03/25/20 21:15:37 21:10 9247 6126 vas -1 310410214827503 3873 03/25/20 21:24:00 60:00 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3874 03/25/20 21:27:23 58:11 0 0 vas -1 310410214827503 3875 03/25/20 21:40:16 60:00 15518 8368 vas -1 310410214827503 3876 03/25/20 22:24:00 51:30 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3877 03/25/20 22:25:34 1:12 6676 5998 ims 3587080982063726 310410214827503 APPLE 1PROME8 3878 03/25/20 22:26:46 60:00 11168 4236 ims 3587080982063726 310410214827503 APPLE 1PROME8 3879 03/25/20 22:40:16 60:00 0 0 ims -1 310410214827503 3880 03/25/20 23:15:29 2:03 192 Oruftgenpho 3587080982063726 310410214827503 APPLE IPROME8 no 3881 03/25/20 23:15:30 2:03 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3882 03/25/20 23:17:34 60:00 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 3883 03/25/20 23:26:46 60:00 7188 2896 ims 3587080982063726 310410214827503 APPLE !PHONES 3884 03/25/20 23:40:16 60:00 0 0 ims -1 310410214827503 3885 03/26/20 00:17:34 51:03 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 3886 03/26/20 00:26:46 60:00 8836 3052 vas 3587080982063726 310410214827503 APPLE !PRONGS 3887 03/26/20 00:40:16 60:00 0 0 vas -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 161 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002805 The information contained heraleeNeli not for general distribution. EF-EA_00116881 EFTA01251405 MOBILITY 'MIMI 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in tr `-a a i AT&T ‘•••• ••11 OTC. Run Data: 06/17/2020 Run Tina: Data Usage Tor: Ilea Conn. Conn. originating LT Bytes Byte. Apn IX= IMBI MUM MODEL Data Tina Number Up Dn (UTC) 3888 03/26/20 01:08:37 5:55 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3889 03/26/20 01:08:38 5:55 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3890 03/26/20 01:14:33 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 3891 03/26/20 01:26:46 60:00 15000 4656 ims 3587080982063726 310410214827503 APPLE !PHONES 3892 03/26/20 01:40:16 45:16 0 0 ims -1 310410214827503 3893 03/26/20 02:14:33 52:17 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 11060=8 no 3894 03/26/20 02:26:46 60:00 0 0 ims 3587080982063726 310410214827503 APPLE 11060=8 3895 03/26/20 02:29:23 60:00 15093 8712 ims -1 310410214827503 3896 03/26/20 03:26:46 60:00 0 0 ims 3587080982063726 310410214827503 APPLE 11060=8 3897 03/26/20 03:29:23 60:00 7048 2696 ims -1 310410214827503 3898 03/26/20 04:26:46 60:00 0 0 ims 3587080982063726 310410214827503 APPLE 11060=8 3899 03/26/20 04:29:23 60:00 6924 2556 ims -1 310410214827503 3900 03/26/20 05:26:46 58:57 0 0 ims 3587080982063726 310410214827503 APPLE 11060=8 3901 03/26/20 05:29:23 60:00 9960 3284 ims -1 310410214827503 3902 03/26/20 06:29:23 60:00 15636 6124 ims -1 310410214827503 3903 03/26/20 07:29:23 60:00 6924 2680 ims -1 310410214827503 3904 03/26/20 08:29:23 60:00 8620 3052 ims -1 310410214827503 3905 03/26/20 09:29:23 60:00 6924 2680 ims -1 310410214827503 3906 03/26/20 10:29:23 60:00 11904 4268 ims -1 310410214827503 3907 03/26/20 11:29:23 60:00 8496 3160 ims -1 310410214827503 3908 03/26/20 12:29:23 60:00 11796 4536 ims -1 310410214827503 3909 03/26/20 13:29:23 60:00 13476 4732 ims -1 310410214827503 3910 03/26/20 14:29:23 60:00 8496 3020 ims -1 310410214827503 3911 03/26/20 15:29:23 60:00 8172 3036 ims -1 310410214827503 3912 03/26/20 16:29:23 5:29 5088 2496 ims -1 310410214827503 3913 03/26/20 16:38:56 60:00 20749 9747 ims -1 310410214827503 3914 03/26/20 17:38:56 60:00 10068 3160 ims -1 310410214827503 3915 03/26/20 18:38:56 60:00 6924 2680 ims -1 310410214827503 3916 03/26/20 19:38:56 60:00 10240 4144 ims -1 310410214827503 3917 03/26/20 20:38:56 60:00 7032 2788 ims -1 310410214827503 3918 03/26/20 21:38:56 60:00 10548 4396 ims -1 310410214827503 3919 03/26/20 22:38:56 60:00 8636 3036 ims -1 310410214827503 3920 03/26/20 23:38:56 60:00 18284 9756 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 162 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002806 The information contained hereCtoNe NeTtAL not for general distribution. EFTA 00116882 EFTA01251406 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ••-rj`" .. 1" . AT&T OTC. Run pato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating LT Bytes Byte. Apn INLI INSI MAKE MODEL Date Time Number Up Dn (OTC) 3921 03/26/20 23:55:40 0:17 0 2381 imp -1 310410214827503 3922 03/27/20 00:38:56 60:00 13584 4840 imp -1 310410214827503 3923 03/27/20 01:38:56 60:00 20328 11224 imp -1 310410214827503 3924 03/27/20 02:21:27 0:06 0 2069 imp -1 310410214827503 3925 03/27/20 02:38:56 60:00 13476 5124 imp -1 310410214827503 3926 03/27/20 03:38:56 60:00 7248 2804 imp -1 310410214827503 3927 03/27/20 04:38:56 60:00 11796 5160 imp -1 310410214827503 3928 03/27/20 05:38:56 60:00 10176 4068 imp -1 310410214827503 3929 03/27/20 06:38:56 60:00 9960 3176 ims -1 310410214827503 3930 03/27/20 07:38:56 60:00 10440 4504 Lam -1 310410214827503 3931 03/27/20 08:38:56 60:00 10068 3392 ims -1 310410214827503 3932 03/27/20 09:38:56 60:00 12012 4500 imp -1 310410214827503 3933 03/27/20 10:38:56 60:00 8388 2928 imp -1 310410214827503 3934 03/27/20 11:38:56 60:00 8728 3052 imp -1 310410214827503 3935 03/27/20 12:38:56 26:35 15293 7737 ins -1 310410214827503 3936 03/27/20 13:10:29 60:00 33905 20494 imp -1 310410214827503 3937 03/27/20 14:05:29 0:13 2956 16052 imp -1 310410214827503 3938 03/27/20 14:10:29 60:00 6816 2772 imp -1 310410214827503 3939 03/27/20 15:10:29 60:00 8604 3176 imp -1 310410214827503 3940 03/27/20 16:10:29 60:00 10880 3316 imp -1 310410214827503 3941 03/27/20 17:08:19 23:27 8133 6105 imp -1 310410214827503 3942 03/27/20 17:10:29 0:15 0 0 imp -1 310410214827503 3943 03/27/20 17:27:52 47:51 14832 7978 imp -1 310410214827503 3944 03/27/20 18:11:52 9:52 8647 6516 imp -1 310410214827503 3945 03/27/20 18:17:27 60:00 15331 8752 imp -1 310410214827503 3946 03/27/20 19:17:27 13:38 0 0 imp -1 310410214827503 3947 03/27/20 19:27:33 24:13 8189 6016 imp -1 310410214827503 3948 03/27/20 19:49:11 60:00 10073 6602 imp -1 310410214827503 3949 03/27/20 20:02:53 60:00 62408 29060 imp -1 310410214827503 3950 03/27/20 20:17:34 0:04 0 7574 imp -1 310410214827503 3951 03/27/20 20:49:11 60:00 0 0 imp -1 310410214827503 3952 03/27/20 20:52:35 0:07 0 8835 imp -1 310410214827503 3953 03/27/20 21:02:53 60:00 8836 3252 imp -1 310410214827503 3954 03/27/20 21:49:11 60:00 0 0 imp -1 310410214827503 3955 03/27/20 22:02:53 60:00 6816 2788 imp -1 310410214827503 3956 03/27/20 22:49:11 60:00 0 0 isms -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 163 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002807 The information contained hereCtoNyFti not for general distribution. EF-EA_00116883 EFTA01251407 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in .....,./AT&T ••-s`' OTC. Run Date: 06/17/2020 Run Time: Data Osage For: Item corm. Conn. Originating ET Bytes Bytes Apn IMCI INSI MAKE MODEL Data Time Number Up On (OTC) 3957 03/27/20 23:02:53 60:00 10408 3376 ims -1 310410214827503 3958 03/27/20 23:49:11 16:25 0 0 ims -1 310410214827503 3959 03/28/20 00:02:53 60:00 21632 6868 ims -1 310410214827503 3960 03/28/20 01:02:53 60:00 10068 3176 ims -1 310410214827503 3961 03/28/20 02:02:53 60:00 6924 2804 ims -1 310410214827503 3962 03/28/20 03:02:53 60:00 6816 2680 ims -1 310410214827503 3963 03/28/20 04:02:53 60:00 11904 4160 ims -1 310410214827503 3964 03/28/20 05:02:53 60:00 10332 4288 ims -1 310410214827503 3965 03/28/20 06:02:53 60:00 9960 3176 ims -1 310410214827503 3966 03/28/20 07:02:53 60:00 6924 2804 ims -1 310410214827503 3967 03/28/20 08:02:53 60:00 10068 3176 ims -1 310410214827503 3968 03/28/20 09:02:53 60:00 6908 2680 ims -1 310410214827503 3969 03/28/20 10:02:53 60:00 13632 5844 ims -1 310410214827503 3970 03/28/20 11:02:53 60:00 8620 3052 ims -1 310410214827503 3971 03/28/20 12:02:53 60:00 8496 3036 ims -1 310410214827503 3972 03/28/20 13:02:53 60:00 8604 3144 ims -1 310410214827503 3973 03/28/20 14:02:53 60:00 13028 4408 ims -1 310410214827503 3974 03/28/20 15:02:53 60:00 10176 3392 ims -1 310410214827503 3975 03/28/20 16:02:53 60:00 13584 4924 ims -1 310410214827503 3976 03/28/20 17:02:53 60:00 9960 3284 ims -1 310410214827503 3977 03/28/20 18:02:53 60:00 14940 4872 ims -1 310410214827503 3978 03/28/20 19:02:53 60:00 6924 2680 ims -1 310410214827503 3979 03/28/20 20:02:53 60:00 8388 2928 ims -1 310410214827503 3980 03/28/20 21:02:53 60:00 10332 4412 ims -1 310410214827503 3981 03/28/20 22:02:53 60:00 13988 4872 ims -1 310410214827503 3982 03/28/20 23:02:53 60:00 10284 3532 ims -1 310410214827503 3983 03/29/20 00:02:53 60:00 6924 2572 ims -1 310410214827503 3984 03/29/20 01:02:53 60:00 13290 7713 ims -1 310410214827503 3985 03/29/20 02:02:53 60:00 11904 4592 ims -1 310410214827503 3986 03/29/20 03:02:53 60:00 8604 2928 ims -1 310410214827503 3987 03/29/20 04:02:53 60:00 6924 2680 ims -1 310410214827503 3988 03/29/20 05:02:53 60:00 8496 2928 ims -1 310410214827503 3989 03/29/20 06:02:53 60:00 6816 2680 ims -1 310410214827503 3990 03/29/20 07:02:53 60:00 19920 6620 ims -1 310410214827503 3991 03/29/20 08:02:53 60:00 8388 2820 ims -1 310410214827503 3992 03/29/20 09:02:53 60:00 6924 2896 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 164 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002808 The information contained hereleoNe NTatiklt not for general distribution. EFTA_00116884 EFTA01251408 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn IMCI INSI MAZE MODEL Date Tao Number Up Dn (OTC) 3993 03/29/20 10:02:53 60:00 8496 3144 ims -1 310410214827503 3994 03/29/20 11:02:53 60:00 16992 6356 ims -1 310410214827503 3995 03/29/20 12:02:53 60:00 6816 2680 ims -1 310410214827503 3996 03/29/20 13:02:53 60:00 8496 2928 ims -1 310410214827503 3997 03/29/20 14:02:53 60:00 6924 2788 ims -1 310410214827503 3998 03/29/20 15:02:53 60:00 11580 4268 ims -1 310410214827503 3999 03/29/20 16:02:53 60:00 13924 4892 ims -1 310410214827503 4000 03/29/20 17:02:53 60:00 6816 2788 ims -1 310410214827503 4001 03/29/20 18:02:53 60:00 8496 3036 ims -1 310410214827503 4002 03/29/20 19:02:53 51:30 13260 3672 ims -1 310410214827503 4003 03/29/20 19:49:05 60:00 21488 9904 ims -1 310410214827503 4004 03/29/20 20:49:05 60:00 10300 3176 ims -1 310410214827503 4005 03/29/20 21:49:05 60:00 10176 3376 ims -1 310410214827503 4006 03/29/20 22:49:05 60:00 0 0 ins -1 310410214827503 4007 03/29/20 22:51:54 60:00 25444 10932 ims -1 310410214827503 4008 03/29/20 23:49:05 60:00 0 0 ins -1 310410214827503 4009 03/29/20 23:51:54 60:00 8604 3036 ims -1 310410214827503 4010 03/30/20 00:49:05 60:00 0 0 ims -1 310410214827503 4011 03/30/20 00:51:54 60:00 8620 3788 ims -1 310410214827503 4012 03/30/20 01:49:05 44:23 0 0 ims -1 310410214827503 4013 03/30/20 01:51:54 60:00 9960 3376 ims -1 310410214827503 4014 03/30/20 02:51:54 60:00 13368 4532 ims -1 310410214827503 4015 03/30/20 03:51:54 60:00 12352 5772 ims -1 310410214827503 4016 03/30/20 04:51:54 60:00 8836 3160 ims -1 310410214827503 4017 03/30/20 05:51:54 60:00 10408 3316 ims -1 310410214827503 4018 03/30/20 06:51:54 60:00 7032 3144 ims -1 310410214827503 4019 03/30/20 07:51:54 60:00 13368 5284 in -1 310410214827503 4020 03/30/20 08:51:54 60:00 10332 4412 in -1 310410214827503 4021 03/30/20 09:51:54 60:00 10068 3176 in -1 310410214827503 4022 03/30/20 10:51:54 60:00 8388 2928 in -1 310410214827503 4023 03/30/20 11:51:54 60:00 8604 2928 ims -1 310410214827503 4024 03/30/20 12:51:54 60:00 10564 5020 in -1 310410214827503 4025 03/30/20 13:51:54 60:00 8388 2820 in -1 310410214827503 4026 03/30/20 14:51:54 60:00 11904 4428 in -1 310410214827503 4027 03/30/20 15:51:54 30:01 3408 1340 ims -1 310410214827503 4028 03/30/20 16:22:01 25:48 14212 7007 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 165 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002809 The information contained heraCtoNyFtli NsTntikE not for general distribution. EF-EAJVII6885 EFTA01251409 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn IMEI INSI MAKE MODEL Date Time Number Up Dn (OTC) 4029 03/30/20 16:46:13 34:04 16845 25082 ions -1 310410214827503 4030 03/30/20 17:12:33 12:33 12041 8604 ims -1 310410214827503 4031 03/30/20 17:20:17 21:57 12080 6640 ims -1 310410214827503 4032 03/30/20 17:25:06 33:45 12986 11660 ims -1 310410214827503 4033 03/30/20 17:42:14 35:24 8473 9288 ims -1 310410214827503 4034 03/30/20 17:58:51 19:50 29297 21296 ims -1 310410214827503 4035 03/30/20 18:17:38 60:00 21830 13216 ims -1 310410214827503 4036 03/30/20 19:17:38 60:00 8712 3896 ims -1 310410214827503 4037 03/30/20 20:17:38 60:00 8388 2896 ims -1 310410214827503 4038 03/30/20 21:17:38 60:00 10160 3252 ions -1 310410214827503 4039 03/30/20 22:17:38 60:00 15264 5056 ions -1 310410214827503 4040 03/30/20 23:17:38 60:00 26472 11676 imp -1 310410214827503 4041 03/30/20 23:55:25 0:19 0 2746 ions -1 310410214827503 4042 03/31/20 00:17:38 60:00 8728 3128 ions -1 310410214827503 4043 03/31/20 01:17:38 60:00 3408 1432 ions -1 310410214827503 4044 03/31/20 01:25:37 60:00 23874 10212 imp -1 310410214827503 4045 03/31/20 02:17:38 60:00 0 0 ions -1 310410214827503 4046 03/31/20 02:25:37 60:00 9944 3144 ions -1 310410214827503 4047 03/31/20 03:17:38 60:00 0 0 inn -1 310410214827503 4048 03/31/20 03:25:37 60:00 10176 3144 imp -1 310410214827503 4049 03/31/20 04:17:38 60:00 0 0 ions -1 310410214827503 4050 03/31/20 04:25:37 60:00 11580 4220 ions -1 310410214827503 4051 03/31/20 05:17:38 7:49 0 0 ions -1 310410214827503 4052 03/31/20 05:25:37 60:00 10548 4380 ions -1 310410214827503 4053 03/31/20 06:25:37 60:00 8496 3004 ions -1 310410214827503 4054 03/31/20 07:25:37 60:00 6816 2648 inn -1 310410214827503 4055 03/31/20 08:25:37 60:00 13476 4468 imp -1 310410214827503 4056 03/31/20 09:25:37 60:00 8604 3004 imp -1 310410214827503 4057 03/31/20 10:25:37 60:00 10408 3392 ions -1 310410214827503 4058 03/31/20 11:25:37 60:00 12028 5272 ins -1 310410214827503 4059 03/31/20 12:25:37 60:00 13476 4468 ims -1 310410214827503 4060 03/31/20 13:25:37 60:00 10068 3376 ins -1 310410214827503 4061 03/31/20 14:25:37 20:28 3764 1448 ions -1 310410214827503 4062 03/31/20 15:53:12 60:00 18557 9445 imp -1 310410214827503 4063 03/31/20 16:53:12 12:04 0 0 imp -1 310410214827503 4064 03/31/20 17:01:34 60:00 36523 22430 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 166 AT&T does not retain records that can definitively show whether a transaction was PsisTiliAL customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002810 The information contained her is not for general distribution. EFTAJVII6886 EFTA01251410 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in ....,./ `•-•°`-‘AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating TT Bytes Bytes Apn IMCI IMSI t4A2CE MODEL Data Time Number Up Dn (UTC) 4065 03/31/20 17:28:05 0:01 0 1163 imp -1 310410214827503 4066 03/31/20 17:28:11 4:47 516565 1094626 imp -1 310410214827503 4067 03/31/20 18:01:34 60:00 5088 1572 imp -1 310410214827503 4068 03/31/20 18:34:47 60:00 21708 10015 imp -1 310410214827503 4069 03/31/20 19:01:34 60:00 0 0 imp -1 310410214827503 4070 03/31/20 19:34:47 60:00 9944 3284 imp -1 310410214827503 4071 03/31/20 20:01:34 60:00 0 0 imp -1 310410214827503 4072 03/31/20 20:34:47 60:00 10176 3392 ims -1 310410214827503 4073 03/31/20 21:01:34 60:00 0 0 ims -1 310410214827503 4074 03/31/20 21:34:47 60:00 8620 3788 ims -1 310410214827503 4075 03/31/20 22:01:34 17:03 0 0 ims -1 310410214827503 4076 03/31/20 22:34:47 60:00 18580 6228 imp -1 310410214827503 4077 03/31/20 23:34:47 60:00 8496 3144 imp -1 310410214827503 4078 04/01/20 00:34:47 60:00 8604 3160 imp -1 310410214827503 4079 04/01/20 01:34:47 60:00 12012 4608 imp -1 310410214827503 4080 04/01/20 02:34:47 60:00 6924 2788 imp -1 310410214827503 4081 04/01/20 03:34:47 60:00 8712 3284 imp -1 310410214827503 4082 04/01/20 04:34:47 60:00 11904 4500 imp -1 310410214827503 4083 04/01/20 05:34:47 60:00 10116 4144 ims -1 310410214827503 4084 04/01/20 06:34:47 60:00 8820 3144 imp -1 310410214827503 4085 04/01/20 07:34:47 60:00 8388 3036 imp -1 310410214827503 4086 04/01/20 08:34:47 60:00 8388 2820 imp -1 310410214827503 4087 04/01/20 09:34:47 60:00 11904 4716 imp -1 310410214827503 4088 04/01/20 10:34:47 60:00 7048 3680 imp -1 310410214827503 4089 04/01/20 11:34:47 60:00 10332 4128 imp -1 310410214827503 4090 04/01/20 12:34:47 60:00 8728 3160 imp -1 310410214827503 4091 04/01/20 13:34:47 60:00 10564 4484 ims -1 310410214827503 4092 04/01/20 14:34:47 60:00 7156 2804 imp -1 310410214827503 4093 04/01/20 15:34:47 60:00 10084 4176 imp -1 310410214827503 4094 04/01/20 16:09:53 60:00 44265 25658 imp -1 310410214827503 4095 04/01/20 16:34:47 60:00 0 0 imp -1 310410214827503 4096 04/01/20 16:49:32 0:19 3439 14876 imp -1 310410214827503 4097 04/01/20 16:49:59 44:46 9122409 5951191 imp -1 310410214827503 4098 04/01/20 17:09:53 60:00 11148 4800 imp -1 310410214827503 4099 04/01/20 17:34:47 60:00 0 0 imp -1 310410214827503 4100 04/01/20 18:09:53 60:00 8728 3160 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 167 AT&T does not retain records that can definitively show whether a transaction was /// customer initiated or AT&T's network initiated the d►►►ata transaction. SDNY_GM_00002811 The information contained her is PsiTniliAL not for general distribution. EFTAJVII6887 EFTA01251411 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating LT Bytes Bytes Apn IMLI IMBI MAME MODEL Data Time Number Up Dn (OTC) 4101 04/01/20 18:34:47 60:00 0 0 ins -1 310410214827503 4102 04/01/20 19:09:53 60:00 8728 3160 ins -1 310410214827503 4103 04/01/20 19:34:47 34:13 0 0 ins -1 310410214827503 4104 04/01/20 20:09:53 60:00 10348 5020 in -1 310410214827503 4105 04/01/20 21:09:53 60:00 24612 13268 Lao -1 310410214827503 4106 04/01/20 21:53:57 0:28 2176 14903 Lao -1 310410214827503 4107 04/01/20 22:09:53 60:00 22420 10184 ins -1 310410214827503 4108 04/01/20 22:49:39 57:35 11972374 8027714 Lao -1 310410214827503 4109 04/01/20 23:09:53 60:00 16216 9776 Lao -1 310410214827503 4110 04/01/20 23:47:14 4:10 686613 925183 Lao -1 310410214827503 4111 04/02/20 00:09:53 60:00 6816 2788 Lao -1 310410214827503 4112 04/02/20 01:09:53 60:00 7156 2912 Lao -1 310410214827503 4113 04/02/20 02:09:53 60:00 13864 7304 ins -1 310410214827503 4114 04/02/20 03:09:53 60:00 8264 2804 ins -1 310410214827503 4115 04/02/20 04:09:53 60:00 7048 2804 ins -1 310410214827503 4116 04/02/20 05:09:53 60:00 13584 4640 ins -1 310410214827503 4117 04/02/20 06:09:53 60:00 6924 2680 ins -1 310410214827503 4118 04/02/20 07:09:53 60:00 10456 4304 ins -1 310410214827503 4119 04/02/20 08:09:53 60:00 10332 4020 ins -1 310410214827503 4120 04/02/20 09:09:53 60:00 6816 2680 as -1 310410214827503 4121 04/02/20 10:09:53 60:00 6816 2572 as -1 310410214827503 4122 04/02/20 11:09:53 60:00 7032 2804 as -1 310410214827503 4123 04/02/20 12:09:53 60:00 13848 5736 as -1 310410214827503 4124 04/02/20 13:09:53 60:00 7032 2928 as -1 310410214827503 4125 04/02/20 14:09:53 60:00 10300 3300 ins -1 310410214827503 4126 04/02/20 15:09:53 60:00 8496 3036 ins -1 310410214827503 4127 04/02/20 16:09:53 60:00 8480 2928 Lao -1 310410214827503 4128 04/02/20 17:09:53 14:58 4980 1588 Lao -1 310410214827503 4129 04/02/20 17:27:13 60:00 17057 9338 Lao -1 310410214827503 4130 04/02/20 18:27:13 60:00 8512 3712 ins -1 310410214827503 4131 04/02/20 19:27:13 60:00 8496 3160 ins -1 310410214827503 4132 04/02/20 20:27:13 60:00 8712 3144 ins -1 310410214827503 4133 04/02/20 21:27:13 60:00 8604 3176 ins -1 310410214827503 4134 04/02/20 22:27:13 54:40 12012 4536 ins -1 310410214827503 4135 04/02/20 23:22:57 60:00 18568 9660 ins -1 310410214827503 4136 04/03/20 00:22:57 60:00 8944 3176 ins -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 168 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002812 The information contained heraleeNyFti NeTniliAL not for general distribution. EF-EA_00116888 EFTA01251412 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in terms... "—s0 1 AT&T arc. Run Date: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating ET Bytes Byte. apn IMMI IMS I MUT MODEL Date Time Number up Dn (OTC) 4137 04/03/20 01:22:57 60:00 6924 2696 ims -1 310410214827503 4138 04/03/20 02:22:57 60:00 8388 2928 ims -1 310410214827503 4139 04/03/20 03:22:57 60:00 15760 5908 ims -1 310410214827503 4140 04/03/20 04:22:57 60:00 8836 3052 ims -1 310410214827503 4141 04/03/20 05:22:57 37:29 10392 6580 ims -1 310410214827503 4142 04/03/20 12:23:15 60:00 16857 9144 ims -1 310410214827503 4143 04/03/20 12:23:54 0:50 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IIMIONZ8 no 4144 04/03/20 12:23:55 0:50 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4145 04/03/20 12:24:36 0:10 1305 5631 nxtgonpho -1 310410214827503 no 4146 04/03/20 12:24:44 2:11 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4147 04/03/20 12:24:45 2:11 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4148 04/03/20 12:25:44 11:35 3225 5417 nxtgonpho -1 310410214827503 no 4149 04/03/20 12:26:56 17:20 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4150 04/03/20 12:44:15 2:00 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4151 04/03/20 12:44:16 2:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4152 04/03/20 12:46:15 2:26 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4153 04/03/20 12:46:16 2:26 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4154 04/03/20 12:48:42 5:46 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4155 04/03/20 12:48:43 5:46 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4156 04/03/20 12:54:29 14:38 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4157 04/03/20 12:54:29 14:39 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4158 04/03/20 13:09:08 27:17 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4159 04/03/20 13:09:09 27:17 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4160 04/03/20 13:23:15 60:00 10068 3268 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 169 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002813 The information contained her is NTntAlt not for general distribution. EFTA_00116889 EFTA01251413 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T arc. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes, Apn I CI MOLL Data Time Rumbas Up Dn (UTC) 4161 04/03/20 13:36:26 0:41 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4162 04/03/20 13:37:07 0:44 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4163 04/03/20 13:37:50 14:43 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4164 04/03/20 13:37:51 14:43 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4165 04/03/20 13:52:34 0:55 0 Onatgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 4166 04/03/20 13:53:28 2:10 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 4167 04/03/20 13:53:29 2:10 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 4168 04/03/20 13:55:39 30:41 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 4169 04/03/20 14:23:15 12:20 11140 6868 moo -1 310410214827503 4170 04/03/20 14:24:18 0:12 0 4598 moo -1 310410214827503 4171 04/03/20 14:26:19 63:58 192 Onatgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 4172 04/03/20 14:26:20 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4173 04/03/20 14:37:17 3:50 0 0 moo -1 310410214827503 4174 04/03/20 14:37:41 52:36 6352 6754 moo 3587080982063726 310410214827503 APPLE !PHONES 4175 04/03/20 14:37:42 52:36 6686 6088 moo 3587080982063726 310410214827503 APPLE !PHONES 4176 04/03/20 14:41:07 60:00 21261 12240 moo -1 310410214827503 4177 04/03/20 15:26:20 3:58 0 Onatgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4178 04/03/20 15:30:18 10:00 192 Onatgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4179 04/03/20 15:30:19 56:58 0 Onatgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 4180 04/03/20 15:41:07 60:00 10036 3160 moo -1 310410214827503 4181 04/03/20 16:27:17 31:12 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 4182 04/03/20 16:27:18 31:12 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 4183 04/03/20 16:41:07 2:30 0 0 ins -1 310410214827503 4184 04/03/20 16:43:15 15:14 6337 6734 imp 3587080982063726 310410214827503 APPLE !PHONES 4185 04/03/20 16:43:16 15:14 6666 6073 imp 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network conptantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 170 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002814 The information contained heraCtoNyFtli NeTiliAL not for general distribution. EFTA_00116890 EFTA01251414 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in i ., ‘ina °"...s Se AT&T (ITC. Run Data: 06/17/2020 Run Tame: Data Usage For: Item Conn. Conn. Originating ET Bytes Byte. Apn INC' IMBI MARL MODEL Data Time Hooter Up Dn (UTC) 4186 04/03/20 16:43:37 60:00 18576 1 9466 imp -1 310410214827503 4187 04/03/20 16:58:30 16:57 0 Onmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4188 04/03/20 17:15:26 20:55 192 Onmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4189 04/03/20 17:15:27 20:55 0 Onmtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 4190 04/03/20 17:36:22 2:07 0 Onmtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 4191 04/03/20 17:38:28 43:32 192 Onmtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 4192 04/03/20 17:38:29 43:33 0 Onmtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 4193 04/03/20 17:43:37 60:00 8604 3036 imp -1 310410214827503 4194 04/03/20 18:22:02 1:30 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4195 04/03/20 18:23:31 33:11 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 4196 04/03/20 18:23:32 33:11 0 Onmtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 4197 04/03/20 18:43:37 60:00 10036 3408 imp -1 310410214827503 4198 04/03/20 18:56:43 8:45 0 Onmtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 4199 04/03/20 19:05:28 15:03 192 Onmtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 4200 04/03/20 19:05:29 15:03 0 Onmtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 4201 04/03/20 19:20:32 1:07 0 Onmtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 4202 04/03/20 19:21:39 27:43 192 Onmtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 4203 04/03/20 19:21:40 27:43 0 Onmtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 4204 04/03/20 19:43:37 60:00 41164 21628 imp -1 310410214827503 4205 04/03/20 19:49:23 19:28 192 Onmtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 4206 04/03/20 19:49:24 19:28 0 Onmtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 4207 04/03/20 20:07:29 0:30 53214 52202 imp -1 310410214827503 4208 04/03/20 20:08:10 1:00 159700 98815 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 171 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002815 The information contained her is NsTiliAL not for general distribution. EF-EA_00ll6891 EFTA01251415 MOBILITY 41IM, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Dato: 06/17/2020 Run Time: 18:55:48 Data Osage for: Iton Conn. Conn. Originating ET Bytes Bytoa Min IX= DWI ten NODEL Date Time Number Op Dn (OTC) 4209 04/03/20 20:08:52 1:54 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4210 04/03/20 20:10:45 8:21 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 11080=8 no 4211 04/03/20 20:10:46 8:21 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4212 04/03/20 20:19:07 21:45 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4213 04/03/20 20:40:51 2:26 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 11080=8 no 4214 04/03/20 20:40:53 2:25 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4215 04/03/20 20:43:18 0:05 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4216 04/03/20 20:43:37 60:00 10380 4128 ins -1 310410214827503 4217 04/03/20 20:44:43 4:25 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4218 04/03/20 20:49:08 35:47 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4219 04/03/20 20:49:09 35:47 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 11080=8 no 4220 04/03/20 21:24:55 8:10 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4221 04/03/20 21:24:56 8:10 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4222 04/03/20 21:33:06 7:16 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 11080=8 no 4223 04/03/20 21:40:22 21:44 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4224 04/03/20 21:40:22 21:46 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4225 04/03/20 21:43:37 60:00 13568 4784 mos -1 310410214827503 4226 04/03/20 22:02:07 0:34 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4227 04/03/20 22:02:40 1:45 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4228 04/03/20 22:02:42 1:44 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 11080=8 no 4229 04/03/20 22:04:26 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 11080=8 no 4230 04/03/20 22:43:37 60:00 8388 3036 ins 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 172 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002816 The information contained hereCtoNelt PsiTniliAL not for general distribution. EF-EA_O0116892 EFTA01251416 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ...„0 •• `-'ss• AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating LT Bytes Bytoa Apn INLI IMBI NUM MOLL Date Time Number Up Dn (OTC) 4231 04/03/20 23:04:26 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4232 04/03/20 23:43:37 60:00 9928 3176 ims -1 310410214827503 4233 04/04/20 00:04:26 28:17 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4234 04/04/20 00:32:43 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4235 04/04/20 00:43:37 60:00 13352 4624 ims -1 310410214827503 4236 04/04/20 01:32:43 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4237 04/04/20 01:43:37 60:00 10252 3300 ims -1 310410214827503 4238 04/04/20 02:32:43 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4239 04/04/20 02:43:37 60:00 15988 5032 ims -1 310410214827503 4240 04/04/20 03:32:43 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4241 04/04/20 03:43:37 60:00 8388 2928 ims -1 310410214827503 4242 04/04/20 04:32:43 0:01 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4243 04/04/20 04:32:46 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4244 04/04/20 04:43:37 60:00 11580 3548 ims -1 310410214827503 4245 04/04/20 05:32:46 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4246 04/04/20 05:43:37 60:00 11812 4484 ims -1 310410214827503 4247 04/04/20 06:32:46 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4248 04/04/20 06:43:37 60:00 6956 2680 ims -1 310410214827503 4249 04/04/20 07:32:46 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4250 04/04/20 07:43:37 60:00 13444 4676 ins -1 310410214827503 4251 04/04/20 08:32:46 0:01 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4252 04/04/20 08:32:50 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4253 04/04/20 08:43:37 60:00 13244 4640 ims -1 310410214827503 4254 04/04/20 09:32:50 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4255 04/04/20 09:43:37 60:00 10252 3284 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 173 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002817 The information contained her is NeTifikE not for general distribution. EFEN_O0116893 EFTA01251417 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T (ITC. Run Data: 06/17/2020 Run Time: Data Usage For: lam Item Conn. Conn. Originating ET Bytes Bytoa Apn Der IMSI MARL NADEL Data Time Number Up Dn (OTC) 4256 04/04/20 10:32:50 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4257 04/04/20 10:43:37 60:00 8388 3036 imp -1 310410214827503 4258 04/04/20 11:32:50 12:22 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4259 04/04/20 11:43:37 60:00 13584 5680 as -1 310410214827503 4260 04/04/20 11:45:11 65:36 192 Ormtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4261 04/04/20 11:45:12 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 4262 04/04/20 12:43:37 39:34 4964 1588 imp -1 310410214827503 4263 04/04/20 12:45:12 5:36 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 4264 04/04/20 12:50:48 2:53 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 4265 04/04/20 12:53:40 58:19 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4266 04/04/20 12:53:41 58:19 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4267 04/04/20 13:19:41 32:18 6298 8144 imp 3587080982063726 310410214827503 APPLE 1PRONE8 4268 04/04/20 13:19:42 32:18 8076 6142 ins 3587080982063726 310410214827503 APPLE 1PRONE8 4269 04/04/20 13:23:11 60:00 18342 9433 ins -1 310410214827503 4270 04/04/20 13:52:00 0:06 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 4271 04/04/20 13:52:17 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 4272 04/04/20 14:23:11 60:00 10068 3144 imp -1 310410214827503 4273 04/04/20 14:52:17 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 4274 04/04/20 15:23:11 60:00 9960 3252 imp -1 310410214827503 4275 04/04/20 15:52:17 27:29 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 4276 04/04/20 16:19:45 2:41 192 Onxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 4277 04/04/20 16:19:47 2:40 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 4278 04/04/20 16:22:27 0:52 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 4279 04/04/20 16:23:11 60:00 13260 4592 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 174 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002818 The information contained horaleeNfti NeTniliAL not for general distribution. EF-EA_O0116894 EFTA01251418 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ....,,,• ••-•° `"". AT&T (ITC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn INEI Mal MARE MODEL Date Time Number Up Dn (UTC) 4280 04/04/20 16:23:18 0:23 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4281 04/04/20 16:23:20 0:22 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4282 04/04/20 16:23:42 24:09 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4283 04/04/20 16:47:50 2:25 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4284 04/04/20 16:47:52 2:24 0 0 nxtgorairo 3587080982063726 310410214827503 APPLE IPHONEB no 4285 04/04/20 16:50:15 4:58 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4286 04/04/20 16:50:16 4:58 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4287 04/04/20 16:55:14 0:05 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4288 04/04/20 16:55:45 7:33 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4289 04/04/20 17:03:17 2:07 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4290 04/04/20 17:03:19 2:06 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4291 04/04/20 17:05:25 5:57 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4292 04/04/20 17:11:21 2:19 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4293 04/04/20 17:11:22 2:19 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4294 04/04/20 17:13:41 0:05 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4295 04/04/20 17:14:37 7:18 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4296 04/04/20 17:14:38 7:18 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4297 04/04/20 17:21:56 8:23 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4298 04/04/20 17:21:57 8:23 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4299 04/04/20 17:23:11 60:00 10856 4488 imo -1 310410214827503 4300 04/04/20 17:30:20 1:32 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 175 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002819 The information contained heraCtoNeli NTniliAL not for general distribution. EF-EA_00ll6895 EFTA01251419 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in &4664" # me/ AT&T UTC. Run pato: 06/17/2020 Run Time: 18:55:49 Data usage For: Item conn. Conn. originating ET Bytes Byte. Apn INLI INSI MARL NICOLL Date Time Number Up Dn (LTC) 4301 04/04/20 17:31:53 3:22 0 Ommtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 4302 04/04/20 17:35:14 2:05 192 Ommtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 4303 04/04/20 17:35:15 2:05 0 Ommtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4304 04/04/20 17:37:20 21:09 0 Ommtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4305 04/04/20 17:58:29 2:21 192 Ommtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 4306 04/04/20 17:58:30 2:21 0 Ommtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4307 04/04/20 18:00:50 6:43 192 Ommtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4308 04/04/20 18:00:52 6:42 0 Ommtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4309 04/04/20 18:07:34 60:00 0 Ommtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4310 04/04/20 18:23:11 60:00 8512 3004 vas -1 310410214827503 4311 04/04/20 19:07:34 60:00 0 Ommtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4312 04/04/20 19:23:11 60:00 12120 4452 vas -1 310410214827503 4313 04/04/20 20:07:34 32:48 0 Orumgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4314 04/04/20 20:23:11 60:00 0 0 vas -1 310410214827503 4315 04/04/20 20:40:22 14:45 192 Ommtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4316 04/04/20 20:40:23 14:45 0 Ommtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4317 04/04/20 20:47:50 60:00 15113 8893 vas -1 310410214827503 4318 04/04/20 20:55:08 5:50 0 Orumgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4319 04/04/20 21:00:57 23:10 192 Orumgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4320 04/04/20 21:00:58 23:10 0 Ommtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4321 04/04/20 21:23:11 60:00 0 0 vas -1 310410214827503 4322 04/04/20 21:24:08 5:55 0 Ommtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4323 04/04/20 21:30:02 3:38 192 Orumgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 176 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002820 The information contained her is NeTifikE not for general distribution. EF-EA_00ll6896 EFTA01251420 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ....,,,,• ••-s`"" . AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn ICI INSI NICOLL Data Tina Number UP Dn (UTC) 4324 04/04/20 21:30:03 3:38 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 4325 04/04/20 21:33:41 22:58 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 — no 4326 04/04/20 21:33:42 22:58 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 4327 04/04/20 21:47:50 60:00 10176 3408 ims -1 310410214827503 4328 04/04/20 21:56:40 1:21 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 4329 04/04/20 21:58:00 2:04 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4330 04/04/20 21:58:02 2:03 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4331 04/04/20 22:00:05 32:56 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 4332 04/04/20 22:23:11 60:00 0 0 ims -1 310410214827503 4333 04/04/20 22:33:01 50:49 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 4334 04/04/20 22:33:02 50:49 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 4335 04/04/20 22:47:50 60:00 6924 3020 ims -1 310410214827503 4336 04/04/20 23:23:11 59:45 0 0 ims -1 310410214827503 4337 04/04/20 23:23:51 7:23 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 4338 04/04/20 23:23:52 7:23 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 4339 04/04/20 23:31:15 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 4340 04/04/20 23:47:50 60:00 10160 3176 ims -1 310410214827503 4341 04/05/20 00:31:15 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 4342 04/05/20 00:47:50 60:00 8496 2928 ims -1 310410214827503 4343 04/05/20 01:31:15 10:13 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 4344 04/05/20 01:41:28 39:59 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 4345 04/05/20 01:47:50 60:00 11672 4412 ims -1 310410214827503 4346 04/05/20 02:21:26 76:32 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 4347 04/05/20 02:21:27 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 177 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002821 The information contained her is NeTniiiikE not for general distribution. EF-EA_00116897 EFTA01251421 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 LL:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Tame: 18:55:49 Data Usage For: Item cotta. Conn. originating ET Bytes . Bytes Ape INSI MAfl MODEL Date Time mambos UP Dn (OTC) 4348 04/05/20 02:47:50 60:00 6924 2696 imp -1 310410214827503 4349 04/05/20 03:21:27 16:32 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4350 04/05/20 03:37:59 176:19 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4351 04/05/20 03:38:00 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 4352 04/05/20 03:47:50 60:00 13924 4856 imp -1 310410214827503 4353 04/05/20 04:38:00 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONZ8 no 4354 04/05/20 04:47:50 60:00 8496 3036 ims -1 310410214827503 4355 04/05/20 05:38:00 56:19 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONZ8 no 4356 04/05/20 05:47:50 60:00 6816 2788 ims -1 310410214827503 4357 04/05/20 06:47:50 60:00 11796 4536 ims -1 310410214827503 4358 04/05/20 07:47:50 12:50 4980 1588 ims -1 310410214827503 4359 04/05/20 08:08:28 60:00 18067 9628 ims -1 310410214827503 4360 04/05/20 09:08:28 60:00 8388 3020 ims -1 310410214827503 4361 04/05/20 09:18:59 54:33 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONZ8 no 4362 04/05/20 10:08:28 60:00 8388 3020 ims -1 310410214827503 4363 04/05/20 10:13:31 68:53 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONZ8 no 4364 04/05/20 10:13:32 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 4365 04/05/20 11:08:28 60:00 11888 4376 ims -1 310410214827503 4366 04/05/20 11:13:32 8:53 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONZ8 no 4367 04/05/20 11:22:25 22:37 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4368 04/05/20 11:22:26 22:37 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4369 04/05/20 11:45:03 21:34 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 4370 04/05/20 12:06:36 60:29 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4371 04/05/20 12:06:37 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4372 04/05/20 12:08:28 32:45 5088 1588 ims -1 310410214827503 4373 04/05/20 12:40:12 26:53 6352 6666 ims 3587080982063726 310410214827503 APPLE IPRONZ8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 178 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002822 The information contained her is NeTifikE not for general distribution. EF-EA_O0116898 EFTA01251422 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: 18:55:49 Data Osage for: Item Conn. Conn. Originating ET Bytes Bytes Apn Iter IM3I MAfl NICOLL Date Time Number Up Dn (OTC) 4374 04/05/20 12:40:13 26:53 6666 6088 imo 3587080982063726 310410214827503 APPLE IPHONE8 4375 04/05/20 12:43:45 60:00 15273 8758 imo -1 310410214827503 4376 04/05/20 13:06:37 0:29 0 Oruagonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 4377 04/05/20 13:07:05 8:12 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4378 04/05/20 13:07:06 8:12 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 4379 04/05/20 13:15:18 0:56 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 --- no 4380 04/05/20 13:16:13 2:17 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4381 04/05/20 13:16:14 2:17 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4382 04/05/20 13:18:31 12:27 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4383 04/05/20 13:18:32 12:27 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 4384 04/05/20 13:30:59 2:36 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4385 04/05/20 13:33:34 8:26 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4386 04/05/20 13:33:36 8:25 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 4387 04/05/20 13:42:01 15:56 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4388 04/05/20 13:43:45 60:00 8604 3160 imo -1 310410214827503 4389 04/05/20 13:57:56 2:04 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4390 04/05/20 13:57:57 2:04 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4391 04/05/20 14:00:01 1:59 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4392 04/05/20 14:01:59 2:05 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 4393 04/05/20 14:02:01 2:04 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4394 04/05/20 14:04:05 16:42 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4395 04/05/20 14:20:46 2:04 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 179 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002823 The information contained her is not for general distribution. NaTtAdti EF-EA_00ll6899 EFTA01251423 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in I"i AT&T tras a OTC. Run Date: 06/1//2020 Run Time: Data Usage Tor: IIIIIIIIII Iton Conn. Conn. Originating ET Byte. Byte. Apn INLI INS! MARL NICOLL Date Time Number Op Dn (OTC) 4396 04/05/20 14:20:47 2:04 0 0 nmtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4397 04/05/20 14:22:51 8:27 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4398 04/05/20 14:31:17 2:04 192 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4399 04/05/20 14:31:18 2:04 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4400 04/05/20 14:33:22 2:09 0 Oruftgenpr 3587080982063726 310410214827503 APPLE 1PROME8 no 4401 04/05/20 14:35:30 2:05 192 Oruftgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 4402 04/05/20 14:35:32 2:04 0 Onmtgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 4403 04/05/20 14:37:36 0:34 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 4404 04/05/20 14:38:10 2:04 192 Oruftgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 4405 04/05/20 14:38:11 2:04 0 Onmtgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 4406 04/05/20 14:40:15 3:13 0 Onmtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4407 04/05/20 14:43:27 2:18 192 Oruftgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 4408 04/05/20 14:43:28 2:18 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 4409 04/05/20 14:43:45 60:00 6956 2696 ims -1 310410214827503 4410 04/05/20 14:45:46 6:03 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 4411 04/05/20 14:45:47 6:03 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 4412 04/05/20 14:51:50 0:36 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 4413 04/05/20 14:52:25 2:04 192 Oruftgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 4414 04/05/20 14:52:26 2:04 0 Onmtgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 4415 04/05/20 14:54:30 0:37 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4416 04/05/20 14:55:06 2:04 192 Onmtgenpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 180 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002824 The information contained her is NeTniliAL not for general distribution. EF-EA_00116900 EFTA01251424 NOBILITY 411Mi 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tr ‘"li. a d asi. AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET &yeas Bytaa Apn INEI IMSI MIUtE MODEL Date Time Number Up Dn (OTC) 4417 04/05/20 14:55:07 2:04 0 0 natgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 4418 04/05/20 14:57:11 0:37 0 0 natgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 4419 04/05/20 14:57:47 34:03 192 0 natgonpho 3587080982063726 310410214827503 APPLE !PROMS no 4420 04/05/20 14:57:48 34:03 0 0 natgonpho 3587080982063726 310410214827503 APPLE !PROMS no 4421 04/05/20 15:31:50 10:00 192 0 natgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 4422 04/05/20 15:31:51 27:42 0 0 natgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4423 04/05/20 15:43:45 60:00 8496 2928 ims -1 310410214827503 4424 04/05/20 15:59:32 2:04 192 0 natgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4425 04/05/20 15:59:33 2:04 0 0 natgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4426 04/05/20 16:01:37 0:35 0 0 natgonpho 3587080982063726 310410214827503 APPLE !PROMS no 4427 04/05/20 16:02:11 2:18 192 0 natgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 4428 04/05/20 16:02:12 2:18 0 0 natgonpho 3587080982063726 310410214827503 APPLE !PROMS no 4429 04/05/20 16:04:30 12:46 192 0 natgonpho 3587080982063726 310410214827503 APPLE !PROMS no 4430 04/05/20 16:04:31 12:46 0 0 natgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 4431 04/05/20 16:17:16 2:04 192 0 natgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4432 04/05/20 16:17:18 2:03 0 0 natgonpho 3587080982063726 310410214827503 APPLE !PROMS no 4433 04/05/20 16:19:21 2:23 0 0 natgonpho 3587080982063726 310410214827503 APPLE !PROMS no 4434 04/05/20 16:21:43 8:44 192 0 natgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4435 04/05/20 16:21:44 8:44 0 0 natgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4436 04/05/20 16:30:28 27:49 192 0 ructgonpho 3587080982063726 310410214827503 APPLE !PROMS no 4437 04/05/20 16:30:29 27:49 0 0 ructgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 181 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002825 The information contained hereiCONyFti NeTifikE not for general distribution. EFTA_00116901 EFTA01251425 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ...„.• ••—•st` a. AT&T OTC. Run pato: 06/17/2020 Run Time: Data Osage for: Itea Conn. Conn. originating ET Bytes Bytes Apn IKEI INSI MARL NICOLL Date Time Number Up Dn (OTC) 4438 04/05/20 16:43:45 60:00 11920 4376 ims -2 310410214827503 4439 04/05/20 16:58:18 8:22 192 0 natgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4440 04/05/20 16:58:19 8:22 0 0 natgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4441 04/05/20 17:06:41 0:36 0 Onatgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 4442 04/05/20 17:07:16 2:05 192 Onatgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 4443 04/05/20 17:07:18 2:04 0 Onatgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 4444 04/05/20 17:09:22 1:06 0 Onatgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 4445 04/05/20 17:10:27 2:17 192 Onatgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 4446 04/05/20 17:10:28 2:17 0 Onatgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 4447 04/05/20 17:12:44 6:03 192 Oructgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 4448 04/05/20 17:12:45 6:04 0 OruMgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4449 04/05/20 17:18:49 0:36 0 OruMgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4450 04/05/20 17:19:24 8:21 192 OruMgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4451 04/05/20 17:19:25 8:21 0 OruMgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 4452 04/05/20 17:27:46 19:00 0 Onatgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 4453 04/05/20 17:43:45 34:11 6924 2840 ins -1 310410214827503 4454 04/05/20 17:46:46 2:26 0 Onatgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 4455 04/05/20 17:49:11 8:24 192 Onatgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 4456 04/05/20 17:49:12 8:24 0 OruMgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 4457 04/05/20 17:57:36 60:00 0 OruMgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4458 04/05/20 18:24:57 8:44 8816 6178 ism 3587080982063726 310410214827503 APPLE !PHONES 4459 04/05/20 18:33:41 0:01 0 0 imp 3587080982063726 310410214827503 APPLE !PHONES 4460 04/05/20 18:33:50 60:00 16765 9014 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 182 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002826 The information contained her is PsiTifikE not for general distribution. EFTA 00116902 EFTA01251426 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T UTC. Run pato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INEI IM3I NAZI MODEL Date Time Number Up On (UTC) 4461 04/05/20 18:57:36 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4462 04/05/20 19:33:50 60:00 10144 3284 imo -1 310410214827503 4463 04/05/20 19:57:36 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4464 04/05/20 20:33:50 34:45 5072 1572 imp -1 310410214827503 4465 04/05/20 20:57:36 54:28 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4466 04/05/20 21:08:36 42:23 9268 7288 imp 3587080982063726 310410214827503 APPLE IPHONEB 4467 04/05/20 21:50:59 60:00 11920 4220 imp 3587080982063726 310410214827503 APPLE IPHONEB 4468 04/05/20 21:52:03 2:04 192 Oruftgonpho 3080982063726 310410214827503 APPLE IPHONEB no 4469 04/05/20 21:52:04 2:04 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4470 04/05/20 21:54:08 56:14 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4471 04/05/20 22:50:22 8:53 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4472 04/05/20 22:50:23 8:53 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4473 04/05/20 22:50:59 60:00 8728 3020 yes 3587080982063726 310410214827503 APPLE IPHONEB 4474 04/05/20 22:59:15 6:04 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4475 04/05/20 22:59:17 6:03 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4476 04/05/20 23:05:20 26:11 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4477 04/05/20 23:31:30 2:05 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4478 04/05/20 23:31:31 2:05 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 4479 04/05/20 23:33:36 6:40 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4480 04/05/20 23:40:15 2:04 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4481 04/05/20 23:40:16 2:05 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4482 04/05/20 23:42:21 14:38 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4483 04/05/20 23:50:59 60:00 8496 2896 ins 3587080982063726 310410214827503 APPLE IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 183 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002827 The information contained her is NTniliAL not for general distribution. EF-EA_00116903 EFTA01251427 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in tr j ‘inli.a AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage for: Item Conn. Conn. Originating ET Bytes Bytes Apn MCI INSI MART NODEL Date Time Number DP Dn (UTC) 4484 04/05/20 23:56:58 2:46 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 4485 04/05/20 23:56:59 2:46 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 4486 04/05/20 23:59:44 14:30 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4487 04/05/20 23:59:45 14:30 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4488 04/06/20 00:14:15 14:15 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 4489 04/06/20 00:28:29 1:16 192 0 ruitgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4490 04/06/20 00:28:30 1:16 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 4491 04/06/20 00:29:46 0:49 0 Onatgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4492 04/06/20 00:30:34 2:04 192 OruMgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4493 04/06/20 00:30:35 2:04 0 Onatgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4494 04/06/20 00:32:39 0:36 0 Onatgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4495 04/06/20 00:33:14 8:27 192 Onatgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4496 04/06/20 00:33:15 8:27 0 Onatgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 4497 04/06/20 00:41:42 1:42 0 Onatgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4498 04/06/20 00:43:23 2:05 192 Onatgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4499 04/06/20 00:43:24 2:05 0 OruMgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4500 04/06/20 00:45:29 1:25 0 Onatgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4501 04/06/20 00:46:53 2:04 192 Onatgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4502 04/06/20 00:46:54 2:04 0 OruMgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4503 04/06/20 00:48:58 2:12 0 OruMgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4504 04/06/20 00:50:59 60:00 6956 2648 imp 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 184 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002828 The information contained heraCtoNyFti NeTtAsk not for general distribution. EFTA 00116904 EFTA01251428 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating Cr Bytes Bytes Apn INZI INSI MARL NICOLL Date Time Number un Dn (OTC) 4505 04/06/20 00:51:09 3:35 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4506 04/06/20 00:51:10 3:35 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4507 04/06/20 00:54:45 5:15 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 4508 04/06/20 00:59:59 8:19 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 4509 04/06/20 01:00:01 8:18 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 4510 04/06/20 01:08:19 39:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 4511 04/06/20 01:47:18 9:03 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 4512 04/06/20 01:47:20 9:02 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4513 04/06/20 01:50:59 60:00 15420 5828 ims 3587080982063726 310410214827503 APPLE IPHOME8 4514 04/06/20 01:56:22 3:04 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4515 04/06/20 01:59:25 3:08 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4516 04/06/20 01:59:26 3:08 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 4517 04/06/20 02:02:33 2:54 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 4518 04/06/20 02:02:34 2:54 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 4519 04/06/20 02:05:28 23:22 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 4520 04/06/20 02:28:49 14:16 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 4521 04/06/20 02:28:50 14:16 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 4522 04/06/20 02:43:06 2:07 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 4523 04/06/20 02:45:12 6:13 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 4524 04/06/20 02:45:13 6:13 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4525 04/06/20 02:50:59 60:00 8388 2896 ims 3587080982063726 310410214827503 APPLE IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 185 AT&T does not retain recycle that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002829 The information contained hereCtlaNyFti not for general distribution. EF-EA_00116905 EFTA01251429 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T UTC. Run Dato: 06/17/2020 Run T/mo: Data Osage for: Salim Item Conn. Conn. Originating ET Bytes Bytoa Apn INEI INSt MARE NOD= Date 21mo Baer Op Dn (OTC) 4526 04/06/20 02:51:26 25:12 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4527 04/06/20 03:16:37 1:30 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4528 04/06/20 03:16:38 1:30 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4529 04/06/20 03:18:08 1:14 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4530 04/06/20 03:19:21 2:10 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4531 04/06/20 03:19:22 2:10 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4532 04/06/20 03:21:32 28:22 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 4533 04/06/20 03:49:54 12:26 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 4534 04/06/20 03:49:55 12:27 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4535 04/06/20 03:50:59 56:49 13136 4872 ims 3587080982063726 310410214827503 APPLE DRONES 4536 04/06/20 04:02:22 8:42 0 Oruftgonpho 3587080982063726 310410214827503 APPLE DRONES no 4537 04/06/20 04:11:03 2:04 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4538 04/06/20 04:11:04 2:04 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4539 04/06/20 04:13:08 6:05 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4540 04/06/20 04:19:12 2:04 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4541 04/06/20 04:19:13 2:04 0 Oruftgonpho 3587080982063726 310410214827503 APPLE DRONES no 4542 04/06/20 04:21:17 0:59 0 Oruftgonpho 3587080982063726 310410214827503 APPLE DRONES no 4543 04/06/20 04:22:15 2:05 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4544 04/06/20 04:22:16 2:05 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4545 04/06/20 04:24:21 0:32 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4546 04/06/20 04:24:52 2:04 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 186 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002830 The information contained her is N:FroliAL not for general distribution. EFTA_00116906 EFTA01251430 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in traiall. ol AT&T arc. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytom Aim INC' INBI MARL MOLL Data Time Number DP Dn (OTC) 4547 04/06/20 04:24:53 2:04 0 0 nactsponpho 3587080982063726 310410214827503 APPLE IPHONEB no 4548 04/06/20 04:26:57 10:37 0 0 nactsponpho 3587080982063726 310410214827503 APPLE IPHONEB no 4549 04/06/20 04:37:33 9:34 192 0 nactsponpho 3587080982063726 310410214827503 APPLE !PHONES no 4550 04/06/20 04:37:35 9:33 0 0 nactsponpho 3587080982063726 310410214827503 APPLE !PHONES no 4551 04/06/20 04:47:08 2:44 192 0 nactsponpho 3587080982063726 310410214827503 APPLE IPHONEB no 4552 04/06/20 04:47:09 2:43 7048 6456 imp 3587080982063726 310410214827503 APPLE !PHONES 4553 04/06/20 04:47:09 2:45 0 0 nactsponpho 3587080982063726 310410214827503 APPLE !PHONES no 4554 04/06/20 04:47:10 2:44 6456 6784 imp 3587080982063726 310410214827503 APPLE !PHONES 4555 04/06/20 04:49:28 60:00 16637 9036 imp -1 310410214827503 4556 04/06/20 04:49:53 0:49 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4557 04/06/20 04:50:42 240:02 192 0 nactsponpho 3587080982063726 310410214827503 APPLE !PHONES no 4558 04/06/20 04:50:43 60:00 0 0 nactsponpho 3587080982063726 310410214827503 APPLE IPHONEB no 4559 04/06/20 05:49:28 60:00 8388 2928 imp -1 310410214827503 4560 04/06/20 05:50:43 60:00 0 0 natTonpho 3587080982063726 310410214827503 APPLE !PHONES no 4561 04/06/20 06:49:28 60:00 8496 3036 imp -1 310410214827503 4562 04/06/20 06:50:43 60:00 0 0 nactsponpho 3587080982063726 310410214827503 APPLE !PHONES no 4563 04/06/20 07:49:28 60:00 15048 4872 imp -1 310410214827503 4564 04/06/20 07:50:43 60:00 0 0 wasp:mph° 3587080982063726 310410214827503 APPLE !PHONES no 4565 04/06/20 08:49:28 60:00 6940 3680 imp -1 310410214827503 4566 04/06/20 08:50:43 0:02 0 0 natTonpho 3587080982063726 310410214827503 APPLE !PHONES no 4567 04/06/20 08:50:45 1:58 192 0 natTonpho 3587080982063726 310410214827503 APPLE !PHONES no 4568 04/06/20 08:50:46 1:58 0 0 natTonpho 3587080982063726 310410214827503 APPLE !PHONES no 4569 04/06/20 08:52:44 1:23 0 0 natTonpho 3587080982063726 310410214827503 APPLE !PHONES no 4570 04/06/20 08:54:06 21:13 192 0 natTonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 187 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002831 The information contained heraCtoNyFti PsiTniliAL not for general distribution. EF-EAJVII6907 EFTA01251431 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn ItaTI INBI teal NICOLL Date Time Number Up Dn (UTC) 4571 04/06/20 08:54:07 21:13 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 4572 04/06/20 09:15:20 0:39 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 4573 04/06/20 09:15:58 27:10 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4574 04/06/20 09:15:59 27:10 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4575 04/06/20 09:43:09 1:40 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 4576 04/06/20 09:44:48 2:18 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 4577 04/06/20 09:44:50 2:17 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 4578 04/06/20 09:47:06 6:44 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 4579 04/06/20 09:47:07 6:44 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 4580 04/06/20 09:49:28 60:00 13368 4676 imp -1 310410214827503 4581 04/06/20 09:53:51 44:00 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 4582 04/06/20 09:53:52 44:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 4583 04/06/20 10:37:52 0:42 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4584 04/06/20 10:38:33 29:40 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 4585 04/06/20 10:38:34 29:41 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 4586 04/06/20 10:49:28 60:00 13584 4516 imp -1 310410214827503 4587 04/06/20 11:08:14 0:35 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 4588 04/06/20 11:08:48 14:53 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 4589 04/06/20 11:08:49 14:53 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 4590 04/06/20 11:23:42 1:37 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 4591 04/06/20 11:25:18 27:35 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 188 AT&T does not retain records that can definitively show whether a transaction was /// customer initiated or AT&T's network initiated the d►►►ata transaction. SDNY_GM_00002832 The information contained her is NTroliAL not for general distribution. EF-EA_00116908 EFTA01251432 MOBILITY • 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Bytom Apn IKI IM3I MAT NICOLL Data Time Number UP Dn (OTC) 4592 04/06/20 11:25:19 27:35 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE ITHOME8 no 4593 04/06/20 11:49:28 60:00 8620 3052 ims -1 310410214827503 4594 04/06/20 11:52:53 2:04 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE ITHONZ8 no 4595 04/06/20 11:52:54 2:04 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE ITHOME8 no 4596 04/06/20 11:54:58 0:36 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 4597 04/06/20 11:55:34 20:57 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 4598 04/06/20 11:55:35 20:57 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 4599 04/06/20 12:16:32 0:48 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 4600 04/06/20 12:17:19 20:57 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 4601 04/06/20 12:17:20 20:57 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 4602 04/06/20 12:38:17 17:13 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 4603 04/06/20 12:49:28 60:00 8372 2928 ims -1 310410214827503 4604 04/06/20 12:55:29 2:04 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 4605 04/06/20 12:55:31 2:03 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 4606 04/06/20 12:57:34 4:36 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 4607 04/06/20 13:02:09 2:05 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 4608 04/06/20 13:02:10 2:05 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 4609 04/06/20 13:04:15 6:34 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 4610 04/06/20 13:10:49 26:43 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 4611 04/06/20 13:37:31 8:58 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 4612 04/06/20 13:37:32 8:58 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 189 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002833 The information contained her is not for general distribution. NTIAL EFTA_001 16909 EFTA01251433 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in c•""". sae,0 AT&T UTC. Run Date: 06/17/2020 Run Time: Data Osage For: INIIIIIII Itea conn. Conn. originating LT Bytes Byte. Apn IKEI INSI MARL NICOLL Date Time Number Up On (LTC) 4613 04/06/20 13:46:30 13:07 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4614 04/06/20 13:46:31 13:07 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPH0NZ8 no 4615 04/06/20 13:49:28 60:00 10068 3176 imo -1 310410214827503 4616 04/06/20 13:59:38 18:41 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1990=8 no 4617 04/06/20 14:18:18 42:38 288 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPH0NZ8 no 4618 04/06/20 14:18:19 42:38 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPH0NZ8 no 4619 04/06/20 14:49:28 60:00 17440 6372 imo -1 310410214827503 4620 04/06/20 15:00:57 6:02 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4621 04/06/20 15:06:58 5:33 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4622 04/06/20 15:07:00 5:32 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4623 04/06/20 15:12:32 0:51 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4624 04/06/20 15:13:22 2:03 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4625 04/06/20 15:13:23 2:03 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPH0NZ8 no 4626 04/06/20 15:15:26 6:09 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPH0NZ8 no 4627 04/06/20 15:21:35 8:13 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPH0NZ8 no 4628 04/06/20 15:21:36 8:14 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPH0NZ8 no 4629 04/06/20 15:29:49 3:33 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPH0NZ8 no 4630 04/06/20 15:33:21 2:04 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4631 04/06/20 15:33:22 2:04 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4632 04/06/20 15:35:26 7:07 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPH0NZ8 no 4633 04/06/20 15:42:32 2:10 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPH0NZ8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage en the customer records but do not necessarily indicate a customer initiated a transaction. Page 190 AT&T does net retain records that can definitively show whether a transaction was customer initiated er AT&T's network initiated the data transaction. SDNY_GM_00002834 The information contained her is NTstAlt not for general distribution. EFTA_00116910 EFTA01251434 MOBILITY 41.1, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in 1...., Ise .11° 00 AT&T UTC. Run Data: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Bytom Apn MEI IMBI MA= MODEL Data Time Number Op Dn (OTC) 4634 04/06/20 15:42:33 2:10 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4635 04/06/20 15:44:43 1:56 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4636 04/06/20 15:46:38 33:20 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4637 04/06/20 15:46:39 33:20 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4638 04/06/20 15:49:28 60:00 6924 2804 imp -1 310410214827503 4639 04/06/20 16:19:59 16:41 192 Oruftgonpho 3587080982063726 310410214827503 APPLE /PHONES no 4640 04/06/20 16:20:00 16:41 0 Onxtgonpho 3587080982063726 310410214827503 APPLE /PHONES no 4641 04/06/20 16:36:41 12:04 192 Onxtgonpho 3587080982063726 310410214827503 APPLE /PHONES no 4642 04/06/20 16:36:42 12:04 0 Onxtgonpho 3587080982063726 310410214827503 APPLE /PHONES no 4643 04/06/20 16:48:46 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE /PHONES no 4644 04/06/20 16:49:28 60:00 7264 2928 imp -1 310410214827503 4645 04/06/20 17:48:46 50:14 0 Oruftgonpho 3587080982063726 310410214827503 APPLE /PHONES no 4646 04/06/20 17:49:28 60:00 11796 4268 imp -1 310410214827503 4647 04/06/20 18:38:59 2:26 192 Onxtgonpho 3587080982063726 310410214827503 APPLE /PHONES no 4648 04/06/20 18:39:00 2:26 0 Onxtgonpho 3587080982063726 310410214827503 APPLE /PHONES no 4649 04/06/20 18:41:26 2:48 192 Onxtgonpho 3587080982063726 310410214827503 APPLE /PHONES no 4650 04/06/20 18:41:27 2:48 0 Onxtgonpho 3587080982063726 310410214827503 APPLE /PHONES no 4651 04/06/20 18:44:14 2:21 192 Onxtgonpho 3587080982063726 310410214827503 APPLE /PHONES no 4652 04/06/20 18:44:16 2:20 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4653 04/06/20 18:46:35 33:05 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 4654 04/06/20 18:46:36 33:05 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 4655 04/06/20 18:49:28 60:00 8820 3268 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do net necessarily indicate a customer initiated a transaction. Page 191 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002835 The information contained hereCtoNyFtli NTniliAL not for general distribution. EFTA_00116911 EFTA01251435 MOBILITY 411., 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 il:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in .....„af ‘"Ill. e# AT&T OTC. Run Data: 06/17/2020 Run Tina: Data Osage For: Item Cotta. Conn. Originating ET Bytes Bytom Apn INLI IMSI WOOL MODEL Data Time Number Up On (OTC) 4656 04/06/20 19:19:41 55:50 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 4657 04/06/20 19:49:28 60:00 1212. 4784 ims -1 310410214827503 4658 04/06/20 20:15:30 8:54 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 4659 04/06/20 20:15:31 8:54 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 4660 04/06/20 20:24:24 6:21 192 Ormtgenpho 3587080982063726 310410214827503 APPLE DRONES no 4661 04/06/20 20:24:25 6:21 0 Ormtgenpho 3587080982063726 310410214827503 APPLE DRONES no 4662 04/06/20 20:30:46 42:51 0 Ormtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4663 04/06/20 20:49:28 25:15 23832 16740 ims -1 310410214827503 4664 04/06/20 21:07:51 0:28 1749 10097 ims -1 310410214827503 4665 04/06/20 21:08:48 5:55 1425959 510796 ims -1 310410214827503 4666 04/06/20 21:13:37 23:36 192 Ormtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4667 04/06/20 21:13:38 23:36 0 Ormtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4668 04/06/20 21:14:41 22:32 17908 14555 ims 3587080982063726 310410214827503 APPLE !PHONES 4669 04/06/20 21:14:42 22:32 14142 17664 ims 3587080982063726 310410214827503 APPLE !PHONES 4670 04/06/20 21:15:01 12:05 1705278 2630230 ims 3587080982063726 310410214827503 APPLE DRONES 4671 04/06/20 21:15:02 12:05 2630230 1705278 ins 3587080982063726 310410214827503 APPLE DRONES 4672 04/06/20 21:32:47 39:04 20650 12963 ins -1 310410214827503 4673 04/06/20 21:37:14 3:54 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 4674 04/06/20 21:41:07 2:38 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4675 04/06/20 21:41:08 2:38 0 Ormtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4676 04/06/20 21:43:46 8:35 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4677 04/06/20 21:52:20 9:49 192 Ormtgenpho 3587080982063726 310410214827503 APPLE DRONES no 4678 04/06/20 21:52:21 9:49 0 Ormtgenpho 3587080982063726 310410214827503 APPLE DRONES no 4679 04/06/20 22:02:10 9:40 192 Ormtgenpho 3587080982063726 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 192 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002836 The information contained her is not for general distribution. NaTtAdti EFTA 00116912 EFTA01251436 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn INEI IMBI MARL MODEL Date Time Number Op Dn (UTC) 4680 04/06/20 22:02:11 9:40 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4681 04/06/20 22:11:51 1:08 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4682 04/06/20 22:11:55 60:00 49293 32806 imo -1 310410214827503 4683 04/06/20 22:12:58 2:04 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 4684 04/06/20 22:13:00 2:03 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4685 04/06/20 22:15:03 6:57 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4686 04/06/20 22:21:59 2:07 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4687 04/06/20 22:22:00 2:07 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4688 04/06/20 22:24:07 0:05 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4689 04/06/20 22:26:25 5:05 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4690 04/06/20 22:26:27 5:04 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4691 04/06/20 22:31:30 6:03 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4692 04/06/20 22:31:31 6:03 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4693 04/06/20 22:37:34 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4694 04/06/20 22:56:05 0:01 0 0 imo -1 310410214827503 4695 04/06/20 22:56:45 0:27 1950 16876 imo -1 310410214827503 4696 04/06/20 22:57:30 0:38 2441 2326 imo -1 310410214827503 4697 04/06/20 23:11:55 60:00 34864 21112 imo -1 310410214827503 4698 04/06/20 23:18:04 0:31 12104 22462 imo -1 310410214827503 4699 04/06/20 23:28:04 0:27 1565 9674 imo -1 310410214827503 4700 04/06/20 23:37:34 4:26 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 4701 04/06/20 23:41:59 2:03 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4702 04/06/20 23:42:00 2:03 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4703 04/06/20 23:44:03 6:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 193 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002837 The information contained her is not for general distribution. EFTA_00116913 EFTA01251437 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .....,,,• ••-s"" AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage For: Ito. Conn. Conn. Originating ET Bytes Bytes Apn IMF' IMS1 HARR MODEL Date Time Number Up Dn (Inc) 4704 04/06/20 23:50:02 3:37 288 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4705 04/06/20 23:50:04 3:36 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4706 04/06/20 23:53:40 12:00 192 Onxtgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 4707 04/06/20 23:53:40 12:01 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4708 04/07/20 00:05:41 4:12 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4709 04/07/20 00:09:52 2:04 192 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4710 04/07/20 00:09:53 2:04 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4711 04/07/20 00:11:55 60:00 27688 15432 ims -1 310410214827503 4712 04/07/20 00:11:57 8:45 0 OruMgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4713 04/07/20 00:15:21 0:22 0 0 ims -1 310410214827503 4714 04/07/20 00:20:41 3:16 192 OruMgonpAo 3587080982063726 310410214827503 APPLE !PRONGS no 4715 04/07/20 00:20:42 3:16 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4716 04/07/20 00:23:57 7:20 192 Onxtgenpho 3587080982063726 310410214827503 APPLE IPRO1428 no 4717 04/07/20 00:23:58 7:20 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4718 04/07/20 00:31:01 19:06 3827046 2845143 ims -1 310410214827503 4719 04/07/20 00:31:18 9:51 0 OruMgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4720 04/07/20 00:41:08 45:54 192 OruMgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4721 04/07/20 00:41:09 45:54 0 OruMgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4722 04/07/20 01:11:55 60:00 7204 4680 ims -1 310410214827503 4723 04/07/20 01:27:03 16:02 0 OruMgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4724 04/07/20 01:43:04 2:15 192 OruMgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4725 04/07/20 01:43:05 2:16 0 OruMgenpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 194 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002838 The information contained heraleeNelt NTIAL not for general distribution. EFTA_00116914 EFTA01251438 MOBILITY 41111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T arc. Run pato: 06/17/2020 Run Time: 1S:55:50 Data usage Tor: Item cone. Conn. originating ET Bytes sytoa Apn ImEx INBI NAfl NICOLL Date Time Number Up on (UTC) 4726 04/07/20 01:45:20 7:07 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONZEI no 4727 04/07/20 01:52:26 2:09 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONZEI no 4728 04/07/20 01:52:27 2:09 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4729 04/07/20 01:54:36 0:33 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 4730 04/07/20 01:55:08 2:03 192 0 natgonpho 3587080982063726 310410214827503 APPLE IPRONZEI no 4731 04/07/20 01:55:09 2:03 0 0 natgonpho 3587080982063726 310410214827503 APPLE IPRONZEI no 4732 04/07/20 01:57:12 3:46 0 0 natgonpho 3587080982063726 310410214827503 APPLE IPRONZEI no 4733 04/07/20 02:00:57 8:25 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPRONZEI no 4734 04/07/20 02:00:58 8:25 0 0 natgonpho 3587080982063726 310410214827503 APPLE IPRONZEI no 4735 04/07/20 02:09:23 1:48 0 0 natgonpho 3587080982063726 310410214827503 APPLE IPRONZEI no 4736 04/07/20 02:11:10 9:15 192 0 natgonpho 3587080982063726 310410214827503 APPLE IPRONZEI no 4737 04/07/20 02:11:11 9:15 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONZEI no 4738 04/07/20 02:11:55 60:00 8496 2928 ins -1 310410214827503 4739 04/07/20 02:20:26 41:54 0 0 natgonpho 3587080982063726 310410214827503 APPLE IPRONZEI no 4740 04/07/20 03:02:19 2:06 192 0 natgonpho 3587080982063726 310410214827503 APPLE IPRONZEI no 4741 04/07/20 03:02:20 2:06 0 0 natgonpho 3587080982063726 310410214827503 APPLE IPRONZEI no 4742 04/07/20 03:04:26 11:16 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPRONZEI no 4743 04/07/20 03:11:55 58:22 16460 9500 Ams -1 310410214827503 4744 04/07/20 03:15:42 12:14 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPRONZEI no 4745 04/07/20 03:15:42 12:15 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPRONZEI no 4746 04/07/20 03:27:57 10:00 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPRONZEI no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 195 AT&T does not retain records that can'definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002839 The information contained her is not for general distribution. NaTtAdti EFTA_00116915 EFTA01251439 MOBILITY 2996479 06/17/2020 ATET has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: 06/17/2020 Run Elmo: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INEI IMSI MAKE MOLL Date Time Number Op On (DSc) 4747 04/07/20 03:27:58 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHME8 no 4748 04/07/20 03:39:43 35:30 15340 8152 imo -1 310410214827503 4749 04/07/20 04:10:16 25:55 7232 6866 imp 3587080982063726 310410214827503 APPLE IPHME8 4750 04/07/20 04:10:17 25:55 6798 7076 ins 3587080982063726 310410214827503 APPLE IPHME8 4751 04/07/20 04:25:53 60:00 8737 6350 ins -1 310410214827503 4752 04/07/20 04:27:58 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4753 04/07/20 04:36:06 60:00 24696 14261 ins -1 310410214827503 4754 04/07/20 05:25:53 4:10 0 0 isms -1 310410214827503 4755 04/07/20 05:27:58 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4756 04/07/20 05:30:03 60:00 15001 8802 mos -1 310410214827503 4757 04/07/20 05:36:06 60:00 0 0 mos -1 310410214827503 4758 04/07/20 06:27:58 17:38 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4759 04/07/20 06:30:03 60:00 8388 3036 imp -1 310410214827503 4760 04/07/20 06:36:06 60:00 0 0 imp -1 310410214827503 4761 04/07/20 06:45:35 240:02 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4762 04/07/20 06:45:36 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4763 04/07/20 07:30:03 60:00 8388 2928 imp -1 310410214827503 4764 04/07/20 07:36:06 60:00 0 0 imp -1 310410214827503 4765 04/07/20 07:45:36 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4766 04/07/20 08:30:03 60:00 6924 2912 imp -1 310410214827503 4767 04/07/20 08:36:06 53:11 0 0 imp -1 310410214827503 4768 04/07/20 08:45:36 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4769 04/07/20 09:30:03 60:00 8604 3052 imp -1 310410214827503 4770 04/07/20 09:45:36 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4771 04/07/20 10:30:03 60:00 15312 5752 imp -1 310410214827503 4772 04/07/20 10:45:36 0:02 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4773 04/07/20 10:45:39 123:35 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powere4 on. These communications will show as data usage on the customer records but do of necessarily indicate a customer initiated a transaction. Page 196 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained her is PsiTniliAL not for general distribution. SDNY_GM_00002840 EFTA_00116916 EFTA01251440 MOBILITY 411M, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T arc. Run Dato: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn Tier IMBI MAItT NICOLL Date Time ',umber Up Dn (UTC) 4774 04/07/20 10:45:40 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4775 04/07/20 11:30:03 32:17 4980 1696 ims -1 310410214827503 4776 04/07/20 11:45:40 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4777 04/07/20 12:01:57 60:00 0 0 ims -1 310410214827503 4778 04/07/20 12:02:20 60:00 17933 10006 ims -1 310410214827503 4779 04/07/20 12:45:40 3:35 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4780 04/07/20 12:49:15 6:50 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4781 04/07/20 12:56:04 15:29 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4782 04/07/20 12:56:05 15:29 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4783 04/07/20 13:01:57 37:07 0 0 ima -1 310410214827503 4784 04/07/20 13:02:20 36:11 8248 4160 ims -1 310410214827503 4785 04/07/20 13:11:34 4:46 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 4786 04/07/20 13:16:19 21:35 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 4787 04/07/20 13:16:20 21:36 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4788 04/07/20 13:37:55 56:30 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4789 04/07/20 13:39:05 55:37 18325 11487 ipso -1 310410214827503 4790 04/07/20 13:41:18 14:30 11530 6588 ipso 3587080982063726 310410214827503 APPLE IPHOME8 4791 04/07/20 13:55:48 5:22 3500 1324 ipso 3587080982063726 310410214827503 APPLE IPHOME8 4792 04/07/20 13:55:48 5:22 2688 1324 ims 3587080982063726 310410214827503 APPLE IPHOME8 4793 04/07/20 14:01:14 32:20 10000 7462 ims 3587080982063726 310410214827503 APPLE IPHOME8 4794 04/07/20 14:33:34 10:31 3640 1448 ims 3587080982063726 310410214827503 APPLE !PHONES 4795 04/07/20 14:34:25 50:47 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4796 04/07/20 14:34:26 50:47 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4797 04/07/20 14:34:41 50:31 15084 17479 Imo 3587080982063726 310410214827503 APPLE IPHOME8 4798 04/07/20 14:34:42 50:31 17108 14820 Imo 3587080982063726 310410214827503 APPLE IPHOME8 4799 04/07/20 14:35:10 49:00 6345718 9090635 Imo 3587080982063726 310410214827503 APPLE IPHOME8 4800 04/07/20 14:35:11 49:00 9090077 6345718 ins 3587080982063726 310410214827503 APPLE IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 197 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00002841 The information contained hereCoNftli NeTnAL not for general distribution. EFTA_00116917 EFTA01251441 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ...„.• ••-"I' `' s AT&T UTC. Run Oato: 06/17/2020 Run Time: 10:55:51 Data Osage For: Item Conn. Conn. Originating ET Sytes Byte. Apn INZI INSI MARL NICOLL Date Time Humber UP Dn (OTC) 4801 04/07/20 15:25:14 6:35 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4802 04/07/20 15:25:16 0:38 8144 6212 imp 3587080982063726 310410214827503 APPLE !PHONES 4803 04/07/20 15:25:54 60:00 14000 4932 imp 3587080982063726 310410214827503 APPLE !PHONES 4804 04/07/20 15:31:48 8:15 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4805 04/07/20 15:31:49 8:16 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4806 04/07/20 15:40:04 7:32 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4807 04/07/20 15:47:36 3:56 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4808 04/07/20 15:47:37 3:56 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4809 04/07/20 15:51:33 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4810 04/07/20 16:25:54 46:30 16116 10480 imp 3587080982063726 310410214827503 APPLE !PHONES 4811 04/07/20 16:51:33 2:27 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4812 04/07/20 16:54:00 2:03 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 4813 04/07/20 16:54:01 2:03 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4814 04/07/20 16:56:04 17:38 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4815 04/07/20 17:02:56 0:30 2502 14856 imp 3587080982063726 310410214827503 APPLE !PHONES 4816 04/07/20 17:12:24 1:18 328 372 imp 3587080982063726 310410214827503 APPLE !PHONES 4817 04/07/20 17:13:41 8:30 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4818 04/07/20 17:13:42 8:30 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4819 04/07/20 17:13:43 10:43 8209 6216 imp -1 310410214827503 4820 04/07/20 17:18:59 3:12 7136 6746 imo 3587080982063726 310410214827503 APPLE !PHONES 4821 04/07/20 17:19:01 3:11 6746 6872 imp 3587080982063726 310410214827503 APPLE !PHONES 4822 04/07/20 17:22:12 21:13 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4823 04/07/20 17:22:13 21:12 7214 6900 imp 3587080982063726 310410214827503 APPLE !PHONES 4824 04/07/20 17:22:13 21:14 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4825 04/07/20 17:22:14 21:13 6792 6950 imp 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constaptly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 198 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002842 The information contained hereCtoNyFti not for general distribution. PsiTifiNE EFTA_00116918 EFTA01251442 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in tr 4 •a" 4g° AT&T arc. Run Date: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Bytom Apn IND I INSI HAKE NICOLL Date Time Number Up Dn (OTC) 4826 04/07/20 17:43:26 45:37 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4827 04/07/20 17:43:34 37:01 13367 7676 imo 3587080982063726 310410214827503 APPLE !PHONES 4828 04/07/20 18:20:35 0:23 30740 1324 imo 3587080982063726 310410214827503 APPLE !PHONES 4829 04/07/20 18:20:35 0:23 2704 1324 imo 3587080982063726 310410214827503 APPLE 'PHONES 4830 04/07/20 18:20:58 60:00 10380 4080 imo 3587080982063726 310410214827503 APPLE 'PHONES 4831 04/07/20 18:29:02 2:03 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4832 04/07/20 18:29:03 2:03 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4833 04/07/20 18:31:06 0:59 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4834 04/07/20 18:32:04 2:05 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4835 04/07/20 18:32:05 2:05 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4836 04/07/20 18:34:10 52:08 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 4837 04/07/20 19:20:58 45:52 7064 2880 imo 3587080982063726 310410214827503 APPLE 'PHONES 4838 04/07/20 19:26:17 2:03 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 4839 04/07/20 19:26:18 2:03 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 4840 04/07/20 19:28:21 14:08 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4841 04/07/20 19:42:28 2:04 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4842 04/07/20 19:42:29 2:04 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4843 04/07/20 19:44:33 21:02 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4844 04/07/20 20:05:34 2:03 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4845 04/07/20 20:05:35 2:03 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 4846 04/07/20 20:06:49 0:48 7264 6992 imo 3587080982063726 310410214827503 APPLE 'PHONES 4847 04/07/20 20:06:50 0:48 6740 7000 imo 3587080982063726 310410214827503 APPLE 'PHONES 4848 04/07/20 20:07:06 55:54 14013 10990 imo -1 310410214827503 4849 04/07/20 20:07:38 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered An. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 199 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002843 The information contained her is PsiTifikE not for general distribution. EFTAJVII6919 EFTA01251443 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in c• a "`ss 1. AT&T arc. Run Data: 06/17/2020 Run Tina: Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn INSI HAKE NICOLL Data Time Number op Dn (OTC) 4850 04/07/20 20:10:47 0:48 8152 6944 ims 3587080982063726 310410214827503 APPLE IPHONEB 4851 04/07/20 20:11:35 51:24 7296 2772 ims 3587080982063726 310410214827503 APPLE IPHONEB 4852 04/07/20 21:03:00 0:00 0 0 ims 3587080982063726 310410214827503 APPLE IPROME8 4853 04/07/20 21:03:08 60:00 22855 14615 ims -1 310410214827503 4854 04/07/20 21:07:38 44:18 0 0 nxtgenpho. 3587080982063726 310410214827503 APPLE !PHONES no 4855 04/07/20 21:51:56 4:22 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4856 04/07/20 21:51:57 4:22 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4857 04/07/20 21:56:19 4:13 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4858 04/07/20 22:00:31 2:03 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4859 04/07/20 22:00:32 2:03 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4860 04/07/20 22:02:35 9:28 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPROME8 no 4861 04/07/20 22:03:08 60:00 22776 15016 ims -1 310410214827503 4862 04/07/20 22:12:02 2:04 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4863 04/07/20 22:12:03 2:04 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4864 04/07/20 22:14:07 19:48 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4865 04/07/20 22:24:33 0:33 5274 33524 ims -1 310410214827503 4866 04/07/20 22:33:55 2:28 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 4867 04/07/20 22:33:56 2:28 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 4868 04/07/20 22:36:24 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 4869 04/07/20 22:39:24 60:00 18166 10174 ims -1 310410214827503 4870 04/07/20 23:03:08 60:00 0 0 ims -1 310410214827503 4871 04/07/20 23:36:24 8:55 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 4872 04/07/20 23:39:24 60:00 10068 3144 ims -1 310410214827503 4873 04/07/20 23:45:18 2:03 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 200 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002844 The information contained her is WInfikE not for general distribution. EFTA 00116920 EFTA01251444 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T arc. Run Date: 06/17/2020 Run Time: Data Usage Tor: iiiiiIMMO • Item Conn. Conn. Originating LT Bytes Bytoa Apn IX= IMS1 MUM NICOLL Date Time Number Up Dn (UTC) 4874 04/07/20 23:45:19 2:03 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 4875 04/07/20 23:47:22 3:54 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 4876 04/07/20 23:51:15 2:03 192 Onxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 4877 04/07/20 23:51:16 2:04 0 Onxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 4878 04/07/20 23:53:20 9:20 0 Onxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 4879 04/08/20 00:02:39 9:08 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 4880 04/08/20 00:02:40 9:08 0 Onxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 4881 04/08/20 00:03:08 60:00 0 0 was -1 310410214827503 4882 04/08/20 00:11:48 60:00 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4883 04/08/20 00:39:24 12:41 0 0 was 3587080982063726 310410214827503 APPLE !PHONES 4884 04/08/20 00:52:05 0:52 2820 1324 was 3587080982063726 310410214827503 APPLE 'PHONES 4885 04/08/20 00:52:05 0:52 2688 1324 was 3587080982063726 310410214827503 APPLE 'PHONES 4886 04/08/20 00:53:01 1:21 6672 5904 was 3587080982063726 310410214827503 APPLE 'PHONES 4887 04/08/20 00:54:26 1:27 6672 5963 was 3587080982063726 310410214827503 APPLE 'PHONES 4888 04/08/20 00:55:53 36:35 20352 8940 was 3587080982063726 310410214827503 APPLE 'PHONES 4889 04/08/20 01:03:08 60:00 0 0 ins -1 310410214827503 4890 04/08/20 01:11:48 18:16 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 4891 04/08/20 01:30:03 2:26 192 Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 4892 04/08/20 01:30:04 2:26 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 4893 04/08/20 01:32:30 10:52 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 4894 04/08/20 01:32:34 0:17 7270 3849 ins 3587080982063726 310410214827503 APPLE !PHONES 4895 04/08/20 01:32:51 1:12 8240 5296 ins 3587080982063726 310410214827503 APPLE !PHONES 4896 04/08/20 01:34:03 8:08 2860 1432 ins 3587080982063726 310410214827503 APPLE 'PHONES 4897 04/08/20 01:42:11 0:35 5072 1680 ins 3587080982063726 310410214827503 APPLE 'PHONES 4898 04/08/20 01:42:46 0:17 3484 2324 ins 3587080982063726 310410214827503 APPLE 'PHONES 4899 04/08/20 01:43:03 60:00 12028 4220 ins 3587080982063726 310410214827503 APPLE 'PHONES 4900 04/08/20 01:43:21 6:30 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 201 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002845 The information contained her is Ns tit not for general distribution. EFTA 00116921 EFTA01251445 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ....,„ ••—s " -se0• AT&T OTC. Run Date: 06/17/2020 Run T1MA: 10:63:51 Data Osage for: Item Conn. Conn. Originating ET Bytes Bytes Apn INZI INSI MAKE NICOLL Date Time Hurter UP Dn (OTC) 4901 04/08/20 01:43:22 6:30 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4902 04/08/20 01:49:52 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4903 04/08/20 02:03:08 35:59 0 0 ins -1 310410214827503 4904 04/08/20 02:43:03 60:00 7064 2756 in 3587080982063726 310410214827503 APPLE !PHONES 4905 04/08/20 02:49:52 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4906 04/08/20 03:43:03 60:00 8480 3020 ins 3587080982063726 310410214827503 APPLE !PHONES 4907 04/08/20 03:49:52 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4908 04/08/20 04:43:03 60:00 8604 3128 ins 3587080982063726 310410214827503 APPLE !PHONES 4909 04/08/20 04:49:52 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4910 04/08/20 05:43:03 60:00 9928 3144 ins 3587080982063726 310410214827503 APPLE !PHONES 4911 04/08/20 05:49:52 0:01 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no 4912 04/08/20 05:49:56 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no 4913 04/08/20 06:43:03 60:00 10256 4364 ins 3587080982063726 310410214827503 APPLE !PHONES 4914 04/08/20 06:49:56 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4915 04/08/20 07:43:03 60:00 10272 4080 ims 3587080982063726 310410214827503 APPLE !PHONES 4916 04/08/20 07:49:56 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4917 04/08/20 08:43:03 60:00 6848 2648 ins 3587080982063726 310410214827503 APPLE !PHONES 4918 04/08/20 08:49:56 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no 4919 04/08/20 09:43:03 60:00 6848 2756 ins 3587080982063726 310410214827503 APPLE IPRONE8 4920 04/08/20 09:49:56 0:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no 4921 04/08/20 09:49:58 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4922 04/08/20 10:43:03 60:00 8496 3128 ins 3587080982063726 310410214827503 APPLE !PHONES 4923 04/08/20 10:49:58 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4924 04/08/20 11:43:03 60:00 16852 6076 ins 3587080982063726 310410214827503 APPLE !PHONES 4925 04/08/20 11:49:58 39:44 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will phew as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 202 AT&T does not retain records that can definitively show whether a transaction was NETIAL customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002846 The information contained her is not for general distribution. EFTA 00116922 EFTA01251446 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tr ‘"g° asS/ . AT&T UTC. Run pato: 06/17/2020 Run Time: 18:55:54 Data usage For: Item conn. Conn. Originating ET Bytes Bytom Apn rest IMBI ten won Date Time Number up on (UTC) 4926 04/08/20 12:29:43 58:16 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 4927 04/08/20 12:43:03 48:33 9912 3888 ims 3587080982063726 310410214827503 APPLE 110)(0=8 4928 04/08/20 13:20:59 36:55 13827 10907 ims -1 310410214827503 4929 04/08/20 13:31:36 44:51 20550 12782 ims -1 310410214827503 4930 04/08/20 13:57:54 39:18 15283 11088 imp -1 310410214827503 4931 04/08/20 14:16:27 19:57 10035 6461 imp -1 310410214827503 4932 04/08/20 14:37:12 2:49 11278 6408 xmo 3587080982063726 310410214827503 APPLE 110)(0=8 4933 04/08/20 14:38:10 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110)(0=8 no 4934 04/08/20 14:40:01 1:06 3536 1448 xmo 3587080982063726 310410214827503 APPLE IPMONE8 4935 04/08/20 14:40:01 1:06 3404 1448 xmo 3587080982063726 310410214827503 APPLE IPMONE8 4936 04/08/20 14:41:07 60:00 13676 4592 xmo 3587080982063726 310410214827503 APPLE IPMONE8 4937 04/08/20 15:38:10 0:15 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 4938 04/08/20 15:41:07 39:31 3408 1432 xms 3587080982063726 310410214827503 APPLE IPMONE8 4939 04/08/20 15:56:05 2:10 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 4940 04/08/20 15:56:06 2:10 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 4941 04/08/20 15:58:16 16:34 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 4942 04/08/20 16:14:49 8:15 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 4943 04/08/20 16:14:50 8:15 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 4944 04/08/20 16:22:45 60:00 18464 9488 xms -1 310410214827503 4945 04/08/20 16:23:05 15:54 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110)(0=8 no 4946 04/08/20 16:38:58 2:10 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 4947 04/08/20 16:38:59 2:10 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4948 04/08/20 16:41:09 1:44 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4949 04/08/20 16:42:52 0:42 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 4950 04/08/20 16:42:53 0:42 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 203 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002847 The information contained her is PsiTnAL not for general distribution. EFTA 00116923 EFTA01251447 NOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in ..„ •--s`" 1.0/ AT&T arc. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytaa Apn INEI INS' teat MODEL Data Time Number Up Dn (UTC) 4951 04/08/20 16:43:35 1:06 0 0 rumgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4952 04/08/20 16:44:41 2:03 192 Orumgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4953 04/08/20 16:44:42 2:03 0 Orumgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4954 04/08/20 16:46:45 23:13 0 OnAtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4955 04/08/20 17:09:57 9:19 192 OnAtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 4956 04/08/20 17:09:58 9:19 0 Orumgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4957 04/08/20 17:19:17 11:18 0 Orumgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4958 04/08/20 17:22:45 1:12 0 0 ims 3587080982063726 310410214827503 APPLE !PHONES 4959 04/08/20 17:23:56 2:15 4000 1464 ims 3587080982063726 310410214827503 APPLE !PHONES 4960 04/08/20 17:23:57 2:14 3936 1464 ims 3587080982063726 310410214827503 APPLE DRONES 4961 04/08/20 17:26:11 59:38 8852 3144 ims 3587080982063726 310410214827503 APPLE DRONES 4962 04/08/20 17:30:34 2:36 192 OnAtgonpho 3587080982063726 310410214827503 APPLE DRONES no 4963 04/08/20 17:30:35 2:36 0 OnAtgonpho 3587080982063726 310410214827503 APPLE DRONES no 4964 04/08/20 17:33:11 22:30 0 OnAtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4965 04/08/20 17:55:41 2:03 192 Orumgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4966 04/08/20 17:55:42 2:03 0 Orumgonpho 3587080982063726 310410214827503 APPLE DRONES no 4967 04/08/20 17:57:45 2:17 0 Orumgonpho 3587080982063726 310410214827503 APPLE DRONES no 4968 04/08/20 18:00:01 1:14 192 Orumgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4969 04/08/20 18:00:02 1:14 0 Orumgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4970 04/08/20 18:01:16 6:09 0 OnAtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4971 04/08/20 18:07:24 8:17 192 OnAtgonpho 3587080982063726 310410214827503 APPLE DRONES no 4972 04/08/20 18:07:25 8:17 0 OnAtgonpho 3587080982063726 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 204 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002848 The information contained hereCtoNfti NeTniliAL not for general distribution. EFTA 00116924 EFTA01251448 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in .aIe . Ze 01 AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes, Apn INEZ INSI NAfl NODES Date Time Number Up Dn (UTC) 4973 04/08/20 18:15:42 5:36 0 Onxtgonpho 3587080982063726 310410214827503 APPLE INIONZ8 no 4974 04/08/20 18:21:17 2:10 192 Onxtgonpho 3587080982063726 310410214827503 APPLE INIONZ8 no 4975 04/08/20 18:21:18 2:11 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IL0MONZ8 no 4976 04/08/20 18:21:19 2:08 7136 6814 imp 3587080982063726 310410214827503 APPLE IL0MONZ8 4977 04/08/20 18:21:20 2:09 6746 6872 imp 3587080982063726 310410214827503 APPLE INIONZ8 4978 04/08/20 18:23:29 14:17 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE INIONZ8 no 4979 04/08/20 18:23:30 14:16 6676 6000 imp 3587080982063726 310410214827503 APPLE II0MONZ8 4980 04/08/20 18:37:45 2:11 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 4981 04/08/20 18:37:46 2:10 6246 6674 imp 3587080982063726 310410214827503 APPLE IPM0NE8 4982 04/08/20 18:37:46 2:11 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 4983 04/08/20 18:37:48 2:09 6674 5982 ims 3587080982063726 310410214827503 APPLE IPM0NE8 4984 04/08/20 18:39:57 7:06 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 4985 04/08/20 18:39:59 7:04 8478 8108 ims 3587080982063726 310410214827503 APPLE IPM0NE8 4986 04/08/20 18:47:03 1:04 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 4987 04/08/20 18:48:06 47:06 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 4988 04/08/20 18:48:07 47:06 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 4989 04/08/20 18:48:12 47:00 7500 10382 imp 3587080982063726 310410214827503 APPLE IPM0NE8 4990 04/08/20 18:48:13 47:00 10382 7344 imp 3587080982063726 310410214827503 APPLE IPM0NE8 4991 04/08/20 19:35:13 4:52 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 4992 04/08/20 19:35:16 4:49 9386 6194 ims 3587080982063726 310410214827503 APPLE IPM0NE8 4993 04/08/20 19:40:04 2:03 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 4994 04/08/20 19:40:05 2:03 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 4995 04/08/20 19:40:20 1:47 6228 6672 ims 3587080982063726 310410214827503 APPLE IPM0NE8 4996 04/08/20 19:40:21 1:47 6672 5964 ims 3587080982063726 310410214827503 APPLE IPM0NE8 4997 04/08/20 19:42:08 18:18 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 4998 04/08/20 19:42:10 14:47 6666 5982 imp 3587080982063726 310410214827503 APPLE IPM0NE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indipate a customer initiated a transaction. Page 205 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002849 The information contained horeeteNelt NTailiAL not for general distribution. EFTA 00116925 EFTA01251449 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in tt"4.4a 1. sio/ AT&T OTC. Run pato: 06/17/2020 Run Time: Data Osage For: MN= Item Conn. Conn. Originating ET Bytes • Bytom Apn INZI I83I MARL MODEL Date Time Number Up Dn (LTC) 4999 04/08/20 19:57:05 60:00 36371 17916 ims -1 310410214827503 5000 04/08/20 19:59:48 18:29 1212540 3937406 ims -1 310410214827503 5001 04/08/20 20:00:25 14:37 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5002 04/08/20 20:00:26 14:37 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5003 04/08/20 20:15:03 1:07 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5004 04/08/20 20:16:09 8:07 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5005 04/08/20 20:16:10 8:07 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5006 04/08/20 20:24:17 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5007 04/08/20 20:57:05 60:00 8356 3004 ims -1 310410214827503 5008 04/08/20 21:24:17 34:57 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110801428 no 5009 04/08/20 21:57:05 60:00 9928 3252 ins -1 310410214827503 5010 04/08/20 21:59:14 9:19 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110801428 no 5011 04/08/20 21:59:15 9:20 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5012 04/08/20 22:08:35 31:30 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5013 04/08/20 22:40:04 8:16 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5014 04/08/20 22:40:06 8:15 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5015 04/08/20 22:48:21 5:35 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5016 04/08/20 22:53:55 7:12 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5017 04/08/20 22:53:57 7:11 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5018 04/08/20 22:57:05 60:00 12136 4344 ims -1 310410214827503 5019 04/08/20 23:01:08 1:34 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 110801428 no 5020 04/08/20 23:02:41 8:21 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5021 04/08/20 23:02:42 8:21 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 206 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002850 The information contained hereCtoNelt MTV& not for general distribution. EFTA 00116926 EFTA01251450 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in ....,,• AT&T ••-•°""‘ UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating Cr Bytes Bytes Apn ICI INS! Mimi SCOTS Date Time Number op Dn (UTC) 5022 04/08/20 23:11:03 59:55 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 5023 04/08/20 23:57:05 60:00 8604 3020 imo -1 310410214827503 5024 04/09/20 00:10:58 32:47 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 5025 04/09/20 00:10:58 32:48 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 5026 04/09/20 00:43:46 49:30 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5027 04/09/20 00:57:05 60:00 13676 4768 imo -1 310410214827503 5028 04/09/20 01:33:15 3:23 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5029 04/09/20 01:33:16 3:23 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5030 04/09/20 01:36:40 1:09 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5031 04/09/20 01:37:48 2:03 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 5032 04/09/20 01:37:49 2:03 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5033 04/09/20 01:39:02 0:49 6244 6686 imo 3587080982063726 310410214827503 APPLE !PHONES 5034 04/09/20 01:39:03 0:49 6686 5980 imo 3587080982063726 310410214827503 APPLE DRONES 5035 04/09/20 01:39:52 2:54 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5036 04/09/20 01:39:54 0:15 6692 6000 imo 3587080982063726 310410214827503 APPLE !PHONES 5037 04/09/20 01:40:09 0:33 3640 1340 imo 3587080982063726 310410214827503 APPLE !PHONES 5038 04/09/20 01:40:42 0:39 2628 1340 imo 3587080982063726 310410214827503 APPLE DRONES 5039 04/09/20 01:41:21 60:00 10164 3896 imo 3587080982063726 310410214827503 APPLE DRONES 5040 04/09/20 01:42:45 2:04 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 5041 04/09/20 01:42:46 2:04 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 5042 04/09/20 01:44:50 3:24 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5043 04/09/20 01:48:14 19:41 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5044 04/09/20 01:48:15 19:41 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5045 04/09/20 01:57:05 54:47 0 0 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 207 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002851 The information contained heraleeNfti NeTiliAL not for general distribution. EFTA 00116927 EFTA01251451 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in '....al ‘ing° salt AT&T arc. Run Data: 06/17/2020 Run Tina: Data Usage Tor: NM= Ilea Conn. Conn. Originating ET Bytes Byte. Apn INCI IMSI NIUM MODEL Data Time Number Up Dn (UTC) 5046 04/09/20 02:07:55 1:52 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5047 04/09/20 02:07:56 1:52 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5048 04/09/20 02:09:48 24:10 192 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5049 04/09/20 02:09:49 24:10 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5050 04/09/20 02:33:59 58:16 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5051 04/09/20 02:41:21 60:00 216 0 ims 3587080982063726 310410214827503 APPLE !PHONES 5052 04/09/20 02:51:52 60:00 21281 10462 ims -1 310410214827503 5053 04/09/20 03:41:21 60:00 0 0 ims 3587080982063726 310410214827503 APPLE !PHONES 5054 04/09/20 03:51:52 60:00 8496 3036 ims -1 310410214827503 5055 04/09/20 04:41:21 60:00 0 0 ims 3587080982063726 310410214827503 APPLE !PHONES 5056 04/09/20 04:51:52 29:42 4980 1588 ims -1 310410214827503 5057 04/09/20 05:41:21 60:00 0 0 ims 3587080982063726 310410214827503 APPLE IPHOME8 5058 04/09/20 06:41:21 1:14 0 0 ims 3587080982063726 310410214827503 APPLE 1PROME8 5059 04/09/20 12:39:38 1:16 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 5060 04/09/20 12:39:50 1:04 8226 8704 ims 3587080982063726 310410214827503 APPLE 1PROME8 5061 04/09/20 12:40:54 4:31 192 Ommtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 5062 04/09/20 12:40:55 4:31 0 Ommtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5063 04/09/20 12:42:27 2:58 6225 6646 ims 3587080982063726 310410214827503 APPLE 1PROME8 5064 04/09/20 12:42:29 2:57 6646 5961 ims 3587080982063726 310410214827503 APPLE 1PROME8 5065 04/09/20 12:45:26 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 5066 04/09/20 12:45:31 60:00 13308 10592 ims 3587080982063726 310410214827503 APPLE 1PROME8 5067 04/09/20 13:45:26 33:02 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 5068 04/09/20 13:45:31 32:57 2596 1324 ims 3587080982063726 310410214827503 APPLE 1PROME8 5069 04/09/20 14:18:27 3:29 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 5070 04/09/20 14:18:28 3:29 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 5071 04/09/20 14:18:31 3:25 7232 6798 ims 3587080982063726 310410214827503 APPLE 1PROME8 5072 04/09/20 14:18:32 3:25 6798 6968 ins 3587080982063726 310410214827503 APPLE 1PROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 208 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002852 The information contained heraleoNyFti NTifikE not for general distribution. EFTA 00116928 EFTA01251452 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in tr ‘ing° asi edfi AT&T arc. Run Dato: 06/17/2020 Run Time: 1S:65:58 Data Osage Tor: Item Conn. Conn. Originating Byte. Bytoa Apn MEI IMSI MUM MOTS Date Time Number Up Dn (OTC) 5073 04/09/20 14:21:57 2:17 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 5074 04/09/20 14:22:01 2:13 6664 5977 imp 3587080982063726 310410214827503 APPLE IPHONE8 5075 04/09/20 14:24:13 2:05 192 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 5076 04/09/20 14:24:14 2:05 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 5077 04/09/20 14:24:16 2:02 7202 6744 imp 3587080982063726 310410214827503 APPLE !PHONES 5078 04/09/20 14:24:17 2:02 6744 6850 imp 3587080982063726 310410214827503 APPLE !PHONES 5079 04/09/20 14:26:19 5:03 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5080 04/09/20 14:26:23 4:S9 10870 9856 imp 3587080982063726 310410214827503 APPLE !PHONES 5081 04/09/20 14:31:22 9:11 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5082 04/09/20 14:31:23 9:11 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 5083 04/09/20 14:31:25 9:08 13898 16793 imp 3587080982063726 310410214827503 APPLE IPRONE8 5084 04/09/20 14:31:26 9:08 15888 13634 imp 3587080982063726 310410214827503 APPLE IPRONE8 5085 04/09/20 14:31:39 7:S4 1168181 1273192 imp 3587080982063726 310410214827503 APPLE IPRONE8 5086 04/09/20 14:31:40 7:S4 1273192 1168181 imp 3587080982063726 310410214827503 APPLE IPRONE8 5087 04/09/20 14:40:34 2:03 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 5088 04/09/20 14:40:35 2:03 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 5089 04/09/20 14:40:43 1:54 6264 6672 imp 3587080982063726 310410214827503 APPLE IPRONE8 5090 04/09/20 14:40:44 1:54 6672 6000 imp 3587080982063726 310410214827503 APPLE IPRONE8 5091 04/09/20 14:42:38 5:51 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5092 04/09/20 14:42:42 5:47 8354 7864 imp 3587080982063726 310410214827503 APPLE !PHONES 5093 04/09/20 14:48:28 2:12 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5094 04/09/20 14:48:29 2:12 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5095 04/09/20 14:49:33 1:07 7156 6748 imp 3587080982063726 310410214827503 APPLE !PHONES 5096 04/09/20 14:49:34 1:07 6748 6892 imp 3587080982063726 310410214827503 APPLE IPRONE8 5097 04/09/20 14:50:41 2:16 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5098 04/09/20 14:50:56 2:01 48 0 imp 3587080982063726 310410214827503 APPLE !PHONES 5099 04/09/20 14:52:57 13:49 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 209 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002853 The information contained heraCtoNftli PsisTfikE not for general distribution. EFTA 00116929 EFTA01251453 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating 2T Bytes Byte. Apn IMBI MUT NICOLL Data Time Humber Up Dn (OTC) 5100 04/09/20 14:52:58 13:49 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 5101 04/09/20 14:53:03 13:43 6312 6682 imam 3587080982063726 310410214827503 APPLE DRONES 5102 04/09/20 14:53:04 13:43 6682 5960 imam 3587080982063726 310410214827503 APPLE DRONES 5103 04/09/20 15:06:47 7:06 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IONONE8 no 5104 04/09/20 15:08:15 5:38 8934 7979 imam 3587080982063726 310410214827503 APPLE !PHONES 5105 04/09/20 15:13:52 16:13 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 5106 04/09/20 15:13:53 16:13 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 5107 04/09/20 15:14:14 15:51 7238 7452 imam 3587080982063726 310410214827503 APPLE DRONES 5108 04/09/20 15:14:15 15:51 7452 6974 imam 3587080982063726 310410214827503 APPLE DRONES 5109 04/09/20 15:30:06 8:54 192 Onxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 5110 04/09/20 15:30:07 8:53 6243 6686 ins 3587080982063726 310410214827503 APPLE DRONES 5111 04/09/20 15:30:07 8:54 0 Onxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 5112 04/09/20 15:30:08 8:53 6686 5979 imam 3587080982063726 310410214827503 APPLE DRONES 5113 04/09/20 15:39:00 6:19 192 Onxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 5114 04/09/20 15:39:01 6:19 0 Onxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 5115 04/09/20 15:39:04 6:15 6262 6672 imam 3587080982063726 310410214827503 APPLE DRONES 5116 04/09/20 15:39:05 6:15 6672 5998 ins 3587080982063726 310410214827503 APPLE DRONES 5117 04/09/20 15:45:20 0:06 0 Onxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 5118 04/09/20 15:45:53 8:04 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 5119 04/09/20 15:47:28 6:29 10998 8256 ins 3587080982063726 310410214827503 APPLE DRONES 5120 04/09/20 15:53:56 24:15 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 5121 04/09/20 15:53:57 24:15 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 5122 04/09/20 15:53:59 24:12 6262 6780 ins 3587080982063726 310410214827503 APPLE DRONES 5123 04/09/20 15:54:00 24:12 6780 5998 ins 3587080982063726 310410214827503 APPLE DRONES 5124 04/09/20 16:18:12 0:38 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 5125 04/09/20 16:18:15 0:35 6688 5998 imam 3587080982063726 310410214827503 APPLE DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 210 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002854 The information contained her is not for general distribution. EFTA_00I 16930 EFTA01251454 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ...,,• ••-a""‘AT&T arc. Run Oats: 06/17/2020 Run Tina: 18:55:58 Data Usage For: Item conn. Conn. originating ET Sytes Bytes Apn ItCEI INSI MAfl MODEL Data Time Number Up Dn (UTC) 5126 04/09/20 16:18:49 8:32 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 5127 04/09/20 16:18:51 8:31 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 11080=8 no 5128 04/09/20 16:18:53 8:28 6244 6666 ims 3587080982063726 310410214827503 APPLE 11080=8 5129 04/09/20 16:18:54 8:28 6666 5980 ims 3587080982063726 310410214827503 APPLE 11080=8 5130 04/09/20 16:27:22 22:13 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 11080=8 no 5131 04/09/20 16:28:43 20:52 8168 6944 ims 3587080982063726 310410214827503 APPLE 11080=8 5132 04/09/20 16:49:34 2:34 192 Onxtgonpho 3587080982063726 310410214827503 APPLE 11080=8 no 5133 04/09/20 16:49:35 2:34 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 5134 04/09/20 16:52:09 10:01 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 11080=8 no 5135 04/09/20 16:52:10 10:00 7138 6746 imp 3587080982063726 310410214827503 APPLE 11080=8 5136 04/09/20 16:52:10 10:02 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 11080=8 no 5137 04/09/20 16:52:11 10:01 6746 6874 ims 3587080982063726 310410214827503 APPLE 11080=8 5138 04/09/20 17:02:11 2:54 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 11080=8 no 5139 04/09/20 17:02:15 2:50 8958 7944 ims 3587080982063726 310410214827503 APPLE !PROMS 5140 04/09/20 17:05:04 8:33 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 5141 04/09/20 17:05:05 8:34 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 11080=8 no 5142 04/09/20 17:05:07 8:30 6224 6688 ims 3587080982063726 310410214827503 APPLE 11080=8 5143 04/09/20 17:05:08 8:31 6688 5960 ims 3587080982063726 310410214827503 APPLE 11080=8 5144 04/09/20 17:13:38 0:46 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 11080=8 no 5145 04/09/20 17:13:43 0:41 8390 8080 ims 3587080982063726 310410214827503 APPLE 11080=8 5146 04/09/20 17:14:23 21:05 192 Onxtgonpho 3587080982063726 310410214827503 APPLE 11080=8 no 5147 04/09/20 17:14:24 21:06 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 5148 04/09/20 17:16:36 18:52 6262 18824 ims 3587080982063726 310410214827503 APPLE 11080=8 5149 04/09/20 17:16:37 18:53 6692 5998 ims 3587080982063726 310410214827503 APPLE 11080=8 5150 04/09/20 17:35:30 54:43 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 11080=8 no 5151 04/09/20 17:47:03 43:10 9282 7304 ims 3587080982063726 310410214827503 APPLE 11080=8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 211 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNCGM00002855 The information contained her is NTrifikE not for general distribution. EF-EA_00116931 EFTA01251455 MOBILITY 41011i 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in •er ‘"Ii. e es sa% AT&T UTC. Run Date: 06/17/2020 Run Time: 10:45:58 Data Usage For: Item Conn. Conn. Originating LT Bytes Bytes Apn IX= IMSI NUM MODEL Date Time Number Up Dn (UTC) 5152 04/09/20 18:30:12 21:10 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5153 04/09/20 18:30:13 21:10 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5154 04/09/20 18:30:16 21:06 6440 8812 imp 3587080982063726 310410214827503 APPLE !PHONES 5155 04/09/20 18:30:16 21:07 8812 6176 imp 3587080982063726 310410214827503 APPLE !PHONES 5156 04/09/20 18:51:23 0:28 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5157 04/09/20 18:51:50 2:09 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5158 04/09/20 18:51:51 2:09 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5159 04/09/20 18:54:00 7:49 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5160 04/09/20 18:54:02 7:47 6674 5982 imp 3587080982063726 310410214827503 APPLE IPHOME8 5161 04/09/20 19:01:49 8:25 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 5162 04/09/20 19:01:50 8:25 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5163 04/09/20 19:05:35 4:39 6226 6672 imp 3587080982063726 310410214827503 APPLE IPHOME8 5164 04/09/20 19:05:36 4:39 6672 5962 imp 3587080982063726 310410214827503 APPLE !PHONES 5165 04/09/20 19:10:15 11:12 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5166 04/09/20 19:13:55 7:32 6686 5980 imp 3587080982063726 310410214827503 APPLE !PHONES 5167 04/09/20 19:21:26 31:08 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5168 04/09/20 19:21:27 31:08 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 5169 04/09/20 19:22:05 30:29 31967 81232 imp 3587080982063726 310410214827503 APPLE !PHONES 5170 04/09/20 19:22:06 30:29 46600 36287 imp 3587080982063726 310410214827503 APPLE IPHOME8 5171 04/09/20 19:29:26 0:17 208 0 imp 3587080982063726 310410214827503 APPLE IPHOME8 5172 04/09/20 19:29:27 0:16 0 208 imp 3587080982063726 310410214827503 APPLE IPHOME8 5173 04/09/20 19:29:54 0:26 0 0 imp 3587080982063726 310410214827503 APPLE IPHOME8 5174 04/09/20 19:37:26 0:27 8044 5083 imp 3587080982063726 310410214827503 APPLE IPHOME8 5175 04/09/20 19:37:27 0:27 4623 8044 imp 3587080982063726 310410214827503 APPLE IPHOME8 5176 04/09/20 19:48:21 0:03 0 0 imp 3587080982063726 310410214827503 APPLE IPHOME8 5177 04/09/20 19:52:35 0:52 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5178 04/09/20 19:52:39 0:48 7416 6104 ins 3587080982063726 310410214827503 APPLE IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 212 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002856 The information contained hereCtoNelt NTifikE not for general distribution. EFTA 00116932 EFTA01251456 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in 1/4 ' •,,a( "..‘S 11. AT&T arc. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytom Apn INCI IMSI NIUM MODEL Data Time Number UP Dn (UTC) 5179 04/09/20 19:53:26 19:00 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 5180 04/09/20 19:53:27 19:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 5181 04/09/20 19:53:30 18:56 6243 6670 ims 3587080982063726 310410214827503 APPLE 'PHONES 5182 04/09/20 19:53:31 18:56 6670 5979 ims 3587080982063726 310410214827503 APPLE 'PHONES 5183 04/09/20 20:12:27 8:57 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 5184 04/09/20 20:12:31 8:53 13288 10292 ims 3587080982063726 310410214827503 APPLE 'PHONES 5185 04/09/20 20:21:23 15:14 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 5186 04/09/20 20:21:24 15:14 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5187 04/09/20 20:21:26 15:11 6262 25616 ims 3587080982063726 310410214827503 APPLE !PHONES 5188 04/09/20 20:21:27 15:11 6784 5998 ims 3587080982063726 310410214827503 APPLE !PHONES 5189 04/09/20 20:36:38 0:39 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 5190 04/09/20 20:36:42 0:35 6692 5998 ims 3587080982063726 310410214827503 APPLE 'PHONES 5191 04/09/20 20:37:17 15:46 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 5192 04/09/20 20:37:18 15:46 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 5193 04/09/20 20:37:20 15:43 17838 19124 ims 3587080982063726 310410214827503 APPLE 'PHONES 5194 04/09/20 20:37:21 15:43 18424 17574 ims 3587080982063726 310410214827503 APPLE 'PHONES 5195 04/09/20 20:39:13 0:27 12546 5521 ims 3587080982063726 310410214827503 APPLE 'PHONES 5196 04/09/20 20:39:14 0:27 5521 12546 ims 3587080982063726 310410214827503 APPLE 'PHONES 5197 04/09/20 20:53:04 5:24 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 5198 04/09/20 20:53:08 5:20 8152 6920 ims 3587080982063726 310410214827503 APPLE 'PHONES 5199 04/09/20 20:58:27 59:43 192 Onxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 5200 04/09/20 20:58:28 59:43 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5201 04/09/20 20:58:30 59:40 23490 33074 ims 3587080982063726 310410214827503 APPLE !PHONES 5202 04/09/20 20:58:31 59:40 29420 23138 ims 3587080982063726 310410214827503 APPLE 'PHONES 5203 04/09/20 21:03:35 22:19 5259603 4388034 ims 3587080982063726 310410214827503 APPLE 'PHONES 5204 04/09/20 21:03:36 22:19 4388034 5259603 ims 3587080982063726 310410214827503 APPLE 'PHONES 5205 04/09/20 21:29:43 28:03 4870778 3178523 ims 3587080982063726 310410214827503 APPLE 'PHONES 5206 04/09/20 21:29:44 28:02 3178523 4870778 ims 3587080982063726 310410214827503 APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 213 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002857 The information contained heraleeNelt NTatikE not for general distribution. EF-EA_00116933 EFTA01251457 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in %...11. ‘6.1.11. AT&T arc. Run Data: 06/17/2020 Run TIM*: Data Osage Tor: Item Conn. Conn. Originating ET Bytes Bytom Apn DELI IMSI NUM MODEL Data Tina Number Up On (OTC) 5207 04/09/20 21:58:11 19:57 0 Ormagonpho 3587080982063726 310410214827503 APPLE !PROMS no 5208 04/09/20 21:58:14 19:54 6682 5961 ims 3587080982063726 310410214827503 APPLE IPM01428 5209 04/09/20 22:18:07 14:26 192 Ormagonpho 3587080982063726 310410214827503 APPLE IPM01428 no 5210 04/09/20 22:18:08 14:26 0 Ormagonpho 3587080982063726 310410214827503 APPLE IPM01428 no 5211 04/09/20 22:18:11 14:22 6225 6668 ims 3587080982063726 310410214827503 APPLE !PROMS 5212 04/09/20 22:18:12 14:22 6668 5961 imp 3587080982063726 310410214827503 APPLE !PROMS 5213 04/09/20 22:32:34 0:37 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5214 04/09/20 22:33:11 14:33 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 5215 04/09/20 22:33:12 14:33 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 5216 04/09/20 22:33:17 14:27 14436 17820 ins 3587080982063726 310410214827503 APPLE !PROMS 5217 04/09/20 22:33:18 14:27 16610 14172 ins 3587080982063726 310410214827503 APPLE !PROMS 5218 04/09/20 22:33:53 13:26 1717807 2636672 imp 3587080982063726 310410214827503 APPLE !PROMS 5219 04/09/20 22:33:54 13:26 2636672 1717807 imp 3587080982063726 310410214827503 APPLE !PROMS 5220 04/09/20 22:47:45 1:23 0 Oroftmonpho 3587080982063726 310410214827503 APPLE !PROMS no 5221 04/09/20 22:47:49 1:19 6690 5980 ims 3587080982063726 310410214827503 APPLE IPM01428 5222 04/09/20 22:49:07 4:55 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPM01428 no 5223 04/09/20 22:49:08 4:55 0 Onatmonpho 3587080982063726 310410214827503 APPLE IPM01428 no 5224 04/09/20 22:49:10 4:52 12820 13228 ims 3587080982063726 310410214827503 APPLE !PROMS 5225 04/09/20 22:49:11 4:52 13228 12556 ims 3587080982063726 310410214827503 APPLE !PROMS 5226 04/09/20 22:49:23 4:10 613278 833749 ims 3587080982063726 310410214827503 APPLE !PROMS 5227 04/09/20 22:49:24 4:10 832938 613278 ims 3587080982063726 310410214827503 APPLE IPM01428 5228 04/09/20 22:54:02 18:15 192 Ormagonpho 3587080982063726 310410214827503 APPLE IPM01428 no 5229 04/09/20 22:54:03 18:16 0 OnatTonpho 3587080982063726 310410214827503 APPLE IPM01428 no 5230 04/09/20 22:54:31 17:46 7136 49428 ins 3587080982063726 310410214827503 APPLE !PROMS 5231 04/09/20 22:54:32 17:47 6756 6872 ins 3587080982063726 310410214827503 APPLE !PROMS 5232 04/09/20 23:12:19 22:57 0 OnatTonpho 3587080982063726 310410214827503 APPLE !PHONES no 5233 04/09/20 23:14:25 20:51 21192 21367 ims 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 214 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002858 The information contained heraleop+Fti NeTniliAL not for general distribution. EF-EA_00116934 EFTA01251458 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Byte. Bytom Apn INLI INSI NICOLL Data Time Number op Dn (OTC) 5234 04/09/20 23:32:08 0:33 51730 63016 imp 3587080982063726 310410214827503 APPLE 'PHONES 5235 04/09/20 23:33:28 0:26 44687 70034 imp 3587080982063726 310410214827503 APPLE 'PHONES 5236 04/09/20 23:35:15 2:03 192 Os-mtg.:mph., 3587080982063726 310410214827503 APPLE 'PHONES no 5237 04/09/20 23:35:16 2:03 0 Os-mtg.:mph., 3587080982063726 310410214827503 APPLE !PHONES no 5238 04/09/20 23:35:18 2:00 7214 6788 imp 3587080982063726 310410214827503 APPLE 'PHONES 5239 04/09/20 23:35:19 2:00 6788 6950 imp 3587080982063726 310410214827503 APPLE 'PHONES 5240 04/09/20 23:37:19 0:44 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 5241 04/09/20 23:37:23 0:40 6672 5964 imp 3587080982063726 310410214827503 APPLE 'PHONES 5242 04/09/20 23:38:02 52:28 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 5243 04/09/20 23:38:03 52:28 0 Onatgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 5244 04/09/20 23:38:05 52:25 14044 15264 imp 3587080982063726 310410214827503 APPLE 'PHONES 5245 04/09/20 23:38:06 52:25 15264 13780 imp 3587080982063726 310410214827503 APPLE 'PHONES 5246 04/10/20 00:24:34 2:04 436591 350281 imp 3587080982063726 310410214827503 APPLE 'PHONES 5247 04/10/20 00:24:35 2:04 350002 436591 imp 3587080982063726 310410214827503 APPLE 'PHONES 5248 04/10/20 00:30:31 0:38 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 5249 04/10/20 00:30:34 0:35 3394 2180 imp 3587080982063726 310410214827503 APPLE 'PHONES 5250 04/10/20 00:31:09 103:15 192 Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 5251 04/10/20 00:31:10 60:00 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 5252 04/10/20 00:31:12 103:12 12072 15268 imp 3587080982063726 310410214827503 APPLE !PHONES 5253 04/10/20 00:31:13 60:00 12060 10484 imp 3587080982063726 310410214827503 APPLE !PHONES 5254 04/10/20 01:31:10 43:15 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 5255 04/10/20 01:31:13 43:12 2596 1324 imp 3587080982063726 310410214827503 APPLE 'PHONES 5256 04/10/20 02:14:24 21:02 192 Onxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 5257 04/10/20 02:14:25 21:02 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 5258 04/10/20 02:14:46 20:40 6264 6676 imp 3587080982063726 310410214827503 APPLE 'PHONES 5259 04/10/20 02:14:47 20:40 6676 6000 imp 3587080982063726 310410214827503 APPLE 'PHONES 5260 04/10/20 02:35:27 60:00 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 215 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002859 The information contained her is N s not for general distribution. EFTA_Q0I 16935 EFTA01251459 NOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T arc. Run Date: 06/17/2020 Run Time: 18:55:59 Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INEI IM3I MARC MOD= Date Time Number Up Dn (UTC) 5261 04/10/20 02:35:28 60:00 8816 12226 ims 3587080982063726 310410214827503 APPLE !PHONES 5262 04/10/20 02:35:28 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5263 04/10/20 02:35:29 60:00 12226 8660 ims 3587080982063726 310410214827503 APPLE !PHONES 5264 04/10/20 03:35:28 186:43 17299 25710 ims 3587080982063726 310410214827503 APPLE !PHONES 5265 04/10/20 03:35:28 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5266 04/10/20 03:35:29 60:00 21406 15711 ims 3587080982063726 310410214827503 APPLE !PHONES 5267 04/10/20 04:35:28 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5268 04/10/20 04:35:29 60:00 4304 1696 ims 3587080982063726 310410214827503 APPLE !PHONES 5269 04/10/20 05:22:42 60:00 16977 10370 ims -1 310410214827503 5270 04/10/20 05:35:28 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5271 04/10/20 05:35:29 60:00 0 0 imp 3587080982063726 310410214827503 APPLE !PHONES 5272 04/10/20 06:22:42 60:00 8388 2896 imp -1 310410214827503 5273 04/10/20 06:35:28 0:01 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 5274 04/10/20 06:35:29 6:43 0 0 ims 3587080982063726 310410214827503 APPLE !PRONGS 5275 04/10/20 06:42:11 100:51 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5276 04/10/20 06:42:12 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 5277 04/10/20 07:22:42 60:00 8372 2912 ims -1 310410214827503 5278 04/10/20 07:42:12 40:51 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5279 04/10/20 08:22:42 60:00 0 0 ims -1 310410214827503 5280 04/10/20 08:23:03 0:34 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5281 04/10/20 08:23:36 1:53 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5282 04/10/20 08:23:37 1:53 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5283 04/10/20 08:25:30 0:52 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5284 04/10/20 08:26:21 0:55 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 5285 04/10/20 08:26:22 0:55 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 216 AT&T does not retain records that can definitively show whether a transaction was PsiTifikE customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002860 The information contained hereeeNyFtli not for general distribution. EFIA_OCIII6936 EFTA01251460 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in %.' N.,,a1 46.6"11. ss# AT&T arc. Run Date: 06/17/2020 Run Tama: Data Usage For: Item cone. Conn. originating ET Bytes Bytes Apn IICI IMSI MAKE MOLL Date Time Number Op on (Uc) 5286 04/10/20 08:27:17 0:05 0 Onxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5287 04/10/20 08:27:35 3:10 0 Onxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5288 04/10/20 08:30:44 2:59 192 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5289 04/10/20 08:30:45 2:59 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5290 04/10/20 08:30:51 34:02 17797 12158 as -1 310410214827503 5291 04/10/20 08:33:44 2:28 0 Onxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5292 04/10/20 08:36:11 5:00 192 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5293 04/10/20 08:36:13 4:59 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 5294 04/10/20 08:41:12 9:22 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPROME8 no 5295 04/10/20 08:50:34 2:10 192 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5296 04/10/20 08:50:35 2:10 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5297 04/10/20 08:52:45 1:15 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 5298 04/10/20 08:53:59 2:56 192 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5299 04/10/20 08:54:00 2:57 0 Onxtgenpho 3587080982063726 310410214827503 APPLE IPROME8 no 5300 04/10/20 08:56:56 0:06 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 5301 04/10/20 08:58:02 3:39 192 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5302 04/10/20 08:58:04 3:38 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5303 04/10/20 09:01:42 0:54 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 5304 04/10/20 09:02:35 2:08 192 Oruftgenpho 3587080982063726 310410214827503 APPLE IPROME8 no 5305 04/10/20 09:02:36 2:08 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5306 04/10/20 09:04:43 0:06 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 217 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002861 The information contained her is not for general distribution. EF-EA_00116937 EFTA01251461 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in te.,— ad "`s I‘ AT&T arc. Run Date: 06/17/2020 Run Time: Data Osage for: Item Conn. Conn. Originating ET Bytes Bytes Apn net IM3I mum MODEL Date Time Number Up On (OTC) 5307 04/10/20 09:22:42 60:00 0 0 imo -1 310410214827503 5308 04/10/20 10:22:42 60:00 0 0 imo -1 310410214827503 5309 04/10/20 11:22:42 44:03 0 0 imo -1 310410214827503 5310 04/10/20 11:30:56 8:35 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 5311 04/10/20 11:30:57 8:34 6264 6668 ims 3587080982063726 310410214827503 APPLE !PROMS 5312 04/10/20 11:30:57 8:35 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PROMS no 5313 04/10/20 11:30:58 8:34 6668 6000 ims 3587080982063726 310410214827503 APPLE !PHONES 5314 04/10/20 11:39:32 1:48 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5315 04/10/20 11:39:34 1:46 8594 6070 ims 3587080982063726 310410214827503 APPLE !PROMS 5316 04/10/20 11:41:19 14:42 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5317 04/10/20 11:41:20 14:41 6228 6670 ims 3587080982063726 310410214827503 APPLE IPMONE8 5318 04/10/20 11:41:20 14:42 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5319 04/10/20 11:41:21 14:41 6670 5964 ims 3587080982063726 310410214827503 APPLE !PHONES 5320 04/10/20 11:56:02 0:44 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5321 04/10/20 11:56:05 0:41 11394 10004 ims 3587080982063726 310410214827503 APPLE !PROMS 5322 04/10/20 11:56:45 13:02 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PROMS no 5323 04/10/20 11:56:46 13:01 6304 6734 ims 3587080982063726 310410214827503 APPLE !PHONES 5324 04/10/20 11:56:46 13:02 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5325 04/10/20 11:56:47 13:01 6734 6040 ims 3587080982063726 310410214827503 APPLE !PROMS 5326 04/10/20 12:09:21 55:07 16157 8192 ims -1 310410214827503 5327 04/10/20 12:09:48 1:39 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5328 04/10/20 12:11:26 24:08 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PROMS no 5329 04/10/20 12:11:27 24:08 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5330 04/10/20 12:35:35 10:15 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5331 04/10/20 12:45:49 2:05 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5332 04/10/20 12:45:50 2:05 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 218 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002862 The information contained her is Ns tit not for general distribution. EF-EAJVII6938 EFTA01251462 MOBILITY ap. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT4T'S records ere stored and provided in AT&T arc. Run Data: 06/17/2020 Run Tina: Data Usage For: Item Conn. Conn. Originating ET Bytes Byte. Apn INEZ INSI MAfl NICOLL Data Time Number Up Dn (Uc) 5333 04/10/20 12:47:55 0:54 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 5334 04/10/20 12:48:48 1:40 192 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5335 04/10/20 12:48:49 1:40 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 5336 04/10/20 12:50:29 1:10 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5337 04/10/20 12:51:38 2:19 192 Oruftgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 5338 04/10/20 12:51:40 2:18 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 5339 04/10/20 12:53:58 12:56 192 Oruftgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 5340 04/10/20 12:53:59 12:56 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 5341 04/10/20 12:59:18 7:36 6245 6644 ims 3587080982063726 310410214827503 APPLE !PHONES 5342 04/10/20 12:59:19 7:36 6644 6089 ims 3587080982063726 310410214827503 APPLE !PHONES 5343 04/10/20 13:04:28 60:00 9924 6494 ims -1 310410214827503 5344 04/10/20 13:06:55 4:52 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5345 04/10/20 13:11:46 2:03 192 Oruftgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 5346 04/10/20 13:11:47 2:03 0 Onatgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 5347 04/10/20 13:12:42 60:00 19744 9906 mos -1 310410214827503 5348 04/10/20 13:13:50 3:31 0 Onatgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 5349 04/10/20 13:17:20 4:03 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5350 04/10/20 13:17:22 4:03 0 Onatgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5351 04/10/20 13:21:25 1:11 0 Onatgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 5352 04/10/20 13:22:35 2:31 192 Onatgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5353 04/10/20 13:22:36 2:31 0 Onatgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 5354 04/10/20 13:25:07 5:25 0 Onatgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 219 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002863 The information contained her is NeTniliAL not for general distribution. EF-EA_00116939 EFTA01251463 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ...., ‘"Ii.11. 100 AT&T arc. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn INEI IMS1 MCOTS Date Time Number Up Dn (UTC) 5355 04/10/20 13:30:31 0:24 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1101(0=8 no 5356 04/10/20 13:30:32 0:24 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 1101(0=8 no 5357 04/10/20 13:30:56 3:56 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5358 04/10/20 13:34:51 1:06 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5359 04/10/20 13:34:53 1:05 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 1101(0=8 no 5360 04/10/20 13:35:58 8:44 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5361 04/10/20 13:44:41 3:44 192 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5362 04/10/20 13:44:42 3:44 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 5363 04/10/20 13:48:26 7:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5364 04/10/20 13:55:26 0:37 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5365 04/10/20 13:55:27 0:37 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5366 04/10/20 13:56:04 5:57 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1101(0=8 no 5367 04/10/20 14:02:00 2:03 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5368 04/10/20 14:02:01 2:03 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5369 04/10/20 14:04:04 6:37 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 1101(0=8 no 5370 04/10/20 14:04:28 9:37 0 0 moo -1 310410214827503 5371 04/10/20 14:10:40 1:21 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5372 04/10/20 14:10:41 1:21 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5373 04/10/20 14:12:03 10:13 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5374 04/10/20 14:12:42 21:53 0 0 imp -1 310410214827503 5375 04/10/20 14:14:05 0:00 0 0 imp 3587080982063726 310410214827503 APPLE !PHONES 5376 04/10/20 14:14:20 8:00 24235 15112 imp 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 220 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002864 The information contained heraCtoNyFti PsiTniliAL not for general distribution. EF-EAJVII6940 EFTA01251464 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in .....„ •--s`'0/ AT&T UTC. Run Data: 06/17/2020 Run Time: 10:65:59 Data Usage Tor: Item Conn. Conn. Originating TT Bytes Bytom Apn IKEI INS' NAfl NICOLL Data Time Number UP Dn (UTC) 5377 04/10/20 14:22:16 12:14 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5378 04/10/20 14:22:20 12:10 2876 1448 ims 3587080982063726 310410214827503 APPLE !PHONES 5379 04/10/20 14:22:20 12:10 2812 1448 ims 3587080982063726 310410214827503 APPLE !PHONES 5380 04/10/20 14:34:29 13:24 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 11(1(0=8 no 5381 04/10/20 14:34:30 13:24 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1101(0=8 no 5382 04/10/20 14:34:34 13:18 7524 7212 imp 3587080982063726 310410214827503 APPLE 1101(0=8 5383 04/10/20 14:34:35 13:18 7212 7260 imp 3587080982063726 310410214827503 APPLE 1101(0=8 5384 04/10/20 14:48:09 52:40 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1101(0=8 no 5385 04/10/20 14:48:11 45:16 9278 7412 imp 3587080982063726 310410214827503 APPLE 1101(0=8 5386 04/10/20 15:33:30 7:19 6666 5962 imp 3587080982063726 310410214827503 APPLE 1101(0=8 5387 04/10/20 15:40:48 16:22 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1101(0=8 no 5388 04/10/20 15:40:49 16:21 6262 6672 ims 3587080982063726 310410214827503 APPLE 1101(0=8 5389 04/10/20 15:40:49 16:22 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1101(0=8 no 5390 04/10/20 15:40:50 16:21 6672 5998 ims 3587080982063726 310410214827503 APPLE 1101(0=8 5391 04/10/20 15:56:05 1:07 22574 12240 ims -1 310410214827503 5392 04/10/20 15:57:41 2:03 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1101(0=8 no 5393 04/10/20 15:57:42 2:02 8124 6870 ims 3587080982063726 310410214827503 APPLE 1101(0=8 5394 04/10/20 15:57:42 2:03 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1101(0=8 no 5395 04/10/20 15:57:44 2:01 6870 7860 imp 3587080982063726 310410214827503 APPLE !PHONES 5396 04/10/20 15:58:24 60:00 16737 9198 imp -1 310410214827503 5397 04/10/20 15:59:45 36:21 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5398 04/10/20 16:36:05 8:30 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5399 04/10/20 16:36:07 8:29 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1101(0=8 no 5400 04/10/20 16:44:36 40:31 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5401 04/10/20 16:58:24 60:00 8388 2912 imp -1 310410214827503 5402 04/10/20 17:25:06 4:50 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !THUMB no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 221 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002865 The information contained her is NeTnAL not for general distribution. EF-EA_00116941 EFTA01251465 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Bytoa Apn IMF' IMSI MARL MODEL Date Time Number Op On (OTC) 5403 04/10/20 17:25:07 4:50 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5404 04/10/20 17:29:56 1:01 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5405 04/10/20 17:29:58 1:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5406 04/10/20 17:30:58 33:15 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5407 04/10/20 17:30:59 33:15 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 5408 04/10/20 17:58:24 60:00 24756 10268 ims -1 310410214827503 5409 04/10/20 18:04:14 35:13 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5410 04/10/20 18:26:14 0:23 0 1682 ims -1 310410214827503 5411 04/10/20 18:39:26 2:21 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5412 04/10/20 18:39:28 2:20 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5413 04/10/20 18:41:47 39:06 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5414 04/10/20 18:41:48 39:06 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5415 04/10/20 18:58:24 60:00 10268 3408 ims -1 310410214827503 5416 04/10/20 19:20:54 2:03 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5417 04/10/20 19:22:56 8:51 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5418 04/10/20 19:22:57 8:51 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5419 04/10/20 19:31:48 6:03 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5420 04/10/20 19:31:49 6:03 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5421 04/10/20 19:37:52 1:59 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5422 04/10/20 19:39:50 2:10 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5423 04/10/20 19:39:51 2:10 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5424 04/10/20 19:42:01 15:31 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 222 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002866 The information contained horaCtoNyFti not for general distribution. NaTtAdti EFTA 00116942 EFTA01251466 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: 18:55:59 Data Usage Tor: Item corm. Conn. Originating ET Bytes Bytaa Apn INEI INSI MARL NICOLL Data Time Number Up Dn (OTC) 5425 04/10/20 19:57:31 8:26 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 5426 04/10/20 19:57:32 8:26 0 Onxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 5427 04/10/20 19:58:24 60:00 18300 6264 ims -1 310410214827503 5428 04/10/20 20:05:59 11:58 0 Onxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5429 04/10/20 20:17:56 8:07 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5430 04/10/20 20:17:57 8:07 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 5431 04/10/20 20:26:04 40:33 0 Onxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5432 04/10/20 20:58:24 60:00 10376 3408 imp -1 310410214827503 5433 04/10/20 21:06:36 2:10 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 5434 04/10/20 21:06:38 2:09 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 5435 04/10/20 21:08:47 60:00 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5436 04/10/20 21:58:24 60:00 6956 2680 ims -1 310410214827503 5437 04/10/20 22:08:47 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5438 04/10/20 22:58:24 60:00 10144 3300 ims -1 310410214827503 5439 04/10/20 23:08:47 4:57 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5440 04/10/20 23:13:43 102:45 192 Onxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5441 04/10/20 23:13:44 60:00 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5442 04/10/20 23:58:24 60:00 10144 3176 ims -1 310410214827503 5443 04/11/20 00:13:44 42:45 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5444 04/11/20 00:56:04 0:24 7215 6860 ims 3587080982063726 310410214827503 APPLE !PHONES 5445 04/11/20 00:56:05 0:24 6792 6951 ims 3587080982063726 310410214827503 APPLE !PHONES 5446 04/11/20 00:56:29 4:38 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5447 04/11/20 00:56:31 0:58 6684 6000 ims 3587080982063726 310410214827503 APPLE !PHONES 5448 04/11/20 00:57:29 5:13 3640 1432 ims 3587080982063726 310410214827503 APPLE !PHONES 5449 04/11/20 00:58:24 2:35 0 0 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 223 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002867 The information contained heraleeNyFti MTV& not for general distribution. EF-EA_00116943 EFTA01251467 MOBILITY • 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T (ITC. Run pato: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Bytom Apn DTI INSI NUT NICOLL Data Time Number Up Dn (OTC) 5450 04/11/20 01:01:06 2:58 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 5451 04/11/20 01:01:07 2:57 15076 15712 ims 3587080982063726 310410214827503 APPLE DRONES 5452 04/11/20 01:01:07 2:58 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 5453 04/11/20 01:01:09 2:56 15712 14812 ims 3587080982063726 310410214827503 APPLE DRONES 5454 04/11/20 01:02:42 60:00 15829 9382 ims -1 310410214827503 5455 04/11/20 01:04:05 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 5456 04/11/20 02:02:42 60:00 8388 3036 ims -1 310410214827503 5457 04/11/20 02:04:05 40:56 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 5458 04/11/20 02:45:00 27:48 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 5459 04/11/20 02:45:01 27:48 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 5460 04/11/20 03:02:42 60:00 6924 2912 imp -1 310410214827503 5461 04/11/20 03:12:49 0:42 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 5462 04/11/20 03:13:30 20:58 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 5463 04/11/20 03:13:31 20:58 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 5464 04/11/20 03:34:29 54:40 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 5465 04/11/20 04:02:42 60:00 7032 2928 imp -1 310410214827503 5466 04/11/20 04:29:08 13:55 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 5467 04/11/20 04:29:09 13:55 0 Onxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 5468 04/11/20 04:43:04 0:59 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 5469 04/11/20 04:44:02 22:54 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 5470 04/11/20 04:44:03 22:54 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 5471 04/11/20 05:02:42 60:00 11780 4484 imp -1 310410214827503 5472 04/11/20 05:06:57 0:41 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 5473 04/11/20 05:07:37 1:21 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 224 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002868 The information contained her is not for general distribution. EFTA_00116944 EFTA01251468 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in / 1 4' ks,sof ‘....". .11. AT&T UTC. Run Onto: 06/17/2020 Run Time: 18:55:59 Data Usage Tor: Item Conn. Conn. originating ET Bytes Bytoa Apn Dar DWI MUM NDDBL Date Time Number Up Dn (UTC) 5474 04/11/20 05:07:38 1:21 0 0 ructgonpho 3587080982063726 310410214827503 APPLE 18)(0=8 no 5475 04/11/20 05:08:59 1:22 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 18)(0=8 no 5476 04/11/20 05:10:21 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5477 04/11/20 06:02:42 60:00 12228 4784 ims -1 310410214827503 5478 04/11/20 06:10:21 60:00 0 Onatgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5479 04/11/20 07:02:42 60:00 8388 2928 ims -1 310410214827503 5480 04/11/20 07:10:21 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5481 04/11/20 08:02:42 60:00 8264 2804 ims -1 310410214827503 5482 04/11/20 08:10:21 60:00 0 Onatgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5483 04/11/20 09:02:42 60:00 13476 4748 ims -1 310410214827503 5484 04/11/20 09:10:21 0:01 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5485 04/11/20 09:10:24 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5486 04/11/20 10:02:42 60:00 8496 2928 ims -1 310410214827503 5487 04/11/20 10:10:24 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5488 04/11/20 11:02:42 60:00 11796 4536 ims -1 310410214827503 5489 04/11/20 11:10:24 23:33 0 Onatgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5490 04/11/20 11:33:56 1:41 192 Onatgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5491 04/11/20 11:33:58 1:40 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5492 04/11/20 11:35:38 4:12 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5493 04/11/20 11:39:50 3:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5494 04/11/20 11:42:49 2:48 192 Onatgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5495 04/11/20 11:42:51 2:47 0 Onatgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5496 04/11/20 11:45:38 60:00 0 Onatgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5497 04/11/20 12:02:42 1:51 0 0 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 225 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGMJ10002869 The information contained hereleop+Fti not for general distribution. NsRAE EF-EA_00116945 EFTA01251469 MOBILITY ap. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T arc. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn IKEI ISIS I NUT NICOLL Data Time Hunter UP Dn (UTC) 5498 04/11/20 12:11:46 0:01 0 0 ims 3587080982063726 310410214827503 APPLE !PROMS 5499 04/11/20 12:16:06 60:00 9926 6400 ims -1 310410214827503 5500 04/11/20 12:43:42 60:00 16873 9419 ims -1 310410214827503 5501 04/11/20 12:45:38 10:14 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 5502 04/11/20 12:55:52 2:03 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 5503 04/11/20 12:55:53 2:03 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1PNONES no 5504 04/11/20 12:57:56 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1PNONES no 5505 04/11/20 13:16:06 60:00 0 0 ims -1 310410214827503 5506 04/11/20 13:43:42 60:00 8388 2928 ims -1 310410214827503 5507 04/11/20 13:57:56 48:58 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 5508 04/11/20 14:16:06 60:00 0 0 1ms -1 310410214827503 5509 04/11/20 14:43:42 60:00 8388 2928 1ms -1 310410214827503 5510 04/11/20 14:46:53 2:04 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 5511 04/11/20 14:46:54 2:04 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1PNONES no 5512 04/11/20 14:48:59 7:30 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PEONES no 5513 04/11/20 14:56:28 5:35 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 5514 04/11/20 14:56:29 5:35 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 5515 04/11/20 15:02:04 17:37 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PEONES no 5516 04/11/20 15:16:06 60:00 0 0 ims -1 310410214827503 5517 04/11/20 15:19:40 2:39 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1PNONES no 5518 04/11/20 15:19:42 2:38 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1PNONES no 5519 04/11/20 15:22:20 33:47 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1PNONES no 5520 04/11/20 15:43:42 60:00 8496 2928 ims -1 310410214827503 5521 04/11/20 15:56:06 32:38 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 226 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002870 The information contained her is NeTtAL not for general distribution. EFTA_00116946 EFTA01251470 MOBILITY • 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in •-`11"._„ 4:$ AT&T UTC. Run Data: 06/17/2020 Run Time: 10:54:59 Data Osage Tor: Item Conn. Conn. originating ET Bytes Bytom Apn INEI INSI MARE MODEL Data Time Number op On (OTC) 5522 04/11/20 15:56:07 32:38 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5523 04/11/20 16:16:06 30:53 0 0 imp -1 310410214827503 5524 04/11/20 16:28:45 1:02 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5525 04/11/20 16:29:47 39:09 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5526 04/11/20 16:29:48 39:09 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5527 04/11/20 16:43:42 60:00 18068 6356 imp -1 310410214827503 5528 04/11/20 17:08:57 1:37 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5529 04/11/20 17:10:34 27:26 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5530 04/11/20 17:10:35 27:26 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5531 04/11/20 17:38:01 7:44 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5532 04/11/20 17:43:42 60:00 6956 2788 imp -1 310410214827503 5533 04/11/20 17:45:44 41:32 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5534 04/11/20 17:45:45 41:32 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5535 04/11/20 18:27:17 16:02 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5536 04/11/20 18:43:18 2:04 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5537 04/11/20 18:43:20 2:03 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5538 04/11/20 18:43:42 60:00 8496 3052 imp -1 310410214827503 5539 04/11/20 18:45:23 26:19 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5540 04/11/20 19:11:41 2:10 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5541 04/11/20 19:11:43 2:10 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5542 04/11/20 19:13:53 36:13 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5543 04/11/20 19:43:42 60:00 13352 4516 imp -1 310410214827503 5544 04/11/20 19:50:05 11:47 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 227 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002871 The information contained her is not for general distribution. NsTatikE EF-EAJVII6947 EFTA01251471 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in .....,./AT&T `•-s`' UTC. Run Date: 06/17/2020 Run Time: 1S:55:59 Data Usage for: Item Conn. Conn. Originating ET Bytes Bytes Apn IMEI IMSI NAfl MODEL Date Time Number Up Dn (UTC) 5545 04/11/20 19:50:06 11:48 0 0 nmtgenpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 5546 04/11/20 20:01:53 4:41 192 Onmtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5547 04/11/20 20:01:54 4:41 0 Onmtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5548 04/11/20 20:06:35 2:39 0 Onmtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5549 04/11/20 20:09:13 2:18 192 Onmtgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 5550 04/11/20 20:09:15 2:17 0 Onmtgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 5551 04/11/20 20:11:32 6:09 192 Onmtgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 5552 04/11/20 20:11:33 6:09 0 Onmtgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 5553 04/11/20 20:17:42 60:00 0 Onmtgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 5554 04/11/20 20:42:49 60:00 18287 9340 ims -1 310410214827503 5555 04/11/20 20:43:42 60:00 0 0 ims -1 310410214827503 5556 04/11/20 21:17:42 2:45 0 Onmtgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 5557 04/11/20 21:20:26 2:04 192 Onmtgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 5558 04/11/20 21:20:27 2:04 0 Onmtgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 5559 04/11/20 21:22:31 60:00 0 Onmtgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 5560 04/11/20 21:42:49 60:00 8712 3252 ims -1 310410214827503 5561 04/11/20 21:43:42 60:00 0 0 ims -1 310410214827503 5562 04/11/20 22:22:31 15:13 0 Oruagenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 5563 04/11/20 22:37:43 83:24 192 Oruagenpho 3587080982063726 310410214827503 APPLE !PRONGS no 5564 04/11/20 22:37:44 60:00 0 Oruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 5565 04/11/20 22:42:49 60:00 6848 2648 ims -1 310410214827503 5566 04/11/20 22:43:42 60:00 0 0 ims -1 310410214827503 5567 04/11/20 23:37:44 23:24 0 Oruagenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 5568 04/11/20 23:42:49 60:00 10720 4096 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 228 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002872 The information contained heraleeNeli NeTniliAL not for general distribution. EFTA_00I 16948 EFTA01251472 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in 1/4 ' •.,.,ni‘S g° 00 AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating LT Bytes Bytes Apn INZI IMSI MUM MODEL Date Time Number op Dn (OTC) 5569 04/11/20 23:43:42 58:52 0 0 imp -1 310410214827503 5570 04/12/20 00:01:08 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 5571 04/12/20 00:42:49 60:00 11920 4612 imp -1 310410214827503 5572 04/12/20 01:01:08 52:41 0 Ormagenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5573 04/12/20 01:42:49 60:00 8604 3112 imp -1 310410214827503 5574 04/12/20 01:58:01 34:14 192 Ormagenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5575 04/12/20 01:58:02 34:14 0 Ormagenpho 3587080982063726 310410214827503 APPLE !PHONES no 5576 04/12/20 02:32:16 70:00 192 Onatgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5577 04/12/20 02:32:17 60:00 0 Onatgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 5578 04/12/20 02:42:49 60:00 8604 2896 imp -1 310410214827503 5579 04/12/20 03:32:17 60:00 0 Ormagenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 5580 04/12/20 03:42:49 60:00 6956 2756 imp -1 310410214827503 5581 04/12/20 04:32:17 60:00 0 Ormagenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 5582 04/12/20 04:42:49 60:00 11936 4236 imp -1 310410214827503 5583 04/12/20 05:32:17 5:52 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 5584 04/12/20 05:42:49 60:00 10488 4364 imp -1 310410214827503 5585 04/12/20 06:42:49 60:00 6848 2648 imp -1 310410214827503 5586 04/12/20 07:42:49 60:00 10036 3144 imp -1 310410214827503 5587 04/12/20 08:42:49 60:00 13460 4576 imp -1 310410214827503 5588 04/12/20 09:42:49 60:00 8372 3036 imp -1 310410214827503 5589 04/12/20 10:42:49 60:00 8388 2788 imp -1 310410214827503 5590 04/12/20 11:42:49 60:00 15000 5000 imp -1 310410214827503 5591 04/12/20 11:42:58 78:11 192 Onatgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 5592 04/12/20 11:42:59 60:00 0 Onatgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 5593 04/12/20 12:42:49 60:00 13352 4576 imp -1 310410214827503 5594 04/12/20 12:42:59 18:11 0 Ormagenpho 3587080982063726 310410214827503 APPLE !PHONES no 5595 04/12/20 13:01:10 5:46 0 Ormagenpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 229 AT&T does not retain records that can definitively show whether a transaction was PsiTniliAL customer initiated or AT&T's network initiated the data transaction. SDNYGM00002873 The information contained heraCtoNelt not for general distribution. EF-EA_00116949 EFTA01251473 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ....,,,• ••-•° `"". AT&T arc. Run Date: 06/17/2020 Run Time: 18:56:00 Data Usage Tor: Item Conn. Conn. originating ET Bytes Byte. Apn ICI INSI MARL NICOLL Date Time Number Up Dn (UTC) 5596 04/12/20 13:06:55 74:35 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5597 04/12/20 13:06:56 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5598 04/12/20 13:42:49 60:00 8496 3004 imp -1 310410214827503 5599 04/12/20 14:06:56 14:35 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5600 04/12/20 14:21:31 9:25 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5601 04/12/20 14:21:32 9:25 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5602 04/12/20 14:30:57 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5603 04/12/20 14:42:49 60:00 8388 2896 imp -1 310410214827503 5604 04/12/20 15:30:57 47:29 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5605 04/12/20 15:42:49 60:00 8496 3004 imp -1 310410214827503 5606 04/12/20 16:18:26 0:22 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5607 04/12/20 16:18:27 0:22 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5608 04/12/20 16:18:49 4:54 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5609 04/12/20 16:23:42 2:03 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5610 04/12/20 16:23:43 2:03 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5611 04/12/20 16:25:46 23:14 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5612 04/12/20 16:42:49 60:00 12028 4504 imp -1 310410214827503 5613 04/12/20 16:49:00 24:00 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5614 04/12/20 16:49:01 24:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 5615 04/12/20 17:13:00 71:45 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 5616 04/12/20 17:13:01 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 5617 04/12/20 17:42:49 60:00 10396 4096 ism -1 310410214827503 5618 04/12/20 18:13:01 11:45 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 230 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002874 The information contained heraleeNeli N s not for general distribution. EFTA_00I 16950 EFTA01251474 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 1L:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in .....,./AT&T ••-st `' s UTC. Run Data: 06/17/2020 Run Time: Data Osage For: NOM Item Conn. Conn. Originating ET Bytes Bytes Apn ICI INSI MARL MODEL Data flee Number UP On (OTC) 5619 04/12/20 18:24:46 27:09 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5620 04/12/20 18:24:47 27:09 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5621 04/12/20 18:42:49 60:00 8604 3004 ims -1 310410214827503 5622 04/12/20 18:51:56 2:16 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5623 04/12/20 18:54:11 63:24 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5624 04/12/20 18:54:12 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5625 04/12/20 19:42:49 60:00 8388 3004 ims -1 310410214827503 5626 04/12/20 19:54:12 3:24 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5627 04/12/20 19:57:35 6:10 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5628 04/12/20 19:57:36 6:10 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5629 04/12/20 20:03:46 38:14 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5630 04/12/20 20:41:59 8:25 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5631 04/12/20 20:42:00 8:25 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5632 04/12/20 20:42:49 35:13 3532 1324 ims -1 310410214827503 5633 04/12/20 20:50:25 6:41 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5634 04/12/20 20:57:05 14:27 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5635 04/12/20 20:57:06 14:27 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5636 04/12/20 21:11:33 1:25 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5637 04/12/20 21:12:57 19:03 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5638 04/12/20 21:12:58 19:03 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5639 04/12/20 21:13:33 18:27 6182 7136 ims 3587080982063726 310410214827503 APPLE !PHONES 5640 04/12/20 21:13:34 18:27 7068 5918 ims 3587080982063726 310410214827503 APPLE IPHONEB 5641 04/12/20 21:32:01 0:53 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 231 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002875 The information contained heraCeNyFtli NTniliAL not for general distribution. EF-EA_00116951 EFTA01251475 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tr '`a ad AT&T s UTC. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn INEZ INSI MARE MODEL Data Tao Number Up Dn (UTC) 5642 04/12/20 21:32:04 0:47 9586 6195 ism 3587080982063726 310410214827503 APPLE !PROMS 5643 04/12/20 21:32:51 60:00 8604 3004 ism 3587080982063726 310410214827503 APPLE !PROMS 5644 04/12/20 21:32:53 2:03 192 0 nmtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 5645 04/12/20 21:32:54 2:04 0 Onmtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 5646 04/12/20 21:34:58 60:00 0 Onmtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 5647 04/12/20 22:16:52 0:01 0 0 moo 3587080982063726 310410214827503 APPLE IPROME8 5648 04/12/20 22:17:06 5:31 8205 5997 moo 3587080982063726 310410214827503 APPLE IPROME8 5649 04/12/20 22:22:37 30:23 3500 1448 moo 3587080982063726 310410214827503 APPLE IPROME8 5650 04/12/20 22:22:37 30:23 3436 1448 moo 3587080982063726 310410214827503 APPLE IPROME8 5651 04/12/20 22:32:51 60:00 0 0 moo 3587080982063726 310410214827503 APPLE IPROME8 5652 04/12/20 22:34:58 18:02 0 Onmtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 5653 04/12/20 22:53:00 57:48 192 Onmtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 5654 04/12/20 22:53:01 57:47 12190 13292 ins 3587080982063726 310410214827503 APPLE IPROME8 5655 04/12/20 22:53:01 57:48 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 5656 04/12/20 22:53:02 57:47 13292 12034 ins 3587080982063726 310410214827503 APPLE IPROME8 5657 04/12/20 23:32:51 60:00 0 0 ins 3587080982063726 310410214827503 APPLE IPROME8 5658 04/12/20 23:50:49 17:41 0 Onatgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 5659 04/12/20 23:50:51 17:39 6688 5998 ins 3587080982063726 310410214827503 APPLE IPROME8 5660 04/13/20 00:08:29 2:25 192 Onmtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 5661 04/13/20 00:08:30 2:25 0 Onmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5662 04/13/20 00:10:55 1:24 0 Onmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5663 04/13/20 00:11:18 0:00 0 0 imp 3587080982063726 310410214827503 APPLE IPROME8 5664 04/13/20 00:11:26 0:17 4760 6048 imp 3587080982063726 310410214827503 APPLE IPROME8 5665 04/13/20 00:11:43 27:42 19592 10964 imp 3587080982063726 310410214827503 APPLE IPROME8 5666 04/13/20 00:12:18 2:03 192 Oruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 5667 04/13/20 00:12:19 2:03 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 5668 04/13/20 00:14:22 26:57 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 232 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002876 The information contained hereCtoNyFtli NsTilikk not for general distribution. EFTA 00116952 EFTA01251476 MOBILITY 41111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T arc. Run Date: 06/17/2020 Run Time: 18:56:00 Data Osage For: Item Conn. Conn. Originating ET Bytes Bytes Apn IKEI INSI MARL MODEL Date Time Number op Dn (UTC) 5669 04/13/20 00:32:51 54:28 0 0 imo 3587080982063726 310410214827503 APPLE IPHONZ8 5670 04/13/20 00:39:25 1:54 4152 1324 imo 3587080982063726 310410214827503 APPLE IPHONZ8 5671 04/13/20 00:39:25 1:54 4152 1412 imo 3587080982063726 310410214827503 APPLE IPHONZ8 5672 04/13/20 00:41:19 19:39 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 5673 04/13/20 00:41:20 19:39 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 5674 04/13/20 00:41:20 12:15 7114 6740 imp 3587080982063726 310410214827503 APPLE IPHONE8 5675 04/13/20 00:41:21 12:15 6740 6850 imp 3587080982063726 310410214827503 APPLE IPHONE8 5676 04/13/20 00:57:25 3:33 8162 6864 imp 3587080982063726 310410214827503 APPLE IPHONE8 5677 04/13/20 00:57:26 3:33 6864 7898 imp 3587080982063726 310410214827503 APPLE IPHONE8 5678 04/13/20 01:00:59 0:05 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 5679 04/13/20 01:01:28 0:05 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 5680 04/13/20 01:01:43 0:06 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 5681 04/13/20 01:03:23 10:40 192 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 5682 04/13/20 01:03:24 10:39 6228 6778 imp 3587080982063726 310410214827503 APPLE IPHONE8 5683 04/13/20 01:03:24 10:40 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 5684 04/13/20 01:03:25 10:39 6670 5964 imp 3587080982063726 310410214827503 APPLE IPHONE8 5685 04/13/20 01:14:04 4:17 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 5686 04/13/20 01:14:08 4:13 9758 7088 imp 3587080982063726 310410214827503 APPLE IPHONE8 5687 04/13/20 01:18:20 2:10 192 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 5688 04/13/20 01:18:21 2:09 6094 6444 ins 3587080982063726 310410214827503 APPLE IPHONE8 5689 04/13/20 01:18:21 2:10 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 5690 04/13/20 01:18:23 2:08 6336 5830 imp 3587080982063726 310410214827503 APPLE IPHONE8 5691 04/13/20 01:20:31 3:13 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 5692 04/13/20 01:20:33 3:11 8084 6051 imp 3587080982063726 310410214827503 APPLE IPHONE8 5693 04/13/20 01:23:43 8:21 192 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 5694 04/13/20 01:23:44 0:00 88 0 imp 3587080982063726 310410214827503 APPLE IPHONE8 5695 04/13/20 01:23:44 8:21 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 233 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002877 The information contained her is NTroliAL not for general distribution. EF-EA_00116953 EFTA01251477 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T arc. Run Data: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating LT Bytes Byte. Apn IND I INSI MARL NICOLL Data Time Number Up Dn (OTC) 5696 04/13/20 01:23:45 0:00 0 0 imp 3587080982063726 310410214827503 APPLE IPHOME8 5697 04/13/20 01:23:45 8:19 6244 6670 imp 3587080982063726 310410214827503 APPLE IPHOME8 5698 04/13/20 01:23:46 8:19 6670 6088 imp 3587080982063726 310410214827503 APPLE IPHOME8 5699 04/13/20 01:27:19 0:01 0 0 imp -1 310410214827503 5700 04/13/20 01:28:22 3:42 6228 6672 imp 3587080982063726 310410214827503 APPLE !PHONES 5701 04/13/20 01:28:23 3:42 6672 5964 imp 3587080982063726 310410214827503 APPLE !PHONES 5702 04/13/20 01:32:05 7:54 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5703 04/13/20 01:32:07 4:01 8276 6210 imp 3587080982063726 310410214827503 APPLE !PHONES 5704 04/13/20 01:36:08 10:56 4964 1712 imp 3587080982063726 310410214827503 APPLE !PHONES 5705 04/13/20 01:39:58 5:51 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 5706 04/13/20 01:39:59 5:51 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 5707 04/13/20 01:43:26 2:23 6262 6676 imp 3587080982063726 310410214827503 APPLE 1PHONE8 5708 04/13/20 01:43:28 2:22 6676 5998 imp 3587080982063726 310410214827503 APPLE !PHONES 5709 04/13/20 01:45:50 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5710 04/13/20 01:45:52 40:00 11524 7572 imp 3587080982063726 310410214827503 APPLE !PHONES 5711 04/13/20 02:25:52 29:08 3532 1432 imp 3587080982063726 310410214827503 APPLE !PHONES 5712 04/13/20 02:45:50 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5713 04/13/20 02:55:01 57:47 12600 8910 imp 3587080982063726 310410214827503 APPLE !PHONES 5714 04/13/20 03:45:50 6:58 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5715 04/13/20 03:52:47 8:19 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5716 04/13/20 03:52:48 8:18 6225 6672 imp 3587080982063726 310410214827503 APPLE !PHONES 5717 04/13/20 03:52:48 8:19 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5718 04/13/20 03:52:49 8:18 6672 5961 imp 3587080982063726 310410214827503 APPLE !PHONES 5719 04/13/20 04:01:07 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5720 04/13/20 04:01:09 60:00 12220 8844 imp 3587080982063726 310410214827503 APPLE !PHONES 5721 04/13/20 05:01:07 34:23 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5722 04/13/20 05:01:09 34:21 2596 1324 imp 3587080982063726 310410214827503 APPLE !PHONES 5723 04/13/20 05:35:29 69:54 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 234 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002878 The information contained her is NeTtAL not for general distribution. EF-EA_00116954 EFTA01251478 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T'S records are stored and provided in terwe ‘ini#l AT&T OTC. Run pato: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Bytom Apn IMEI IMSI MAKE MODEL Date Time Number Up Dn (OTC) 5724 04/13/20 05:35:30 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5725 04/13/20 05:35:30 63:43 7567 9266 ins 3587080982063726 310410214827503 APPLE !PHONES 5726 04/13/20 05:35:31 60:00 9266 7411 imp 3587080982063726 310410214827503 APPLE !PHONES 5727 04/13/20 06:14:34 46:58 12933 7833 ins -1 310410214827503 5728 04/13/20 06:35:30 9:54 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 5729 04/13/20 06:35:31 3:43 0 0 imp 3587080982063726 310410214827503 APPLE IPHONE8 5730 04/13/20 06:39:08 6:45 0 0 imp -2 310410214827503 5731 04/13/20 06:45:24 2:55 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5732 04/13/20 06:48:18 4:11 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5733 04/13/20 06:48:19 4:10 7214 6792 ins 3587080982063726 310410214827503 APPLE IPHONE8 5734 04/13/20 06:48:19 4:11 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 5735 04/13/20 06:48:20 4:10 6792 6950 ins 3587080982063726 310410214827503 APPLE IPHONE8 5736 04/13/20 06:52:30 9:19 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 5737 04/13/20 06:52:33 9:16 7064 5954 ins 3587080982063726 310410214827503 APPLE IPHONE8 5738 04/13/20 07:01:32 0:23 4009 1386 ins 3587080982063726 310410214827503 APPLE IPHONE8 5739 04/13/20 07:01:49 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 5740 04/13/20 07:01:55 22:01 10704 7538 imp 3587080982063726 310410214827503 APPLE !PHONES 5741 04/13/20 07:01:55 22:01 10532 7538 imp 3587080982063726 310410214827503 APPLE !PHONES 5742 04/13/20 07:23:56 60:00 11980 4328 imp 3587080982063726 310410214827503 APPLE !PHONES 5743 04/13/20 08:01:49 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5744 04/13/20 08:23:56 60:00 6924 2880 imp 3587080982063726 310410214827503 APPLE !PHONES 5745 04/13/20 09:01:49 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5746 04/13/20 09:23:56 60:00 8572 3020 imp 3587080982063726 310410214827503 APPLE !PHONES 5747 04/13/20 10:01:49 40:47 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 5748 04/13/20 10:23:56 60:00 12920 3624 imp 3587080982063726 310410214827503 APPLE IPHONE8 5749 04/13/20 11:01:46 132:27 192 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 235 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002879 The information contained her is NeTniliAL not for general distribution. EFTA_00I 16955 EFTA01251479 MOBILITY 411. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in .....,,,• ••-•°` -s AT&T arc. Run Data: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Elyta• Byte. Apn INLI INSI MARL MODEL Data Time Number UP Dn (UTC) 5750 04/13/20 11:01:47 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5751 04/13/20 11:23:56 60:00 17100 6308 imp 3587080982063726 310410214827503 APPLE !PHONES 5752 04/13/20 12:01:47 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5753 04/13/20 12:23:56 60:00 8496 2896 imp 3587080982063726 310410214827503 APPLE IPMONE8 5754 04/13/20 13:01:47 12:27 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5755 04/13/20 13:14:13 32:46 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5756 04/13/20 13:14:14 32:46 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5757 04/13/20 13:23:56 11:03 0 0 imp 3587080982063726 310410214827503 APPLE MIMES 5758 04/13/20 13:34:40 12:19 7267 6796 imp 3587080982063726 310410214827503 APPLE !PHONES 5759 04/13/20 13:34:41 12:19 6796 7111 imp 3587080982063726 310410214827503 APPLE !PHONES 5760 04/13/20 13:34:59 49:16 20726 9147 imp -1 310410214827503 5761 04/13/20 13:47:00 1:55 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE MIMES no 5762 04/13/20 13:48:54 8:54 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5763 04/13/20 13:48:55 8:54 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5764 04/13/20 13:57:49 4:05 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5765 04/13/20 14:01:53 48:22 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5766 04/13/20 14:01:54 48:22 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5767 04/13/20 14:23:59 0:41 8373 8940 ime 3587080982063726 310410214827503 APPLE !PHONES 5768 04/13/20 14:24:00 0:41 8940 8109 ime 3587080982063726 310410214827503 APPLE !PHONES 5769 04/13/20 14:24:14 0:01 0 0 ime -1 310410214827503 5770 04/13/20 14:24:19 19:44 6519 8958 imp 3587080982063726 310410214827503 APPLE MIMES 5771 04/13/20 14:24:20 19:44 8894 6363 imp 3587080982063726 310410214827503 APPLE MIMES 5772 04/13/20 14:24:39 10:47 9857 6463 imp -1 310410214827503 5773 04/13/20 14:40:52 9:23 7476 7072 imp 3587080982063726 310410214827503 APPLE MIMES 5774 04/13/20 14:40:53 9:23 7072 7124 imp 3587080982063726 310410214827503 APPLE MIMES 5775 04/13/20 14:43:58 60:00 37349 19946 imp -1 310410214827503 5776 04/13/20 14:50:16 1:37 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE MIMES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 236 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002880 The information contained her is NTntiklt not for general distribution. EF-EA_00116956 EFTA01251480 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data usage for: Item Conn. Conn. originating ET Bytes Bytes Ann INEI INSI HAKE MODEL Date Time number up Dn (UTC) 5777 04/13/20 14:51:53 11:47 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 5778 04/13/20 14:51:54 11:47 0 Onxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 5779 04/13/20 15:03:40 3:51 192 Onxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 5780 04/13/20 15:03:41 3:51 0 Onxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 5781 04/13/20 15:07:32 2:08 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 5782 04/13/20 15:09:39 15:40 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 5783 04/13/20 15:09:40 15:40 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 5784 04/13/20 15:24:03 0:06 0 4245 imp -1 310410214827503 5785 04/13/20 15:25:20 10:00 192 Onxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 5786 04/13/20 15:25:21 24:42 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5787 04/13/20 15:34:09 60:00 19807 10032 ims -1 310410214827503 5788 04/13/20 15:43:58 60:00 0 0 imp -1 310410214827503 5789 04/13/20 15:50:03 24:22 0 Onxtgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 5790 04/13/20 16:14:24 2:09 192 Onxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 5791 04/13/20 16:14:25 2:09 0 Onxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 5792 04/13/20 16:16:34 27:03 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 5793 04/13/20 16:34:09 60:00 8620 2912 imp -1 310410214827503 5794 04/13/20 16:43:36 8:21 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 5795 04/13/20 16:43:37 8:21 0 Onxtgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 5796 04/13/20 16:43:58 60:00 0 0 ims -1 310410214827503 5797 04/13/20 16:51:58 2:41 0 Onxtgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 5798 04/13/20 16:54:38 149:51 192 Onxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 5799 04/13/20 16:54:39 60:00 0 Onxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 237 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002881 The information contained hereCtoNyFti PsisTfikE not for general distribution. EF-EA_00116957 EFTA01251481 MOBILITY 411., 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in ....,,f ••- `"'" s AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Bytes Apn MCI IMSI MARL MOLL Date Time Muster Up Dn (UTC) 5800 04/13/20 17:34:09 44:31 8496 3004 lee -1 310410214827503 5801 04/13/20 17:43:58 32:17 0 0 imp -1 310410214827503 5802 04/13/20 17:54:39 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 5803 04/13/20 18:16:13 68:16 7340 6862 imo 3587080982063726 310410214827503 APPLE !PHONES 5804 04/13/20 18:16:14 60:00 6794 7076 imo 3587080982063726 310410214827503 APPLE IPHOME8 5805 04/13/20 18:18:40 60:00 16889 9374 imo -1 310410214827503 5806 04/13/20 18:54:39 29:51 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5807 04/13/20 19:16:14 8:16 0 0 imp 3587080982063726 310410214827503 APPLE IPHOME8 5808 04/13/20 19:18:40 29:32 5304 1696 imo -1 310410214827503 5809 04/13/20 19:24:30 1:38 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5810 04/13/20 19:26:07 8:33 192 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5811 04/13/20 19:26:08 8:33 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5812 04/13/20 19:34:41 2:13 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5813 04/13/20 19:36:53 2:03 192 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5814 04/13/20 19:36:54 2:03 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5815 04/13/20 19:38:57 0:51 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 5816 04/13/20 19:39:47 8:33 192 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5817 04/13/20 19:39:48 8:33 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5818 04/13/20 19:42:51 5:29 7200 6740 imp 3587080982063726 310410214827503 APPLE !PHONES 5819 04/13/20 19:42:52 5:29 6740 6848 imp 3587080982063726 310410214827503 APPLE !PHONES 5820 04/13/20 19:48:21 7:02 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5821 04/13/20 19:48:25 0:01 0 0 imp 3587080982063726 310410214827503 APPLE !PHONES 5822 04/13/20 19:50:01 60:00 18557 9854 imo -1 310410214827503 5823 04/13/20 19:55:22 2:36 192 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5824 04/13/20 19:55:23 2:36 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 238 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002882 The information contained hereICONyFti PsiTniliAL not for general distribution. EF-EA_00116958 EFTA01251482 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: 18:56:00 Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn IKEI INS' MARL NICOLL Date Time Buster Up Dn (UTC) 5825 04/13/20 19:57:58 12:17 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 5826 04/13/20 19:57:59 12:17 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 5827 04/13/20 20:10:16 3:21 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5828 04/13/20 20:13:36 28:42 192 OnxtFonpho 3587080982063726 310410214827503 APPLE !PHONES no 5829 04/13/20 20:13:37 28:42 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 5830 04/13/20 20:42:18 2:21 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5831 04/13/20 20:42:19 2:21 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5832 04/13/20 20:44:39 6:04 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5833 04/13/20 20:44:40 6:04 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5834 04/13/20 20:50:01 12:47 0 0 imp -1 310410214827503 5835 04/13/20 20:50:44 3:02 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5836 04/13/20 20:53:45 10:01 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5837 04/13/20 20:53:46 10:01 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5838 04/13/20 21:02:31 1:15 7372 8932 imp 3587080982063726 310410214827503 APPLE 'PHONES 5839 04/13/20 21:02:32 1:15 8824 7108 imp 3587080982063726 310410214827503 APPLE 'PHONES 5840 04/13/20 21:02:48 0:01 0 0 imp -1 310410214827503 5841 04/13/20 21:03:29 11:24 8193 6032 imp -1 310410214827503 5842 04/13/20 21:03:47 23:08 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5843 04/13/20 21:24:06 13:03 18729 12748 imp -1 310410214827503 5844 04/13/20 21:26:55 21:31 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5845 04/13/20 21:26:56 19:08 6244 6798 imp 3587080982063726 310410214827503 APPLE !PHONES 5846 04/13/20 21:26:56 21:31 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5847 04/13/20 21:26:57 19:08 6670 5980 imp 3587080982063726 310410214827503 APPLE !PHONES 5848 04/13/20 21:45:05 10:24 10801 7698 imp -1 310410214827503 5849 04/13/20 21:46:03 2:23 6228 6668 ins 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 239 AT&T does not retain records that can definitively show whether a transaction was PsiTniliAL customer initiated or AT&T's network initiated the data transaction. SDNYGAt00002883 The information contained her is not for general distribution. EF-EA_00116959 EFTA01251483 MOBILITY 411111i 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in %. %... ‘inli. 'ssi 101 AT&T OTC. Run Date: 06/17/2020 Run Timo: Data Osage for: Item Conn. Conn. Originating ET Bytes Bytes Apn INE' INS1 MARE MODEL Date Time Number Up Dn (UTC) 5850 04/13/20 21:46:05 2:22 6668 5964 in 3587080982063726 310410214827503 APPLE !PHONES 5851 04/13/20 21:48:27 6:59 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5852 04/13/20 21:48:28 6:57 6692 5998 in 3587080982063726 310410214827503 APPLE 'PHONES 5853 04/13/20 21:55:25 0:04 2008 480 in 3587080982063726 310410214827503 APPLE 'PHONES 5854 04/13/20 21:55:26 130:10 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5855 04/13/20 21:55:27 60:00 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5856 04/13/20 21:55:28 130:08 7676 67790 in 3587080982063726 310410214827503 APPLE 'PHONES 5857 04/13/20 21:55:29 60:00 9266 7412 ims 3587080982063726 310410214827503 APPLE 'PHONES 5858 04/13/20 22:28:43 60:00 18659 9587 ims -1 310410214827503 5859 04/13/20 22:55:27 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5860 04/13/20 22:55:29 60:00 0 0 imp 3587080982063726 310410214827503 APPLE !PHONES 5861 04/13/20 23:28:43 26:49 9912 4300 imp -1 310410214827503 5862 04/13/20 23:55:27 10:10 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5863 04/13/20 23:55:29 10:08 0 0 ins 3587080982063726 310410214827503 APPLE !PHONES 5864 04/13/20 23:55:41 60:00 18361 9746 in -1 310410214827503 5865 04/14/20 00:05:37 8:19 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5866 04/14/20 00:13:56 53:23 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5867 04/14/20 00:13:56 53:24 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 5868 04/14/20 00:55:41 60:00 8496 2928 imp -1 310410214827503 5869 04/14/20 01:07:20 27:20 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5870 04/14/20 01:34:39 2:33 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5871 04/14/20 01:34:41 2:32 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5872 04/14/20 01:37:13 0:06 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5873 04/14/20 01:37:39 0:48 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 5874 04/14/20 01:38:26 8:19 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 240 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002884 The information contained heraleoNyFti NeTniliAL not for general distribution. EFTA_00116960 EFTA01251484 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Byte. Bytoa Apn IMF' INSI MARL MODEL Date Time Number Op Dn (OTC) 5875 04/14/20 01:38:28 8:18 0 0 netgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5876 04/14/20 01:46:46 8:50 0 0 netgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5877 04/14/20 01:55:35 58:53 192 0 netgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5878 04/14/20 01:55:36 58:53 0 0 netgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5879 04/14/20 01:55:41 60:00 7156 3112 kms -1 310410214827503 5880 04/14/20 02:54:29 10:58 0 0 netgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5881 04/14/20 02:55:41 60:00 13600 4748 kms -1 310410214827503 5882 04/14/20 03:05:26 15:05 192 0 netgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5883 04/14/20 03:05:27 15:05 0 0 netgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5884 04/14/20 03:20:32 32:57 0 0 netgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5885 04/14/20 03:53:28 2:10 192 0 netgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5886 04/14/20 03:53:30 2:09 0 0 netgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5887 04/14/20 03:55:39 2:05 0 0 netgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5888 04/14/20 03:55:41 60:00 10332 4180 kms -1 310410214827503 5889 04/14/20 03:57:43 18:31 192 0 netgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5890 04/14/20 03:57:44 18:31 0 0 netgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5891 04/14/20 04:16:15 10:13 0 0 netgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5892 04/14/20 04:26:27 6:51 192 0 netgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5893 04/14/20 04:26:28 6:51 0 0 netgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5894 04/14/20 04:33:19 4:22 0 0 netgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5895 04/14/20 04:37:40 8:33 192 0 netgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5896 04/14/20 04:37:42 8:32 0 0 netgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 241 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002885 The information contained her is not for general distribution. NaTtAdti EFTAJVII6961 EFTA01251485 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .....,,,• ••-a"" s AT&T OTC. Run Onto: 06/17/2020 Run Time: Data Usage For: Itea Conn. Conn. Originating ET Bytes Bytaa Apn INEZ INSI MAKE MODEL Data Time Number Up Dn (Inc) 5897 04/14/20 04:46:14 60:00 0 0 ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5898 04/14/20 04:55:41 60:00 6924 2896 imo -1 310410214827503 5899 04/14/20 05:46:14 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5900 04/14/20 05:55:41 60:00 10068 3284 ins -1 310410214827503 5901 04/14/20 06:46:14 60:00 0 Onaftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5902 04/14/20 06:55:41 60:00 9960 3176 ins -1 310410214827503 5903 04/14/20 07:46:14 60:00 0 Onaftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5904 04/14/20 07:55:41 60:00 13476 4624 ins -1 310410214827503 5905 04/14/20 08:46:14 0:00 0 Onaftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5906 04/14/20 08:46:16 60:00 0 Onaftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5907 04/14/20 08:55:41 60:00 8496 3036 moo -1 310410214827503 5908 04/14/20 09:46:16 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5909 04/14/20 09:55:41 60:00 13368 4676 moo -1 310410214827503 5910 04/14/20 10:46:16 46:11 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5911 04/14/20 10:55:41 60:00 14940 4764 moo -1 310410214827503 5912 04/14/20 11:32:26 27:59 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5913 04/14/20 11:32:27 27:59 0 Onaftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5914 04/14/20 11:55:41 60:00 8496 2928 moo -1 310410214827503 5915 04/14/20 12:00:25 8:37 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 5916 04/14/20 12:00:26 8:37 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 5917 04/14/20 12:09:03 11:04 192 Onaftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5918 04/14/20 12:09:04 11:04 0 Onaftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 5919 04/14/20 12:20:08 9:11 0 Onaftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 5920 04/14/20 12:29:18 28:04 192 Onaftgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 242 AT&T does not retain records that can definitively show whether a transaction was PsiTifikE customer initiated or AT&T's network initiated the data transaction. SIDNYGM00002886 The information contained hereCtoNfti not for general distribution. EFTA 00116962 EFTA01251486 MOBILITY • 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T arc. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Byte. Apn IICI IMSI MARE MODEL Date Time Number UP Dn (UTC) 5921 04/14/20 12:29:19 28:04 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5922 04/14/20 12:55:41 60:00 10068 3300 imo -1 310410214827503 5923 04/14/20 12:57:23 9:06 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5924 04/14/20 13:06:30 57:52 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5925 04/14/20 13:55:41 60:00 8496 3036 imp -1 310410214827503 5926 04/14/20 14:04:21 2:26 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5927 04/14/20 14:04:22 2:27 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5928 04/14/20 14:06:49 9:38 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5929 04/14/20 14:16:28 6:11 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5930 04/14/20 14:22:38 3:18 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5931 04/14/20 14:22:40 3:17 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 5932 04/14/20 14:25:57 57:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5933 04/14/20 14:55:41 60:00 15528 5984 imp -1 310410214827503 5934 04/14/20 15:22:57 20:00 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 5935 04/14/20 15:22:58 33:02 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 5936 04/14/20 15:55:41 60:00 6924 2788 imp -1 310410214827503 5937 04/14/20 15:56:00 45:52 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5938 04/14/20 16:41:52 22:32 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5939 04/14/20 16:41:53 22:32 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 5940 04/14/20 16:52:53 11:31 8221 8496 imp 3587080982063726 310410214827503 APPLE !PHONES 5941 04/14/20 16:52:54 11:31 8428 8065 imp 3587080982063726 310410214827503 APPLE !PHONES 5942 04/14/20 16:55:41 2:33 0 0 imp -1 310410214827503 5943 04/14/20 17:02:02 60:00 20034 9674 imp -1 310410214827503 5944 04/14/20 17:04:26 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 243 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002887 The information contained hereeteNeli not for general distribution. EF-EA_00116963 EFTA01251487 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T'S records ere stored and provided in .i.%•-. `a.7 ri AT&T (ITC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes( Apn IN= INSI ten MODEL Date Time Number Up Dn (UTC) 5945 04/14/20 18:02:02 60:00 8604 3664 ims -1 310410214827503 5946 04/14/20 18:04:26 4:28 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 5947 04/14/20 18:08:54 7:52 0 Onmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5948 04/14/20 18:16:45 5:27 192 Onmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5949 04/14/20 18:16:46 5:27 0 Onmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5950 04/14/20 18:22:13 3:03 0 Onmtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 5951 04/14/20 18:25:16 2:03 288 Onmtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 5952 04/14/20 18:25:17 2:03 0 Onmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5953 04/14/20 18:27:20 5:05 0 OruMgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5954 04/14/20 18:32:24 2:03 192 OruMgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5955 04/14/20 18:32:25 2:03 0 OruMgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5956 04/14/20 18:34:28 60:00 0 Onmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5957 04/14/20 19:02:02 60:00 10408 3376 ins -1 310410214827503 5958 04/14/20 19:34:28 2:29 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 5959 04/14/20 19:36:56 2:09 192 Onmtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 5960 04/14/20 19:36:57 2:09 0 Onmtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 5961 04/14/20 19:39:06 7:13 0 Onmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5962 04/14/20 19:46:18 2:04 192 OruMgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5963 04/14/20 19:46:20 2:03 0 OruMgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5964 04/14/20 19:48:23 17:27 0 OruMgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5965 04/14/20 20:02:02 18:54 5304 1696 imp -1 310410214827503 5966 04/14/20 20:05:50 2:03 192 OruMgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 244 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002888 The information contained her is not for general distribution. EFTA 00116964 EFTA01251488 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in .....,.•AT&T ••-"st `' s OTC. Run Oato: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn INCI IMSI NUM MODEL Date Time Number Up Dn (OTC) 5967 04/14/20 20:05:51 2:03 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 5968 04/14/20 20:07:54 11:36 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5969 04/14/20 20:19:29 4:44 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5970 04/14/20 20:19:30 4:43 6244 6666 imp 3587080982063726 310410214827503 APPLE !PHONES 5971 04/14/20 20:19:30 4:44 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 5972 04/14/20 20:19:31 4:43 6666 6088 imp 3587080982063726 310410214827503 APPLE IPRONE8 5973 04/14/20 20:20:56 10:30 8209 6232 imp -1 310410214827503 5974 04/14/20 20:24:14 28:09 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5975 04/14/20 20:24:15 28:08 6674 5980 imp 3587080982063726 310410214827503 APPLE !PRONGS 5976 04/14/20 20:52:22 8:08 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5977 04/14/20 20:52:24 2:53 6318 8080 imp 3587080982063726 310410214827503 APPLE IPRONE8 5978 04/14/20 20:52:24 8:07 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 5979 04/14/20 20:52:25 2:54 8080 6054 imp 3587080982063726 310410214827503 APPLE !PHONES 5980 04/14/20 20:52:46 2:33 11634 6729 imp -1 310410214827503 5981 04/14/20 20:55:17 5:13 6264 6672 imp 3587080982063726 310410214827503 APPLE !PHONES 5982 04/14/20 20:55:18 5:13 6672 6000 imp 3587080982063726 310410214827503 APPLE !PHONES 5983 04/14/20 21:00:31 9:47 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 5984 04/14/20 21:00:34 9:44 8784 8084 imp 3587080982063726 310410214827503 APPLE IPRONE8 5985 04/14/20 21:10:17 14:25 192 Oruftgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 5986 04/14/20 21:10:18 0:23 7335 8926 imp 3587080982063726 310410214827503 APPLE IPRONE8 5987 04/14/20 21:10:18 14:25 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 5988 04/14/20 21:10:19 0:23 8818 7071 imp 3587080982063726 310410214827503 APPLE IPRONE8 5989 04/14/20 21:10:38 0:04 2569 1211 imp -1 310410214827503 5990 04/14/20 21:10:40 4:21 6450 6674 imp 3587080982063726 310410214827503 APPLE IPRONE8 5991 04/14/20 21:10:42 4:20 6674 6186 imp 3587080982063726 310410214827503 APPLE IPRONE8 5992 04/14/20 21:11:03 0:01 0 0 imp -1 310410214827503 5993 04/14/20 21:11:31 13:11 6478 6848 imp 3587080982063726 310410214827503 APPLE IPRONE8 5994 04/14/20 21:11:32 13:11 6784 6214 imp 3587080982063726 310410214827503 APPLE IPRONE8 5995 04/14/20 21:15:01 11:20 8209 6119 ins 3587080982063726 310410214827503 APPLE IPRONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 245 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002889 The information contained hereCtoNyFti NT-3AL not for general distribution. EF-EA_00116965 EFTA01251489 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Tina: Data Usage Tor: iiiiiIIIII Item Conn. Conn. Originating ET Bytes Byte. Apn INZI IMSI MAKE MODEL Data Time Number Up Dn (UTC) 5996 04/14/20 21:24:43 60:00 0 0 natgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5997 04/14/20 21:26:21 25:20 2768 1340 ims 3587080982063726 310410214827503 APPLE 1PHONG8 5998 04/14/20 21:26:21 25:20 2704 1340 ims 3587080982063726 310410214827503 APPLE !PHONES 5999 04/14/20 21:51:41 40:52 6864 2912 ims 3587080982063726 310410214827503 APPLE 'PHONES 6000 04/14/20 22:24:43 60:00 0 Onatgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6001 04/14/20 22:27:13 19:15 6670 5979 ims 3587080982063726 310410214827503 APPLE 'PHONES 6002 04/14/20 22:46:28 1:00 14920 9248 ims 3587080982063726 310410214827503 APPLE 'PHONES 6003 04/14/20 22:47:44 0:33 9726 6322 ims 3587080982063726 310410214827503 APPLE 'PHONES 6004 04/14/20 22:48:17 17:59 5072 2448 ims 3587080982063726 310410214827503 APPLE 'PHONES 6005 04/14/20 23:06:16 10:35 4540 5060 ims 3587080982063726 310410214827503 APPLE 'PHONES 6006 04/14/20 23:16:51 13:42 4964 1788 ims 3587080982063726 310410214827503 APPLE !PHONES 6007 04/14/20 23:24:43 54:18 0 Oruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 6008 04/14/20 23:30:33 0:34 11432 9252 ims 3587080982063726 310410214827503 APPLE !PHONES 6009 04/14/20 23:31:07 20:39 3532 1432 ims 3587080982063726 310410214827503 APPLE !PHONES 6010 04/14/20 23:51:46 27:15 7680 3944 ims 3587080982063726 310410214827503 APPLE 'PHONES 6011 04/15/20 00:19:00 2:33 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6012 04/15/20 00:19:01 2:33 0 Onatgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6013 04/15/20 00:19:03 8:32 8209 6124 ims -1 310410214827503 6014 04/15/20 00:21:33 5:58 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6015 04/15/20 00:21:34 5:58 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6016 04/15/20 00:27:32 33:55 192 Ormtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6017 04/15/20 00:27:33 28:02 7373 6800 ims 3587080982063726 310410214827503 APPLE 'PHONES 6018 04/15/20 00:27:33 33:55 0 Onxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6019 04/15/20 00:27:34 28:03 6800 7109 ims 3587080982063726 310410214827503 APPLE 'PHONES 6020 04/15/20 00:28:44 32:17 10165 7589 ins -1 310410214827503 6021 04/15/20 00:55:35 5:52 7156 6856 ims 3587080982063726 310410214827503 APPLE 'PHONES 6022 04/15/20 00:55:36 5:52 6748 6892 ims 3587080982063726 310410214827503 APPLE 'PHONES 6023 04/15/20 01:01:28 5:02 0 Oruagenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6024 04/15/20 01:01:30 5:00 8082 6922 ims 3587080982063726 310410214827503 APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 246 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002890 The information contained her is NeTniliAL not for general distribution. EFTAJVII6966 EFTA01251490 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in tr ""s ad es AT&T UTC. Run Date: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn INLI IMBI MARL MOLL Date Time Number Up Dn (UTC) 6025 04/15/20 01:06:29 8:19 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 6026 04/15/20 01:06:30 8:18 6243 6666 ims 3587080982063726 310410214827503 APPLE 'PHONES 6027 04/15/20 01:06:30 8:19 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 6028 04/15/20 01:06:31 8:18 6666 5979 ims 3587080982063726 310410214827503 APPLE 'PHONES 6029 04/15/20 01:14:49 33:25 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 6030 04/15/20 01:14:52 10:41 9040 7288 ims 3587080982063726 310410214827503 APPLE 'PHONES 6031 04/15/20 01:25:33 12:45 3640 1432 ims 3587080982063726 310410214827503 APPLE !PHONES 6032 04/15/20 01:41:05 23:27 10067 6600 ims -1 310410214827503 6033 04/15/20 01:48:13 14:46 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6034 04/15/20 01:48:14 14:46 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6035 04/15/20 02:03:00 21:22 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6036 04/15/20 02:03:04 5:16 8884 7068 ims 3587080982063726 310410214827503 APPLE 'PHONES 6037 04/15/20 02:08:20 27:47 3764 1448 ims 3587080982063726 310410214827503 APPLE 'PHONES 6038 04/15/20 02:24:21 11:46 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6039 04/15/20 02:24:22 11:46 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6040 04/15/20 02:36:08 20:20 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6041 04/15/20 02:36:12 7:44 8902 7088 ims 3587080982063726 310410214827503 APPLE !PHONES 6042 04/15/20 02:43:56 0:08 8528 6192 ims 3587080982063726 310410214827503 APPLE 'PHONES 6043 04/15/20 02:44:47 19:04 8189 6014 ims -1 310410214827503 6044 04/15/20 02:56:27 2:13 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6045 04/15/20 02:56:28 2:13 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6046 04/15/20 02:58:40 6:04 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6047 04/15/20 02:58:42 6:03 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6048 04/15/20 03:03:33 1:11 6261 7424 ims 3587080982063726 310410214827503 APPLE !PHONES 6049 04/15/20 03:03:34 1:11 6676 5997 ims 3587080982063726 310410214827503 APPLE 'PHONES 6050 04/15/20 03:03:51 14:19 9423 6373 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 247 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002891 The information contained her is MTV& not for general distribution. EF-EA_00116967 EFTA01251491 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Elmo: 18:56:01 Data Usage For: Item Conn. Conn. Originating ET Bytes Byte. Apn INEI IMBI MARL MODEL Data Time Number Up Dn (OTC) 6051 04/15/20 03:04:45 33:51 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6052 04/15/20 03:27:10 3:06 8084 6944 ins 3587080982063726 310410214827503 APPLE IPMONE8 6053 04/15/20 03:30:16 60:00 13336 4684 ipso 3587080982063726 310410214827503 APPLE IPMONE8 6054 04/15/20 03:38:35 57:12 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONEB no 6055 04/15/20 03:38:36 57:12 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONEB no 6056 04/15/20 04:30:16 60:00 8496 3020 ipso 3587080982063726 310410214827503 APPLE IPMONEB 6057 04/15/20 04:35:48 58:13 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6058 04/15/20 05:30:16 60:00 3208 1216 ipso 3587080982063726 310410214827503 APPLE IPMONEB 6059 04/15/20 06:06:55 59:56 24940 9938 ipso -1 310410214827503 6060 04/15/20 06:30:16 60:00 0 0 ipso 3587080982063726 310410214827503 APPLE IPMONE8 6061 04/15/20 07:12:07 60:00 21084 9390 ipso -1 310410214827503 6062 04/15/20 07:30:16 60:00 0 0 ins 3587080982063726 310410214827503 APPLE IPMONE8 6063 04/15/20 08:12:07 60:00 6800 2756 ins -1 310410214827503 6064 04/15/20 08:16:08 2:04 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6065 04/15/20 08:16:09 2:04 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6066 04/15/20 08:18:13 2:06 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONEB no 6067 04/15/20 08:20:18 1:22 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONEB no 6068 04/15/20 08:20:19 1:22 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONEB no 6069 04/15/20 08:21:41 18:55 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6070 04/15/20 08:30:16 60:00 0 0 ins 3587080982063726 310410214827503 APPLE IPMONEB 6071 04/15/20 08:40:36 32:10 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6072 04/15/20 08:40:37 32:10 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONEB no 6073 04/15/20 09:12:07 60:00 9960 3144 ins -1 310410214827503 6074 04/15/20 09:12:47 2:09 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONEB no 6075 04/15/20 09:14:56 32:32 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONEB no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 248 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002892 The information contained hereCtoNelt NeTifikE not for general distribution. EF-EA_00116968 EFTA01251492 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm c̀s ""eoss' AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. Run pato: 06/17/2020 Run Time: Data Osage for: Item Conn. Conn. Originating Cr Bytes Byte. Apn IKEI INSI MARL NICOLL Date Time Number UP Dn (OTC) 6076 04/15/20 09:14:57 32:32 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6077 04/15/20 09:30:16 9:51 0 0 los 3587080982063726 310410214827503 APPLE IPHONEB 6078 04/15/20 09:47:29 15:58 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6079 04/15/20 10:03:26 2:04 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6080 04/15/20 10:03:27 2:04 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6081 04/15/20 10:05:31 9:37 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6082 04/15/20 10:12:07 60:00 9960 3036 ins -1 310410214827503 6083 04/15/20 10:15:07 2:03 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6084 04/15/20 10:15:08 2:03 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6085 04/15/20 10:17:11 51:15 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6086 04/15/20 11:08:26 27:15 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6087 04/15/20 11:08:26 27:16 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6088 04/15/20 11:12:07 60:00 8496 2896 ism -1 310410214827503 6089 04/15/20 11:35:42 23:11 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6090 04/15/20 11:58:52 9:20 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6091 04/15/20 11:58:53 9:20 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6092 04/15/20 12:08:13 32:41 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6093 04/15/20 12:12:07 60:00 12012 4396 ism -1 310410214827503 6094 04/15/20 12:40:53 2:13 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6095 04/15/20 12:40:54 2:13 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6096 04/15/20 12:43:07 0:05 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6097 04/15/20 12:43:34 22:29 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 249 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002893 The information contained her is not for general distribution. EFTA_00I 16969 EFTA01251493 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in 1/4""e ....,,,,sf —s AT&T OTC. Run Data: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn IN= IMSI MARL MOLL Date Time Number Op Dn (OTC) 6098 04/15/20 13:06:02 2:03 192 Onxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6099 04/15/20 13:06:03 2:03 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6100 04/15/20 13:08:06 12:43 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6101 04/15/20 13:12:07 60:00 11888 4436 was -1 310410214827503 6102 04/15/20 13:20:48 8:14 192 Onxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6103 04/15/20 13:20:49 8:14 0 Onxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6104 04/15/20 13:29:03 11:54 0 Onxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6105 04/15/20 13:40:56 7:46 192 Onxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6106 04/15/20 13:40:57 7:46 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6107 04/15/20 13:48:43 4:52 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6108 04/15/20 13:53:34 9:51 192 Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6109 04/15/20 13:53:35 9:51 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6110 04/15/20 14:03:26 35:03 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6111 04/15/20 14:12:07 60:00 6908 2880 isms -1 310410214827503 6112 04/15/20 14:38:29 7:10 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6113 04/15/20 14:45:38 0:50 192 Onxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6114 04/15/20 14:45:39 0:50 0 Onxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6115 04/15/20 14:46:30 2:48 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6116 04/15/20 14:49:18 13:09 192 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6117 04/15/20 14:49:19 13:09 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6118 04/15/20 15:02:28 2:01 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 250 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002894 The information contained her is not for general distribution. EFTA_00I 16970 EFTA01251494 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: 18:56:01 Data Usage for: Itea Cows. Conn. Originating ET Bytes Byte. Apn INSI NUM MODEL Date Time Hunter UP Dn (UTC) 6119 04/15/20 15:04:28 8:17 192 OruMgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6120 04/15/20 15:04:30 8:16 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6121 04/15/20 15:12:07 41:27 8388 3004 ins 3587080982063726 310410214827503 APPLE !PHONES 6122 04/15/20 15:12:46 3:22 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6123 04/15/20 15:16:09 20:00 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6124 04/15/20 15:16:10 35:10 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6125 04/15/20 15:51:20 3:30 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6126 04/15/20 15:53:34 1:16 19736 2324 ims 3587080982063726 310410214827503 APPLE !PHONES 6127 04/15/20 15:53:34 1:16 3388 2324 ims 3587080982063726 310410214827503 APPLE !PHONES 6128 04/15/20 15:54:49 23:05 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6129 04/15/20 15:54:50 23:05 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6130 04/15/20 15:54:50 12:52 6334 6856 ims 3587080982063726 310410214827503 APPLE !PHONES 6131 04/15/20 15:54:51 12:52 6856 6070 ims 3587080982063726 310410214827503 APPLE !PHONES 6132 04/15/20 16:06:56 0:51 9065 6460 ims -1 310410214827503 6133 04/15/20 16:07:39 60:00 0 0 ims 3587080982063726 310410214827503 APPLE !PHONES 6134 04/15/20 16:07:46 4:11 6245 6674 ims 3587080982063726 310410214827503 APPLE !PHONES 6135 04/15/20 16:07:47 4:11 6674 5981 ims 3587080982063726 310410214827503 APPLE !PHONES 6136 04/15/20 16:16:14 29:08 20553 13524 ims -1 310410214827503 6137 04/15/20 16:17:55 5:13 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6138 04/15/20 16:23:07 14:51 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6139 04/15/20 16:23:08 14:51 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6140 04/15/20 16:37:59 11:35 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6141 04/15/20 16:47:33 2:01 11986 13222 ins 3587080982063726 310410214827503 APPLE !PHONES 6142 04/15/20 16:49:34 15:07 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6143 04/15/20 16:49:35 15:06 7328 7652 ims 3587080982063726 310410214827503 APPLE !PHONES 6144 04/15/20 16:49:35 15:07 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 251 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002895 The information contained hereCtoNyFti NeTniiiikE not for general distribution. EF-EA_00116971 EFTA01251495 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 LL:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in tt ‘"I°ad e# AT&T OTC. Run Date: 06/17/2020 Run Tame: 18:56:01 Data Usage Tor: Item Conn. Conn. originating ET Bytes Bytes Apn INSI MAKE NADEL Date Time Number Up Dn (UTC) 6145 04/15/20 16:49:36 15:06 7544 6976 imp 3587080982063726 310410214827503 APPLE !PHONES 6146 04/15/20 17:04:42 16:57 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6147 04/15/20 17:04:45 15:37 8338 8030 ims 3587080982063726 310410214827503 APPLE !PHONES 6148 04/15/20 17:07:39 18:46 0 .0 ims 3587080982063726 310410214827503 APPLE 'PHONES 6149 04/15/20 17:20:22 8:34 3532 1432 ims 3587080982063726 310410214827503 APPLE 'PHONES 6150 04/15/20 17:21:38 8:17 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6151 04/15/20 17:21:39 8:17 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6152 04/15/20 17:26:24 3:31 6333 50190 ims 3587080982063726 310410214827503 APPLE !PHONES 6153 04/15/20 17:26:25 3:31 6670 5981 ims 3587080982063726 310410214827503 APPLE !PHONES 6154 04/15/20 17:28:56 17:03 8263 6198 ims -1 310410214827503 6155 04/15/20 17:29:56 24:29 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6156 04/15/20 17:41:23 13:02 8058 6034 ims 3587080982063726 310410214827503 APPLE !PHONES 6157 04/15/20 17:54:24 2:03 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6158 04/15/20 17:54:25 2:02 6952 6512 ims 3587080982063726 310410214827503 APPLE !PHONES 6159 04/15/20 17:54:25 2:03 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6160 04/15/20 17:54:26 2:02 6404 6688 ims 3587080982063726 310410214827503 APPLE 'PHONES 6161 04/15/20 17:56:28 8:49 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6162 04/15/20 17:56:29 8:48 7732 6246 ims 3587080982063726 310410214827503 APPLE 'PHONES 6163 04/15/20 18:05:16 2:04 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6164 04/15/20 18:05:17 2:03 6458 7494 ims 3587080982063726 310410214827503 APPLE !PHONES 6165 04/15/20 18:05:17 2:04 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6166 04/15/20 18:05:18 2:03 7494 6194 ims 3587080982063726 310410214827503 APPLE !PHONES 6167 04/15/20 18:07:21 0:05 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6168 04/15/20 18:07:37 51:27 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6169 04/15/20 18:07:40 45:14 11412 7607 ims 3587080982063726 310410214827503 APPLE 'PHONES 6170 04/15/20 18:52:54 27:01 3548 2524 ims 3587080982063726 310410214827503 APPLE 'PHONES 6171 04/15/20 18:59:03 8:16 192 Onxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 252 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002896 The information contained hereCtoNfti NTifikE not for general distribution. EFTA 00116972 EFTA01251496 MOBILITY 41111P 2996479 06/17/2020 AT&T hes queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T arc. Run Date: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn 'NCI IMSI HUM MODEL Date Time Hunter Op On (OTC) 6172 04/15/20 18:59:05 8:15 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPMONEB 6173 04/15/20 19:07:20 0:36 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPMONEB no 6174 04/15/20 19:07:56 2:03 192 Ormagonpho 3587080982063726 310410214827503 APPLE IPMONEB no 6175 04/15/20 19:07:57 2:03 0 Ormagonpho 3587080982063726 310410214827503 APPLE IPMONEB no 6176 04/15/20 19:10:00 7:55 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6177 04/15/20 19:17:33 60:00 16873 9324 imp -1 310410214827503 6178 04/15/20 19:17:54 2:09 192 Onatgonpho 3587080982063726 310410214827503 APPLE IPMONEB no 6179 04/15/20 19:17:55 2:09 0 Onatgonpho 3587080982063726 310410214827503 APPLE IPMONEB no 6180 04/15/20 19:20:05 60:00 0 Ormagonpho 3587080982063726 310410214827503 APPLE IPMONEB no 6181 04/15/20 20:17:33 60:00 10376 3268 imp -1 310410214827503 6182 04/15/20 20:20:05 3:36 0 Onatgonpho 3587080982063726 310410214827503 APPLE IPMONEB no 6183 04/15/20 20:23:40 6:04 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONEB no 6184 04/15/20 20:23:41 6:04 0 Onatgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6185 04/15/20 20:29:45 57:39 0 Onatgonpho 3587080982063726 310410214827503 APPLE IPMONEB no 6186 04/15/20 21:17:33 55:02 16772 9188 imp -1 310410214827503 6187 04/15/20 21:27:23 35:36 192 Ormagonpho 3587080982063726 310410214827503 APPLE IPMONEB no 6188 04/15/20 21:27:24 35:36 0 Ormagonpho 3587080982063726 310410214827503 APPLE IPMONEB no 6189 04/15/20 22:03:00 13:02 0 Ormagonpho 3587080982063726 310410214827503 APPLE IPMONEB no 6190 04/15/20 22:07:09 0:00 0 0 imp 3587080982063726 310410214827503 APPLE IPMONEB 6191 04/15/20 22:10:27 60:00 39452 25378 imp -1 310410214827503 6192 04/15/20 22:16:01 37:38 192 Onatgonpho 3587080982063726 310410214827503 APPLE IPMONEB no 6193 04/15/20 22:16:02 37:38 0 Onatgonpho 3587080982063726 310410214827503 APPLE IPMONEB no 6194 04/15/20 22:53:40 1:14 0 Onatgonpho 3587080982063726 310410214827503 APPLE IPMONEB no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 253 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002897 The information contained her is PIETIAL not for general distribution. EF-EA_00116973 EFTA01251497 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in t— `-' a ssti AT&T UTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn ENE' IMEI MARL MODEL Data Time Number Up Dn (UTC) 6195 04/15/20 22:54:00 0:29 4811 18287 imo -1 310410214827503 6196 04/15/20 22:54:53 28:10 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6197 04/15/20 22:54:54 28:10 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6198 04/15/20 23:06:36 25:23 5201114 4269382 imo -1 310410214827503 6199 04/15/20 23:10:27 60:00 16484 15256 imo -1 310410214827503 6200 04/15/20 23:23:03 3:39 192 Onxtgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 6201 04/15/20 23:23:04 3:39 0 Onxtgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 6202 04/15/20 23:26:43 1:53 0 Onxtgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 6203 04/15/20 23:28:35 3:42 192 Onxtgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 6204 04/15/20 23:28:36 3:42 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 6205 04/15/20 23:32:18 7:25 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6206 04/15/20 23:39:42 13:51 192 Onxtgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 6207 04/15/20 23:39:43 13:51 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 6208 04/15/20 23:53:34 34:44 192 Oruftgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 6209 04/15/20 23:53:35 34:44 0 Onxtgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 6210 04/16/20 00:10:27 60:00 10036 3408 ims -1 310410214827503 6211 04/16/20 00:28:19 1:10 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6212 04/16/20 00:29:28 9:34 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 6213 04/16/20 00:29:29 9:34 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 6214 04/16/20 00:39:03 28:34 0 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6215 04/16/20 01:07:36 2:10 192 Onxtgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 6216 04/16/20 01:07:38 2:09 0 Onxtgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 254 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002898 The information contained her is NT4Ask not for general distribution. EFTA_OOI 16974 EFTA01251498 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm tra a`s d . AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: 06/17/2020 Run Time: 18:56:02 Data Osage for: Item Conn. Conn. originating ET Bytes Bytes Apn INLI IMSI MAKE MOLL Date Time Number Up Dn (OTC) 6217 04/16/20 01:09:46 33:55 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6218 04/16/20 01:10:27 60:00 6956 2788 ims -1 310410214827503 6219 04/16/20 01:43:40 1:07 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPMC4428 no 6220 04/16/20 01:43:41 1:07 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 6221 04/16/20 01:44:48 24:29 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 6222 04/16/20 02:09:16 2:04 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6223 04/16/20 02:09:17 2:04 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6224 04/16/20 02:10:27 60:00 12260 4516 ins -1 310410214827503 6225 04/16/20 02:11:21 14:40 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6226 04/16/20 02:26:00 2:04 192 Oruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 6227 04/16/20 02:26:01 2:04 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6228 04/16/20 02:28:05 27:57 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6229 04/16/20 02:56:02 0:40 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 6230 04/16/20 02:56:03 0:40 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 6231 04/16/20 02:56:42 58:17 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 6232 04/16/20 03:10:27 60:00 10272 4288 ins -1 310410214827503 6233 04/16/20 04:10:27 60:00 8496 3036 ins -1 310410214827503 6234 04/16/20 05:10:27 60:00 6956 2804 ins -1 310410214827503 6235 04/16/20 05:47:48 6:10 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6236 04/16/20 05:53:58 20:47 192 Onxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 6237 04/16/20 05:53:59 20:47 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 6238 04/16/20 06:10:27 60:00 14892 4764 was -1 310410214827503 6239 04/16/20 06:14:46 1:49 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 255 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002899 The information contained hereleeNe NTroliAL not for general distribution. EFTA_00I 16975 EFTA01251499 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: 18:56:02 Data Osage Tor: Iton cone. Conn. Originating ET Bytes Byte. ape INEI MIDI MUT ISDDEL Date Time Number Up Dn (UTC) 6240 04/16/20 06:16:34 1:35 192 Onxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 6241 04/16/20 06:16:36 1:34 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 6242 04/16/20 06:18:10 60:00 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6243 04/16/20 07:10:27 60:00 6956 2788 ims -1 310410214827503 6244 04/16/20 07:18:10 59:18 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6245 04/16/20 08:10:27 60:00 10272 4180 ims -1 310410214827503 6246 04/16/20 08:17:27 1:30 192 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6247 04/16/20 08:17:28 1:30 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6248 04/16/20 08:18:58 19:37 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no 6249 04/16/20 08:38:34 1:41 192 Oruftgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no 6250 04/16/20 08:38:35 1:41 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6251 04/16/20 08:40:16 60:00 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6252 04/16/20 09:10:27 60:00 13352 4516 ims -1 310410214827503 6253 04/16/20 09:40:16 60:00 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6254 04/16/20 10:10:27 60:00 8388 2928 ims -1 310410214827503 6255 04/16/20 10:40:16 60:00 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6256 04/16/20 11:10:27 60:00 7064 2788 ims -1 310410214827503 6257 04/16/20 11:40:16 60:00 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6258 04/16/20 12:10:27 60:00 8604 3036 ims -1 310410214827503 6259 04/16/20 12:40:16 0:00 0 Onmtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6260 04/16/20 12:40:18 60:00 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6261 04/16/20 13:10:27 60:00 13444 4676 ins -1 310410214827503 6262 04/16/20 13:40:18 60:00 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6263 04/16/20 14:10:27 60:00 13568 4516 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 256 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002900 The information contained hereCtoNelt NTroliAL not for general distribution. EFTA_00116976 EFTA01251500 MOBILITY ap. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ....,,,•AT&T ••—s" -se OTC. Run Date: 06/17/2020 Run Time: 21.‘K.A1 Data Osage For: Item Conn. Conn. Originating CT Bytes Bytom Apn INLI IMSI MUM MOLL Date Time Number Up Dn (OTC) 6264 04/16/20 14:40:18 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6265 04/16/20 15:10:27 55:27 6956 2788 ims -1 310410214827503 6266 04/16/20 15:40:18 25:06 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6267 04/16/20 16:05:23 2:23 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6268 04/16/20 16:05:25 2:21 7268 6900 ims 3587080982063726 310410214827503 APPLE IPHOME8 6269 04/16/20 16:05:25 2:23 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6270 04/16/20 16:05:26 2:22 6792 7004 ims 3587080982063726 310410214827503 APPLE !PRONGS 6271 04/16/20 16:05:54 0:01 0 0 imp -1 310410214827503 6272 04/16/20 16:06:16 1:30 6386 7468 imp 3587080982063726 310410214827503 APPLE IPHOME8 6273 04/16/20 16:06:17 1:31 7404 6122 imp 3587080982063726 310410214827503 APPLE IPHOME8 6274 04/16/20 16:07:47 2:18 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6275 04/16/20 16:07:49 2:16 8400 7968 imp 3587080982063726 310410214827503 APPLE IPHOME8 6276 04/16/20 16:10:04 4:37 192 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6277 04/16/20 16:10:05 4:36 6335 6668 imp 3587080982063726 310410214827503 APPLE !PHONES 6278 04/16/20 16:10:05 4:37 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6279 04/16/20 16:10:06 4:36 6668 6071 imp 3587080982063726 310410214827503 APPLE !PHONES 6280 04/16/20 16:11:02 60:00 21113 10326 imp -1 310410214827503 6281 04/16/20 16:14:42 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6282 04/16/20 17:11:02 60:00 6956 2680 imp -1 310410214827503 6283 04/16/20 17:14:42 19:04 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6284 04/16/20 17:33:46 18:29 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6285 04/16/20 17:33:46 18:30 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 6286 04/16/20 17:52:15 6:37 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6287 04/16/20 17:52:16 6:37 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 6288 04/16/20 17:58:53 19:47 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 6289 04/16/20 18:11:02 39:36 3424 1340 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 257 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002901 The information contained her is not for general distribution. NaTtAdti EFTA_OOI 16977 EFTA01251501 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in ....,,,, ••-•°"" a AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn Der IM3I MOLL Date Time Number Up Dn (UTC) 6290 04/16/20 18:18:39 2:20 192 0 nmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6291 04/16/20 18:18:40 2:20 0 Onmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6292 04/16/20 18:21:00 29:34 0 Onmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6293 04/16/20 18:50:33 2:51 192 Onmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6294 04/16/20 18:50:34 2:51 0 Onmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6295 04/16/20 18:50:36 2:48 8152 7618 meg 3587080982063726 310410214827503 APPLE !PROMS 6296 04/16/20 18:50:37 2:48 7550 7888 men 3587080982063726 310410214827503 APPLE !PROMS 6297 04/16/20 18:53:25 22:32 0 Onmtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 6298 04/16/20 18:53:29 60:00 16933 9322 men -1 310410214827503 6299 04/16/20 19:15:56 2:03 192 Onmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6300 04/16/20 19:15:57 2:03 0 Onmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6301 04/16/20 19:18:00 55:48 0 Onmtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 6302 04/16/20 19:53:29 60:00 9928 3176 men -1 310410214827503 6303 04/16/20 20:13:47 1:51 192 Onmtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 6304 04/16/20 20:13:48 1:51 0 Onmtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 6305 04/16/20 20:15:39 5:31 0 Onmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6306 04/16/20 20:21:09 3:19 192 Onmtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 6307 04/16/20 20:21:10 3:19 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6308 04/16/20 20:24:29 7:26 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6309 04/16/20 20:31:55 29:30 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6310 04/16/20 20:53:29 60:00 12260 4576 imp -1 310410214827503 6311 04/16/20 21:01:24 2:03 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PROMS no 6312 04/16/20 21:01:25 2:03 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PROMS no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 258 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002902 The information contained hereCtoNeli not for general distribution. EF-EA_00116978 EFTA01251502 MOBILITY 41011, 2996479 06/17/2020 AT&T hes queried for records from 03/01/2020 12:00:00nm to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Data: 06/17/2020 Run Time: 18:56:02 Data Osage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn INC' IMBI MARL MODEL Data Time Number Up On (OTC) 6313 04/16/20 21:03:28 3:29 0 0 natTanpho 3587080982063726 310410214827503 APPLE 'PHONES no 6314 04/16/20 21:06:56 14:30 192 0 natTanpho 3587080982063726 310410214827503 APPLE 'PHONES no 6315 04/16/20 21:06:57 14:30 0 0 natTanpho 3587080982063726 310410214827503 APPLE 'PHONES no 6316 04/16/20 21:21:27 0:54 0 0 natTanpho 3587080982063726 310410214827503 APPLE 'PHONES no 6317 04/16/20 21:22:20 2:17 192 0 natTanpho 3587080982063726 310410214827503 APPLE 'PHONES no 6318 04/16/20 21:22:21 2:17 0 0 natTanpho 3587080982063726 310410214827503 APPLE 'PHONES no 6319 04/16/20 21:24:38 0:05 0 0 natTanpho 3587080982063726 310410214827503 APPLE 'PHONES no 6320 04/16/20 21:24:56 9:39 0 0 natTanpho 3587080982063726 310410214827503 APPLE 'PHONES no 6321 04/16/20 21:34:34 8:20 192 0 natTanpho 3587080982063726 310410214827503 APPLE 'PHONES no 6322 04/16/20 21:34:36 8:19 0 0 natTanpho 3587080982063726 310410214827503 APPLE 'PHONES no 6323 04/16/20 21:42:55 0:55 0 0 natTanpho 3587080982063726 310410214827503 APPLE 'PHONES no 6324 04/16/20 21:43:50 8:20 192 0 natTanpho 3587080982063726 310410214827503 APPLE 'PHONES no 6325 04/16/20 21:43:51 8:20 0 0 natTanpho 3587080982063726 310410214827503 APPLE 'PHONES no 6326 04/16/20 21:52:11 9:10 0 0 natTanpho 3587080982063726 310410214827503 APPLE 'PHONES no 6327 04/16/20 21:53:29 9:05 0 0 imp -1 310410214827503 6328 04/16/20 22:01:21 21:51 192 0 natTanpho 3587080982063726 310410214827503 APPLE 'PHONES no 6329 04/16/20 22:01:22 21:52 0 0 nottgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6330 04/16/20 22:07:21 15:51 18152 16510 imp 3587080982063726 310410214827503 APPLE 'PHONES 6331 04/16/20 22:07:22 15:51 16442 17888 imp 3587080982063726 310410214827503 APPLE 'PHONES 6332 04/16/20 22:15:08 0:21 9096 0 imp 3587080982063726 310410214827503 APPLE 'PHONES 6333 04/16/20 22:15:09 0:21 0 9096 imp 3587080982063726 310410214827503 APPLE !PHONES 6334 04/16/20 22:23:13 1:29 0 0 nactgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6335 04/16/20 22:23:20 50:27 19231 15535 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 259 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002903 The information contained her is not for general distribution. EFTA_OOI 16979 EFTA01251503 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ....,,,• ••—s`"I e AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating LT Bytes Bytoa Apn INEZ INBI MARL NICOLL Date Time Number Up Dn (OTC) 6336 04/16/20 22:24:41 2:11 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 6337 04/16/20 22:24:44 2:09 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6338 04/16/20 22:26:53 1:11 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6339 04/16/20 22:28:03 2:09 192 Oruftgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 6340 04/16/20 22:28:05 2:09 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPROME8 no 6341 04/16/20 22:30:14 1:44 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 6342 04/16/20 22:31:48 0:11 1003 5372 nxtgenpho -1 310410214827503 no 6343 04/16/20 22:31:57 2:04 192 Oruftgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 6344 04/16/20 22:31:58 2:04 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 6345 04/16/20 22:34:02 16:17 0 Onatgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6346 04/16/20 22:50:18 9:04 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6347 04/16/20 22:50:19 9:04 0 Oruftgenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 6348 04/16/20 22:59:22 1:09 192 Oruftgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 6349 04/16/20 22:59:23 1:09 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 6350 04/16/20 22:59:58 0:35 4807 34708 nxtgenpho -1 310410214827503 no 6351 04/16/20 23:00:31 0:56 192 Oruftgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 6352 04/16/20 23:00:32 0:56 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6353 04/16/20 23:01:28 60:00 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6354 04/16/20 23:08:27 42:36 9266 7303 ims 3587080982063726 310410214827503 APPLE !PHONES 6355 04/16/20 23:51:03 24:33 3748 1664 ims 3587080982063726 310410214827503 APPLE !PHONES 6356 04/17/20 00:01:28 27:44 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6357 04/17/20 00:15:36 0:58 2644 1324 imam 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 260 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002904 The information contained hereCtoNyFti NsToliAL not for general distribution. EFTA_00I 16980 EFTA01251504 MOBILITY • 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run pato: 06/17/2020 Run Tina: 18:56:02 Data Osage For: Itea Conn. Conn. Originating ET Bytes Byte. Ann INEI INSI MAKE NODEL Data Time Number Up Dn (OTC) 6358 04/17/20 00:16:34 60:00 24032 13612 imp 3587080982063726 310410214827503 APPLE 'PHONES 6359 04/17/20 00:28:44 0:12 9796 20982 imp 3587080982063726 310410214827503 APPLE 'PHONES 6360 04/17/20 00:29:11 2:04 192 0 naftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6361 04/17/20 00:29:12 2:05 0 0 naftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6362 04/17/20 00:31:16 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6363 04/17/20 01:16:34 60:00 14512 8752 imp 3587080982063726 310410214827503 APPLE 'PHONES 6364 04/17/20 01:31:16 28:19 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6365 04/17/20 01:54:16 42:00 6204486 8118640 imp 3587080982063726 310410214827503 APPLE !PHONES 6366 04/17/20 01:59:33 1:39 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6367 04/17/20 01:59:35 1:38 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6368 04/17/20 02:01:13 1:08 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6369 04/17/20 02:02:20 2:03 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6370 04/17/20 02:02:21 2:03 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6371 04/17/20 02:04:24 4:04 0 Onaftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6372 04/17/20 02:08:27 2:04 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6373 04/17/20 02:08:28 2:04 0 Onaftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6374 04/17/20 02:10:32 2:52 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6375 04/17/20 02:13:23 14:17 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6376 04/17/20 02:13:24 14:17 0 Onaftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6377 04/17/20 02:16:34 60:00 6224 2920 imp 3587080982063726 310410214827503 APPLE 'PHONES 6378 04/17/20 02:27:41 60:00 0 Onaftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6379 04/17/20 02:51:19 0:00 0 0 ins 3587080982063726 310410214827503 APPLE !PHONES 6380 04/17/20 02:51:29 60:00 21442 9856 ins -1 310410214827503 6381 04/17/20 03:16:34 60:00 0 0 ins 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 261 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002905 The information contained her is NT4AL not for general distribution. EF-EAJVII6981 EFTA01251505 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm tra ""s I. d AT&T AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. Run pato: 06/17/2020 Run Time: 18:56:02 Data Osage for: Itea Conn. Conn. originating ET Bytes Bytea Apn INEI IMSI NAME MODEL Date Time Minter Up Dn (UTC) 6382 04/17/20 03:27:41 24:51 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 6383 04/17/20 03:51:29 60:00 8388 2896 ins -1 310410214827503 6384 04/17/20 03:52:31 2:24 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 6385 04/17/20 03:52:32 2:24 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 6386 04/17/20 03:54:55 6:03 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 6387 04/17/20 03:54:56 6:03 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 6388 04/17/20 04:01:00 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 6389 04/17/20 04:16:34 60:00 0 0 las 3587080982063726 310410214827503 APPLE IPHONZ8 6390 04/17/20 04:51:29 60:00 7440 3236 lens -1 310410214827503 6391 04/17/20 05:01:00 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6392 04/17/20 05:16:34 60:00 0 0 lens 3587080982063726 310410214827503 APPLE !PROMS 6393 04/17/20 05:51:29 60:00 10020 3268 las -1 310410214827503 6394 04/17/20 06:01:00 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 6395 04/17/20 06:16:34 19:50 0 0 ism 3587080982063726 310410214827503 APPLE IPHONZ8 6396 04/17/20 06:51:29 60:00 17224 6216 las -1 310410214827503 6397 04/17/20 07:01:00 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 6398 04/17/20 07:51:29 60:00 7636 2896 lens -1 310410214827503 6399 04/17/20 08:01:00 0:01 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 6400 04/17/20 08:01:02 40:34 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 6401 04/17/20 08:41:35 3:31 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 6402 04/17/20 08:41:36 3:31 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 6403 04/17/20 08:45:07 8:39 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 6404 04/17/20 08:51:29 60:00 8156 2988 lens -1 310410214827503 6405 04/17/20 08:53:47 3:01 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 262 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002906 The information contained her is not for general distribution. EFTA 00116982 EFTA01251506 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tras ""s,# AT&T OTC. Run Data: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Bytoa Apn INSI MARL MODEL Data Time Number Up Dn (OTC) 6406 04/17/20 08:56:47 1:40 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES . no 6407 04/17/20 08:56:48 1:40 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 6408 04/17/20 08:58:28 48:46 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6409 04/17/20 09:47:13 2:12 192 0 natgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6410 04/17/20 09:47:14 2:12 0 0 natgenpho 3587080982063726 310410214827503 APPLE 1PRONZ8 no 6411 04/17/20 09:49:26 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 6412 04/17/20 09:51:29 60:00 7064 2664 ins -1 310410214827503 6413 04/17/20 10:49:26 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 6414 04/17/20 10:51:29 60:00 12028 4220 ins -1 310410214827503 6415 04/17/20 11:49:26 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 6416 04/17/20 11:51:29 60:00 7204 2880 1ms -1 310410214827503 6417 04/17/20 12:45:00 0:00 0 0 ins 3587080982063726 310410214827503 APPLE DRONES 6418 04/17/20 12:45:09 60:00 16705 9144 1ms -1 310410214827503 6419 04/17/20 12:49:26 60:00 0 0 natgenpho 3587080982063726 310410214827503 APPLE DRONES no 6420 04/17/20 12:51:29 60:00 0 0 ins -1 310410214827503 6421 04/17/20 13:45:09 60:00 8388 2928 ins -1 310410214827503 6422 04/17/20 13:49:26 0:02 0 0 natgenpho 3587080982063726 310410214827503 APPLE DRONES no 6423 04/17/20 13:49:30 60:00 0 0 natgenpho 3587080982063726 310410214827503 APPLE DRONES no 6424 04/17/20 13:51:29 60:00 0 0 imp -1 310410214827503 6425 04/17/20 14:45:09 60:00 24360 11316 ins -1 310410214827503 6426 04/17/20 14:49:30 41:44 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 6427 04/17/20 14:51:29 60:00 0 0 ins -1 310410214827503 6428 04/17/20 15:31:13 2:23 192 0 natgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6429 04/17/20 15:31:14 2:23 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6430 04/17/20 15:33:37 5:17 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 263 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002907 The information contained hereCtoNels NTifikE not for general distribution. EF-EA_00116983 EFTA01251507 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in tted '"s AT&T s UTC. Run Date: 06/17/2020 Run Time: Data Osage For: iiiiiIIIIII Item Conn. Conn. Originating Bytes Bytes Apn MCI INBI MAKE NADEL Date Time Number Op Dn (UTC) 6431 04/17/20 15:38:53 2:04 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6432 04/17/20 15:38:54 2:04 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6433 04/17/20 15:40:58 5:27 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6434 04/17/20 15:45:09 60:00 7064 2804 ims -1 310410214827503 6435 04/17/20 15:46:24 8:14 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6436 04/17/20 15:46:25 8:14 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6437 04/17/20 15:51:29 43:57 0 0 mos -1 310410214827503 6438 04/17/20 15:54:39 18:19 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6439 04/17/20 16:12:58 8:17 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6440 04/17/20 16:12:59 8:18 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6441 04/17/20 16:21:17 54:04 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6442 04/17/20 16:45:09 5:45 0 0 I. -1 310410214827503 6443 04/17/20 16:53:26 8:56 10013 6480 I. -1 310410214827503 6444 04/17/20 17:05:08 60:00 19982 10381 ims -1 310410214827503 6445 04/17/20 17:15:20 2:03 192 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6446 04/17/20 17:15:21 2:03 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6447 04/17/20 17:17:24 14:47 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6448 04/17/20 17:32:10 2:03 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 6449 04/17/20 17:32:11 2:03 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6450 04/17/20 17:34:14 3:45 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6451 04/17/20 17:37:58 2:03 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6452 04/17/20 17:37:59 2:03 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6453 04/17/20 17:40:02 52:04 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 264 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002908 The information contained her is NeTniliAL not for general distribution. EF-EA_00116984 EFTA01251508 MOBILITY 4101. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in •,.,"... sa$ AT&T OTC. Run pato: 06/17/2020 Run Tuna: 10:56:02 Data Osage For: Item Conn. Conn. Originating LT Bytes Bytes Apn IKEI INSI MARL NICOLL Date Tao Number OP Dn (U2C) 6454 04/17/20 18:05:08 18:10 4764 1464 imp -1 310410214827503 6455 04/17/20 18:29:14 0:26 8340 7264 imp 3587080982063726 310410214827503 APPLE !PHONES 6456 04/17/20 18:29:40 42:12 8296 5756 imp 3587080982063726 310410214827503 APPLE !PHONES 6457 04/17/20 18:32:05 2:05 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6458 04/17/20 18:32:06 2:05 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6459 04/17/20 18:34:11 35:22 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6460 04/17/20 18:39:07 60:00 16480 8335 imp -1 310410214827503 6461 04/17/20 19:09:32 2:04 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6462 04/17/20 19:09:34 2:03 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6463 04/17/20 19:11:37 58:25 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6464 04/17/20 19:11:52 0:00 0 0 imp 3587080982063726 310410214827503 APPLE !PHONES 6465 04/17/20 19:12:03 60:00 19843 11038 imp -1 310410214827503 6466 04/17/20 19:39:07 31:47 0 0 imp -1 310410214827503 6467 04/17/20 20:10:53 9:10 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6468 04/17/20 20:10:54 9:09 6670 5981 ins 3587080982063726 310410214827503 APPLE 'PHONES 6469 04/17/20 20:12:03 9:10 0 0 ins -1 310410214827503 6470 04/17/20 20:20:02 1:37 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6471 04/17/20 20:20:03 1:36 6244 6778 imp 3587080982063726 310410214827503 APPLE 'PHONES 6472 04/17/20 20:20:03 1:37 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6473 04/17/20 20:20:05 1:35 6670 5980 imp 3587080982063726 310410214827503 APPLE !PHONES 6474 04/17/20 20:21:40 14:12 745421 19273243 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6475 04/17/20 20:21:42 43:34 9264 7230 imp 3587080982063726 310410214827503 APPLE !PHONES 6476 04/17/20 20:35:52 1:27 304075 19807400 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6477 04/17/20 20:37:19 0:30 181567 19821855 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6478 04/17/20 20:37:49 0:44 186909 19813913 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6479 04/17/20 20:38:33 26:43 122067 1895480 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 265 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002909 The information contained her is PsiTntAlt not for general distribution. EF-EA_00116985 EFTA01251509 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ...,,,,sf •--s`" 1. AT&T OTC. Run Date: 06/17/2020 Run Time: 18:56:03 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Dytea Apn IMEI INSI MARL NICOLL Date Time Number Up Dn (OTC) 6480 04/17/20 21:05:15 8:30 26349 20421 nxtgonpho 3587080982063726 310410214827503 APPLE INIONZ8 no 6481 04/17/20 21:05:16 8:29 7164 6848 ims 3587080982063726 310410214827503 APPLE 110MONZ8 6482 04/17/20 21:05:16 8:30 20421 26061 nxtgonpho 3587080982063726 310410214827503 APPLE 110MONZ8 no 6483 04/17/20 21:05:17 8:29 6740 6900 ims 3587080982063726 310410214827503 APPLE 110MONZ8 6484 04/17/20 21:08:07 60:00 25214 17928 ims -1 310410214827503 6485 04/17/20 21:13:46 2:17 5221 6055 nxtginpho 3587080982063726 310410214827503 APPLE 110MONZ8 no 6486 04/17/20 21:13:47 2:17 6055 4933 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 6487 04/17/20 21:16:03 1:07 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 6488 04/17/20 21:16:04 1:06 5285 6873 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 6489 04/17/20 21:16:05 1:06 6873 4997 nxtgonpho 3587080982063726 310410214827503 APPLE /DRONES no 6490 04/17/20 21:16:05 1:06 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 6491 04/17/20 21:16:07 0:04 0 1347 ims -1 310410214827503 6492 04/17/20 21:17:11 24:25 19364 13069 nxtgonpho 3587080982063726 310410214827503 APPLE INIONZ8 no 6493 04/17/20 21:41:35 1:55 5217 6037 nxtgonpho 3587080982063726 310410214827503 APPLE INIONZ8 no 6494 04/17/20 21:41:37 1:54 6037 4929 nxtgonpho 3587080982063726 310410214827503 APPLE INIONZ8 no 6495 04/17/20 21:43:31 60:00 49433 41515 nxtgonpho 3587080982063726 310410214827503 APPLE INIONZ8 no 6496 04/17/20 22:08:07 60:00 8604 2912 ims -1 310410214827503 6497 04/17/20 22:43:31 46:14 8721 7492 nxtgonpho 3587080982063726 310410214827503 APPLE INIONZ8 no 6498 04/17/20 23:08:07 60:00 8496 2896 ims -1 310410214827503 6499 04/17/20 23:29:45 8:24 7513 5070 nxtgonpho 3587080982063726 310410214827503 APPLE INIONZ8 no 6500 04/17/20 23:38:09 2:16 14373 15984 nxtgonpho 3587080982063726 310410214827503 APPLE INIONZ8 no 6501 04/17/20 23:40:24 98:40 10467 12250 nxtgonpho 3587080982063726 310410214827503 APPLE INIONZ8 no 6502 04/17/20 23:40:25 60:00 12250 11763 nxtgonpho 3587080982063726 310410214827503 APPLE INIONZ8 no 6503 04/18/20 00:08:07 60:00 8496 2896 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 266 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained her is PsiTifikE not for general distribution. SDNYGM 00002910 EFTA_00116986 EFTA01251510 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in 1% ‘"I° ‘.7 "" ,.. ____./ mil. AT&T OTC. Run Date: 06/17/2020 Run Time: 1S:56:03 Data Osage For: Ito. Conn. Conn. Originating ET Bytes Bytom Apn flex IM3I WOO; MODEL Data Time Number Up Dn (Inc) 6504 04/18/20 00:40:25 38:40 0 92ructgenpho 3587080982063726 310410214827503 APPLE IPMONE8 no 6505 04/18/20 01:08:07 60:00 17208 6308 ims -1 310410214827503 6506 04/18/20 01:19:05 2:03 5390 69egnxtgenpho 3587080982063726 310410214827503 APPLE IPMONE8 no 6507 04/18/20 01:19:06 2:03 6989 5102 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONE8 no 6508 04/18/20 01:21:09 60:00 8034 6067 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6509 04/18/20 02:08:07 60:00 7080 2772 ims -1 310410214827503 6510 04/18/20 02:21:09 14:28 173 105 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6511 04/18/20 02:35:36 6:48 5217 6053 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6512 04/18/20 02:35:38 6:47 6053 4929 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6513 04/18/20 02:44:26 11:14 6686 7509 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONE8 no 6514 04/18/20 02:44:27 11:14 7509 6302nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6515 04/18/20 02:55:41 60:00 7977 6173 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6516 04/18/20 03:08:07 60:00 9928 3252 ims -1 310410214827503 6517 04/18/20 03:55:41 60:00 692 420 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6518 04/18/20 04:08:07 60:00 8604 3004 ims -1 310410214827503 6519 04/18/20 04:55:41 60:00 808 630 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6520 04/18/20 05:08:07 60:00 8388 2896 ims -1 310410214827503 6521 04/18/20 05:55:41 60:00 635 525 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6522 04/18/20 06:08:07 60:00 9928 3252 ims -1 310410214827503 6523 04/18/20 06:55:41 60:00 635 525 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6524 04/18/20 07:08:07 60:00 16884 5968 ims -1 310410214827503 6525 04/18/20 07:55:41 60:00 519 315 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6526 04/18/20 08:08:07 60:00 8388 2896 ims -1 310410214827503 6527 04/18/20 08:55:41 60:00 635 525 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 267 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained heraCtoNeli PsiTniliAL not for general distribution. SDNYGM00002911 EF-EA_00116987 EFTA01251511 MOBILITY 2996479 06/17/2020 AT&T has queried for records from O3/O1/2O2O 12:00:00am to O6/15/2O2O 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run pato: 06/17/2020 Run Time: 1S:56:03 Data Usage For: Item Conn. Conn. originating ET Bytes Bytes Apn IKEI INS' MARL NICOLL Data Time Number Up Dn (UTC) 6528 04/18/20 09:08:07 31:01 4964 1572 imp -1 310410214827503 6529 04/18/20 09:47:30 60:00 14740 9988 imp 3587080982063726 310410214827503 APPLE IrMONE8 6530 04/18/20 09:55:41 60:00 635 525 nxtgonpho 3587080982063726 310410214827503 APPLE 110H014Z8 no 6531 04/18/20 10:47:30 60:00 5408 2896 imp 3587080982063726 310410214827503 APPLE 110H014Z8 6532 04/18/20 10:55:41 60:00 519 315 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6533 04/18/20 11:47:30 43:00 5192 2680 imp 3587080982063726 310410214827503 APPLE !PHONES 6534 04/18/20 11:55:41 60:00 462 420 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6535 04/18/20 12:30:30 60:00 13228 4608 imp 3587080982063726 310410214827503 APPLE !PHONES 6536 04/18/20 12:55:41 60:00 1012 4754 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6537 04/18/20 13:30:30 60:00 8388 3036 imp 3587080982063726 310410214827503 APPLE 110H014Z8 6538 04/18/20 13:55:41 27:30 173 105 nxtgonpho 3587080982063726 310410214827503 APPLE 110H014Z8 no 6539 04/18/20 14:23:10 4:53 5594 7645 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6540 04/18/20 14:23:12 4:52 7645 5306 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6541 04/18/20 14:28:04 0:05 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6542 04/18/20 14:28:38 60:00 11330 10559 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6543 04/18/20 14:30:30 60:00 16220 5032 imp 3587080982063726 310410214827503 APPLE !PHONES 6544 04/18/20 15:28:38 35:07 462 420 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6545 04/18/20 15:30:30 60:00 8388 2928 ins 3587080982063726 310410214827503 APPLE 110H014Z8 6546 04/18/20 16:03:44 5:20 5220 6055 nxtgonpho 3587080982063726 310410214827503 APPLE 110H014Z8 no 6547 04/18/20 16:03:45 5:20 6055 4932 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6548 04/18/20 16:09:05 27:35 18577 17292 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6549 04/18/20 16:09:06 27:35 17292 18193 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6550 04/18/20 16:30:30 60:00 8496 2928 ins 3587080982063726 310410214827503 APPLE !PHONES 6551 04/18/20 16:36:41 4:52 48 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 268 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002912 The information contained her is NTrifikE not for general distribution. EFTA_OOI 16988 EFTA01251512 MOBILITY • 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in t `"" tad . . AT&T OTC. Run Data: 06/17/2020 Run Time: 18:56:03 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn INEZ IMBI MARL MODEL Data Time Number Up Dn (UTC) 6552 04/18/20 16:41:32 3:04 16409 16604 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6553 04/18/20 16:41:33 3:04 16604 16121 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6554 04/18/20 16:44:37 14:23 37551 16113ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6555 04/18/20 16:58:59 2:24 288 48ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6556 04/18/20 16:59:00 2:24 48 Oruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 6557 04/18/20 17:01:24 12:10 288 48ruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 6558 04/18/20 17:01:25 12:10 48 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6559 04/18/20 17:13:36 21:30 7882 5543 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6560 04/18/20 17:30:30 60:00 15108 4780 man 3587080982063726 310410214827503 APPLE !PHONES 6561 04/18/20 17:35:06 202:36 88303 48880ruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6562 04/18/20 17:35:06 60:00 7737 6614 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6563 04/18/20 18:30:30 60:00 8604 3160 imp 3587080982063726 310410214827503 APPLE 'PHONES 6564 04/18/20 18:35:06 60:00 2251 7376ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6565 04/18/20 19:30:30 60:00 8712 3052 imp 3587080982063726 310410214827503 APPLE !PHONES 6566 04/18/20 19:35:06 60:00 1775 5767ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6567 04/18/20 20:30:30 14:31 6284 5300 imp 3587080982063726 310410214827503 APPLE !PRONGS 6568 04/18/20 20:33:46 4:10 17900 11707 imp -1 310410214827503 6569 04/18/20 20:35:06 22:37 37117 73669ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6570 04/18/20 20:39:50 10:10 8169 9622 imp 3587080982063726 310410214827503 APPLE !PHONES 6571 04/18/20 20:39:51 10:10 9622 8013 in 3587080982063726 310410214827503 APPLE IPHONEB 6572 04/18/20 20:45:01 5:17 10948 6732 ims -1 310410214827503 6573 04/18/20 20:50:00 6:39 6350 6668 imp 3587080982063726 310410214827503 APPLE IPHONEB 6574 04/18/20 20:50:01 6:40 6668 6106 imp 3587080982063726 310410214827503 APPLE !PHONES 6575 04/18/20 20:50:18 8:24 8313 6322 imp -1 310410214827503 6576 04/18/20 20:56:39 1:03 6300 6762 ins 3587080982063726 310410214827503 APPLE !PHONES 6577 04/18/20 20:56:40 1:03 6762 6036 imp 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 269 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002913 The information contained hereCtoNyFti PsiTntikE not for general distribution. EF-EA_00116989 EFTA01251513 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: 18:56:03 Data Usage For: Item Conn. Conn. Originating ET Bytes Bytom Apn IMMI IMSI MARS MODEL Date Time Minter Up Dn (UTC) 6578 04/18/20 20:57:43 0:05 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 6579 04/18/20 20:58:15 45:42 11877 7692 imp -1 310410214827503 6580 04/18/20 20:58:26 18:47 5702 6379 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 6581 04/18/20 20:58:27 18:47 6379 9106 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 6582 04/18/20 21:17:14 46:11 22023 32502 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 6583 04/18/20 21:17:15 46:11 32502 22401 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 6584 04/18/20 21:38:46 24:39 6409 7586 imp 3587080982063726 310410214827503 APPLE !PROMS 6585 04/18/20 21:38:47 24:39 7478 6253 imp 3587080982063726 310410214827503 APPLE !PROMS 6586 04/18/20 21:44:00 28:27 13616 8036 imp -1 310410214827503 6587 04/18/20 22:03:26 8:25 7581 soil nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 6588 04/18/20 22:11:50 3:20 5693 7267 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 6589 04/18/20 22:11:51 3:20 7267 5309 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 6590 04/18/20 22:11:58 3:12 6136 6566 Imo 3587080982063726 310410214827503 APPLE DRONES 6591 04/18/20 22:12:00 3:11 6566 5872 Imo 3587080982063726 310410214827503 APPLE DRONES 6592 04/18/20 22:12:27 60:00 21529 11092 Imo -1 310410214827503 6593 04/18/20 22:15:11 7:17 6871 4961 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 6594 04/18/20 22:22:27 4:15 6154 6539 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 6595 04/18/20 22:22:28 4:15 6539 5866 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 6596 04/18/20 22:26:43 6:07 6107 4901 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 6597 04/18/20 22:32:49 2:04 5177 6115 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 6598 04/18/20 22:32:50 2:04 6115 4889 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 6599 04/18/20 22:34:54 0:05 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 6600 04/18/20 22:35:10 1:24 7184 4966 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 6601 04/18/20 22:36:33 4:06 5218 6053 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 270 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002914 The information contained heraCtoNyFti NTailiAL not for general distribution. EFTAJVII6990 EFTA01251514 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in tr"`s ad 1° AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage Tor: Ilea Conn. Conn. Originating ET Bytes Byte. Apn IKI IMSI NAZI MODEL Date Time Number Up Dn (UTC) 6602 04/18/20 22:36:34 4:06 6053 4930 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6603 04/18/20 22:40:40 3:05 5220 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6604 04/18/20 22:40:41 3:05 6055 4932 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6605 04/18/20 22:43:46 5:54 7593 5176 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6606 04/18/20 22:49:39 2:10 5117 6107 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6607 04/18/20 22:49:40 2:10 6107 4829 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6608 04/18/20 22:51:50 37:24 8592 6485 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6609 04/18/20 23:12:27 60:00 10036 3176 ims -1 310410214827503 6610 04/18/20 23:29:13 8:08 5222 6091 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6611 04/18/20 23:29:14 8:08 6091 4934 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6612 04/18/20 23:37:22 1:49 6977 5025 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6613 04/18/20 23:39:10 2:05 5220 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6614 04/18/20 23:39:11 2:05 6055 4932 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6615 04/18/20 23:41:16 0:34 0 Ommtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6616 04/18/20 23:41:49 2:17 5221 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6617 04/18/20 23:41:50 2:17 6055 4933 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6618 04/18/20 23:44:07 6:04 5221 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6619 04/18/20 23:44:08 6:04 6055 4933 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6620 04/18/20 23:50:12 18:55 7226 5437 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6621 04/19/20 00:09:06 2:03 5220 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6622 04/19/20 00:09:07 2:03 6055 4932 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 271 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002915 The information contained her is not for general distribution. NeTnilikk EF-EA_00116991 EFTA01251515 MOBILITY dam. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in %---s` -'s AT&T UTE. Run Data: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating LT Sytes Byte. Apn ICI INSI N1110: NICOLL Data Time Number UP On (OTC) 6623 04/19/20 00:11:10 60:00 9724 10943 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6624 04/19/20 00:12:27 60:00 8496 2912 imp -1 310410214827503 6625 04/19/20 01:11:10 60:00 1322 1155 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6626 04/19/20 01:12:27 60:00 7080 2912 imp -1 310410214827503 6627 04/19/20 02:11:10 1:39 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6628 04/19/20 02:12:27 60:00 12120 4268 imp -1 310410214827503 6629 04/19/20 02:12:49 2:03 5222 6228 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 6630 04/19/20 02:12:50 2:03 6228 4934 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6631 04/19/20 02:14:53 14:51 6472 5426 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6632 04/19/20 02:29:43 8:55 5548 10407 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6633 04/19/20 02:29:44 8:55 10407 5260 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6634 04/19/20 02:38:39 2:03 5220 6107 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6635 04/19/20 02:38:40 2:03 6107 4932 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6636 04/19/20 02:40:43 60:00 8271 6277 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6637 04/19/20 03:12:27 60:00 13676 4676 imp -1 310410214827503 6638 04/19/20 03:40:43 60:00 1213 1155 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6639 04/19/20 04:12:27 60:00 8604 3052 imp -1 310410214827503 6640 04/19/20 04:40:43 60:00 1097 1106 nxtgonpho 3587080982063726 310410214827503 APPLE /PHONES no 6641 04/19/20 05:12:27 0:37 0 0 imp -1 310410214827503 6642 04/19/20 05:18:33 60:00 11845 7942 imp -1 310410214827503 6643 04/19/20 05:40:43 60:00 1213 1155 nxtgonpho 3587080982063726 310410214827503 APPLE /PHONES no 6644 04/19/20 06:18:33 60:00 13460 4624 ims -1 310410214827503 6645 04/19/20 06:40:43 60:00 687 630 nxtgonpho 3587080982063726 310410214827503 APPLE /PHONES no 6646 04/19/20 07:18:33 60:00 8388 2804 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 272 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002916 The information contained heraelaNyFti Ns-F.1AL not for general distribution. EF-EAJVII6992 EFTA01251516 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Dato: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating TT Bytes Bytom Apn INSI MAKE NICOLL Data Time Number Up Dn (UTC) 6647 04/19/20 07:40:43 60:00 751 735 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6648 04/19/20 08:18:33 60:00 9928 3160 imp -1 310410214827503 6649 04/19/20 08:40:43 60:00 346 210 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6650 04/19/20 09:18:33 60:00 9928 3068 imp -1 310410214827503 6651 04/19/20 09:40:43 60:00 519 315 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6652 04/19/20 10:18:33 60:00 16760 6340 imp -1 310410214827503 6653 04/19/20 10:40:43 60:00 462 420 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6654 04/19/20 11:18:33 60:00 10128 3176 imp -1 310410214827503 6655 04/19/20 11:40:43 50:17 346 210 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6656 04/19/20 12:18:33 60:00 8620 3036 imp -1 310410214827503 6657 04/19/20 12:30:59 25:21 10112 7542 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6658 04/19/20 12:31:00 25:21 7542 9824 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 6659 04/19/20 12:56:21 1:39 7526 5062 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 6660 04/19/20 12:57:59 8:37 5278 6165 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6661 04/19/20 12:58:00 8:37 6165 4990 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6662 04/19/20 13:06:37 0:45 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6663 04/19/20 13:07:21 46:42 6167 6986 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6664 04/19/20 13:07:22 46:42 6986 5879 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6665 04/19/20 13:18:33 60:00 13352 4516 imp -1 310410214827503 6666 04/19/20 13:54:04 2:17 6055 4902 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6667 04/19/20 13:56:21 8:25 5117 6055 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 6668 04/19/20 13:56:22 8:25 6055 4829 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 6669 04/19/20 14:04:47 1:58 6873 4965 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 273 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002917 The information contained hereeteNyFti NsTroliAL not for general distribution. EF-EA_00116993 EFTA01251517 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ‘inil. t migS il AT&T UTE. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. originating ET Bytes Byte. Apn IKEI INSI MAKE NICOLL Date Time Number Up Dn (UTC) 6670 04/19/20 14:06:44 2:03 5176 6115 nxtgonpho 3587080982063726 310410214827503 APPLE ISMONZ8 no 6671 04/19/20 14:06:45 2:03 6115 4888 nxtgonpho 3587080982063726 310410214827503 APPLE ISMONZ8 no 6672 04/19/20 14:08:48 0:49 7465 4966mxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6673 04/19/20 14:09:36 2:09 5177 6115 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6674 04/19/20 14:09:37 2:09 6115 4889 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 6675 04/19/20 14:11:46 2:36 8000 5024 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6676 04/19/20 14:14:21 2:09 5117 6107 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6677 04/19/20 14:14:22 2:09 6107 4829 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6678 04/19/20 14:16:31 6:31 6873 4966 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6679 04/19/20 14:18:33 60:00 8156 2804 ims -1 310410214827503 6680 04/19/20 14:23:01 2:04 5176 6115 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6681 04/19/20 14:23:02 2:04 6115 4888 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6682 04/19/20 14:25:06 6:51 6873 4966 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6683 04/19/20 14:31:56 2:19 5117 6055 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 6684 04/19/20 14:31:58 2:18 6055 4829 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6685 04/19/20 14:34:15 6:24 5118 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6686 04/19/20 14:34:16 6:24 6055 4830 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6687 04/19/20 14:40:39 6:03 5117 6107 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6688 04/19/20 14:40:40 6:03 6107 4829 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 6689 04/19/20 14:46:43 60:00 7990 6333 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 6690 04/19/20 15:18:33 60:00 10036 3284 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 274 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002918 The information contained her is NTrifikE not for general distribution. EF-EA_00116994 EFTA01251518 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn IMEI IMBI MCOEL Date Time Number UP Dn (Inc) 6691 04/19/20 15:46:43 60:00 4913 6693 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6692 04/19/20 16:18:33 8:19 0 0 ins -1 310410214827503 6693 04/19/20 16:31:29 60:00 14817 8098 ins -1 310410214827503 6694 04/19/20 16:46:43 60:00 346 210 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6695 04/19/20 17:31:29 60:00 11688 4112 Ins -1 310410214827503 6696 04/19/20 17:46:43 10:04 173 105 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6697 04/19/20 17:56:46 2:10 5284 6873 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6698 04/19/20 17:56:47 2:10 6873 4996 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6699 04/19/20 17:58:57 8:25 15000 26609 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6700 04/19/20 18:07:21 4:56 5754 6357 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6701 04/19/20 18:07:22 4:56 6357 5466 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6702 04/19/20 18:12:18 0:06 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6703 04/19/20 18:12:35 1:28 48 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6704 04/19/20 18:14:03 10:21 5287 6401 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6705 04/19/20 18:14:04 10:21 6401 4999 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6706 04/19/20 18:24:25 4:32 7589 5130 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6707 04/19/20 18:28:57 14:34 13180 16273 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6708 04/19/20 18:28:57 14:35 16273 12796 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6709 04/19/20 18:31:29 60:00 6956 2896 ins -1 310410214827503 6710 04/19/20 18:43:32 3:40 7465 4964 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6711 04/19/20 18:47:12 4:35 7666 5205 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6712 04/19/20 18:51:47 11:34 5441 7573 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constancy communicates with internet enabled devices when they are powered on. Ibis(' communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 275 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002919 The information contained heraleop+Fti N s not for general distribution. EF-EA_00116995 EFTA01251519 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ./ 1 4 `'s .zreleAT&T UTC. Run Date: 06/17/2020 Run Time: 18:56:03 Data Osage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn EMI INSI MUM MODEL Date Time Number Up On (UTC) 6713 04/19/20 18:51:48 11:34 7573 6002 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6714 04/19/20 19:03:22 15:35 658 3906 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6715 04/19/20 19:18:57 20:04 24756 26572 nxtgenpho 3587080982063726 310410214827503 APP'S !PHONES no 6716 04/19/20 19:18:58 20:04 26572 35880 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6717 04/19/20 19:31:29 29:27 0 0 imo -1 310410214827503 6718 04/19/20 19:37:13 26:00 8361 6086 imp -1 310410214827503 6719 04/19/20 19:39:02 0:05 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE ITHONZ8 no 6720 04/19/20 19:39:21 2:28 8897 5559 nxtgenpho .3587080982063726 310410214827503 APPLE ITHONZ8 no 6721 04/19/20 19:41:48 2:04 5216 6053 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6722 04/19/20 19:41:49 2:04 6053 4928 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6723 04/19/20 19:43:53 19:18 16341 13362 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6724 04/19/20 20:00:56 0:46 12442 11624 imp 3587080982063726 310410214827503 APPLE !PHONES 6725 04/19/20 20:01:42 3:47 3316 1340 ins 3587080982063726 310410214827503 APPLE ITHONZ8 6726 04/19/20 20:03:10 8:49 5582 7720 nxtgenpho 3587080982063726 310410214827503 APPLE ITHONZ8 no 6727 04/19/20 20:03:11 8:49 7720 5294 nxtgenpho 3587080982063726 310410214827503 APPLE ITHONZ8 no 6728 04/19/20 20:03:12 4:54 6338 6674 ims 3587080982063726 310410214827503 APPLE DRONES 6729 04/19/20 20:03:13 4:54 6674 6074 ims 3587080982063726 310410214827503 APPLE DRONES 6730 04/19/20 20:05:29 3:25 8269 6000 ins -1 310410214827503 6731 04/19/20 20:08:05 1:08 6242 6670 ins 3587080982063726 310410214827503 APPLE DRONES 6732 04/19/20 20:08:06 1:08 6670 5978 ins 3587080982063726 310410214827503 APPLE DRONES 6733 04/19/20 20:08:53 1:24 5775 3504 ins -1 310410214827503 6734 04/19/20 20:09:13 2:46 6244 6670 ins 3587080982063726 310410214827503 APPLE !PHONES 6735 04/19/20 20:09:14 2:46 6670 5980 ins 3587080982063726 310410214827503 APPLE DRONES 6736 04/19/20 20:10:17 60:00 15545 9144 ins -1 310410214827503 6737 04/19/20 20:12:00 8:13 61552 8616 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6738 04/19/20 20:20:12 0:38 5285 6208 natgenpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 276 AT&T does not retain records that can definitively show whether a transaction was PsiTniliAL customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002920 The information contained her is not for general distribution. EFTA_00116996 EFTA01251520 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in te ‘a° ras aS i AT&T OTC. Run Dato: 06/17/2020 Run Time: Data Usage for: Item Conn. Conn. Originating ET Bytes Bytom Apn IMEI INSI NA= MOLL Dote Time Number UP On (Uc) 6739 04/19/20 20:20:13 0:38 6208 4997 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 6740 04/19/20 20:20:51 5:49 18007 16801 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 6741 04/19/20 20:26:39 8:14 11490 13258 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6742 04/19/20 20:26:40 8:14 13258 11106 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6743 04/19/20 20:34:54 4:30 7465 4964 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6744 04/19/20 20:39:23 16:17 6721 7412 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6745 04/19/20 20:39:24 16:16 7412 6433 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 6746 04/19/20 20:55:41 9:18 9428 6778 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 6747 04/19/20 21:04:58 2:10 5221 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6748 04/19/20 21:04:59 2:10 6055 4933 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6749 04/19/20 21:07:09 3:36 7465 4965 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6750 04/19/20 21:10:17 53:55 6956 2804 imo -1 310410214827503 6751 04/19/20 21:10:44 1:47 5221 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6752 04/19/20 21:10:45 1:47 6055 4933 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6753 04/19/20 21:12:32 0:05 0 Ormagonpho 3587080982063726 310410214827503 APPLE !PHONES no 6754 04/19/20 21:13:03 3:27 14656 7150 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 6755 04/19/20 21:16:30 24:47 82235 98400 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 6756 04/19/20 21:16:31 24:47 98400 83435 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6757 04/19/20 21:41:18 11:57 7527 6010 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6758 04/19/20 21:53:15 26:39 10351 12357 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6759 04/19/20 21:53:16 26:39 12357 11122 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necesskrily indicate a customer initiated a transaction. Page 277 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002921 The information contained hereCtoNfti NTrifikE not for general distribution. EF-EA_00116997 EFTA01251521 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in triti `"a AT&T OTC. Run Data: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating ET Sytes Bytes Apn IICI INSI MAKE MODEL Data Time Number UP Dn (OTC) 6760 04/19/20 22:07:24 60:00 15000 7958 imp -1 310410214827503 6761 04/19/20 22:19:55 49:39 21210 16798 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6762 04/19/20 23:07:24 60:00 12152 4484 imp -1 310410214827503 6763 04/19/20 23:09:34 14:45 5326 6228 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6764 04/19/20 23:09:35 14:45 6228 5038 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6765 04/19/20 23:24:20 5:42 12767 12563 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6766 04/19/20 23:30:01 14:18 11826 7256 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6767 04/19/20 23:30:02 14:18 7256 11538 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6768 04/19/20 23:44:20 45:47 53575 44122 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6769 04/20/20 00:07:24 60:00 6848 2756 1ms -1 310410214827503 6770 04/20/20 00:30:06 8:02 23877 30655 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6771 04/20/20 00:30:07 8:02 30655 23589 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6772 04/20/20 00:38:09 1:09 11325 5640 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6773 04/20/20 00:39:17 1:37 5217 6105 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6774 04/20/20 00:39:18 1:37 6105 4929 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6775 04/20/20 00:40:55 1:35 8722 5271 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6776 04/20/20 00:42:29 4:53 5113 6053 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6777 04/20/20 00:42:30 4:53 6053 4825 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6778 04/20/20 00:47:23 8:37 48 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6779 04/20/20 00:55:59 19:07 10897 13836 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6780 04/20/20 00:56:00 19:07 13836 10513 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6781 04/20/20 01:07:24 60:00 10036 3160 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 278 AT&T does not retain records that can definitively show whether a transaction was NETIAL customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002922 The information contained hereCtoNyFti not for general distribution. EF-EAJVII6998 EFTA01251522 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T arc. Run Data: 06/17/2020 Run Time: Data Osage For: MS= Item Conn. Conn. Originating ET Bytes Byte. Apn ICI IMSI MAKE HOD= Data Time Number Up On (OTC) 6782 04/20/20 01:15:07 3:59 7529 5071 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6783 04/20/20 01:19:06 32:44 6060 6761 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6784 04/20/20 01:19:07 32:44 6761 5772 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6785 04/20/20 01:51:51 19:42 14835 10664 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6786 04/20/20 02:07:24 60:00 12028 4268 imp -1 310410214827503 6787 04/20/20 02:11:32 2:26 5118 6055 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6788 04/20/20 02:11:33 2:26 6055 4830 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6789 04/20/20 02:13:59 0:30 424 780 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6790 04/20/20 02:14:47 80:00 23589 26098 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6791 04/20/20 02:14:48 60:00 25809 22794 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6792 04/20/20 03:07:24 60:00 10596 4412 imp -1 310410214827503 6793 04/20/20 03:14:48 60:00 6344 7746 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6794 04/20/20 03:34:47 166:47 8691 7320 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6795 04/20/20 04:07:24 60:00 7064 2912 imp -1 310410214827503 6796 04/20/20 04:14:48 60:00 687 630 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6797 04/20/20 05:07:24 60:00 8604 3144 imp -1 310410214827503 6798 04/20/20 05:14:48 60:00 578 630 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6799 04/20/20 06:07:24 60:00 10380 4144 imp -1 310410214827503 6800 04/20/20 06:14:48 6:47 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6801 04/20/20 06:21:35 20:42 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6802 04/20/20 06:42:16 2:22 5221 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6803 04/20/20 06:42:17 2:22 6055 4933 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6804 04/20/20 06:44:38 6:12 5221 6055 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 279 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained her is PsiTnilikk not for general distribution. SDNYGM 00002923 EF-EA_00116999 EFTA01251523 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm tr a ,0. AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. Run Data: 06/17/2020 Run Time: 18:56:04 Data Usage For: Item Conn. Conn. Originating ET Sytes Byte. Apn IME1 IMSI NAZI MODEL Data Time Dumber Up Dn (OTC) 6805 04/20/20 06:44:39 6:12 6055 4933 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 6806 04/20/20 06:50:51 3:00 6067 5712 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 6807 04/20/20 06:53:50 49:32 17347 18935 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6808 04/20/20 06:53:51 49:32 18935 19405 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6809 04/20/20 07:07:24 60:00 8388 2820 ims -1 310410214827503 6810 04/20/20 07:43:22 31:21 12854 13278 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 6811 04/20/20 07:43:23 31:21 13278 14990 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 6812 04/20/20 08:07:24 60:00 10488 4520 ims -1 310410214827503 6813 04/20/20 08:14:44 48:38 23363 22357 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 6814 04/20/20 09:03:21 1:03 5217 6053 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 6815 04/20/20 09:03:23 1:02 6053 4929 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6816 04/20/20 09:04:25 24:55 15708 12984 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6817 04/20/20 09:07:24 60:00 11920 4484 ims -1 310410214827503 6818 04/20/20 09:29:19 0:43 5280 6115 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 6819 04/20/20 09:29:20 0:43 6115 4992 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6820 04/20/20 09:30:03 3:38 7529 5173 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6821 04/20/20 09:33:41 60:00 29626 28088 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6822 04/20/20 10:07:24 60:00 8604 3052 ims -1 310410214827503 6823 04/20/20 10:33:41 0:15 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6824 04/20/20 10:33:56 1:22 6052 4939 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6825 04/20/20 10:35:18 0:59 5222 6055 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 6826 04/20/20 10:35:19 0:59 6055 4934 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 280 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002924 The information contained heraCteNftli NeTniliAL not for general distribution. EF-EA_00117000 EFTA01251524 MOBILITY ap. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn IKI INSI MUT NODEL Data Time Number Up On (um) 6827 04/20/20 10:36:18 2:38 6931 5020 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6828 04/20/20 10:38:55 3:20 5222 6055ruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6829 04/20/20 10:38:57 3:19 6055 4934ruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6830 04/20/20 10:42:16 7:02 9200 6186 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6831 04/20/20 10:49:17 1:49 5221 6055 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6832 04/20/20 10:49:19 1:48 6055 4933 ructgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6833 04/20/20 10:51:07 8:14 7026 5739ruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6834 04/20/20 10:59:20 3:29 5984 6383ruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6835 04/20/20 10:59:21 3:29 6383 5696ruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6836 04/20/20 11:02:50 3:17 7529 5070ruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6837 04/20/20 11:06:06 0:45 5221 6055ruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6838 04/20/20 11:06:07 0:45 6055 4933ruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6839 04/20/20 11:06:52 5:19 6873 4966 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6840 04/20/20 11:07:24 60:00 10144 3176 imo -1 310410214827503 6841 04/20/20 11:12:12 3:53 6067 5608 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6842 04/20/20 11:16:04 2:05 5221 6055 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6843 04/20/20 11:16:05 2:05 6055 4933 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6844 04/20/20 11:18:10 7:52 48 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6845 04/20/20 11:26:01 6:12 5796 6383ruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6846 04/20/20 11:26:02 6:12 6383 5508ruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6847 04/20/20 11:32:14 1:07 6873 4964ruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 281 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002925 The information contained her is NT-31AL not for general distribution. EFTA_00117001 EFTA01251525 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in tr '`s a.d AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INEI IMSI MARL MODEL Date Time Number Up Dn (OTC) 6848 04/20/20 11:33:20 1:01 5221 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6849 04/20/20 11:33:21 1:01 6055 4933 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6850 04/20/20 11:34:22 8:26 7033 5069 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6851 04/20/20 11:42:48 4:28 7465 4965 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6852 04/20/20 11:47:15 2:14 5216 6053 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6853 04/20/20 11:47:17 2:13 6053 4928 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6854 04/20/20 11:49:30 14:44 15216 12058 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS To 6855 04/20/20 12:04:13 17:10 9120 8717 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6856 04/20/20 12:04:14 17:10 8717 10092 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6857 04/20/20 12:07:24 60:00 18192 6280 imo -1 310410214827503 6858 04/20/20 12:21:24 1:56 48 Ormtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6859 04/20/20 12:23:19 8:24 5222 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6860 04/20/20 12:23:20 8:24 6055 4934 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6861 04/20/20 12:31:44 1:54 0 Ormtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6862 04/20/20 12:33:37 6:36 5221 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6863 04/20/20 12:33:38 6:36 6055 4933 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6864 04/20/20 12:40:14 55:39 19116 8927 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6865 04/20/20 13:07:24 60:00 6956 2696 ipso -1 310410214827503 6866 04/20/20 13:35:52 1:26 5220 6107 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6867 04/20/20 13:35:53 1:26 6107 4932 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6868 04/20/20 13:37:19 5:38 7591 5170 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 282 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002926 The information contained hereICIDIN,R not for general distribution. EFTA 00117002 EFTA01251526 MOBILITY 4110. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in •- c- `"'ass. s AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytea Apn ICI IMSI MARL MOLL Date Time Buster Up on (UTC) 6869 04/20/20 13:42:56 7:44 5703 6457 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 6870 04/20/20 13:42:57 7:44 6457 5415 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6871 04/20/20 13:50:41 14:09 8237 5835 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6872 04/20/20 14:04:49 8:40 5284 6873 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6873 04/20/20 14:04:50 8:40 6873 4996 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6874 04/20/20 14:07:24 60:00 8496 2928 ins -1 310410214827503 6875 04/20/20 14:13:29 4:28 5554 6997 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6876 04/20/20 14:13:30 4:28 6997 5266 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6877 04/20/20 14:17:58 35:32 15296 12314 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6878 04/20/20 14:53:30 38:51 6999 6246 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6879 04/20/20 15:07:24 60:00 10380 4020 ins -1 310410214827503 6880 04/20/20 15:32:20 8:28 5753 6305 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6881 04/20/20 15:32:21 8:28 6305 5465 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6882 04/20/20 15:40:49 43:24 50578 36444 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6883 04/20/20 16:07:24 60:00 10268 3176 ins -1 310410214827503 6884 04/20/20 16:24:13 26:03 15438 18285 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6885 04/20/20 16:24:14 26:03 18285 16113 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6886 04/20/20 16:50:17 22:52 6513 5171 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6887 04/20/20 17:07:24 55:20 11920 4536 ins -1 310410214827503 6888 04/20/20 17:13:08 2:04 5286 6055 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6889 04/20/20 17:13:10 2:03 6055 4998 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6890 04/20/20 17:15:13 9:13 7529 5174 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 283 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002927 The information contained her is PsiTniliAL not for general distribution. EF-EA_00117003 EFTA01251527 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn INLI IMBI teal NICOLL Data Time Number Up Dn (OTC) 6891 04/20/20 17:24:25 8:07 7905 7349 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6892 04/20/20 17:24:26 8:07 7349 7617ruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6893 04/20/20 17:32:33 6:21 6873 4966nAtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6894 04/20/20 17:38:53 2:03 5118 6055ruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6895 04/20/20 17:38:54 2:03 6055 4830 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6896 04/20/20 17:40:57 14:54 6470 5422 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6897 04/20/20 17:55:50 24:24 86932 40730ruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6898 04/20/20 17:55:51 24:24 40730 87502ruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6899 04/20/20 18:01:37 2:16 7118 6812 imp 3587080982063726 310410214827503 APPLE IPHONEB 6900 04/20/20 18:01:38 2:16 6744 6854 ins 3587080982063726 310410214827503 APPLE IPHONEB 6901 04/20/20 18:02:44 10:31 8377 6106 imp -1 310410214827503 6902 04/20/20 18:03:53 16:21 6246 6676 imp 3587080982063726 310410214827503 APPLE IPHONEB 6903 04/20/20 18:03:54 16:21 6676 5982 imp 3587080982063726 310410214827503 APPLE IPHONEB 6904 04/20/20 18:20:15 21:10 8444 16290 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6905 04/20/20 18:20:17 21:08 18554 13658 imp 3587080982063726 310410214827503 APPLE IPHONEB 6906 04/20/20 18:41:24 0:25 7090 7411ruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6907 04/20/20 18:41:25 0:24 6350 6672 imp 3587080982063726 310410214827503 APPLE IPHONEB 6908 04/20/20 18:41:25 0:25 7411 6802 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6909 04/20/20 18:41:26 0:24 6672 5998 ins 3587080982063726 310410214827503 APPLE IPHONEB 6910 04/20/20 18:41:50 20:42 8099 7071ruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6911 04/20/20 18:41:53 20:39 8146 6924 imp 3587080982063726 310410214827503 APPLE IPHONEB 6912 04/20/20 19:02:31 1:23 5116 6023ruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6913 04/20/20 19:02:32 1:22 6264 6784 ins 3587080982063726 310410214827503 APPLE IPHONEB 6914 04/20/20 19:02:32 1:23 6023 4828ruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 6915 04/20/20 19:02:33 1:22 6676 6000 moo 3587080982063726 310410214827503 APPLE IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 284 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002928 The information contained her is WInfikE not for general distribution. EFTA 00117004 EFTA01251528 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating LT Bytes Bytom Apn ISISI MAKE NICOLL Data Time Number Up On (OTC) 6916 04/20/20 19:03:55 57:33 22166 75101 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6917 04/20/20 19:03:58 5:48 8238 7830 1ms 3587080982063726 310410214827503 APPLE !PHONES 6918 04/20/20 19:09:46 60:00 10812 4204 in 3587080982063726 310410214827503 APPLE !PHONES 6919 04/20/20 20:01:27 2:03 5221 6059 nxtgenpho 3587080982063726 310410214827503 APPLE 1880=8 no 6920 04/20/20 20:01:28 2:03 6059 4933 nxtgenpho 3587080982063726 310410214827503 APPLE 1880=8 no 6921 04/20/20 20:03:31 28:33 6791 5554 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6922 04/20/20 20:09:46 22:27 5072 1572 ims 3587080982063726 310410214827503 APPLE 1880=8 6923 04/20/20 20:32:04 10:20 8061 13927 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6924 04/20/20 20:32:04 10:21 13927 7677 nxtgenpho 3587080982063726 310410214827503 APPLE 1880=8 no 6925 04/20/20 20:32:12 4:42 7266 6796 imp 3587080982063726 310410214827503 APPLE 1880=8 6926 04/20/20 20:32:13 4:42 6796 7110 imp 3587080982063726 310410214827503 APPLE DRONES 6927 04/20/20 20:33:14 0:35 20186 20440 imp -1 310410214827503 6928 04/20/20 20:34:24 3:10 6166 6334 in 3587080982063726 310410214827503 APPLE 1880=8 6929 04/20/20 20:34:25 3:10 6334 5814 in 3587080982063726 310410214827503 APPLE !PHONES 6930 04/20/20 20:36:49 3:05 9888 6212 in -1 310410214827503 6931 04/20/20 20:37:33 4:51 6368 7406 1ms 3587080982063726 310410214827503 APPLE DRONES 6932 04/20/20 20:37:34 4:51 7406 6212 in 3587080982063726 310410214827503 APPLE !PHONES 6933 04/20/20 20:39:54 60:00 19946 9823 in -1 310410214827503 6934 04/20/20 20:42:24 3:27 5217 6021 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6935 04/20/20 20:42:25 3:27 6021 4929 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 6936 04/20/20 20:45:52 2:36 5422 7216 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 6937 04/20/20 20:45:53 2:36 7216 5134 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 6938 04/20/20 20:48:29 60:00 7899 5752 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 6939 04/20/20 21:39:54 11:46 0 0 los 3587080982063726 310410214827503 APPLE DRONES 6940 04/20/20 21:48:29 14:48 14781 52147 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 6941 04/20/20 21:51:40 11:28 3624 2324 1ms 3587080982063726 310410214827503 APPLE !PHONES 6942 04/20/20 21:51:40 11:28 3560 2324 in 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 285 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002929 The information contained hereCtoNelt not for general distribution. EFTA_00I 17005 EFTA01251529 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm trLd s'`s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run pato: 06/17/2020 Run Time: Data Osage for: Itea Conn. Conn. Originating ET Bytes Bytes Apn INZI INSI MARL MODEL Date Time Number Dn sa UP (OTC) 6943 04/20/20 22:03:08 9:58 3424 1324 los 3587080982063726 310410214827503 APPLE !PHONES 6944 04/20/20 22:03:16 2:03 5116 6023 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6945 04/20/20 22:03:17 2:03 6023 4828ruagonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6946 04/20/20 22:05:20 22:51 28862 15687ruagonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6947 04/20/20 22:22:52 1:07 7994 6106 ins 3587080982063726 310410214827503 APPLE 'PHONES 6948 04/20/20 22:23:59 2:33 3316 1216 ins 3587080982063726 310410214827503 APPLE 'PHONES 6949 04/20/20 22:26:32 1:39 2876 1432 ins 3587080982063726 310410214827503 APPLE 'PHONES 6950 04/20/20 22:28:10 16:02 29688 69117ruagonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6951 04/20/20 22:28:11 16:01 7140 28630 ins 3587080982063726 310410214827503 APPLE 'PHONES 6952 04/20/20 22:28:11 16:02 69117 29829natgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6953 04/20/20 22:28:12 16:01 6754 6876 ins 3587080982063726 310410214827503 APPLE 'PHONES 6954 04/20/20 22:44:13 4:57 8969 5236natgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6955 04/20/20 22:44:15 4:55 9154 6282 ins 3587080982063726 310410214827503 APPLE !PHONES 6956 04/20/20 22:49:09 2:17 5350 7204ruagonpho 3587080982063726 310410214827503 APPLE !PHONES no 6957 04/20/20 22:49:10 2:16 6244 6782 ins 3587080982063726 310410214827503 APPLE 'PHONES 6958 04/20/20 22:49:10 2:17 7204 5062 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6959 04/20/20 22:49:11 2:16 6674 5980 ins 3587080982063726 310410214827503 APPLE 'PHONES 6960 04/20/20 22:51:27 2:58 7639 5224ruagonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6961 04/20/20 22:51:29 2:56 8346 8080 ins 3587080982063726 310410214827503 APPLE 'PHONES 6962 04/20/20 22:54:24 7:33 30216 11112ruagonpho 3587080982063726 310410214827503 APPLE !PHONES no 6963 04/20/20 22:54:25 7:32 6262 6668 ins 3587080982063726 310410214827503 APPLE !PHONES 6964 04/20/20 22:54:25 7:33 11112 29928ruagonpho 3587080982063726 310410214827503 APPLE !PHONES no 6965 04/20/20 22:54:26 7:32 6668 6106 ins 3587080982063726 310410214827503 APPLE 'PHONES 6966 04/20/20 22:57:21 21:14 11404 6546 ins 3587080982063726 310410214827503 APPLE 'PHONES 6967 04/20/20 23:01:58 7:04 144 Oruagonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6968 04/20/20 23:09:01 2:28 5222 6023ruagonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 286 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002930 The information contained her is NeTntikE not for general distribution. EFTAJVII7006 EFTA01251530 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn IMBI MOLL Date Time Humber Up Dn (UTC) 6969 04/20/20 23:09:03 2:27 6023 4934 natgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6970 04/20/20 23:11:30 1:49 6593 5565ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6971 04/20/20 23:13:18 0:38 5220 6023ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6972 04/20/20 23:13:19 0:38 6023 4932ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6973 04/20/20 23:13:57 0:05 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 6974 04/20/20 23:14:34 28:33 23060 65583ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6975 04/20/20 23:18:35 24:32 3500 1464 ims 3587080982063726 310410214827503 APPLE 1PROME8 6976 04/20/20 23:18:35 24:32 3436 1464 ims 3587080982063726 310410214827503 APPLE 1PROME8 6977 04/20/20 23:43:06 2:04 5220 6023ruftgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 6978 04/20/20 23:43:08 2:03 6023 4932ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6979 04/20/20 23:43:10 12:40 8209 5998 vas 3587080982063726 310410214827503 APPLE !PHONES 6980 04/20/20 23:45:11 16:07 7990 7760 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6981 04/20/20 23:55:50 1:02 3500 1464 ims 3587080982063726 310410214827503 APPLE !PHONES 6982 04/20/20 23:55:50 1:02 3436 1464 ims 3587080982063726 310410214827503 APPLE !PHONES 6983 04/20/20 23:56:52 14:13 3748 1448 ims 3587080982063726 310410214827503 APPLE !PHONES 6984 04/21/20 00:01:18 2:08 5116 6023ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6985 04/21/20 00:01:19 2:09 6023 4828ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6986 04/21/20 00:03:27 41:50 103606 116687ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6987 04/21/20 00:11:05 4:38 3392 1464 ims 3587080982063726 310410214827503 APPLE 1PROME8 6988 04/21/20 00:11:05 4:38 3328 1464 ims 3587080982063726 310410214827503 APPLE 1PROME8 6989 04/21/20 00:15:43 20:39 3640 1556 ims 3587080982063726 310410214827503 APPLE 1PROME8 6990 04/21/20 00:36:21 8:56 3392 1464 ims 3587080982063726 310410214827503 APPLE 1PROME8 6991 04/21/20 00:36:22 8:55 3328 1464 ims 3587080982063726 310410214827503 APPLE 1PROME8 6992 04/21/20 00:45:16 10:21 474245 415469ruftgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 6993 04/21/20 00:45:17 4:48 6184 6666 ims 3587080982063726 310410214827503 APPLE !PHONES 6994 04/21/20 00:45:17 10:21 414029 473957ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do.not necessarily indicate a customer initiated a transaction. Page 287 AT&T does not retain records that can definitively show whether a transaction was PsisTilikk customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002931 The information contained her is not for general distribution. EF-EAJVII7007 EFTA01251531 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm tt -aa`s .o AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in arc. Run pato: 06/17/2020 Run Time: Data Usage For: Item cows. Conn. originating ET Bytes Bytes Apn INEZ INSI MAD; /CULL Date Timo Number up Dn (DEC) 6995 04/21/20 00:45:18 4:48 6666 5920 imp 3587080982063726 310410214827503 APPLE 'PHONES 6996 04/21/20 00:49:16 10:32 12157 15378 imp -1 310410214827503 6997 04/21/20 00:50:00 0:08 0 0 imp -1 310410214827503 6998 04/21/20 00:50:04 5:33 19964 20963 imp 3587080982063726 310410214827503 APPLE 'PHONES 6999 04/21/20 00:50:06 5:32 20848 29632 imp 3587080982063726 310410214827503 APPLE 'PHONES 7000 04/21/20 00:50:17 0:57 88418 90197 imp 3587080982063726 310410214827503 APPLE 'PHONES 7001 04/21/20 00:50:18 0:57 90197 88418 imp 3587080982063726 310410214827503 APPLE 'PHONES 7002 04/21/20 00:55:38 141:47 270650 41894 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7003 04/21/20 00:55:39 60:00 13957 11771 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7004 04/21/20 00:55:42 141:43 14192 13604 imp 3587080982063726 310410214827503 APPLE !PHONES 7005 04/21/20 00:55:43 60:00 13496 13948 imp 3587080982063726 310410214827503 APPLE !PHONES 7006 04/21/20 01:55:01 10:30 0 0 imp -1 310410214827503 7007 04/21/20 01:55:39 60:00 7867 10774 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7008 04/21/20 01:55:43 60:00 0 108 imp 3587080982063726 310410214827503 APPLE !PHONES 7009 04/21/20 02:51:08 26:17 9500 9468 imp 3587080982063726 310410214827503 APPLE 'PHONES 7010 04/21/20 02:51:09 26:17 9468 23404 imp 3587080982063726 310410214827503 APPLE 'PHONES 7011 04/21/20 02:55:39 21:47 20070 254933 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7012 04/21/20 02:55:43 21:43 0 0 imp 3587080982063726 310410214827503 APPLE !PHONES 7013 04/21/20 03:17:26 7:00 16739 25220 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7014 04/21/20 03:17:28 6:58 11434 8322 imp 3587080982063726 310410214827503 APPLE !PHONES 7015 04/21/20 03:18:09 0:16 64 60 nxtgonpho -1 310410214827503 no 7016 04/21/20 03:24:25 0:24 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7017 04/21/20 03:24:26 0:23 9439 8671 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7018 04/21/20 03:24:27 0:23 8671 9151 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7019 04/21/20 03:24:27 0:23 0 Orumgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7020 04/21/20 03:24:36 5:34 0 0 imp -1 310410214827503 7021 04/21/20 03:24:50 1:39 0 Ommtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7022 04/21/20 03:24:53 1:36 18702 17695 imp 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 288 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002932 The information contained her is not for general distribution. NeTnilikk EFTA_001 17008 EFTA01251532 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run pato: 06/17/2020 Run Time: Data Osage For: Itea Conn. Conn. Originating Cr Bytes Bytea Apn INZI INSI MARL NICOLL Date Time Number UP Dn (0TC) 7023 04/21/20 03:26:28 7:00 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7024 04/21/20 03:26:29 6:59 5316 6071 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7025 04/21/20 03:26:29 6:59 6367 6994 ins 3587080982063726 310410214827503 APPLE IPHONE8 7026 04/21/20 03:26:29 7:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7027 04/21/20 03:26:30 6:59 6071 4932 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7028 04/21/20 03:26:31 6:58 6886 6103 ins 3587080982063726 310410214827503 APPLE IPHONE8 7029 04/21/20 03:33:29 10:00 11438 10098 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7030 04/21/20 03:33:30 27:33 10098 11150 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7031 04/21/20 03:33:30 10:00 6262 6784 ins 3587080982063726 310410214827503 APPLE IPHONE8 7032 04/21/20 03:33:31 27:32 6676 5998 ins 3587080982063726 310410214827503 APPLE IPHONE8 7033 04/21/20 04:01:03 2:06 5221 6023 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7034 04/21/20 04:01:04 2:05 8080 6640 ins 3587080982063726 310410214827503 APPLE IPHONE8 7035 04/21/20 04:01:04 2:06 6023 4933 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7036 04/21/20 04:01:05 2:05 6532 7728 ins 3587080982063726 310410214827503 APPLE IPHONE8 7037 04/21/20 04:03:10 1:57 8751 5608 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7038 04/21/20 04:03:14 1:53 20370 14726 ins 3587080982063726 310410214827503 APPLE IPHONE8 7039 04/21/20 04:05:06 160:02 23259 25362ruagonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7040 04/21/20 04:05:07 60:00 16156 14907 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7041 04/21/20 04:05:07 160:01 7676 9326 ins 3587080982063726 310410214827503 APPLE IPHONE8 7042 04/21/20 04:05:08 60:00 9266 7412 ins 3587080982063726 310410214827503 APPLE IPHONE8 7043 04/21/20 04:39:52 60:00 18237 9824 ins -1 310410214827503 7044 04/21/20 05:05:07 60:00 8168 7350 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7045 04/21/20 05:05:08 60:00 0 0 ins 3587080982063726 310410214827503 APPLE IPHONE8 7046 04/21/20 05:39:52 60:00 8496 3004 ins -1 310410214827503 7047 04/21/20 06:05:07 40:02 1038 1239 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7048 04/21/20 06:05:08 40:01 0 0 ins 3587080982063726 310410214827503 APPLE IPHONE8 7049 04/21/20 06:39:52 15:08 0 0 ins 3587080982063726 310410214827503 APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 289 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002933 The information contained hereCtoNfti not for general distribution. EF-EAJVII7009 EFTA01251533 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ....,,,,• ••-•°`" 1 AT&T OTC. Run pato: 06/17/2020 Run Time: Data Osage for: MI= Itom Conn. Conn. Originating ET Bytes Bytom Apn re= IMBI ten Men Date Time Number Up on (Inc) 7050 04/21/20 06:45:09 7:45 6809 4964 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 7051 04/21/20 06:52:53 2:03 5217 6073 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 7052 04/21/20 06:52:54 2:03 6073 4929 nxtgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 7053 04/21/20 06:54:57 6:25 7495 5067 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7054 04/21/20 06:55:00 6:22 3500 1464 ins 3587080982063726 310410214827503 APPLE IPMONE8 7055 04/21/20 06:55:00 6:22 3436 1464 ins 3587080982063726 310410214827503 APPLE IPMONE8 7056 04/21/20 07:01:21 2:04 5221 6023 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 7057 04/21/20 07:01:22 2:04 6023 4933 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7058 04/21/20 07:01:27 60:00 15117 8909 imo -1 310410214827503 7059 04/21/20 07:03:26 1:51 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 7060 04/21/20 07:05:17 37:34 20358 15743ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7061 04/21/20 07:05:18 37:34 15743 20070nxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 7062 04/21/20 07:42:51 6:04 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 7063 04/21/20 07:42:52 6:03 5218 6073 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7064 04/21/20 07:42:52 6:04 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7065 04/21/20 07:42:54 6:02 6073 4930 nxtgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 7066 04/21/20 07:48:56 0:54 6870 5062 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7067 04/21/20 07:49:49 176:20 53195 55623ruagonpho 3587080982063726 310410214827503 APPLE !PHONES no 7068 04/21/20 07:49:50 60:00 22624 20745ruagonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 7069 04/21/20 08:01:27 60:00 11488 4564 imo -1 310410214827503 7070 04/21/20 08:49:50 60:00 32018 34682ruagonpho 3587080982063726 310410214827503 APPLE !PRONGS no 7071 04/21/20 09:01:27 60:00 7080 3004 imo -1 310410214827503 7072 04/21/20 09:49:50 56:20 981 735ruagonpho 3587080982063726 310410214827503 APPLE !PRONGS no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 290 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002934 The information contained her is not for general distribution. EFTA_00I 17010 EFTA01251534 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T arc. Run pato: 06/17/2020 Run Time: Data Osage for: it= Item Conn. Conn. Originating ET Sytes Bytaa Apn INEI INSI NUT MODEL Date Time Number Up On (OTC) 7073 04/21/20 10:01:27 60:00 9032 3532 imp -1 310410214827503 7074 04/21/20 10:46:10 1:36 6035 5608 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7075 04/21/20 10:47:45 2:10 5281 6083 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 7076 04/21/20 10:47:46 2:10 6083 4993 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7077 04/21/20 10:49:56 2:48 7601 5234 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 7078 04/21/20 10:52:43 2:03 5282 6083 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7079 04/21/20 10:52:44 2:03 6083 4994 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7080 04/21/20 10:54:47 0:41 7495 5170 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 7081 04/21/20 10:55:27 2:04 5217 6021 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 7082 04/21/20 10:55:28 2:04 6021 4929 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7083 04/21/20 10:57:32 1:31 8690 5272 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7084 04/21/20 10:59:02 8:43 5820 6337 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7085 04/21/20 10:59:03 8:43 6337 5532 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 7086 04/21/20 11:01:27 57:28 6848 2788 in -1 310410214827503 7087 04/21/20 11:07:47 1:52 6093 5666 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7088 04/21/20 11:09:38 2:16 5281 6135 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7089 04/21/20 11:09:39 2:16 6135 4993 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 7090 04/21/20 11:11:54 6:04 5221 6023 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 7091 04/21/20 11:11:55 6:04 6023 4933 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7092 04/21/20 11:17:58 1:22 7492 5162 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7093 04/21/20 11:19:19 2:11 5177 6083 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 291 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002935 The information contained hereleoNfti NeTifikE not for general distribution. EFTA_00I 17011 EFTA01251535 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T arc. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn INEI IASI MARC MODEL Data flea Number Up Dn (UTC) 7094 04/21/20 11:19:20 2:11 6083 4889 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 7095 04/21/20 11:21:31 0:46 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 7096 04/21/20 11:22:16 8:25 5221 6023 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 7097 04/21/20 11:22:18 8:24 6023 4933 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 7098 04/21/20 11:30:42 0:05 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1PRONZ8 no 7099 04/21/20 11:31:13 1:07 48 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 7100 04/21/20 11:32:19 2:04 5117 6023 nxtgenpho 3587080982063726 310410214827503 APPLE &PROMS no 7101 04/21/20 11:32:20 2:04 6023 4829 nxtgenpho 3587080982063726 310410214827503 APPLE &PROMS no 7102 04/21/20 11:34:24 2:24 6809 4964 nxtgenpho 3587080982063726 310410214827503 APPLE &PROMS no 7103 04/21/20 11:36:47 2:04 5217 6021 nxtgenpho 3587080982063726 310410214827503 APPLE &PROMS no 7104 04/21/20 11:36:49 2:03 6021 4929 nxtgenpho 3587080982063726 310410214827503 APPLE &PROMS no 7105 04/21/20 11:38:52 4:31 7561 5175 nxtgenpho 3587080982063726 310410214827503 APPLE &PROMS no 7106 04/21/20 11:43:23 22:19 1568156 186287 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 7107 04/21/20 11:43:24 22:19 186287 1567868 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 7108 04/21/20 11:55:39 10:03 6262 6668 imp 3587080982063726 310410214827503 APPLE DRONES 7109 04/21/20 11:55:40 10:03 6668 5998 imp 3587080982063726 310410214827503 APPLE DRONES 7110 04/21/20 12:01:30 15:33 8205 5982 imp -1 310410214827503 7111 04/21/20 12:05:43 8:19 8843 5002 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 7112 04/21/20 12:14:01 8:46 5221 6023 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 7113 04/21/20 12:14:02 8:46 6023 4933 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 7114 04/21/20 12:19:08 3:39 6093 6332 imp 3587080982063726 310410214827503 APPLE !PROMS 7115 04/21/20 12:19:09 3:39 6332 5829 imp 3587080982063726 310410214827503 APPLE DRONES 7116 04/21/20 12:22:48 10:13 7942 5558 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 292 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002936 The information contained her is NsTatikE not for general distribution. EFTA 00117012 EFTA01251536 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T (ITC. Run Date: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating ET Bytes Bytes Ann IBEX IMBI MARL MODEL Data Time Dunbar Up Dn (UTC) 7117 04/21/20 12:22:55 0:01 0 0 imp 3587080982063726 310410214827503 APPLE !PHONES 7118 04/21/20 12:23:03 60:00 16813 9127 imp -1 310410214827503 7119 04/21/20 12:33:00 2:31 5218 6021 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7120 04/21/20 12:33:01 2:31 6021 4930roftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 7121 04/21/20 12:35:32 39:47 7786 6621 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7122 04/21/20 13:15:18 2:09 5220 6023 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7123 04/21/20 13:15:19 2:09 6023 4932 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 7124 04/21/20 13:17:28 0:35 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7125 04/21/20 13:18:03 14:37 5327 6196 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7126 04/21/20 13:18:03 14:38 6196 5039 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7127 04/21/20 13:23:03 60:00 8496 3020 imp -1 310410214827503 7128 04/21/20 13:32:41 60:00 21223 22862 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 7129 04/21/20 14:23:03 60:00 6956 2664 imp -1 310410214827503 7130 04/21/20 14:32:41 25:36 173 105 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 7131 04/21/20 14:58:16 12:05 5220 6023 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 7132 04/21/20 14:58:17 12:05 6023 4932 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 7133 04/21/20 15:10:22 42:02 7915 6132 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 7134 04/21/20 15:23:03 60:00 6956 2788 imp -1 310410214827503 7135 04/21/20 15:52:23 0:44 5222 6007 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7136 04/21/20 15:52:24 0:44 6007 4934 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7137 04/21/20 15:53:08 5:29 2311 4584 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 7138 04/21/20 15:58:37 15:43 12797 23917 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7139 04/21/20 15:58:38 15:43 23917 12413 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 293 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002937 The information contained heraCtoNyFti not for general distribution. EFTA_00 I 17013 EFTA01251537 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T arc. Run Date: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating TT Bytes Bytes Min IMDI IMBI ten NOD= Date Time Number Up Dn (OTC) 7140 04/21/20 16:14:21 59:09 19503 23564 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7141 04/21/20 16:23:03 60:00 15344 6000 ims -1 310410214827503 7142 04/21/20 17:13:30 0:59 6023 4902 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7143 04/21/20 17:14:28 2:03 5221 6023 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7144 04/21/20 17:14:29 2:03 6023 4933 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7145 04/21/20 17:16:32 32:06 25581 20789 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7146 04/21/20 17:23:03 60:00 10144 3176 ims -1 310410214827503 7147 04/21/20 17:48:37 2:15 5216 6073 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7148 04/21/20 17:48:38 2:15 6073 4928 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7149 04/21/20 17:50:53 2:58 48 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7150 04/21/20 17:53:50 8:59 4504 5791 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7151 04/21/20 17:53:51 8:59 5791 4216 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7152 04/21/20 18:02:50 8:07 7147 5493 nxtgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no 7153 04/21/20 18:10:57 16:08 6689 6838 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7154 04/21/20 18:10:58 16:08 6838 6401 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7155 04/21/20 18:23:03 38:57 10144 3284 ims -1 310410214827503 7156 04/21/20 18:27:06 0:05 0 Onmtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7157 04/21/20 18:27:22 1:02 2036 3240 nxtgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no 7158 04/21/20 18:28:23 46:18 1559996 248939 nxtgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no 7159 04/21/20 18:28:24 46:18 248939 1566448 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7160 04/21/20 19:01:16 13:25 6334 6754 ims 3587080982063726 310410214827503 APPLE !PHONES 7161 04/21/20 19:01:17 13:25 6686 6090 ims 3587080982063726 310410214827503 APPLE !PHONES 7162 04/21/20 19:02:00 60:00 16881 9125 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 294 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002938 The information contained her is not for general distribution. EF-EA_00117014 EFTA01251538 MOBILITY dab 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in %---`' s AT&T OTC. Run Data: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn itarx IMBI min ticors Data Time Number Op On (OTC) 7163 04/21/20 19:14:42 20:30 6694 5931 nactganpho 3587080982063726 310410214827503 APPLE 'PHONES no 7164 04/21/20 19:35:12 42:08 25369 14841ruftganpho 3587080982063726 310410214827503 APPLE 'PHONES no 7165 04/21/20 19:35:13 42:08 14841 24889ruftganpho 3587080982063726 310410214827503 APPLE 'PHONES no 7166 04/21/20 20:02:00 60:00 8496 2912 imp -1 310410214827503 7167 04/21/20 20:17:21 0:05 0 Ormtganpho 3587080982063726 310410214827503 APPLE 'PHONES no 7168 04/21/20 20:17:54 0:05 0 Ormtganpho 3587080982063726 310410214827503 APPLE 'PHONES no 7169 04/21/20 20:18:24 2:18 5221 6075 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7170 04/21/20 20:18:25 2:18 6075 4933 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7171 04/21/20 20:20:43 6:28 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7172 04/21/20 20:20:43 6:28 5281 6083 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7173 04/21/20 20:20:44 6:28 0 Ormtganpho 3587080982063726 310410214827503 APPLE 'PHONES no 7174 04/21/20 20:20:45 6:27 6083 4993 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7175 04/21/20 20:27:12 36:27 9304 14415 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7176 04/21/20 21:02:00 60:00 8852 3020 imp -1 310410214827503 7177 04/21/20 21:03:38 2:05 5221 6075 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7178 04/21/20 21:03:39 2:05 6075 4933 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7179 04/21/20 21:05:44 0:05 0 Onatganpho 3587080982063726 310410214827503 APPLE 'PHONES no 7180 04/21/20 21:06:06 19:18 192 Onatganpho 3587080982063726 310410214827503 APPLE 'PHONES no 7181 04/21/20 21:06:07 19:17 5537 6364 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7182 04/21/20 21:06:07 19:18 0 Onatganpho 3587080982063726 310410214827503 APPLE 'PHONES no 7183 04/21/20 21:06:08 19:17 6364 5249 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessasly indicate a customer initiated a transaction. Page 295 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002939 The information contained hereeteNelt NeTniliAL not for general distribution. EFTA_00I 17015 EFTA01251539 MOBILITY 411., 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in •..... 0 AT&T arc. Run Data: 06/17/2020 Run Tina: Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn INEI IMEI MARL MOLL Data Time flusher Up Dn (OTC) 7184 04/21/20 21:25:24 8:46 5221 6023 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7185 04/21/20 21:25:26 8:45 6023 4933 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7186 04/21/20 21:34:10 2:04 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7187 04/21/20 21:34:11 2:03 5222 6023 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7188 04/21/20 21:34:11 2:04 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7189 04/21/20 21:34:12 2:03 6023 4934 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7190 04/21/20 21:36:16 13:01 6754 5943 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7191 04/21/20 21:49:17 22:23 17270 18831 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7192 04/21/20 21:49:17 22:24 18831 18032 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7193 04/21/20 22:02:00 60:00 7528 3144 imp -1 310410214827503 7194 04/21/20 22:11:41 3:33 6255 5722 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7195 04/21/20 22:15:14 2:09 5117 6075 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7196 04/21/20 22:15:15 2:09 6075 4829 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7197 04/21/20 22:17:24 0:52 7433 4966 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7198 04/21/20 22:18:16 104:40 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7199 04/21/20 22:18:16 104:40 37239 50217 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7200 04/21/20 22:18:17 60:00 40853 28204 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7201 04/21/20 22:18:17 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7202 04/21/20 23:02:00 60:00 23032 7208 imp -1 310410214827503 7203 04/21/20 23:18:17 44:40 9269 9746 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7204 04/21/20 23:18:17 44:40 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7205 04/22/20 00:02:00 60:00 8604 3036 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 296 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002940 The information contained heraCtoNyFti NeTtikE not for general distribution. EFTA_00I 17016 EFTA01251540 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run pato: 06/17/2020 Run Time: Data Osage Tor: iiiiiIIIII Item Conn. Conn. Originating ET Bytes Byte. Apn fuzz INSI NUT MODEL Date Time Number OP Dn (OTC) 7206 04/22/20 00:02:57 0:41 7497 5070 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7207 04/22/20 00:03:38 8:33 5222 6023 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES - no 7208 04/22/20 00:03:39 8:33 6023 4934 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7209 04/22/20 00:12:12 27:55 6665 5532 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7210 04/22/20 00:40:06 8:26 5221 6023 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7211 04/22/20 00:40:07 8:26 6023 4933 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7212 04/22/20 00:48:33 7:12 19635 16024 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7213 04/22/20 00:55:45 23:18 13394 14918 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7214 04/22/20 00:55:46 23:18 14918 14375 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7215 04/22/20 01:02:00 60:00 7188 2912 ins -1 310410214827503 7216 04/22/20 01:19:04 7:10 36476 30247 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7217 04/22/20 01:26:14 15:18 381115 345938 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7218 04/22/20 01:26:15 15:18 345938 380731 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7219 04/22/20 01:41:33 0:03 0 Onntgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 7220 04/22/20 01:41:48 4:19 6809 4965 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7221 04/22/20 01:46:06 2:03 5117 6075 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7222 04/22/20 01:46:07 2:03 6075 4829 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7223 04/22/20 01:48:10 5:08 6020 4788 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7224 04/22/20 01:53:17 2:04 5221 6075 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7225 04/22/20 01:53:19 2:03 6075 4933 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7226 04/22/20 01:55:22 60:00 50667 9205 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 297 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002941 The information contained hereleop+Fti NTniliAL not for general distribution. EFTA_00I 17017 EFTA01251541 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in % C ‘ , al 10 AT&T OTC. Run Data: 06/17/2020 Run Time: Data Osage Tor: Itea Conn. Conn. Originating ET Bytes Bytom Apn ItCEI IMBI MARL NICOLL Data Time Number Up Dn (OTC) 7227 04/22/20 02:02:00 60:00 6956 2896 ims -1 310410214827503 7228 04/22/20 02:55:22 46:56 ' 39285 10733 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7229 04/22/20 03:02:00 60:00 11580 4252 ims -1 310410214827503 7230 04/22/20 03:42:17 1:16 5217 6021 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7231 04/22/20 03:42:18 1:16 6021 4929 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7232 04/22/20 03:43:34 31:00 18389 13398 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 7233 04/22/20 04:02:00 60:00 13676 5140 ims -1 310410214827503 7234 04/22/20 04:14:33 15:09 8218 8151 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7235 04/22/20 04:14:34 15:10 8151 9190 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7236 04/22/20 04:29:44 3:24 48 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7237 04/22/20 04:33:07 4:04 5281 6807 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7238 04/22/20 04:33:08 4:04 6807 4993 nxtgenpho 3587080982063726 310410214827503 APPLE IPROME8 no 7239 04/22/20 04:37:12 16:34 30213 21080 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7240 04/22/20 04:53:45 5:04 14635 15378 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7241 04/22/20 04:53:46 5:04 15378 14251 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7242 04/22/20 04:58:50 5:24 7557 5130 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7243 04/22/20 05:02:00 60:00 9928 3176 ims -1 310410214827503 7244 04/22/20 05:04:13 8:14 7911 8679 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7245 04/22/20 05:04:15 8:13 8679 7431 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7246 04/22/20 05:12:28 10:59 7290 5648 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7247 04/22/20 05:23:26 8:35 10407 12126 nxtgenpho 3587080982063726 310410214827503 APPLE 11080=8 no 7248 04/22/20 05:23:27 8:35 12126 10023 nxtgenpho 3587080982063726 310410214827503 APPLE 11080=8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 298 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002942 The information contained hereCtoNyFti NsToliAL not for general distribution. EFTA_00I 17018 EFTA01251542 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T arc. Run Date: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Bytoa Apn INEI IMBI MARC MODEL Date Time Number Op Dn ... /OTC) 7249 04/22/20 05:32:02 60:00 7270 6421 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7250 04/22/20 06:02:00 60:00 8480 2928 ims -1 310410214827503 7251 04/22/20 06:32:02 60:00 17683 13218 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7252 04/22/20 07:02:00 60:00 13352 4516 ims -1 310410214827503 7253 04/22/20 07:32:02 60:00 3789 1259 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7254 04/22/20 08:02:00 60:00 6848 2680 ims -1 310410214827503 7255 04/22/20 08:32:02 60:00 675 630 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7256 04/22/20 09:02:00 60:00 10364 4180 ims -1 310410214827503 7257 04/22/20 09:32:02 60:00 21131 24456ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 7258 04/22/20 10:02:00 60:00 11920 4376 ims -1 310410214827503 7259 04/22/20 10:32:02 60:00 21427 22163ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 7260 04/22/20 11:02:00 60:00 8496 3144 ims -1 310410214827503 7261 04/22/20 11:32:02 8:02 2942 314ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 7262 04/22/20 11:40:03 2:03 5220 6055ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 7263 04/22/20 11:40:04 2:03 6055 4932ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 7264 04/22/20 11:42:08 60:00 7401 6164ruagenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7265 04/22/20 12:02:00 60:00 6956 2788 ims -1 310410214827503 7266 04/22/20 12:42:08 60:00 95868 7797 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7267 04/22/20 13:02:00 60:00 11720 5160 ims -1 310410214827503 7268 04/22/20 13:42:08 54:19 4328 10723ruagenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7269 04/22/20 14:02:00 60:00 14216 5464 ims -1 310410214827503 7270 04/22/20 14:36:26 2:03 5117 6107 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7271 04/22/20 14:36:27 2:03 6107 4829 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7272 04/22/20 14:38:30 60:00 8661 8450 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7273 04/22/20 15:02:00 60:00 8388 3144 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 299 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002943 The information contained hereCtoNyFti NTniliAL not for general distribution. EFTA_00I 17019 EFTA01251543 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. originating LT Bytes Bytes Apn INZI INSI MAKE NICOLL Date Time Number UP Dn (OTC) 7274 04/22/20 15:38:30 18:29 0 0 ructgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7275 04/22/20 16:02:00 60:00 8388 2928 imp -1 310410214827503 7276 04/22/20 16:08:23 36:04 8488 6102 ructgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7277 04/22/20 16:44:26 2:03 5220 605Snxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7278 04/22/20 16:44:27 2:03 6055 4932 ructgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7279 04/22/20 16:46:30 0:26 144 0 ructgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7280 04/22/20 16:50:17 8:27 6641 4385 ructgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7281 04/22/20 16:58:43 59:18 6522 6807 ructgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7282 04/22/20 16:58:44 59:18 6807 7923 ructgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7283 04/22/20 17:02:00 60:00 13460 4516 imp -1 310410214827503 7284 04/22/20 17:58:02 20:23 13334 5774 ructgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7285 04/22/20 18:02:00 11:01 0 0 ims 3587080982063726 310410214827503 APPLE !PHONES 7286 04/22/20 18:13:01 5:24 80212 2332 ims 3587080982063726 310410214827503 APPLE !PHONES 7287 04/22/20 18:13:01 5:24 7756 2332 imp 3587080982063726 310410214827503 APPLE !PHONES 7288 04/22/20 18:18:24 8:21 7433 6977 nmtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7289 04/22/20 18:18:25 8:20 6372 6668 ims 3587080982063726 310410214827503 APPLE !PHONES 7290 04/22/20 18:18:25 8:21 6977 7145 ructgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7291 04/22/20 18:18:26 8:20 6668 6108 imp 3587080982063726 310410214827503 APPLE !PHONES 7292 04/22/20 18:20:53 12:15 8209 6046 imp -1 310410214827503 7293 04/22/20 18:26:46 1:06 6107 4902 ructgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7294 04/22/20 18:27:51 2:03 5221 6055 ructgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7295 04/22/20 18:27:52 2:03 6055 4933 ructgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7296 04/22/20 18:27:57 1:57 8248 6868 ims 3587080982063726 310410214827503 APPLE !PHONES 7297 04/22/20 18:27:59 1:56 6868 7896 ims 3587080982063726 310410214827503 APPLE IPHONE8 7298 04/22/20 18:29:55 0:42 6135 5976 ructgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 300 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002944 The information contained hereCtoNyFti not for general distribution. NaTtAti EFTA 00/17020 EFTA01251544 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in tra '`si . AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INDI IMEI MARE MODEL Date Time Number Up Dn (OTC) 7299 04/22/20 18:29:57 0:40 10638 10574 imam 3587080982063726 310410214827503 APPLE IPMONEB 7300 04/22/20 18:30:36 2:08 6692 6447 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7301 04/22/20 18:30:37 2:07 7114 6848 ins 3587080982063726 310410214827503 APPLE 'PHONES 7302 04/22/20 18:30:37 2:08 6447 6404 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7303 04/22/20 18:30:38 2:07 6740 6850 ins 3587080982063726 310410214827503 APPLE 'PHONES 7304 04/22/20 18:32:44 22:37 5537 6408 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7305 04/22/20 18:32:45 22:36 7218 6902 ins 3587080982063726 310410214827503 APPLE 'PHONES 7306 04/22/20 18:32:45 22:37 6408 5249 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7307 04/22/20 18:32:46 22:36 6794 6954 ins 3587080982063726 310410214827503 APPLE 'PHONES 7308 04/22/20 18:55:22 35:30 7297 6364 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7309 04/22/20 18:55:26 35:26 9268 7338 ins 3587080982063726 310410214827503 APPLE 'PHONES 7310 04/22/20 19:30:51 8:39 5870 10352 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7311 04/22/20 19:30:52 8:39 10352 5582 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7312 04/22/20 19:30:55 8:35 6387 7984 ins 3587080982063726 310410214827503 APPLE !PHONES 7313 04/22/20 19:30:56 8:35 7984 6123 ins 3587080982063726 310410214827503 APPLE !PHONES 7314 04/22/20 19:39:30 2:21 5359 7196 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7315 04/22/20 19:39:31 2:21 7196 5071 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7316 04/22/20 19:39:32 2:19 6264 6664 vas 3587080982063726 310410214827503 APPLE 'PHONES 7317 04/22/20 19:39:33 2:19 6664 6000 was 3587080982063726 310410214827503 APPLE 'PHONES 7318 04/22/20 19:41:52 60:00 8453 5962 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7319 04/22/20 19:41:57 60:00 17230 11140 ins 3587080982063726 310410214827503 APPLE IPMONEB 7320 04/22/20 20:41:52 18:06 578 630 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 7321 04/22/20 20:41:57 18:01 10584 7848 ins 3587080982063726 310410214827503 APPLE 'PHONES 7322 04/22/20 20:59:13 0:15 0 1306 ins 3587080982063726 310410214827503 APPLE 'PHONES 7323 04/22/20 20:59:57 2:04 5598 10407 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7324 04/22/20 20:59:58 2:04 10407 5310 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7325 04/22/20 21:00:00 2:01 6332 6774 ins 3587080982063726 310410214827503 APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are ',Altered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 301 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNCGM_00002945 The information contained hereleeNe NTifikE not for general distribution. EFTA 00/17021 EFTA01251545 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in tr a ‘..al° 4 AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn IND I INSI NUT MOLL Data Time Number UP Dn (UTC) 7326 04/22/20 21:00:01 2:01 6774 6068 imp 3587080982063726 310410214827503 APPLE !PHONES 7327 04/22/20 21:02:02 23:53 7160 12640 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7328 04/22/20 21:02:06 23:49 6670 5980 imp 3587080982063726 310410214827503 APPLE !PHONES 7329 04/22/20 21:25:54 3:30 15456 1830Ormagonpho 3587080982063726 310410214827503 APPLE !PHONES no 7330 04/22/20 21:25:55 3:30 18300 15168ruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7331 04/22/20 21:25:57 3:27 6263 24564 imp 3587080982063726 310410214827503 APPLE 'PHONES 7332 04/22/20 21:25:58 3:27 6672 5999 imp 3587080982063726 310410214827503 APPLE 'PHONES 7333 04/22/20 21:29:25 25:21 7251 7012ruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7334 04/22/20 21:32:40 22:06 28836 28318 imp 3587080982063726 310410214827503 APPLE 'PHONES 7335 04/22/20 21:49:23 0:31 26902 63297 imp 3587080982063726 310410214827503 APPLE 'PHONES 7336 04/22/20 21:51:27 0:11 14864 15631 imp 3587080982063726 310410214827503 APPLE 'PHONES 7337 04/22/20 21:54:45 2:04 5118 6107ruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7338 04/22/20 21:54:46 2:04 6107 483Ormagonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7339 04/22/20 21:54:49 2:00 6264 6676 imp 3587080982063726 310410214827503 APPLE 'PHONES 7340 04/22/20 21:54:50 2:00 6676 6000 imp 3587080982063726 310410214827503 APPLE 'PHONES 7341 04/22/20 21:56:50 7:14 16547 25461 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7342 04/22/20 21:56:54 7:10 7404 6124 imp 3587080982063726 310410214827503 APPLE 'PHONES 7343 04/22/20 22:04:03 2:03 5281 6115ruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7344 04/22/20 22:04:04 2:03 6115 4993ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7345 04/22/20 22:04:07 1:59 6458 6998 ism 3587080982063726 310410214827503 APPLE 'PHONES 7346 04/22/20 22:04:08 1:59 6998 6106 ins 3587080982063726 310410214827503 APPLE 'PHONES 7347 04/22/20 22:06:07 1:02 7527 5066ruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7348 04/22/20 22:06:12 0:57 6676 6000 moo 3587080982063726 310410214827503 APPLE 'PHONES 7349 04/22/20 22:07:08 2:04 5218 6105 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7350 04/22/20 22:07:09 2:04 6105 493Ormagonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7351 04/22/20 22:07:12 2:00 6168 6672 imp 3587080982063726 310410214827503 APPLE 'PHONES 7352 04/22/20 22:07:13 2:00 6672 5904 ims 3587080982063726 310410214827503 APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 302 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002946 The information contained heraleeNeli not for general distribution. N:FYNE EFTA 00/17022 EFTA01251546 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in %---s` -'s AT&T OTC. Run Data: 06/17/2020 Run Tame: Data Usage For: Item Conn. Conn. Originating ET Bytes Byte. Apn INEI IMISI MARL MODEL Data Time Number Up Dn (UTC) 7353 04/22/20 22:09:13 5:21 7529 5071 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7354 04/22/20 22:09:17 5:17 8060 8276 imp 3587080982063726 310410214827503 APPLE !PRONGS 7355 04/22/20 22:14:33 17:14 11932 13817ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7356 04/22/20 22:14:34 17:13 8367 9810 imp 3587080982063726 310410214827503 APPLE 1PROME8 7357 04/22/20 22:14:34 17:14 13817 11548ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7358 04/22/20 22:14:35 17:13 9750 8103 imp 3587080982063726 310410214827503 APPLE !PHONES 7359 04/22/20 22:31:48 1:07 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7360 04/22/20 22:32:54 2:03 5116 6055ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7361 04/22/20 22:32:55 2:03 6055 4828ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7362 04/22/20 22:34:58 6:06 7421 5208 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 7363 04/22/20 22:35:00 6:04 7976 6088 imp 3587080982063726 310410214827503 APPLE !PHONES 7364 04/22/20 22:41:03 2:03 5118 6055 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 7365 04/22/20 22:41:04 2:03 6055 4830 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7366 04/22/20 22:41:06 2:00 6334 6672 imp 3587080982063726 310410214827503 APPLE !PHONES 7367 04/22/20 22:41:07 2:00 6672 5982 imp 3587080982063726 310410214827503 APPLE !PHONES 7368 04/22/20 22:43:07 16:38 16053 56139ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7369 04/22/20 22:43:11 16:34 6670 5980 imp 3587080982063726 310410214827503 APPLE !PHONES 7370 04/22/20 22:59:44 8:28 5117 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7371 04/22/20 22:59:45 8:28 6055 4829 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7372 04/22/20 22:59:47 8:25 6262 6676 imp 3587080982063726 310410214827503 APPLE 1PROME8 7373 04/22/20 22:59:48 8:25 6676 5998 imp 3587080982063726 310410214827503 APPLE 1PROME8 7374 04/22/20 23:08:13 60:00 209353 269383ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7375 04/22/20 23:08:17 60:00 11846 8716 imp 3587080982063726 310410214827503 APPLE !PRONGS 7376 04/23/20 00:08:13 20:53 398 315ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7377 04/23/20 00:08:17 20:49 0 0 imp 3587080982063726 310410214827503 APPLE 1PROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 303 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002947 The information contained heraCteNelt NeTniiiikE not for general distribution. EFTA 00/17023 EFTA01251547 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: 18:56:08 Data Usage for: Item Conn. Conn. Originating ET Bytes Bytoa Apn INZI INSI MARL MODEL Data Time Number Up Dn (UTC) 7378 04/23/20 00:29:05 19:12 12239 13884 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7379 04/23/20 00:29:06 19:12 13884 12599 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7380 04/23/20 00:29:09 19:08 6244 6674 ims 3587080982063726 310410214827503 APPLE !PHONES 7381 04/23/20 00:29:10 19:08 6674 5980 ims 3587080982063726 310410214827503 APPLE !PHONES 7382 04/23/20 00:48:18 0:47 0 Onatgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7383 04/23/20 00:48:22 0:43 14108 8448 ims 3587080982063726 310410214827503 APPLE !PHONES 7384 04/23/20 00:49:05 13:02 12608 14848 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7385 04/23/20 00:49:05 13:03 14848 21850 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7386 04/23/20 00:49:08 12:59 7102 7940 ims 3587080982063726 310410214827503 APPLE !PHONES 7387 04/23/20 00:49:09 12:59 7940 6838 ims 3587080982063726 310410214827503 APPLE !PHONES 7388 04/23/20 01:02:08 1:37 6055 4902 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7389 04/23/20 01:02:12 1:33 7980 6028 ims 3587080982063726 310410214827503 APPLE !PHONES 7390 04/23/20 01:03:44 2:04 5285 7517 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7391 04/23/20 01:03:45 2:04 7517 4997 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7392 04/23/20 01:03:48 2:00 7352 6852 ims 3587080982063726 310410214827503 APPLE IPHONE8 7393 04/23/20 01:03:49 2:00 6852 7000 ims 3587080982063726 310410214827503 APPLE IPHONE8 7394 04/23/20 01:05:49 60:00 80856 10957 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7395 04/23/20 01:05:53 60:00 11846 8720 ims 3587080982063726 310410214827503 APPLE !PHONES 7396 04/23/20 02:05:49 8:40 742 1615 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7397 04/23/20 02:05:53 8:36 0 0 ims 3587080982063726 310410214827503 APPLE !PHONES 7398 04/23/20 02:14:28 2:10 5163 6052 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7399 04/23/20 02:14:30 2:09 6052 4875 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7400 04/23/20 02:14:32 2:06 7136 6738 ims 3587080982063726 310410214827503 APPLE !PHONES 7401 04/23/20 02:14:33 2:06 6738 6872 ims 3587080982063726 310410214827503 APPLE !PHONES 7402 04/23/20 02:16:39 9:07 6863 5365 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7403 04/23/20 02:16:43 9:03 8884 7068 ims 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network cdnstantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 304 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM1100002948 The information contained her is NTnileAsk not for general distribution. EFTA 00117024 EFTA01251548 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ...... `•-s"" as f AT&T OTC. Run Data: 06/17/2020 Run Time: 18:56:08 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn Itar IMBI MAfl NICOLL Data Time Number Up Dn (UTC) 7404 04/23/20 02:25:45 8:31 5220 6055 nxtgonpho 3587080982063726 310410214827503 APPLE 1OHONZ8 no 7405 04/23/20 02:25:46 8:31 6055 4932 nxtgonpho 3587080982063726 310410214827503 APPLE 1OHONZ8 no 7406 04/23/20 02:25:48 8:28 6262 6672 imo 3587080982063726 310410214827503 APPLE 1OHONZ8 7407 04/23/20 02:25:49 8:28 6672 5998 ion 3587080982063726 310410214827503 APPLE 1OHONZ8 7408 04/23/20 02:34:17 44:13 1595978 2206159 nxtgonpho 3587080982063726 310410214827503 APPLE 1OHONZ8 no 7409 04/23/20 02:34:21 44:09 9268 7278 ion 3587080982063726 310410214827503 APPLE 1OHONZ8 7410 04/23/20 03:18:29 2:09 5221 6107 nxtgonpho 3587080982063726 310410214827503 APPLE 1OHONZ8 no 7411 04/23/20 03:18:30 2:09 6107 4933 nxtgonpho 3587080982063726 310410214827503 APPLE 1OHONZ8 no 7412 04/23/20 03:18:32 2:06 7136 6742 ion 3587080982063726 310410214827503 APPLE 1OHONZ8 7413 04/23/20 03:18:34 2:05 6742 6872 ion 3587080982063726 310410214827503 APPLE 1OHONZ8 7414 04/23/20 03:20:39 60:00 63502 61017 nxtgonpho 3587080982063726 310410214827503 APPLE 1OHONZ8 no 7415 04/23/20 03:20:43 60:00 12686 9716 ion 3587080982063726 310410214827503 APPLE 1OHONZ8 7416 04/23/20 04:20:39 60:00 15984 65054 nxtgonpho 3587080982063726 310410214827503 APPLE 1OHONZ8 no 7417 04/23/20 04:20:43 60:00 6484 2772 ion 3587080982063726 310410214827503 APPLE 1OHONZ8 7418 04/23/20 05:20:39 58:47 10049 43453 nxtgonpho 3587080982063726 310410214827503 APPLE 1OHONZ8 no 7419 04/23/20 05:20:43 58:43 5176 2648 imo 3587080982063726 310410214827503 APPLE 1OHONZ8 7420 04/23/20 06:19:25 2:27 7395 6176 nxtgonpho 3587080982063726 310410214827503 APPLE 1OHONZ8 no 7421 04/23/20 06:19:26 2:27 6176 7107 nxtgonpho 3587080982063726 310410214827503 APPLE 1OHONZ8 no 7422 04/23/20 06:19:29 2:23 6388 7976 imo 3587080982063726 310410214827503 APPLE 1OHOME8 7423 04/23/20 06:19:30 2:23 7976 6124 imo 3587080982063726 310410214827503 APPLE 1OHOME8 7424 04/23/20 06:21:53 21:20 7875 5333 nxtgonpho 3587080982063726 310410214827503 APPLE 1OHOME8 no 7425 04/23/20 06:21:58 21:15 7404 6124 imp 3587080982063726 310410214827503 APPLE 1OHONZ8 7426 04/23/20 06:43:12 8:31 5326 6228 nxtgonpho 3587080982063726 310410214827503 APPLE 1OHONZ8 no 7427 04/23/20 06:43:14 8:30 6228 5038 nxtgonpho 3587080982063726 310410214827503 APPLE 1OHONZ8 no 7428 04/23/20 06:43:16 8:27 6264 6676 imo 3587080982063726 310410214827503 APPLE 1OHONZ8 7429 04/23/20 06:43:17 8:27 6676 6000 ion 3587080982063726 310410214827503 APPLE 1OHONZ8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 305 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SIDNYGM00002949 The information contained heralCoNyFti not for general distribution. NaTtAdti EFTA 00/17025 EFTA01251549 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Timo: Data Osage For: SIM Item Conn. Conn. Originating ET Bytes Bytom Apn ICI IASI ten NODEL Data Time Number Op On (OTC) 7430 04/23/20 06:51:44 0:40 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 7431 04/23/20 06:51:47 0:37 8150 6964 imp 3587080982063726 310410214827503 APPLE IPMONE8 7432 04/23/20 06:52:23 2:04 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 7433 04/23/20 06:52:24 2:03 5160 6102 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 7434 04/23/20 06:52:24 2:04 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 7435 04/23/20 06:52:25 2:03 6102 4872 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 7436 04/23/20 06:52:26 2:01 6263 6784 imp 3587080982063726 310410214827503 APPLE IPMONE8 7437 04/23/20 06:52:28 2:00 6676 5999 imp 3587080982063726 310410214827503 APPLE IPMONE8 7438 04/23/20 06:54:28 3:09 6157 4957 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 7439 04/23/20 06:54:32 3:05 10890 8164 imp 3587080982063726 310410214827503 APPLE IPMONE8 7440 04/23/20 06:57:36 8:39 5224 6112 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 7441 04/23/20 06:57:37 8:40 6112 4936 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 7442 04/23/20 06:57:40 8:35 6262 6676 imp 3587080982063726 310410214827503 APPLE IPMONE8 7443 04/23/20 06:57:41 8:36 6676 5998 imp 3587080982063726 310410214827503 APPLE IPMONE8 7444 04/23/20 07:06:16 14:31 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 7445 04/23/20 07:06:17 14:30 5782 6467 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 7446 04/23/20 07:06:17 14:31 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7447 04/23/20 07:06:18 14:30 6467 5398 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7448 04/23/20 07:10:51 9:56 6246 6670 imp 3587080982063726 310410214827503 APPLE IPMONE8 7449 04/23/20 07:10:52 9:56 6670 5982 imp 3587080982063726 310410214827503 APPLE IPMONE8 7450 04/23/20 07:20:48 0:44 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 7451 04/23/20 07:20:52 0:40 9630 7210 imp 3587080982063726 310410214827503 APPLE IPMONE8 7452 04/23/20 07:21:31 8:30 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 7453 04/23/20 07:21:32 8:29 5318 6103 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 306 AT&T does not retain records that can definitively show whether a transaction was PsiTifikE customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002950 The information contained hereCtoNfti not for general distribution. EFTA 00/17026 EFTA01251550 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T arc. Run Data: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INEZ IMEI NMI MODEL Data Time Humber Up Dn (OTC) 7454 04/23/20 07:21:33 8:29 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7455 04/23/20 07:21:33 8:29 6103 4934 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no- 7456 04/23/20 07:21:35 8:26 7264 7478 vas 3587080982063726 310410214827503 APPLE IPHONE8 7457 04/23/20 07:21:36 8:26 7478 7000 sms 3587080982063726 310410214827503 APPLE IPHONE8 7458 04/23/20 07:30:01 2:04 5528 7001 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7459 04/23/20 07:30:03 2:02 6244 6666 ims 3587080982063726 310410214827503 APPLE IPHONE8 7460 04/23/20 07:30:03 2:03 7001 5240 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7461 04/23/20 07:30:04 2:02 6666 5980 ims 3587080982063726 310410214827503 APPLE IPHONE8 7462 04/23/20 07:32:06 0:43 0 Oruagenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7463 04/23/20 07:32:48 20:32 5641 6460 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7464 04/23/20 07:32:49 20:32 6460 5353 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7465 04/23/20 07:32:50 20:30 6263 6672 ims 3587080982063726 310410214827503 APPLE IPRONE8 7466 04/23/20 07:32:51 20:30 6672 5999 ims 3587080982063726 310410214827503 APPLE IPRONE8 7467 04/23/20 07:53:21 1:45 7208 5270 nxtgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no 7468 04/23/20 07:53:25 1:41 8076 6948 ims 3587080982063726 310410214827503 APPLE IPRONE8 7469 04/23/20 07:55:05 52:06 6655 7416 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7470 04/23/20 07:55:06 52:06 7416 6367 nxtgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no 7471 04/23/20 07:55:09 52:02 9020 11868 ims 3587080982063726 310410214827503 APPLE IPRONE8 7472 04/23/20 07:55:10 52:02 11868 8756 ims 3587080982063726 310410214827503 APPLE IPRONE8 7473 04/23/20 08:47:12 1:09 9476 5198 nxtgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no 7474 04/23/20 08:47:16 1:05 8108 7126 ims 3587080982063726 310410214827503 APPLE IPRONE8 7475 04/23/20 08:48:20 2:05 5163 6104 nxtgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no 7476 04/23/20 08:48:22 2:04 6104 4875 nxtgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 7477 04/23/20 08:48:24 2:01 6244 6674 ims 3587080982063726 310410214827503 APPLE !PRONGS 7478 04/23/20 08:48:25 2:01 6674 5980 ims 3587080982063726 310410214827503 APPLE !PRONGS 7479 04/23/20 08:50:26 0:44 10026 5440 nxtgenpho 3587080982063726 310410214827503 APPLE !PRONGS no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 307 AT&T does not retain records that can definitively show whether a transaction was PsiTniliAL customer initiated or AT&T's network initiated the data transaction. SDNYGM00002951 The information contained her is not for general distribution. EFTA 00/17027 EFTA01251551 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ....,,,,si •-ags"" s AT&T arc. Run Date: 06/17/2020 Run Time: Data Osage Tor: Itea Conn. Conn. Originating TT Bytes Byte. Apn IMBI teal NICOLL Data Time Number Up Dn (OTC) 7480 04/23/20 08:50:30 0:40 8228 7836 imp 3587080982063726 310410214827503 APPLE !PHONES 7481 04/23/20 08:51:10 45:55 6225 7910 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7482 04/23/20 08:51:11 45:55 7910 5937ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7483 04/23/20 08:51:13 45:52 8715 9392 imp 3587080982063726 310410214827503 APPLE IPH01428 7484 04/23/20 08:51:14 45:52 9392 8451 imp 3587080982063726 310410214827503 APPLE IPH01428 7485 04/23/20 09:37:06 1:19 12856 5846ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7486 04/23/20 09:37:10 1:15 9510 7148 imp 3587080982063726 310410214827503 APPLE !PHONES 7487 04/23/20 09:38:24 8:26 5165 6052ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7488 04/23/20 09:38:26 8:25 6052 4877ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7489 04/23/20 09:38:28 8:22 7231 6794 imp 3587080982063726 310410214827503 APPLE !PHONES 7490 04/23/20 09:38:30 8:21 6794 6967 imp 3587080982063726 310410214827503 APPLE IPH01428 7491 04/23/20 09:46:51 0:41 6873 4965ruftgonpho 3587080982063726 310410214827503 APPLE IPH01428 no 7492 04/23/20 09:46:55 0:37 8152 6944 imp 3587080982063726 310410214827503 APPLE IPH01428 7493 04/23/20 09:47:31 20:51 5793 6533ruftgonpho 3587080982063726 310410214827503 APPLE IPH01428 no 7494 04/23/20 09:47:32 20:51 6533 5505ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7495 04/23/20 09:47:34 20:48 6243 6674 ins 3587080982063726 310410214827503 APPLE !PHONES 7496 04/23/20 09:47:35 20:48 6674 5979 ins 3587080982063726 310410214827503 APPLE !PHONES 7497 04/23/20 10:08:23 0:42 6977 5024ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7498 04/23/20 10:08:27 0:38 8152 6942 ins 3587080982063726 310410214827503 APPLE IPH01428 7499 04/23/20 10:09:04 8:21 5165 6052nxtgonpho 3587080982063726 310410214827503 APPLE IPH01428 no 7500 04/23/20 10:09:05 8:21 6052 4877ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7501 04/23/20 10:09:07 8:18 6263 6672 ins 3587080982063726 310410214827503 APPLE IPH01428 7502 04/23/20 10:09:09 8:17 6672 5999 ins 3587080982063726 310410214827503 APPLE IPH01428 7503 04/23/20 10:17:26 0:35 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPH01428 no 7504 04/23/20 10:18:00 14:59 5579 6455ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7505 04/23/20 10:18:01 14:59 6455 5291ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 308 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002952 The information contained her is N s not for general distribution. EFTA 00/17028 EFTA01251552 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in •- cjià. AT&T OTC. Run Date: 06/17/2020 Run Time: 1S:56:09 Data Osage Tor: Item Conn. Conn. Originating ET Sytos Bytes Apn INEI NUT NICOLL Date Time Number Up Dn (OTC) 7506 04/23/20 10:18:10 14:49 6225 6648 imp 3587080982063726 310410214827503 APPLE !PHONES 7507 04/23/20 10:18:11 14:49 6648 5961 imp 3587080982063726 310410214827503 APPLE !PHONES 7508 04/23/20 10:33:00 27:14 5689 6578 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7509 04/23/20 10:33:01 27:13 7675 9392 imp 3587080982063726 310410214827503 APPLE !PHONES 7510 04/23/20 10:33:01 27:14 6578 5401ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7511 04/23/20 10:33:02 27:13 9392 7411 imp 3587080982063726 310410214827503 APPLE !PHONES 7512 04/23/20 11:00:15 1:27 7465 5385ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7513 04/23/20 11:00:19 1:23 8086 6962 ins 3587080982063726 310410214827503 APPLE 'PHONES 7514 04/23/20 11:01:42 2:03 5281 6115ruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7515 04/23/20 11:01:43 2:03 6115 4993ruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7516 04/23/20 11:01:45 2:00 6226 6648 imp 3587080982063726 310410214827503 APPLE !PHONES 7517 04/23/20 11:01:47 1:59 6648 5962 imp 3587080982063726 310410214827503 APPLE !PHONES 7518 04/23/20 11:03:46 1:27 6387 5126ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7519 04/23/20 11:03:50 1:23 9518 7198 imp 3587080982063726 310410214827503 APPLE !PHONES 7520 04/23/20 11:05:12 8:23 5100 6092ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7521 04/23/20 11:05:13 8:23 6092 4812ruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7522 04/23/20 11:05:16 8:19 6264 6664 imp 3587080982063726 310410214827503 APPLE 'PHONES 7523 04/23/20 11:05:17 8:19 6664 6000 imp 3587080982063726 310410214827503 APPLE !PHONES 7524 04/23/20 11:13:36 2:51 16063 5896ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7525 04/23/20 11:13:40 2:47 9004 7178 imp 3587080982063726 310410214827503 APPLE !PHONES 7526 04/23/20 11:16:26 8:24 5222 6055ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7527 04/23/20 11:16:28 8:23 6055 4934ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7528 04/23/20 11:16:30 8:20 7200 6806 imp 3587080982063726 310410214827503 APPLE !PHONES 7529 04/23/20 11:16:31 8:20 6806 6936 imp 3587080982063726 310410214827503 APPLE 'PHONES 7530 04/23/20 11:24:51 5:59 7721 5386ruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7531 04/23/20 11:24:55 5:55 8078 6922 imp 3587080982063726 310410214827503 APPLE !PHONES 7532 04/23/20 11:30:49 2:03 5163 6052ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 309 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGAt00002953 The information contained hereCtoNyFti NTnilikk not for general distribution. EFTA 00/17029 EFTA01251553 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in t`'s ts-a,# asst AT&T arc. Run Data: 06/17/2020 Run Time: 18:56:09 Data Usage Tor: Item Conn. Conn. originating ET Bytes Byte. Apn INLI INSI MARL NICOLL Data Time Number UP Dn (UTC) 7533 04/23/20 11:30:50 2:03 6052 4875 mmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7534 04/23/20 11:30:51 2:01 6166 6668 ims 3587080982063726 310410214827503 APPLE DRONES 7535 04/23/20 11:30:52 2:01 6668 5902 ims 3587080982063726 310410214827503 APPLE !PHONES 7536 04/23/20 11:32:53 12:49 9332 5562rumgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 7537 04/23/20 11:32:58 12:44 8224 7830 ims 3587080982063726 310410214827503 APPLE DRONES 7538 04/23/20 11:45:41 2:04 5267 6139rumgonpho 3587080982063726 310410214827503 APPLE DRONES no 7539 04/23/20 11:45:43 2:03 6139 4979rumgonpho 3587080982063726 310410214827503 APPLE DRONES no 7540 04/23/20 11:45:45 2:00 6262 6676 ims 3587080982063726 310410214827503 APPLE DRONES 7541 04/23/20 11:45:46 2:00 6676 5998 ims 3587080982063726 310410214827503 APPLE DRONES 7542 04/23/20 11:47:46 10:46 7944 5750rumgonpho 3587080982063726 310410214827503 APPLE DRONES no 7543 04/23/20 11:47:58 10:34 8880 7068 ims 3587080982063726 310410214827503 APPLE DRONES 7544 04/23/20 11:58:31 2:04 5281 6115rumgonpho 3587080982063726 310410214827503 APPLE DRONES no 7545 04/23/20 11:58:32 2:04 6115 4993rumgonpho 3587080982063726 310410214827503 APPLE DRONES no 7546 04/23/20 11:58:35 2:00 6244 6674 ins 3587080982063726 310410214827503 APPLE DRONES 7547 04/23/20 11:58:36 2:00 6674 5980 Las 3587080982063726 310410214827503 APPLE DRONES 7548 04/23/20 12:00:36 1:35 0 Orumgonpho 3587080982063726 310410214827503 APPLE DRONES no 7549 04/23/20 12:00:40 1:31 7408 6124 was 3587080982063726 310410214827503 APPLE DRONES 7550 04/23/20 12:02:10 2:04 192 Ormtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7551 04/23/20 12:02:11 2:03 5165 6052mmtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7552 04/23/20 12:02:12 2:03 0 Orumgonpho 3587080982063726 310410214827503 APPLE DRONES no 7553 04/23/20 12:02:13 2:02 6052 4877rumgonpho 3587080982063726 310410214827503 APPLE DRONES no 7554 04/23/20 12:02:14 2:00 6245 6674 ims 3587080982063726 310410214827503 APPLE DRONES 7555 04/23/20 12:02:15 2:00 6674 5981 ims 3587080982063726 310410214827503 APPLE DRONES 7556 04/23/20 12:04:15 28:53 12111 7268rumgonpho 3587080982063726 310410214827503 APPLE DRONES no 7557 04/23/20 12:04:19 28:49 12248 7623 ims 3587080982063726 310410214827503 APPLE 1PRONE8 7558 04/23/20 12:33:07 4:04 5160 6050rumgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 310 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002954 The information contained her is not for general distribution. EFTA_00I 17030 EFTA01251554 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: la.66.0 Data Usage Tor: Item Conn. Conn. originating ET Bytes Bytes Apn INZI INSI MARL MODEL Date Time Number Up Dn (OTC) 7559 04/23/20 12:33:08 4:04 6050 4872 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7560 04/23/20 12:33:11 4:00 7154 6744 ins 3587080982063726 310410214827503 APPLE !PHONES 7561 04/23/20 12:33:12 4:00 6744 6890 ins 3587080982063726 310410214827503 APPLE !PHONES 7562 04/23/20 12:37:12 3:14 7527 5065 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7563 04/23/20 12:37:16 3:10 8078 6924 ins 3587080982063726 310410214827503 APPLE 'PHONES 7564 04/23/20 12:40:25 0:26 192 Onxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7565 04/23/20 12:40:26 0:25 5285 6873 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7566 04/23/20 12:40:26 0:26 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7567 04/23/20 12:40:27 0:24 6262 6672 ins 3587080982063726 310410214827503 APPLE !PHONES 7568 04/23/20 12:40:27 0:25 6873 4997 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7569 04/23/20 12:40:28 0:24 6672 5998 ins 3587080982063726 310410214827503 APPLE 'PHONES 7570 04/23/20 12:40:52 45:24 41055 22785 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7571 04/23/20 12:44:56 41:20 10888 7586 ins 3587080982063726 310410214827503 APPLE 'PHONES 7572 04/23/20 13:26:15 2:30 5479 8994 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7573 04/23/20 13:26:16 2:30 8994 5191 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7574 04/23/20 13:26:18 2:27 6264 6672 ins 3587080982063726 310410214827503 APPLE !PHONES 7575 04/23/20 13:26:19 2:27 6672 6000 ins 3587080982063726 310410214827503 APPLE !PHONES 7576 04/23/20 13:28:46 60:00 18644 7310 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7577 04/23/20 13:28:49 60:00 11992 9790 ins 3587080982063726 310410214827503 APPLE 'PHONES 7578 04/23/20 14:28:46 60:00 11286 8017 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7579 04/23/20 14:28:49 60:00 5192 2680 ins 3587080982063726 310410214827503 APPLE 'PHONES 7580 04/23/20 15:28:46 43:56 3890 1154 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7581 04/23/20 15:28:49 43:53 6048 3680 ins 3587080982063726 310410214827503 APPLE 'PHONES 7582 04/23/20 16:12:41 9:28 210462 82212 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7583 04/23/20 16:12:42 9:28 82212 210078 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7584 04/23/20 16:12:44 9:25 7136 6746 ins 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 311 AT&T does not retain records that can definitively show whether a transaction was PsiTnilikk customer initiated or AT&T's network initiated the data transaction. SDNYGM00002955 The information contained her is not for general distribution. EF-EAJVII7031 EFTA01251555 MOBILITY ap. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in .....,./AT&T ••-•° `' s OTC. Run Date: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating ET Bytes Bytom Apn INEI INSI MARL NICOLL Date Time Number up Dn (OTC) 7585 04/23/20 16:12:46 9:24 6746 6872 imp 3587080982063726 310410214827503 APPLE !PHONES 7586 04/23/20 16:22:10 3:05 34175 57099nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7587 04/23/20 16:22:11 3:04 6674 5982 imp 3587080982063726 310410214827503 APPLE !PHONES 7588 04/23/20 16:25:14 2:02 49576 30161ruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 7589 04/23/20 16:25:15 2:01 6203 6626 imp 3587080982063726 310410214827503 APPLE IPHOME8 7590 04/23/20 16:25:15 2:02 30161 49288ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7591 04/23/20 16:25:17 2:00 6626 5939 imp 3587080982063726 310410214827503 APPLE !PHONES 7592 04/23/20 16:27:17 37:35 296827 1005656ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7593 04/23/20 16:27:18 37:34 17708 12839 imp 3587080982063726 310410214827503 APPLE !PHONES 7594 04/23/20 17:04:51 8:57 1874576 290268ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7595 04/23/20 17:04:52 8:56 6274 6672 imp 3587080982063726 310410214827503 APPLE !PHONES 7596 04/23/20 17:04:52 8:57 290268 1881965ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7597 04/23/20 17:04:53 8:56 6672 6010 imp 3587080982063726 310410214827503 APPLE !PHONES 7598 04/23/20 17:10:01 35:05 14519 7816 imp 3587080982063726 310410214827503 APPLE !PHONES 7599 04/23/20 17:13:49 60:00 8296 17936nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7600 04/23/20 17:45:06 32:54 3500 1448 imp 3587080982063726 310410214827503 APPLE !PHONES 7601 04/23/20 17:45:06 32:54 3436 1448 imp 3587080982063726 310410214827503 APPLE !PHONES 7602 04/23/20 18:13:49 4:11 1205 1734ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7603 04/23/20 18:17:59 4:49 12944 21967ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7604 04/23/20 18:18:00 4:49 21967 12656ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7605 04/23/20 18:18:02 4:46 6332 24278 imp 3587080982063726 310410214827503 APPLE !PHONES 7606 04/23/20 18:18:03 4:46 6674 5980 imp 3587080982063726 310410214827503 APPLE !PHONES 7607 04/23/20 18:22:49 60:00 624911 637944ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7608 04/23/20 18:23:12 1:45 8150 6964 imp 3587080982063726 310410214827503 APPLE !PHONES 7609 04/23/20 18:24:57 3:02 5072 1588 imp 3587080982063726 310410214827503 APPLE !PHONES 7610 04/23/20 18:28:00 41:00 12358 11340 imp 3587080982063726 310410214827503 APPLE !PHONES 7611 04/23/20 19:09:00 0:17 3532 1340 imp 3587080982063726 310410214827503 APPLE !PHONES 7612 04/23/20 19:09:17 44:30 5240 2664 imp 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 312 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGMJ10002956 The information contained her is NeTnileikE not for general distribution. EFTA 00117032 EFTA01251556 MOBILITY 41.1 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn INSI MARL NICOLL Date Time Number Up On (OTC) 7613 04/23/20 19:22:49 30:58 341613 459168nxtgonpho 3587080982063726 310410214827503 APPLE IOHOME8 no 7614 04/23/20 19:53:47 2:16 12300 7796 nxtgonpho 3587080982063726 310410214827503 APPLE 1101(0=8 no 7615 04/23/20 19:53:49 2:14 8934 6266 imp 3587080982063726 310410214827503 APPLE 1101(0=8 7616 04/23/20 19:56:02 2:03 5280 6115 nxtgonpho 3587080982063726 310410214827503 APPLE 1101(0=8 no 7617 04/23/20 19:56:03 2:03 6115 4992 nxtgonpho 3587080982063726 310410214827503 APPLE 1101(0=8 no 7618 04/23/20 19:56:09 9:23 8349 6046 imp 3587080982063726 310410214827503 APPLE 1101(0=8 7619 04/23/20 19:58:06 18:44 13659 11398 nxtgonpho 3587080982063726 310410214827503 APPLE 1101(0=8 no 7620 04/23/20 20:05:32 11:18 2876 1340 imp 3587080982063726 310410214827503 APPLE 1101(0=8 7621 04/23/20 20:05:32 11:18 2704 1340 imp 3587080982063726 310410214827503 APPLE 1101(0=8 7622 04/23/20 20:16:49 2:10 5118 6107 nxtgonpho 3587080982063726 310410214827503 APPLE 1101(0=8 no 7623 04/23/20 20:16:50 2:09 6245 6674 imp 3587080982063726 310410214827503 APPLE 1101(0=8 7624 04/23/20 20:16:50 2:10 6107 4830 nxtgonpho 3587080982063726 310410214827503 APPLE 1101(0=8 no 7625 04/23/20 20:16:52 2:08 6674 5981 imp 3587080982063726 310410214827503 APPLE 1101(0=8 7626 04/23/20 20:17:23 32:05 11629 8019 imp 3587080982063726 310410214827503 APPLE 1101(0=8 7627 04/23/20 20:19:00 19:13 6542 5572 nxtgonpho 3587080982063726 310410214827503 APPLE 1101(0=8 no 7628 04/23/20 20:38:12 2:09 5117 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7629 04/23/20 20:38:13 2:09 6055 4829 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7630 04/23/20 20:40:22 60:00 15252 48664 nxtgonpho 3587080982063726 310410214827503 APPLE 1101(0=8 no 7631 04/23/20 20:49:26 14:04 3500 1464 imp 3587080982063726 310410214827503 APPLE 1101(0=8 7632 04/23/20 20:49:28 14:02 3436 1464 imp 3587080982063726 310410214827503 APPLE 1101(0=8 7633 04/23/20 21:03:30 10:54 3532 1556 imp 3587080982063726 310410214827503 APPLE 1101(0=8 7634 04/23/20 21:14:46 2:56 8082 6072 imp 3587080982063726 310410214827503 APPLE 1101(0=8 7635 04/23/20 21:17:42 60:00 15216 4948 imp 3587080982063726 310410214827503 APPLE 1101(0=8 7636 04/23/20 21:40:22 29:45 578 630nxtgonpho 3587080982063726 310410214827503 APPLE 1101(0=8 no 7637 04/23/20 22:10:07 8:24 13380 7147 nxtgonpho 3587080982063726 310410214827503 APPLE 1101(0=8 no 7638 04/23/20 22:10:08 8:24 7147 13092 nxtgonpho 3587080982063726 310410214827503 APPLE 1101(0=8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 313 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002957 The information contained heraCteNeli not for general distribution. NaTtAdti EFTA_00I 17033 EFTA01251557 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm .....af •--s""s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. Run Data: 06/17/2020 Run Elmo: Data Osage For: Item Conn. Conn. Originating ET Bytes Bytom Apn IRE' IMEI MARE MODEL Data Time Number Up Dn (UTC) 7639 04/23/20 22:17:42 60:00 12796 3532 ims 3587080982063726 310410214827503 APPLE !PHONES 7640 04/23/20 22:18:32 20:55 7702 5331 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7641 04/23/20 22:39:26 2:04 5484 8997 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7642 04/23/20 22:39:27 2:04 8997 5196 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7643 04/23/20 22:41:31 52:11 7228 5911 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7644 04/23/20 23:17:42 60:00 6848 2772 ims 3587080982063726 310410214827503 APPLE !PHONES 7645 04/23/20 23:33:41 2:46 5217 6053 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7646 04/23/20 23:33:42 2:46 6053 4929 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7647 04/23/20 23:36:28 6:09 5221 6055 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7648 04/23/20 23:36:29 6:09 6055 4933 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7649 04/23/20 23:42:38 21:52 6826 6176 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 7650 04/24/20 00:04:30 30:04 12112 14535 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7651 04/24/20 00:04:31 30:04 14535 26285 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7652 04/24/20 00:17:42 60:00 15108 4872 ims 3587080982063726 310410214827503 APPLE !PHONES 7653 04/24/20 00:34:35 7:29 4607 5823 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7654 04/24/20 00:34:36 7:29 5823 4319 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7655 04/24/20 00:42:04 1:09 5221 6055 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7656 04/24/20 00:42:05 1:09 6055 4933 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7657 04/24/20 00:43:14 1:50 7336 6329 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7658 04/24/20 00:45:03 5:54 6213 7917 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 7659 04/24/20 00:45:04 5:54 7917 5925 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7660 04/24/20 00:50:58 0:40 6053 4897 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 314 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002958 The information contained her is not for general distribution. NsTatikEl EF-EA_00117034 EFTA01251558 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in • .....,,,f `" --s 1" AT&T OTC. Run Data: 06/17/2020 Run Tina: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn INC' IMBI MARL MOLL Data Time Number Up Dn (UTC) 7661 04/24/20 00:51:37 2:37 5451 7589 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONE8 no 7662 04/24/20 00:51:38 2:37 7589 5163 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 7663 04/24/20 00:54:15 2:48 5163 6104 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7664 04/24/20 00:54:16 2:48 6104 4875 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7665 04/24/20 00:57:04 39:45 7935 13375 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 7666 04/24/20 01:17:42 60:00 6848 2680 ims 3587080982063726 310410214827503 APPLE IPHOME8 7667 04/24/20 01:36:48 9:54 5345 6933 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 7668 04/24/20 01:36:49 9:54 6933 5057 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 7669 04/24/20 01:46:43 110:00 27963 27416 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 7670 04/24/20 01:46:44 60:00 9737 12706 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 7671 04/24/20 02:17:42 60:00 15216 5048 ims 3587080982063726 310410214827503 APPLE IPHOME8 7672 04/24/20 02:46:44 60:00 17679 18165 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 7673 04/24/20 03:17:42 60:00 8388 2928 ims 3587080982063726 310410214827503 APPLE IPHOME8 7674 04/24/20 03:46:44 60:00 0 210 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 7675 04/24/20 04:17:42 60:00 9928 3176 ims 3587080982063726 310410214827503 APPLE IPHOME8 7676 04/24/20 04:46:44 52:52 0 92 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 7677 04/24/20 05:17:42 60:00 8944 3284 ims 3587080982063726 310410214827503 APPLE IPHOME8 7678 04/24/20 06:17:42 60:00 12136 4624 ims 3587080982063726 310410214827503 APPLE IPHOME8 7679 04/24/20 07:17:42 60:00 13352 4676 ims 3587080982063726 310410214827503 APPLE IPHOME8 7680 04/24/20 08:17:42 60:00 6956 2788 ims 3587080982063726 310410214827503 APPLE IPHOME8 7681 04/24/20 09:17:42 60:00 9804 3052 ims 3587080982063726 310410214827503 APPLE IPHOME8 7682 04/24/20 10:17:42 60:00 14892 4764 ims 3587080982063726 310410214827503 APPLE IPHOME8 7683 04/24/20 11:17:42 60:00 8728 3160 ims 3587080982063726 310410214827503 APPLE IPHOME8 7684 04/24/20 12:17:42 60:00 13460 4784 ims 3587080982063726 310410214827503 APPLE IPHOME8 7685 04/24/20 12:40:18 32:00 7700 18927 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 7686 04/24/20 12:40:19 32:00 18806 7412 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. /data AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. Page 315 The information contained her Se. PIET not for general distribution. SDNY_GML00002959 EFTA_00I 17035 EFTA01251559 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tr a""s ed AT&T OTC. Run Data: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. originating ET Bytes Bytom Apn INEI IMBI MARL MODEL Data Time Number Up Dn (OTC) 7687 04/24/20 13:12:19 55:15 7615 7449 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 7688 04/24/20 13:17:42 60:00 12276 4640 1ms 3587080982063726 310410214827503 APPLE IPHOME8 7689 04/24/20 14:07:33 18:32 5325 6280 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 7690 04/24/20 14:07:34 18:32 6280 5037 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 7691 04/24/20 14:17:42 60:00 10360 3408 ims 3587080982063726 310410214827503 APPLE IPMONEB 7692 04/24/20 14:26:06 0:36 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 7693 04/24/20 14:26:41 71:57 13609 8063 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 7694 04/24/20 14:26:42 60:00 7774 13006 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 7695 04/24/20 15:17:42 28:55 3532 1340 ims 3587080982063726 310410214827503 APPLE IPMONEB 7696 04/24/20 15:26:42 11:57 289 315 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 7697 04/24/20 15:38:39 0:47 8786 5408 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 7698 04/24/20 15:39:25 3:19 5222 6055 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 7699 04/24/20 15:39:27 3:18 6055 4934 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 7700 04/24/20 15:42:45 1:46 6314 5508 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 7701 04/24/20 15:44:30 2:04 5220 6055 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 7702 04/24/20 15:44:31 2:04 6055 4932 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 7703 04/24/20 15:46:35 0:58 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 7704 04/24/20 15:46:37 0:56 4060 1572 ims 3587080982063726 310410214827503 APPLE IPMONEB 7705 04/24/20 15:47:32 8:35 56774 19623 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 7706 04/24/20 15:47:33 5:05 6496 7408 imp 3587080982063726 310410214827503 APPLE IPHOME8 7707 04/24/20 15:47:34 8:34 19623 56486 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 7708 04/24/20 15:47:35 5:04 7408 6232 ims 3587080982063726 310410214827503 APPLE IPMONEB 7709 04/24/20 15:48:45 10:59 8639 6424 ims -1 310410214827503 7710 04/24/20 15:52:38 3:29 6350 7364 ims 3587080982063726 310410214827503 APPLE IPMONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 316 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002960 The information contained her is PsiTniiikE not for general distribution. EFTA_00I 17036 EFTA01251560 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tr:1 ‘.."1.° AT&T OTC. Run Data: 06/17/2020 Run Time: 18:56:09 Data usage for: Item Conn. Conn. originating ET Bytes Bytes Apn INZI INSI MAfl MODEL Data Time Number Up on (OTC) 7711 04/24/20 15:52:39 3:29 7364 6086 imp 3587080982063726 310410214827503 APPLE !PHONES 7712 04/24/20 15:56:08 1:19 16507 22802 natTonpho 3587080982063726 310410214827503 APPLE !PHONES no 7713 04/24/20 15:56:10 1:17 7722 6228 imp 3587080982063726 310410214827503 APPLE IPHOME8 7714 04/24/20 15:57:26 2:28 14138 13117ruftmonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 7715 04/24/20 15:57:27 2:27 6262 6784 imp 3587080982063726 310410214827503 APPLE !PHONES 7716 04/24/20 15:57:27 2:28 13117 13850ruagonpho 3587080982063726 310410214827503 APPLE !PHONES no 7717 04/24/20 15:57:28 2:27 6676 5998 imp 3587080982063726 310410214827503 APPLE !PHONES 7718 04/24/20 15:59:55 69:17 342170 123308ruftmonpho 3587080982063726 310410214827503 APPLE !PHONES no 7719 04/24/20 15:59:56 60:00 103690 314951ruftmonpho 3587080982063726 310410214827503 APPLE !PHONES no 7720 04/24/20 15:59:56 69:16 9050 11972 imp 3587080982063726 310410214827503 APPLE !PHONES 7721 04/24/20 15:59:57 60:00 11864 8786 imp 3587080982063726 310410214827503 APPLE IPHOME8 7722 04/24/20 16:59:56 9:17 19618 36618roftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 7723 04/24/20 16:59:57 9:16 0 0 imp 3587080982063726 310410214827503 APPLE !PHONES 7724 04/24/20 17:09:13 14:48 271180 73358ruftmonpho 3587080982063726 310410214827503 APPLE !PHONES no 7725 04/24/20 17:09:14 14:47 6186 6674 imp 3587080982063726 310410214827503 APPLE IPHOME8 7726 04/24/20 17:09:14 14:48 73358 274721roam:mph° 3587080982063726 310410214827503 APPLE IPHOME8 no 7727 04/24/20 17:09:15 14:47 6674 5922 imp 3587080982063726 310410214827503 APPLE IPHOME8 7728 04/24/20 17:24:02 17:33 192 Ormagonpho 3587080982063726 310410214827503 APPLE !PHONES no 7729 04/24/20 17:24:03 17:32 375210 34987ruagonpho 3587080982063726 310410214827503 APPLE !PHONES no 7730 04/24/20 17:24:03 17:32 6226 6648 imp 3587080982063726 310410214827503 APPLE !PHONES 7731 04/24/20 17:24:03 17:33 0 Ormamonpho 3587080982063726 310410214827503 APPLE !PHONES no 7732 04/24/20 17:24:04 17:32 6648 5962 imp 3587080982063726 310410214827503 APPLE IPHOME8 7733 04/24/20 17:24:04 17:32 34987 381262ruftmonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 7734 04/24/20 17:41:36 2:05 16083 33935ruftmonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 7735 04/24/20 17:41:39 2:02 16798 12516 imp 3587080982063726 310410214827503 APPLE IPHOME8 7736 04/24/20 17:43:40 2:05 192 Ormamonpho 3587080982063726 310410214827503 APPLE IPHOME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 317 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002961 The information contained her is not for general distribution. EFTA_00I 17037 EFTA01251561 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T arc. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytom Apn ICI IMBI MARL MODEL Data Time Number UP Dn (OTC) 7737 04/24/20 17:43:41 2:04 27013 16590 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7738 04/24/20 17:43:42 2:03 6300 8182 imp 3587080982063726 310410214827503 APPLE IPHONE8 7739 04/24/20 17:43:42 2:04 16590 26725 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7740 04/24/20 17:43:42 2:04 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7741 04/24/20 17:43:43 2:03 8074 6036 imp 3587080982063726 310410214827503 APPLE IPHONE8 7742 04/24/20 17:45:46 23:46 26695 51004 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7743 04/24/20 17:45:48 23:44 7396 6088 ins 3587080982063726 310410214827503 APPLE IPHONE8 7744 04/24/20 18:09:33 7:32 16579 38321 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7745 04/24/20 18:09:35 7:30 8154 6922 imp 3587080982063726 310410214827503 APPLE IPHONE8 7746 04/24/20 18:17:04 9:46 31299 20422 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7747 04/24/20 18:17:05 9:45 6316 8184 imp 3587080982063726 310410214827503 APPLE IPHONE8 7748 04/24/20 18:17:05 9:46 20422 31011 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7749 04/24/20 18:17:07 9:44 8076 6052 imp 3587080982063726 310410214827503 APPLE IPHONE8 7750 04/24/20 18:26:51 3:39 28350 107693 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7751 04/24/20 18:26:53 3:37 8084 6054 imp 3587080982063726 310410214827503 APPLE IPHONE8 7752 04/24/20 18:30:29 2:10 20575 16776 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7753 04/24/20 18:30:30 2:09 6369 7406 imp 3587080982063726 310410214827503 APPLE DRONES 7754 04/24/20 18:30:30 2:10 16776 20287 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7755 04/24/20 18:30:31 2:09 7406 6105 imp 3587080982063726 310410214827503 APPLE DRONES 7756 04/24/20 18:32:40 0:47 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7757 04/24/20 18:32:42 0:45 7740 5884 imp 3587080982063726 310410214827503 APPLE DRONES 7758 04/24/20 18:33:26 2:04 14593 13724 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7759 04/24/20 18:33:26 2:04 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7760 04/24/20 18:33:27 2:03 7233 6906 imp 3587080982063726 310410214827503 APPLE !PHONES 7761 04/24/20 18:33:27 2:04 13724 14305 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 318 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002962 The information contained her is NTifikE not for general distribution. EFTA_00I 17038 EFTA01251562 MOBILITY 4110. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tra '`s sd AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating TT Bytes Bytom Ann ICI IMBI MARE NICOLL Data Time Humber Up Dn (UTC) 7762 04/24/20 18:33:27 2:04 0 0 ructgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7763 04/24/20 18:33:28 2:03 6798 6969 ins 3587080982063726 310410214827503 APPLE IPHONE8 7764 04/24/20 18:35:31 1:22 12642 21370ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7765 04/24/20 18:35:33 1:20 15934 8618 ins 3587080982063726 310410214827503 APPLE IPHONE8 7766 04/24/20 18:36:52 2:04 148347 23453ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7767 04/24/20 18:36:53 2:03 6225 6672 ins 3587080982063726 310410214827503 APPLE 'PHONES 7768 04/24/20 18:36:53 2:04 23453 148059ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7769 04/24/20 18:36:55 2:02 6672 5961 ins 3587080982063726 310410214827503 APPLE !PHONES 7770 04/24/20 18:38:57 3:49 16575 32609ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7771 04/24/20 18:38:59 3:47 6684 5962 ins 3587080982063726 310410214827503 APPLE IPHONE8 7772 04/24/20 18:42:45 2:12 395637 36713ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7773 04/24/20 18:42:46 2:11 6261 6692 ins 3587080982063726 310410214827503 APPLE IPHONE8 7774 04/24/20 18:42:46 2:12 36713 395349ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7775 04/24/20 18:42:48 2:10 6692 5997 ins 3587080982063726 310410214827503 APPLE IPHONE8 7776 04/24/20 18:44:58 1:43 2792 6469ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7777 04/24/20 18:45:01 1:40 11766 8316 imp 3587080982063726 310410214827503 APPLE IPHONE8 7778 04/24/20 18:46:41 1:11 29108 33590ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7779 04/24/20 18:46:41 1:11 124 108 imp 3587080982063726 310410214827503 APPLE IPHONE8 7780 04/24/20 18:47:52 2:40 17499 26142ruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 7781 04/24/20 18:47:54 2:38 8444 8852 imp 3587080982063726 310410214827503 APPLE !PHONES 7782 04/24/20 18:50:31 8:19 20574 13527ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7783 04/24/20 18:50:32 8:18 7266 6792 ins 3587080982063726 310410214827503 APPLE IPHONE8 7784 04/24/20 18:50:32 8:19 13527 20286ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7785 04/24/20 18:50:33 8:18 6792 7002 imp 3587080982063726 310410214827503 APPLE IPHONE8 7786 04/24/20 18:58:51 3:59 10319 15664ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 7787 04/24/20 18:58:54 3:56 7508 6086 ins 3587080982063726 310410214827503 APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 319 AT&T does not retain recorgs that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SIDNYGM00002963 The information contained heraleop+Fti N:Infiack not for general distribution. EFTA_00I 17039 EFTA01251563 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating ET Bytes Bytom Apn IICI IMBI MACE MODEL Date Time Mambos Up Dn (OTC) 7788 04/24/20 19:02:49 9:29 16802 16210 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7789 04/24/20 19:02:51 8:29 6335 6670 ims 3587080982063726 310410214827503 APPLE DRONES 7790 04/24/20 19:02:51 9:28 16210 16418 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7791 04/24/20 19:02:52 8:29 6670 6071 ims 3587080982063726 310410214827503 APPLE DRONES 7792 04/24/20 19:05:10 12:05 8437 6393 ims -1 310410214827503 7793 04/24/20 19:11:20 0:58 6227 6672 ims 3587080982063726 310410214827503 APPLE DRONES 7794 04/24/20 19:11:21 0:58 6672 5963 ims 3587080982063726 310410214827503 APPLE DRONES 7795 04/24/20 19:12:18 2:03 5116 6107 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7796 04/24/20 19:12:19 2:02 6264 6780 ims 3587080982063726 310410214827503 APPLE DRONES 7797 04/24/20 19:12:19 2:04 6107 4828 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7798 04/24/20 19:12:20 2:03 6672 6000 ims 3587080982063726 310410214827503 APPLE DRONES 7799 04/24/20 19:14:22 60:00 9276 7939 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7800 04/24/20 19:14:25 3:32 8156 6930 Imo 3587080982063726 310410214827503 APPLE DRONES 7801 04/24/20 19:17:57 60:00 13568 4808 Imo 3587080982063726 310410214827503 APPLE DRONES 7802 04/24/20 20:14:22 25:08 635 525 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7803 04/24/20 20:17:57 60:00 10128 3376 imp 3587080982063726 310410214827503 APPLE DRONES 7804 04/24/20 20:39:29 17:37 6761 7524 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7805 04/24/20 20:39:30 17:37 7524 6473 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7806 04/24/20 20:57:07 1:29 6871 4961 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7807 04/24/20 20:58:36 43:25 6061 6813 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7808 04/24/20 20:58:37 43:25 6813 5773 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7809 04/24/20 21:17:57 60:00 8604 3004 imp 3587080982063726 310410214827503 APPLE DRONES 7810 04/24/20 21:42:02 0:47 6802 4737 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7811 04/24/20 21:42:49 15:02 5741 6470 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7812 04/24/20 21:42:50 15:02 6470 5453 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 320 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002964 The information contained her is PsiTnileikE not for general distribution. EFTA_00I 17040 EFTA01251564 MOBILITY dis 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in c•`-'_-,s.4 AT&T UTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes) Apn ICI IMBI MAfl NICOLL Data Time Hunter Up Dn (OTC) 7813 04/24/20 21:57:52 0:50 6937 5071 nxtgonpho 3587080982063726 310410214827503 APPLE INIONZ8 no 7814 04/24/20 21:58:41 17:34 6588 6965 nxtgonpho 3587080982063726 310410214827503 APPLE 110HONZ8 no 7815 04/24/20 21:58:42 17:34 6965 6300 nxtgonpho 3587080982063726 310410214827503 APPLE 110HONZ8 no 7816 04/24/20 22:16:16 1:59 7319 5298 nxtgonpho 3587080982063726 310410214827503 APPLE 110HONZ8 no 7817 04/24/20 22:17:57 17:57 3424 1324 imp 3587080982063726 310410214827503 APPLE 110HONZ8 7818 04/24/20 22:18:14 37:18 13416 8717 nxtgonpho 3587080982063726 310410214827503 APPLE 110HONZ8 no 7819 04/24/20 22:18:15 37:18 8717 14073 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7820 04/24/20 22:29:52 25:40 6692 9690 imp 3587080982063726 310410214827503 APPLE 110HONZ8 7821 04/24/20 22:29:53 25:40 9690 6340 imp 3587080982063726 310410214827503 APPLE 110HONZ8 7822 04/24/20 22:55:33 13:17 13460 8904 nxtgonpho 3587080982063726 310410214827503 APPLE 110HONZ8 no 7823 04/24/20 22:55:34 13:17 8783 13076 nxtgonpho 3587080982063726 310410214827503 APPLE 110HONZ8 no 7824 04/24/20 22:55:35 13:15 6334 9172 imp 3587080982063726 310410214827503 APPLE IrRONZ8 7825 04/24/20 22:55:36 13:15 9172 6070 imp 3587080982063726 310410214827503 APPLE IrRONZ8 7826 04/24/20 23:08:51 3:20 6003 5951 nxtgonpho 3587080982063726 310410214827503 APPLE IrRONZ8 no 7827 04/24/20 23:09:01 3:10 1916 5604 imp 3587080982063726 310410214827503 APPLE IrRONZ8 7828 04/24/20 23:12:10 2:04 5281 7463nxtgonpho 3587080982063726 310410214827503 APPLE IrRONZ8 no 7829 04/24/20 23:12:11 2:04 7463 4993 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7830 04/24/20 23:12:13 2:01 6226 6684 imp 3587080982063726 310410214827503 APPLE DRONES 7831 04/24/20 23:12:14 2:01 6684 5962 imp 3587080982063726 310410214827503 APPLE IrRONZ8 7832 04/24/20 23:14:15 20:08 15808 6632nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7833 04/24/20 23:14:20 20:03 8324 7914 imp 3587080982063726 310410214827503 APPLE DRONES 7834 04/24/20 23:34:22 66:27 26341 42841 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7835 04/24/20 23:34:23 60:00 32835 20769nxtgonpho 3587080982063726 310410214827503 APPLE IrRONZ8 no 7836 04/24/20 23:36:17 64:32 10840 11860 imp 3587080982063726 310410214827503 APPLE IrRONZ8 7837 04/24/20 23:36:18 60:00 11860 10576 imp 3587080982063726 310410214827503 APPLE IrRONZ8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 321 AT&T does not retain records that can definitively show whether a transaction was PsiTifiNE customer initiated or AT&T's network initiated the data transaction. SDNYGM00002965 The information contained her is not for general distribution. EF-EA_00117041 EFTA01251565 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: 1S:56:10 Data Usage For: Item Conn. Conn. Originating ET Bytes Byte. Apn IND I INSI MAKE MODEL Data Time Number Up Dn (OTC) 7838 04/25/20 00:34:23 6:27 10006 5836 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7839 04/25/20 00:36:18 4:32 0 0 imp 3587080982063726 310410214827503 APPLE !PHONES 7840 04/25/20 00:40:50 60:00 8797 6285 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 7841 04/25/20 00:41:02 60:00 13288 9676 ism 3587080982063726 310410214827503 APPLE IPROME8 7842 04/25/20 01:40:50 19:36 7823 6028 nxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 7843 04/25/20 01:41:02 19:24 2580 1324 imp 3587080982063726 310410214827503 APPLE IPROME8 7844 04/25/20 02:00:25 100:00 5798 10671 nxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 7845 04/25/20 02:00:26 60:00 10671 7094 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7846 04/25/20 02:00:29 100:00 7136 6754 imp 3587080982063726 310410214827503 APPLE !PHONES 7847 04/25/20 02:00:30 60:00 6754 6980 imp 3587080982063726 310410214827503 APPLE !PROMS 7848 04/25/20 03:00:26 60:00 0 92 nxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 7849 04/25/20 03:00:30 60:00 0 0 ism 3587080982063726 310410214827503 APPLE IPROME8 7850 04/25/20 04:00:26 53:36 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 7851 04/25/20 04:00:30 53:32 0 0 imp 3587080982063726 310410214827503 APPLE IPROME8 7852 04/25/20 06:27:30 38:28 27482 31366 nxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 7853 04/25/20 06:27:31 38:28 31366 27764 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7854 04/25/20 06:27:35 38:23 8450 9178 imp 3587080982063726 310410214827503 APPLE !PROMS 7855 04/25/20 06:27:36 38:23 9178 8186 imp 3587080982063726 310410214827503 APPLE IPROME8 7856 04/25/20 07:05:59 4:24 6125 5662 nxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 7857 04/25/20 07:06:12 4:11 9094 6340 imp 3587080982063726 310410214827503 APPLE !PHONES 7858 04/25/20 07:10:24 2:08 6341 7188 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7859 04/25/20 07:10:28 2:04 9626 7914 imp 3587080982063726 310410214827503 APPLE !PHONES 7860 04/25/20 07:12:32 150:55 60059 63102 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 7861 04/25/20 07:12:33 60:00 34518 30667 nxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 7862 04/25/20 07:12:35 150:52 22692 27729 imp 3587080982063726 310410214827503 APPLE IPROME8 7863 04/25/20 07:12:36 60:00 19925 18212 imp 3587080982063726 310410214827503 APPLE IPROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 322 AT&T does not retain records that can definitively show whether a transaction was NITIAL customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002966 The information contained heraCtoNyFtit not for general distribution. EFTA 00117042 EFTA01251566 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in tra '`s sd AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage For: giliiiIIII Item Conn. Conn. Originating ET Bytes Bytoa Apn IKE' INSI MARL NICOLL Date Time Number Op Dn (OTC) 7864 04/25/20 08:12:33 60:00 27496 27376 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7865 04/25/20 08:12:36 60:00 4976 2680 imp 3587080982063726 310410214827503 APPLE !PRONGS 7866 04/25/20 09:12:33 30:55 1088 1931 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7867 04/25/20 09:12:36 30:52 2828 1448 moo 3587080982063726 310410214827503 APPLE IPRONE8 7868 04/25/20 09:43:28 7:28 48 Onxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 7869 04/25/20 09:43:32 7:24 9168 6070 imp 3587080982063726 310410214827503 APPLE DRONES 7870 04/25/20 09:50:55 4:02 288 48 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7871 04/25/20 09:50:56 4:02 48 Onxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7872 04/25/20 09:50:59 3:58 7268 6796 ins 3587080982063726 310410214827503 APPLE !PRONGS 7873 04/25/20 09:51:00 3:58 6796 7004 ins 3587080982063726 310410214827503 APPLE DRONES 7874 04/25/20 09:54:58 4:41 48 Onxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7875 04/25/20 09:55:02 4:37 10118 8108 ins 3587080982063726 310410214827503 APPLE DRONES 7876 04/25/20 09:59:38 6:33 288 48 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7877 04/25/20 09:59:39 6:33 48 Oruftgonpho 3587080982063726 310410214827503 APPLE DRONES no 7878 04/25/20 09:59:41 6:30 6316 6854 imp 3587080982063726 310410214827503 APPLE DRONES 7879 04/25/20 09:59:42 6:30 6854 6052 imp 3587080982063726 310410214827503 APPLE DRONES 7880 04/25/20 10:06:12 60:00 192 Onxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7881 04/25/20 10:06:12 161:32 1536 672 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7882 04/25/20 10:06:13 161:31 26464 30113 imp 3587080982063726 310410214827503 APPLE !PHONES 7883 04/25/20 10:06:14 60:00 16692 14346 ins 3587080982063726 310410214827503 APPLE !PHONES 7884 04/25/20 11:06:12 60:00 288 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7885 04/25/20 11:06:14 60:00 6626 6090 imp 3587080982063726 310410214827503 APPLE !PRONGS 7886 04/25/20 12:06:12 41:33 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7887 04/25/20 12:06:14 41:31 6795 6088 imp 3587080982063726 310410214827503 APPLE !PHONES 7888 04/25/20 12:47:45 2:23 48 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7889 04/25/20 12:47:48 2:20 27152 17294 imp 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 323 AT&T does not retain records that can definitively show whether a transaction was PsiTniliAL customer initiated or AT&T's network initiated the data transaction. SDNYGM00002967 The information contained her is not for general distribution. EFTA_00I 17043 EFTA01251567 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tr a ni‘S g° / AT&T OTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn IBEX IMS1 MIUtE MODEL Date Time Number Up Dn (OTC) 7890 04/25/20 12:50:07 5:26 288 48 nmtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 7891 04/25/20 12:50:08 5:26 48 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 7892 04/25/20 12:50:10 5:23 6440 7574 imo 3587080982063726 310410214827503 APPLE IPHONEB 7893 04/25/20 12:50:11 5:23 7574 6176 imp 3587080982063726 310410214827503 APPLE IPHONEB 7894 04/25/20 12:55:34 0:05 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 7895 04/25/20 12:55:50 2:51 48 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 7896 04/25/20 12:55:52 2:49 8940 8054 imp 3587080982063726 310410214827503 APPLE 1PHONE8 7897 04/25/20 12:58:40 2:12 288 48ruftgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 7898 04/25/20 12:58:41 2:12 48 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 7899 04/25/20 12:58:44 2:08 6262 6668 imam 3587080982063726 310410214827503 APPLE 1PHONE8 7900 04/25/20 12:58:45 2:08 6668 5998 imam 3587080982063726 310410214827503 APPLE 1PHONE8 7901 04/25/20 13:00:54 46:37 48 Onxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 7902 04/25/20 13:00:59 46:32 21006 13844 imam 3587080982063726 310410214827503 APPLE 1PHONE8 7903 04/25/20 13:47:32 1:53 48 Onxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 7904 04/25/20 13:49:24 0:13 288 48natgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 7905 04/25/20 13:49:25 0:13 48 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 7906 04/25/20 13:49:38 13:12 144 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7907 04/25/20 13:55:32 7:18 8896 7966 imp 3587080982063726 310410214827503 APPLE !PHONES 7908 04/25/20 14:02:49 9:14 384 96ruftgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 7909 04/25/20 14:02:51 9:13 96 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 7910 04/25/20 14:02:53 9:10 6264 6668 imp 3587080982063726 310410214827503 APPLE 1PHONE8 7911 04/25/20 14:02:54 9:10 6668 6000 imp 3587080982063726 310410214827503 APPLE 1PHONE8 7912 04/25/20 14:12:04 1:29 48 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 7913 04/25/20 14:12:13 1:20 16294 15902 imp 3587080982063726 310410214827503 APPLE 1PHONE8 7914 04/25/20 14:13:32 2:03 288 48ruftgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 324 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGht00002968 The information contained here(F3(E)N ff::ti i not for general distribution. Nal:AL EF-EA_00117044 EFTA01251568 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in tr Liassi AT&T OTC. Run Data: 06/17/2020 Run Tama: 10:56:16 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytom Apn INLI INBI MAKE MODEL Data Time Number Up Dn (UTC) 7915 04/25/20 14:13:33 2:03 48 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 7916 04/25/20 14:13:35 2:00 18647 25322 imam 3587080982063726 310410214827503 APPLE IPHOME8 7917 04/25/20 14:13:36 2:00 24220 18383 imam 3587080982063726 310410214827503 APPLE IPHOME8 7918 04/25/20 14:13:46 0:06 16875 10748 imam 3587080982063726 310410214827503 APPLE IPHOME8 7919 04/25/20 14:13:47 0:06 10190 16875 imam 3587080982063726 310410214827503 APPLE IPHOME8 7920 04/25/20 14:14:06 0:16 32620 10457 imam 3587080982063726 310410214827503 APPLE IPHOME8 7921 04/25/20 14:14:07 0:16 10457 32620 imam 3587080982063726 310410214827503 APPLE !PHONES 7922 04/25/20 14:15:36 33:27 6456 5426ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 7923 04/25/20 14:15:40 33:23 9268 7285 imam 3587080982063726 310410214827503 APPLE !PHONES 7924 04/25/20 14:49:02 2:03 5220 6055ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 7925 04/25/20 14:49:03 2:03 6055 4932ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 7926 04/25/20 14:49:06 1:59 7231 6798 imam 3587080982063726 310410214827503 APPLE !PHONES 7927 04/25/20 14:49:07 1:59 6798 6967 imam 3587080982063726 310410214827503 APPLE !PHONES 7928 04/25/20 14:51:06 60:00 6927 6791ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7929 04/25/20 14:51:10 60:00 9268 7446 imam 3587080982063726 310410214827503 APPLE !PHONES 7930 04/25/20 15:51:06 36:36 25083 34184natgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7931 04/25/20 15:51:10 36:32 9541 9175 imam 3587080982063726 310410214827503 APPLE !PHONES 7932 04/25/20 16:27:41 2:04 61107 24350ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 7933 04/25/20 16:27:43 2:02 6226 6648 imam 3587080982063726 310410214827503 APPLE !PHONES 7934 04/25/20 16:27:43 2:03 24350 60819ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 7935 04/25/20 16:27:44 2:02 6648 5962 imam 3587080982063726 310410214827503 APPLE !PHONES 7936 04/25/20 16:29:46 15:25 26075 50443ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 7937 04/25/20 16:29:47 15:24 8224 8130 imam 3587080982063726 310410214827503 APPLE !PHONES 7938 04/25/20 16:45:10 2:18 35103 19005natgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7939 04/25/20 16:45:11 2:18 18953 36726natgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7940 04/25/20 16:47:29 2:50 69923 56277natgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7941 04/25/20 16:47:31 2:48 7416 6088 imam 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 325 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002969 The information contained her is not for general distribution. EFTA_00I 17045 EFTA01251569 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ....„.• ••-s` a. AT&T arc. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Sytes Bytes Apn INEI INBI MARE MODEL Date Time Number Up Dn (UTC) 7942 04/25/20 16:50:18 28:40 21214 20760 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 7943 04/25/20 16:50:19 28:39 22967 19106 imp 3587080982063726 310410214827503 APPLE IPHOME8 7944 04/25/20 16:50:19 28:40 20760 21436 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 7945 04/25/20 16:50:20 28:39 18998 25667 imp 3587080982063726 310410214827503 APPLE IPHOME8 7946 04/25/20 17:18:59 9:03 7068 18667 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 7947 04/25/20 17:19:01 0:05 0 0 imp 3587080982063726 310410214827503 APPLE !PHONES 7948 04/25/20 17:19:09 0:01 0 0 ins 3587080982063726 310410214827503 APPLE !PHONES 7949 04/25/20 17:19:25 13:37 8317 6106 ins -1 310410214827503 7950 04/25/20 17:28:01 2:05 5221 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7951 04/25/20 17:28:02 2:04 7268 6800 imp 3587080982063726 310410214827503 APPLE DRONES 7952 04/25/20 17:28:02 2:05 6055 4933 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7953 04/25/20 17:28:04 2:03 6800 7004 imp 3587080982063726 310410214827503 APPLE !PHONES 7954 04/25/20 17:30:07 60:00 18683 10813 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7955 04/25/20 17:30:11 33:47 10572 7410 imp 3587080982063726 310410214827503 APPLE DRONES 7956 04/25/20 18:03:58 28:35 3888 1804 imp 3587080982063726 310410214827503 APPLE DRONES 7957 04/25/20 18:30:07 60:00 19698 23328 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7958 04/25/20 18:32:33 60:00 10672 5156 imp 3587080982063726 310410214827503 APPLE !PHONES 7959 04/25/20 19:30:07 60:00 15612 146374 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7960 04/25/20 19:32:33 46:16 2596 1324 imp 3587080982063726 310410214827503 APPLE !PHONES 7961 04/25/20 20:18:49 60:00 13552 4468 imp 3587080982063726 310410214827503 APPLE !PHONES 7962 04/25/20 20:30:07 12:31 173 105 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7963 04/25/20 20:42:37 2:03 5117 6055 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 7964 04/25/20 20:42:39 2:03 6055 4829 nxtgonpho 3587080982063726 310410214827503 APPLE 2PROME8 no 7965 04/25/20 20:44:42 60:00 25099 15911 nxtgonpho 3587080982063726 310410214827503 APPLE EPROM:ES no 7966 04/25/20 21:18:49 29:43 10268 6424 imp 3587080982063726 310410214827503 APPLE !PHONES 7967 04/25/20 21:44:42 19:54 0 Onmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7968 04/25/20 23:44:42 60:00 19669 9960 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 326 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002970 The information contained here(34ENS\iyf::ti PsiTniliAL not for general distribution. EFTA_00I 17046 EFTA01251570 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ......,,,• ••ass `' s AT&T UTC. Run Dato: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn IBC/ IMBI MUM MODEL Date Time Number Up Dn (UTC) a 7969 04/26/20 00:44:42 60:00 7156 2928 imp -1 310410214827503 7970 04/26/20 01:44:42 60:00 10300 3408 imp -1 310410214827503 7971 04/26/20 02:44:42 60:00 10224 4004 imp -1 310410214827503 7972 04/26/20 02:49:59 0:05 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7973 04/26/20 02:50:37 6:40 7449 4966 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7974 04/26/20 02:57:16 2:55 5217 6053 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7975 04/26/20 02:57:17 2:55 6053 4929 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7976 04/26/20 03:00:12 60:00 7307 6641 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7977 04/26/20 03:44:42 60:00 7280 2928 ims -1 310410214827503 7978 04/26/20 04:00:12 60:00 924 840 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7979 04/26/20 04:44:42 60:00 11904 4428 imo -1 310410214827503 7980 04/26/20 05:00:12 60:00 687 630 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7981 04/26/20 05:44:42 60:00 7140 2928 imo -1 310410214827503 7982 04/26/20 06:00:12 60:00 808 630 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7983 04/26/20 06:44:42 60:00 15048 4764 imo -1 310410214827503 7984 04/26/20 07:00:12 60:00 687 630 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7985 04/26/20 07:44:42 60:00 8388 3036 imo -1 310410214827503 7986 04/26/20 08:00:12 60:00 635 525 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7987 04/26/20 08:44:42 60:00 8496 3144 imo -1 310410214827503 7988 04/26/20 09:00:12 60:00 5735 7987 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7989 04/26/20 09:44:42 60:00 12012 4536 imo -1 310410214827503 7990 04/26/20 10:00:12 60:00 808 630 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7991 04/26/20 10:44:42 60:00 7032 2912 imo -1 310410214827503 7992 04/26/20 11:00:12 60:00 578 630 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7993 04/26/20 11:44:42 60:00 10224 4360 imo -1 310410214827503 7994 04/26/20 12:00:12 57:31 346 735 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 327 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002971 The information contained her is NeTniliAL not for general distribution. EFTA_00I 17047 EFTA01251571 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in `s te Ld a. AT&T OTC. Run Data: 06/17/2020 Run Tuna: 18:56:17 Data Osage for: Item Conn. Conn. Originating LT Sytes Byte. apn IILII IM3I NUT MODEL Data Time Number UP Dn (OTC) 7995 04/26/20 12:44:42 60:00 8820 3268 ins -1 310410214827503 7996 04/26/20 12:57:43 76:35 21513 31808 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7997 04/26/20 12:57:44 60:00 29884 31851 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7998 04/26/20 13:44:42 60:00 10176 3176 ins -1 310410214827503 7999 04/26/20 13:57:44 16:35 1924 5167 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8000 04/26/20 14:14:19 7:48 8015 6051 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8001 04/26/20 14:22:06 2:13 5221 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 8002 04/26/20 14:22:07 2:13 6055 4933 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 8003 04/26/20 14:24:20 49:52 9559 11255 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 8004 04/26/20 14:44:42 60:00 13956 5752 ins -1 310410214827503 8005 04/26/20 15:14:11 0:51 5059 6052 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8006 04/26/20 15:14:12 0:51 6052 4771 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 8007 04/26/20 15:15:03 0:05 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8008 04/26/20 15:19:04 14:51 12005 12178 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8009 04/26/20 15:33:54 0:59 5220 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8010 04/26/20 15:33:55 0:59 6055 4932 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8011 04/26/20 15:34:54 3:35 7529 5070 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8012 04/26/20 15:38:28 2:04 5276 6113 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8013 04/26/20 15:38:29 2:04 6113 4988 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8014 04/26/20 15:40:33 4:16 6337 5770 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8015 04/26/20 15:44:42 60:00 7032 2804 ins -1 310410214827503 8016 04/26/20 15:44:48 2:04 5281 6115 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 328 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002972 The information contained her is NTIAL not for general distribution. EF-EA_00117048 EFTA01251572 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ...,.• ••-s`"' e AT&T UTC. Run Date: 06/17/2020 Run Timo: Data Usage Tor: Item Conn. Conn. Originating TT Bytes Bytoa Ran ICI INS' MAKE NICOLL Date Timo Number Up Dn (UTC) 8017 04/26/20 15:44:49 2:04 6115 4993 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8018 04/26/20 15:46:53 0:42 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8019 04/26/20 15:47:34 2:04 5222 6055ruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 8020 04/26/20 15:47:35 2:04 6055 4934ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8021 04/26/20 15:49:39 4:28 8656 5161 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8022 04/26/20 15:54:06 2:10 5159 6050ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8023 04/26/20 15:54:07 2:10 6050 4871 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8024 04/26/20 15:56:17 5:28 27986 13479ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8025 04/26/20 16:01:45 33:40 18289 8597ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8026 04/26/20 16:01:46 33:40 8597 18001 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8027 04/26/20 16:35:26 18:12 6747 5587ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8028 04/26/20 16:44:42 60:00 9960 3176 imp -1 310410214827503 8029 04/26/20 16:53:37 5:21 7594 8345 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8030 04/26/20 16:53:38 5:22 8345 7306 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8031 04/26/20 16:59:00 34:52 7390 5329ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8032 04/26/20 17:33:51 8:14 7930 30283ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8033 04/26/20 17:33:52 8:14 30283 7642ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8034 04/26/20 17:42:06 4:50 6871 4961ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8035 04/26/20 17:44:42 60:00 8496 3144 imp -1 310410214827503 8036 04/26/20 17:46:55 21:18 5951 9348 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8037 04/26/20 17:46:56 21:18 9348 5663ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 329 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002973 The information contained her is NeTtAL not for general distribution. EFTA_00I 17049 EFTA01251573 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time 20ne. AT&T's records ere stored and provided in tt ‘"1°a aa$ AT&T arc. Run Date: 06/17/2020 Run Time: Ns- Data Usage For: Iton Conn. Conn. Originating ET Bytes Bytes Apn IMF' IMSI MATZ MOLL Date Time Number Op Dn (um) 8038 04/26/20 18:08:14 20:14 6342 5738 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 8039 04/26/20 18:28:27 9:31 7559 7179 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 8040 04/26/20 18:28:28 9:31 7179 7271 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 8041 04/26/20 18:37:59 19:47 6556 6061 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 8042 04/26/20 18:44:42 60:00 12012 4252 imo -1 310410214827503 8043 04/26/20 18:57:45 8:20 5217 6037 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 8044 04/26/20 18:57:46 8:20 6037 4929 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 8045 04/26/20 19:06:06 60:00 97819 37299 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8046 04/26/20 19:44:42 60:00 13244 4552 imo -1 310410214827503 8047 04/26/20 20:06:06 31:19 28510 23846ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 8048 04/26/20 20:37:24 2:34 5222 6055 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8049 04/26/20 20:37:25 2:34 6055 4934 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8050 04/26/20 20:39:59 9:44 14916 12117ruagenpho 3587080982063726 310410214827503 APPLE 'PHONES no 8051 04/26/20 20:44:42 60:00 8604 3052 imo -1 310410214827503 8052 04/26/20 20:49:42 2:29 5165 6052 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8053 04/26/20 20:49:43 2:29 6052 4877 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8054 04/26/20 20:52:11 3:46 10854 13876 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 8055 04/26/20 20:52:12 3:46 13876 10470ruagenpho 3587080982063726 310410214827503 APPLE 'PHONES no 8056 04/26/20 20:55:58 2:26 6055 4901 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 8057 04/26/20 20:58:24 2:04 5280 6871 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 8058 04/26/20 20:58:25 2:04 6871 4992 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 8059 04/26/20 21:00:29 13:00 7046 5122 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 330 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002974 The information contained hereCoNftli NTniliAL not for general distribution. EFTA_00I 17050 EFTA01251574 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tra '`s.d AT&T OTC. Run pato: 06/17/2020 Run Time: 16:56:17 Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn IBEX INSI MARL MODEL Date Time Number Up Dn (U2C) 8060 04/26/20 21:13:29 2:32 5221 6107 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8061 04/26/20 21:13:30 2:32 6107 4933 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8062 04/26/20 21:16:02 18:54 6228 5006 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8063 04/26/20 21:34:55 15:01 13187 14540 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8064 04/26/20 21:34:56 15:01 14540 12803 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8065 04/26/20 21:44:42 60:00 7032 2788 ins -1 310410214827503 8066 04/26/20 21:49:57 21:06 5431 6401 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8067 04/26/20 21:49:58 21:06 6401 5143 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8068 04/26/20 22:11:04 0:42 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8069 04/26/20 22:11:45 39:45 6004 6919 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8070 04/26/20 22:11:46 39:45 6919 5716 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8071 04/26/20 22:44:42 60:00 15280 5012 ins -1 310410214827503 8072 04/26/20 22:51:31 2:34 8133 6305 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8073 04/26/20 22:54:04 2:03 5281 6115 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8074 04/26/20 22:54:05 2:03 6115 4993 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8075 04/26/20 22:56:08 20:51 16172 11212 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8076 04/26/20 23:16:58 14:41 5382 6286 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8077 04/26/20 23:16:59 14:41 6286 5094 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8078 04/26/20 23:31:40 2:09 7556 5288 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8079 04/26/20 23:33:48 2:09 5222 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8080 04/26/20 23:33:49 2:09 6055 4934 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 331 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002975 The information contained heralCONelt NTrolikk not for general distribution. EF-EA_00117051 EFTA01251575 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tt ‘ing° asi esO AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage For: Iton. Conn. Conn. Originating ET Bytes Bytoa Apn INC' INBI MARL MODEL Date Time Number Up Dn (DSC) 8081 04/26/20 23:35:58 8:43 8798 13403 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8082 04/26/20 23:44:40 8:20 5220 6055 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8083 04/26/20 23:44:41 8:20 6055 4932 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8084 04/26/20 23:44:42 60:00 8604 3052 ins -1 310410214827503 8085 04/26/20 23:53:01 14:58 8074 5858 nxtgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 8086 04/27/20 00:07:59 2:09 5221 6055 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8087 04/27/20 00:08:00 2:09 6055 4933ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 8088 04/27/20 00:10:09 0:46 6055 4901 nxtgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 8089 04/27/20 00:10:54 2:04 5177 6115 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8090 04/27/20 00:10:55 2:04 6115 4889 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8091 04/27/20 00:12:59 4:32 6461 6074 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8092 04/27/20 00:17:30 2:09 5118 6055 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8093 04/27/20 00:17:31 2:09 6055 4830 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8094 04/27/20 00:19:40 2:32 6067 5608 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8095 04/27/20 00:22:11 5:45 5060 6052 nxtgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 8096 04/27/20 00:22:12 5:46 6052 4772 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8097 04/27/20 00:27:57 31:21 39563 23706ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 8098 04/27/20 00:44:42 60:00 13908 4924 ins -1 310410214827503 8099 04/27/20 00:59:17 0:57 5285 6208 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8100 04/27/20 00:59:19 0:56 6208 4997 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8101 04/27/20 01:00:15 27:12 27970 20340ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on: These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 332 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002976 The information contained her is PsisTiliAL not for general distribution. EFTA 00/17052 EFTA01251576 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT4T'S records ere stored and provided in ..... •---s`' as f AT&T OTC. Run Date: 06/17/2020 Run Time: 10:56:17 Data Usage for: Item Conn. Conn. Originating CT Bytes Rytoa Apn DM' IMBI Mitt NICOLL Data Time Number Up Dn (UTC) 8102 04/27/20 01:27:26 1:25 4608 5823 natgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8103 04/27/20 01:27:27 1:26 5823 4320 natgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8104 04/27/20 01:28:52 0:42 8838 5512 natgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8105 04/27/20 01:29:33 3:15 5221 6055 natgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8106 04/27/20 01:29:34 3:15 6055 4933 natgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8107 04/27/20 01:32:49 8:22 7625 5071 natgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8108 04/27/20 01:41:10 2:53 5222 6055 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONZ8 no 8109 04/27/20 01:41:11 2:53 6055 4934 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONZ8 no 8110 04/27/20 01:44:04 8:35 12708 10420 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8111 04/27/20 01:44:42 60:00 8604 2928 imp -1 310410214827503 8112 04/27/20 01:52:39 1:33 5603 6331 natgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8113 04/27/20 01:52:40 1:33 6331 5315 natgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8114 04/27/20 01:54:13 2:12 7633 5131 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8115 04/27/20 01:56:25 2:47 6067 5610 natgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8116 04/27/20 01:59:11 3:08 11488 13852 natgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8117 04/27/20 01:59:12 3:08 13852 11104 natgonpho 3587080982063726 310410214827503 APPLE 1PRONZ8 no 8118 04/27/20 02:02:21 1:26 8883 5609 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONZ8 no 8119 04/27/20 02:03:46 7:15 11538 15609 natgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8120 04/27/20 02:03:47 7:15 15609 11154 natgonpho 3587080982063726 310410214827503 APPLE 1PRONZ8 no 8121 04/27/20 02:11:02 2:23 5285 6873 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONZ8 no 8122 04/27/20 02:11:03 2:23 6873 4997 natgonpho 3587080982063726 310410214827503 APPLE !PROMS no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 333 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002977 The information contained her is PsiTniliAL not for general distribution. EFTA_00I 17053 EFTA01251577 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in .....,, ••--s`' s•• AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. illikilm Conn. Originating ET Sytes Byte. Apn IEI IMSI MARL MOLL Date Time Mutter Up Dn (UTC) 8123 04/27/20 02:13:26 10:47 12789 6422 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 8124 04/27/20 02:24:12 15:34 5587 6441ruftgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8125 04/27/20 02:24:13 15:35 6441 6367ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8126 04/27/20 02:39:48 5:29 7223 5502 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8127 04/27/20 02:44:42 60:00 13352 4392 ims -1 310410214827503 8128 04/27/20 02:45:17 27:28 13416 17593ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8129 04/27/20 02:45:17 27:29 17593 13032nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8130 04/27/20 03:12:46 0:56 7631 5230 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8131 04/27/20 03:13:41 1:12 5165 6052 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 8132 04/27/20 03:13:42 1:12 6052 4877 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 8133 04/27/20 03:14:54 2:15 9110 5736 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 8134 04/27/20 03:17:09 20:00 5280 6871 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 8135 04/27/20 03:17:10 60:00 6871 6777 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8136 04/27/20 03:44:42 60:00 9960 3176 ims -1 310410214827503 8137 04/27/20 04:17:10 60:00 0 92ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8138 04/27/20 04:44:42 60:00 8712 3052 ims -1 310410214827503 8139 04/27/20 05:17:10 10:16 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8140 04/27/20 05:44:42 60:00 12228 4660 ims -1 310410214827503 8141 04/27/20 06:44:42 60:00 10176 3176 ims -1 310410214827503 8142 04/27/20 07:44:42 60:00 11904 4268 ims -1 310410214827503 8143 04/27/20 08:44:42 14:27 0 0 ims -1 310410214827503 8144 04/27/20 10:46:30 4:46 6540 7537 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 8145 04/27/20 10:51:15 2:25 5160 6103 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 8146 04/27/20 10:51:16 2:25 6103 4872 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 334 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002978 The information contained her is NTIAL not for general distribution. EF-EA_00117054 EFTA01251578 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating TT Bytes Byte. Apn INE1 IMBI teat MOD= Date Time Number Up Dn (UTC) 8147 04/27/20 10:53:41 34:20 18447 10350 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8148 04/27/20 10:56:40 0:05 0 0 imam 3587080982063726 310410214827503 APPLE !PROMS 8149 04/27/20 11:09:19 18:42 8902 7048 imam 3587080982063726 310410214827503 APPLE IPMONE8 8150 04/27/20 11:28:01 2:09 5318 6165 nxtgonpho 3587080982063726 310410214827503 APPLE leMONZ8 no 8151 04/27/20 11:28:02 2:09 6165 5030 nxtgonpho 3587080982063726 310410214827503 APPLE leMONZ8 no 8152 04/27/20 11:29:01 1:09 7232 6794 imam 3587080982063726 310410214827503 APPLE leMONZ8 8153 04/27/20 11:29:02 1:09 6794 6968 imam 3587080982063726 310410214827503 APPLE leMONZ8 8154 04/27/20 11:30:11 5:51 6158 4956 nxtgonpho 3587080982063726 310410214827503 APPLE leMONZ8 no 8155 04/27/20 11:31:12 0:05 0 0 imp 3587080982063726 310410214827503 APPLE leMONZ8 8156 04/27/20 11:36:01 8:45 5419 6306 nxtgonpho 3587080982063726 310410214827503 APPLE leMONZ8 no 8157 04/27/20 11:36:03 8:45 6306 5131 nxtgonpho 3587080982063726 310410214827503 APPLE leMONZ8 no 8158 04/27/20 11:36:33 8:13 6184 6670 imp 3587080982063726 310410214827503 APPLE leMONZ8 8159 04/27/20 11:36:34 8:14 6670 5920 imp 3587080982063726 310410214827503 APPLE leMONZ8 8160 04/27/20 11:44:47 8:30 5421 6256 nxtgonpho 3587080982063726 310410214827503 APPLE 110MONZ8 no 8161 04/27/20 11:44:48 8:30 6256 5133 nxtgonpho 3587080982063726 310410214827503 APPLE leMONE8 no 8162 04/27/20 11:45:30 7:47 7214 6792 imam 3587080982063726 310410214827503 APPLE DRONES 8163 04/27/20 11:45:31 7:47 6792 6950 imam 3587080982063726 310410214827503 APPLE leMONZ8 8164 04/27/20 11:53:18 0:44 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE leMONZ8 no 8165 04/27/20 11:54:01 9:04 8242 6826 nxtgonpho 3587080982063726 310410214827503 APPLE leMONZ8 no 8166 04/27/20 11:54:02 9:05 6826 7954 nxtgonpho 3587080982063726 310410214827503 APPLE leMONZ8 no 8167 04/27/20 11:54:18 8:47 6246 6670 imam 3587080982063726 310410214827503 APPLE leMONZ8 8168 04/27/20 11:54:20 8:47 6670 5982 imam 3587080982063726 310410214827503 APPLE 110MONZ8 8169 04/27/20 12:03:07 1:31 48 0 nxtgonpho 3587080982063726 310410214827503 APPLE leMONE8 no 8170 04/27/20 12:04:37 81:57 13847 17829 nxtgonpho 3587080982063726 310410214827503 APPLE leMONE8 no 8171 04/27/20 12:04:38 60:00 7095 6132 nxtgonpho 3587080982063726 310410214827503 APPLE leMONE8 no 8172 04/27/20 12:04:50 60:00 17261 9332 imam -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 335 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNCGM00002979 The information contained here(F341::)(1S\i ff::tli PsiTniliAL not for general distribution. EF-EA_00117055 EFTA01251579 MOBILITY 2996479 06/17/2020 STET has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T'S records ere stored and provided in tr ""‘ ad est AT&T OTC. Run Data: 06/17/2020 Run Time: 18:56:21 Data Usage Tor: Item Conn. Conn. originating TT Bytes Byte. Apn INZI IMSI MAfl NICOLL Date Time Number Up Dn (UTC) 8173 04/27/20 13:04:38 21:57 10734 7427 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8174 04/27/20 13:04:50 60:00 7440 3144 ims -1 310410214827503 8175 04/27/20 13:26:35 6:30 15595 13871 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8176 04/27/20 13:33:05 2:10 5216 6105 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8177 04/27/20 13:33:06 2:10 6105 4928 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8178 04/27/20 13:35:16 5:02 6659 5991 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8179 04/27/20 13:40:18 21:03 9057 17059 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8180 04/27/20 13:40:19 21:03 17059 8769 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8181 04/27/20 14:01:22 29:36 7655 7291 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8182 04/27/20 14:04:50 60:00 8604 3052 ims -1 310410214827503 8183 04/27/20 14:30:57 12:47 11153 12667 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8184 04/27/20 14:30:58 12:47 12667 10769 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8185 04/27/20 14:43:45 12:32 5703 6418 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8186 04/27/20 14:43:46 12:32 6418 6465 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8187 04/27/20 14:56:18 5:46 1900 1621 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8188 04/27/20 15:02:03 11:26 10315 12642 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8189 04/27/20 15:02:04 11:26 12642 10027 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8190 04/27/20 15:04:50 23:08 12480 6780 ims -1 310410214827503 8191 04/27/20 15:13:30 1:39 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8192 04/27/20 15:15:08 2:10 5222 6107 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8193 04/27/20 15:15:09 2:10 6107 4934 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8194 04/27/20 15:17:19 0:46 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 336 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002980 The information contained her is NeTniliAL not for general distribution. EFTA_00I 17056 EFTA01251580 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tr '`ss a s AT&T arc. Run Data: 06/17/2020 Run Time: Data Osage Tor: Item Cows. Conn. originating LT Sytes Byte. Apn INZI INSI MARL NICOLL Data Time Number UP On (OTC) 8195 04/27/20 15:18:04 19:59 35886 45090 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 8196 04/27/20 15:18:05 31:56 67782 49157 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 8197 04/27/20 15:28:03 60:00 17197 9546 ims -1 310410214827503 8198 04/27/20 15:38:03 65:48 69065 90159 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8199 04/27/20 15:50:01 53:51 67467 55869 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8200 04/27/20 16:28:03 60:00 11300 3316 imo -1 310410214827503 8201 04/27/20 16:43:52 1:57 48 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8202 04/27/20 16:45:48 2:03 4671 7285 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8203 04/27/20 16:45:49 2:03 7285 4383 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8204 04/27/20 16:47:52 0:35 7465 4965 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 8205 04/27/20 16:48:26 2:38 5220 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8206 04/27/20 16:48:28 2:37 6055 4932 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8207 04/27/20 16:51:05 20:54 18804 20778 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8208 04/27/20 16:51:06 20:54 20778 18228 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8209 04/27/20 17:11:59 2:21 5221 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8210 04/27/20 17:12:00 2:21 6055 4933 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8211 04/27/20 17:14:21 19:05 5536 6344 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8212 04/27/20 17:14:22 19:05 6344 5248 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8213 04/27/20 17:28:03 60:00 8604 2912 ims -1 310410214827503 8214 04/27/20 17:33:27 13:44 5221 6107 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 8215 04/27/20 17:33:28 13:44 6107 6088 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8216 04/27/20 17:47:12 14:26 13033 14401 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 337 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002981 The information contained her is NTniliAL not for general distribution. EF-EA_00117057 EFTA01251581 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in d AT&T ...,, `• `- -‘s OTC. Run Date: 06/17/2020 Run Time: IN= Data Usage For: Item Conn. Conn. Originating ET Bytes Byte. Apn MCI IMSI MAKE I03DLL Date Time Number Up Dn (OTC) 8217 04/27/20 17:47:13 14:26 14401 12649 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 8218 04/27/20 18:01:39 10:26 48 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8219 04/27/20 18:12:04 14:56 11810 12573 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8220 04/27/20 18:12:05 14:56 12573 11522 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8221 04/27/20 18:27:01 9:08 32139 15840 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 8222 04/27/20 18:28:03 60:00 13584 4516 imp -1 310410214827503 8223 04/27/20 18:36:08 2:04 5221 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8224 04/27/20 18:36:09 2:04 6055 4933 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8225 04/27/20 18:38:13 1:38 6055 4901 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 8226 04/27/20 18:39:50 8:23 5113 6053 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 8227 04/27/20 18:39:51 8:23 6053 4825 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 8228 04/27/20 18:48:14 2:24 8784 5372 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 8229 04/27/20 18:50:37 2:04 5222 6107 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8230 04/27/20 18:50:38 2:04 6107 4934 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 8231 04/27/20 18:52:42 12:15 8947 5532 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8232 04/27/20 19:04:56 2:04 5221 6055 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8233 04/27/20 19:04:57 2:04 6055 4933 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8234 04/27/20 19:07:01 0:57 7529 5070 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8235 04/27/20 19:07:57 2:05 5222 6107 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8236 04/27/20 19:07:59 2:04 6107 4934 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8237 04/27/20 19:10:03 10:01 7593 5176 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 338 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002982 The information contained her is Ns tit not for general distribution. EFTA_00I 17058 EFTA01251582 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in tr "4 -". a AT&T arc. Run Date: 06/17/2020 Run Tina: Data Osage For: Item Conn. Conn. Originating ET Bytes Bytoa Apn INEI INSt MARL MODEL Date Time Number Up Dn (OTC) 8238 04/27/20 19:20:03 2:04 5221 6055 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8239 04/27/20 19:20:04 2:04 6055 4933 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8240 04/27/20 19:22:08 1:05 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8241 04/27/20 19:23:12 8:32 5532 8995 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8242 04/27/20 19:23:13 8:32 8995 5244 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8243 04/27/20 19:28:03 22:26 5088 1588 imp -1 310410214827503 8244 04/27/20 19:31:45 2:35 7465 5070 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8245 04/27/20 19:34:19 10:47 6406 7123 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8246 04/27/20 19:34:20 10:47 7123 6958 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8247 04/27/20 19:45:07 3:11 7529 5280 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8248 04/27/20 19:48:18 13:01 27566 39307 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8249 04/27/20 19:48:19 13:01 39307 27182 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8250 04/27/20 19:48:21 6:55 7248 6810 imp 3587080982063726 310410214827503 APPLE !PHONES 8251 04/27/20 19:48:22 6:55 6742 6984 imp 3587080982063726 310410214827503 APPLE IPHONE8 8252 04/27/20 19:50:29 8:34 9844 6664 imp -1 310410214827503 8253 04/27/20 19:55:16 6:03 6230 6666 imp 3587080982063726 310410214827503 APPLE IPHONE8 8254 04/27/20 19:55:17 6:03 6666 5966 imp 3587080982063726 310410214827503 APPLE IPHONE8 8255 04/27/20 20:01:20 107:32 55017 62639 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8256 04/27/20 20:01:21 60:00 38098 30186 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8257 04/27/20 20:01:21 107:31 6546 8324 ins 3587080982063726 310410214827503 APPLE IPHONE8 8258 04/27/20 20:01:22 60:00 8216 6282 imp 3587080982063726 310410214827503 APPLE IPHONE8 8259 04/27/20 20:08:19 60:00 16915 9114 imp -1 310410214827503 8260 04/27/20 21:01:21 47:32 24541 25980 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8261 04/27/20 21:01:22 47:31 0 0 am 3587080982063726 310410214827503 APPLE !PHONES 8262 04/27/20 21:08:19 60:00 8836 3020 was -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 339 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002983 The information contained heraCtoNeli NeTifikE not for general distribution. EFTA_00I 17059 EFTA01251583 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Tina: 18:56:21 Data Osage Tor: Item Conn. Conn. Originating ET • Bytes Bytaa Apn INEI INSI MARL NICOLL Data Time Number Up Dn (OTC) 8263 04/27/20 21:48:53 9:42 8690 5271 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 8264 04/27/20 21:58:35 21:47 20696 24770 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 8265 04/27/20 21:58:36 21:47 24770 21047 nactgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8266 04/27/20 22:08:19 60:00 10036 3252 into -1 310410214827503 8267 04/27/20 22:20:23 53:26 8772 7758 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8268 04/27/20 23:08:19 60:00 17976 5072 into -1 310410214827503 8269 04/27/20 23:13:48 17:10 7762 7376 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8270 04/27/20 23:13:49 17:10 7376 7282 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 8271 04/27/20 23:30:59 31:18 8299 6068 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 8272 04/28/20 00:02:16 8:22 5536 9049 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 8273 04/28/20 00:02:17 8:22 9049 5248 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8274 04/28/20 00:08:19 60:00 7064 2864 into -1 310410214827503 8275 04/28/20 00:10:39 0:39 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8276 04/28/20 00:11:16 27:05 12466 25753 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8277 04/28/20 00:11:18 27:05 25753 12082 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8278 04/28/20 00:38:23 12:40 7697 5339 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8279 04/28/20 00:51:02 59:48 14424 8293 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8280 04/28/20 00:51:03 59:48 8293 14040 nactgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8281 04/28/20 01:08:19 60:00 12352 4644 into -1 310410214827503 8282 04/28/20 01:50:49 33:25 5117 6107 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8283 04/28/20 01:50:51 33:25 6107 6614 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8284 04/28/20 02:08:19 60:00 8372 2896 into -1 310410214827503 8285 04/28/20 02:24:16 0:44 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These.communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 340 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002984 The information contained her is N:FroliAL not for general distribution. EFTA_00I 17060 EFTA01251584 MOBILITY 410111 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn INEI IMSI MART MODEL Date Time Hunter Up Dn (UTC) 8286 04/28/20 02:25:00 14:51 5326 6212 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8287 04/28/20 02:25:00 14:53 6212 5038 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8288 04/28/20 02:39:53 1:47 6115 4962 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8289 04/28/20 02:41:39 8:20 5702 6470 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8290 04/28/20 02:41:40 8:20 6470 5414 nxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 8291 04/28/20 02:50:00 2:41 48 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8292 04/28/20 02:52:41 50:00 33652 30345 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8293 04/28/20 02:52:42 60:00 30518 33373 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8294 04/28/20 03:08:19 60:00 8620 3128 imp -1 310410214827503 8295 04/28/20 03:42:41 510:07 15287 26603 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8296 04/28/20 03:52:42 60:00 1386 1260 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8297 04/28/20 04:08:19 60:00 8388 3004 imp -1 310410214827503 8298 04/28/20 04:52:42 60:00 1033 840 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8299 04/28/20 05:08:19 60:00 13460 4468 imp -1 310410214827503 8300 04/28/20 05:52:42 60:00 17054 8716 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8301 04/28/20 06:08:19 60:00 12152 4412 imp -1 310410214827503 8302 04/28/20 06:52:42 60:00 937 1235 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8303 04/28/20 07:08:19 60:00 8388 2896 imp -1 310410214827503 8304 04/28/20 07:52:42 60:00 763 735 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8305 04/28/20 08:08:19 60:00 8496 3128 imp -1 310410214827503 8306 04/28/20 08:52:42 60:00 519 315 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8307 04/28/20 09:08:19 60:00 12152 4684 imp -1 310410214827503 8308 04/28/20 09:52:42 60:00 808 630 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8309 04/28/20 10:08:19 60:00 9928 3144 isms -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 341 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002985 The information contained heraCtoNyFtli NsTroliAL not for general distribution. EFTAJVII7061 EFTA01251585 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytom Apn INLI IMSI MUM MOLL Data Time Number Up Dn (UTC) 8310 04/28/20 10:52:42 60:00 815 840ruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8311 04/28/20 11:08:19 60:00 11920 4612 imo -1 310410214827503 8312 04/28/20 11:52:42 20:07 3115 419ruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8313 04/28/20 12:08:19 53:27 9928 3144 imp 3587080982063726 310410214827503 APPLE 'PHONES 8314 04/28/20 12:12:49 60:00 20596 18003ruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8315 04/28/20 13:01:46 0:00 0 0 imp 3587080982063726 310410214827503 APPLE 'PHONES 8316 04/28/20 13:01:46 0:00 0 0 imp 3587080982063726 310410214827503 APPLE !PHONES 8317 04/28/20 13:01:55 60:00 18409 9570 imp -1 310410214827503 8318 04/28/20 13:12:49 24:06 571 420ruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8319 04/28/20 13:36:54 39:05 80581 564466ruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8320 04/28/20 13:36:55 39:05 564466 80863ruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8321 04/28/20 14:01:55 60:00 7172 2912 ims -1 310410214827503 8322 04/28/20 14:16:00 0:05 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8323 04/28/20 14:16:17 24:31 9059 5638ruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8324 04/28/20 14:40:47 1:54 5220 6055ruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8325 04/28/20 14:40:48 1:54 6055 4932ruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8326 04/28/20 14:42:42 1:33 48 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8327 04/28/20 14:44:14 3:08 4608 5823ruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8328 04/28/20 14:44:15 3:08 5823 4320ruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8329 04/28/20 14:47:23 1:03 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8330 04/28/20 14:48:25 2:39 5286 6925ruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8331 04/28/20 14:48:26 2:39 6925 4998ruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8332 04/28/20 14:51:05 4:00 5222 6055ruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 342 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002986 The information contained her is NTroliAL not for general distribution. EFTA 00/17062 EFTA01251586 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tra ‘"Ii. a# d AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytoa Apn INEI 'Mal MARL MODEL Data Time Number Up Dn (UTC) 8333 04/28/20 14:51:06 4:00 6055 4934 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8334 04/28/20 14:55:05 12:37 12830 18281 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8335 04/28/20 14:55:07 12:36 18281 12446 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8336 04/28/20 15:01:55 60:00 10144 3160 ims -1 310410214827503 8337 04/28/20 15:07:44 34:39 21403 56492 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8338 04/28/20 15:07:44 34:40 56492 20827 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8339 04/28/20 15:42:24 26:25 25350 30879 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8340 04/28/20 16:01:55 60:00 6956 2680 ims -1 310410214827503 8341 04/28/20 16:08:49 30:04 14228 18903 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8342 04/28/20 16:08:49 30:05 18903 14999 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8343 04/28/20 16:38:54 4:23 7465 4964 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8344 04/28/20 16:43:16 2:09 5221 6107 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8345 04/28/20 16:43:17 2:09 6107 4933 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8346 04/28/20 16:45:26 32:37 14617 14079 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8347 04/28/20 17:01:55 60:00 8388 3036 ims -1 310410214827503 8348 04/28/20 17:18:02 2:10 5164 6036 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8349 04/28/20 17:18:03 2:10 6036 4876 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8350 04/28/20 17:20:13 0:06 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8351 04/28/20 17:20:29 60:00 19583 8262 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8352 04/28/20 18:01:55 60:00 17100 6140 ims -1 310410214827503 8353 04/28/20 18:20:29 23:50 462 420 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8354 04/28/20 18:44:19 12:56 9562 6992 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 343 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002987 The information contained her is WV& not for general distribution. EF-EA_00117063 EFTA01251587 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ......,,• ••-s`" 1" AT&T OTC. Run Date: 06/17/2020 Run Time: Data usage For: Item cows. Conn. originating ET Bytes . Bytes Apn IKEI INSI MARL MODEL Date Time mambos Up Dn (Inc) 8355 04/28/20 18:57:14 2:22 4608 5875 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8356 04/28/20 18:57:15 2:22 5875 4320 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8357 04/28/20 18:59:37 7:56 6531 5311 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8358 04/28/20 19:01:55 60:00 33348 19308 ims -1 310410214827503 8359 04/28/20 19:07:32 2:38 5221 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8360 04/28/20 19:07:34 2:37 6055 4933 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8361 04/28/20 19:10:11 19:21 6618 6266 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8362 04/28/20 19:16:18 0:28 1858 13557 ims -1 310410214827503 8363 04/28/20 19:29:31 2:04 5220 6055 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8364 04/28/20 19:29:32 2:04 6055 4932 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8365 04/28/20 19:31:36 14:15 7476 5808 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8366 04/28/20 19:44:11 45:06 5949075 6909390 ims -1 310410214827503 8367 04/28/20 19:45:51 8:08 5986 6551 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8368 04/28/20 19:45:52 8:08 6551 5698 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8369 04/28/20 19:54:00 4:02 7593 5175 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8370 04/28/20 19:58:02 2:03 5114 6053 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8371 04/28/20 19:58:03 2:03 6053 4826 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8372 04/28/20 20:00:06 11:39 6208 6013 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8373 04/28/20 20:01:55 60:00 9612 4088 ims -1 310410214827503 8374 04/28/20 20:11:44 9:03 6103 6795 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8375 04/28/20 20:11:45 9:03 6795 5719 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8376 04/28/20 20:20:48 1:17 6055 4901 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 344 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002988 The information contained her is NeTnikE not for general distribution. EFTA 00117064 EFTA01251588 NOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T arc. Run Date: 06/17/2020 Run Time: 18:56:22 Data Osage For: Itos. Conn. Conn. Originating LT Bytes Byte. Apn IMEI IMSI MARL MOLL Date Time Number Up Dn lam) 8377 04/28/20 20:22:04 2:09 5220 6055 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8378 04/28/20 20:22:05 2:09 6055 4932 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 8379 04/28/20 20:24:14 8:41 6055 4796 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8380 04/28/20 20:32:54 19:52 26433 36898 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8381 04/28/20 20:32:55 19:52 36771 26145 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 8382 04/28/20 20:52:47 1:57 6055 4996 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 8383 04/28/20 20:54:43 28:23 23320 24246 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8384 04/28/20 20:54:44 28:23 24246 22840 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 8385 04/28/20 21:01:55 60:00 23124 10972 ims -1 310410214827503 8386 04/28/20 21:02:53 37:06 6409331 4816403 ims -1 310410214827503 8387 04/28/20 21:23:07 6:00 6053 4792 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8388 04/28/20 21:29:06 14:48 5536 6344 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8389 04/28/20 21:29:07 14:48 6344 5248 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8390 04/28/20 21:43:55 0:26 144 Ormagonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8391 04/28/20 21:47:37 6:55 334016 413565 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8392 04/28/20 21:54:31 0:23 5221 6055 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8393 04/28/20 21:54:32 0:23 6055 4933 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 8394 04/28/20 21:54:55 1:13 48 Ormagonpho 3587080982063726 310410214827503 APPLE !PHONES no 8395 04/28/20 21:56:07 11:04 11475 14618 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8396 04/28/20 21:56:08 11:04 14618 11091 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 8397 04/28/20 22:01:55 60:00 10596 4144 ins -1 310410214827503 8398 04/28/20 22:07:12 3:57 23909 9143 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 345 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002989 The information contained herself:314R NTifikE not for general distribution. EFTA_00I 17065 EFTA01251589 MOBILITY 41011i 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in c``"se as. AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Byte. Apn INEZ IMEI MAKE MODEL Date Time fluster Up On (UTC) 8399 04/28/20 22:11:08 2:43 5702 6457 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8400 04/28/20 22:11:09 2:43 6457 5414ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 8401 04/28/20 22:13:52 60:00 13499 9959 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8402 04/28/20 23:01:55 60:00 40620 28376 imo -1 310410214827503 8403 04/28/20 23:13:52 45:19 20487 14215ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 8404 04/28/20 23:39:28 1:07 101010 79485 imo -1 310410214827503 8405 04/28/20 23:45:11 0:30 3623 21763 imo -1 310410214827503 8406 04/28/20 23:59:10 19:23 27710 32158ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 8407 04/28/20 23:59:11 19:23 32158 27230ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8408 04/29/20 00:01:55 60:00 27544 13260 imo -1 310410214827503 8409 04/29/20 00:06:49 0:28 1481 11935 imo -1 310410214827503 8410 04/29/20 00:18:34 3:15 6055 4901 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8411 04/29/20 00:21:48 2:04 5221 6055 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8412 04/29/20 00:21:49 2:04 6055 4933 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8413 04/29/20 00:23:53 0:33 6055 4901 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8414 04/29/20 00:24:25 8:58 22483 41892 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8415 04/29/20 00:24:26 8:58 41892 22195ruagenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8416 04/29/20 00:33:24 1:33 7511 5066 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8417 04/29/20 00:34:56 2:10 5221 6055ruagenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8418 04/29/20 00:34:57 2:10 6055 4933 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8419 04/29/20 00:37:07 53:20 58644 59667ruagenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8420 04/29/20 01:01:55 60:00 7528 3144 imo -1 310410214827503 8421 04/29/20 01:30:27 2:03 5220 6039 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 346 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002990 The information contained hereCtoNeli NTroleiNE not for general distribution. EFTAJVII7066 EFTA01251590 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ‘"S° .•. ..7,,d as# AT&T UTC. Run Data: 06/17/2020 Run Time: 18:56:22 Data Usage For: Item Conn. Conn. Originating ET Bytes Bytom Apn per DUI MART MODEL Data Time Number Up Dn (UTC) 8422 04/29/20 01:30:28 2:03 6039 4932 nxtgenpho 3587080982063726 310410214827503 APPLE INIONZ8 no 8423 04/29/20 01:32:31 11:53 7978 5577 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8424 04/29/20 01:44:23 2:10 7538 7247 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 8425 04/29/20 01:44:24 2:10 7247 7250 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 8426 04/29/20 01:46:34 4:23 6871 4961 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 8427 04/29/20 01:50:56 8:34 5221 6055 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 8428 04/29/20 01:50:57 8:34 6055 4933 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 8429 04/29/20 01:59:31 2:41 7463 4962 nxtgenpho 3587080982063726 310410214827503 APPLE IL0HONZ8 no 8430 04/29/20 02:01:55 60:00 12152 4392 ims -1 310410214827503 8431 04/29/20 02:02:11 4:21 29913 36978 nxtgenpho 3587080982063726 310410214827503 APPLE IL0HONZ8 no 8432 04/29/20 02:02:13 4:20 36978 29893 nxtgenpho 3587080982063726 310410214827503 APPLE IL0HONZ8 no 8433 04/29/20 02:06:33 37:17 39591 20727 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 8434 04/29/20 02:43:50 21:18 5807 6641 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 8435 04/29/20 02:43:51 21:18 6641 5519 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 8436 04/29/20 03:01:55 60:00 6848 2896 imp -1 310410214827503 8437 04/29/20 03:05:09 37:04 8100 5542 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 8438 04/29/20 03:42:12 7:35 12973 13789 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 8439 04/29/20 03:42:13 7:36 13789 12589 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 8440 04/29/20 03:49:49 10:02 7529 5069 nxtgenpho 3587080982063726 310410214827503 APPLE IL0HONZ8 no 8441 04/29/20 03:59:50 2:25 5117 6055 nxtgenpho 3587080982063726 310410214827503 APPLE IL0HONZ8 no 8442 04/29/20 03:59:51 2:25 6055 4829 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 8443 04/29/20 04:01:55 60:00 6956 2912 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 347 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002991 The information contained her is NsTroliAL not for general distribution. EFTA_00I 17067 EFTA01251591 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 ii:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Bytes Apn ICI 1491 teal MOLL Data Time Number • UP On (OTC) 8444 04/29/20 04:02:16 9:51 26996 13968 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8445 04/29/20 04:12:07 8:14 5222 6055 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8446 04/29/20 04:12:08 8:14 6055 4934 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8447 04/29/20 04:20:22 13:53 63361 58086 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8448 04/29/20 04:34:14 7:35 10575 13233 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 8449 04/29/20 04:34:15 7:35 13233 10191 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 8450 04/29/20 04:41:50 11:00 18032 20059 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 8451 04/29/20 04:41:50 11:02 20059 17552 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 8452 04/29/20 04:52:51 40:31 17966 22231 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 8453 04/29/20 04:52:52 40:31 22231 18440 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 8454 04/29/20 05:01:55 60:00 16544 6016 imp -1 310410214827503 8455 04/29/20 05:33:23 14:10 7700 5327 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8456 04/29/20 05:47:33 212:13 7950 9377 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8457 04/29/20 05:47:34 60:00 7275 6192 nxtgonpho 3587080982063726 310410214827503 APPLE !PEONES no 8458 04/29/20 06:01:55 60:00 7280 2804 imp -1 310410214827503 8459 04/29/20 06:47:34 60:00 692 420 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 8460 04/29/20 07:01:55 60:00 7080 2912 imp -1 310410214827503 8461 04/29/20 07:47:34 60:00 751 735 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8462 04/29/20 08:01:55 60:00 8496 3284 imp -1 310410214827503 8463 04/29/20 08:47:34 32:13 640 315 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 8464 04/29/20 09:01:55 60:00 8388 3036 imp -1 310410214827503 8465 04/29/20 09:19:47 60:00 26430 30864 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 8466 04/29/20 10:01:55 60:00 10488 4520 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 348 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained heraelaNyFtit PsiTniliAL not for general distribution. SDNY_GM_00002992 EFTA_00I 17068 EFTA01251592 MOBILITY 4011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Osage For: SEIM Item Conn. Conn. Originating ET Bytes Bytom Apn IME1 INS' MAKE NICOLL Data Time Number Up Dn (Inc) 8467 04/29/20 10:19:47 60:00 37927 42913 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8468 04/29/20 11:01:55 60:00 11920 4376 in -1 310410214827503 8469 04/29/20 11:19:47 9:54 0 945 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8470 04/29/20 11:29:40 3:52 288 48 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8471 04/29/20 11:29:41 3:52 48 0 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8472 04/29/20 11:33:33 37:35 20478 32567 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8473 04/29/20 11:33:33 37:36 32567 21345 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8474 04/29/20 12:01:55 60:00 6848 2788 imp -1 310410214827503 8475 04/29/20 12:11:09 60:00 47298 34467 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8476 04/29/20 13:01:55 60:00 6956 2680 in -1 310410214827503 8477 04/29/20 13:11:09 0:24 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8478 04/29/20 13:11:32 2:03 5221 6055 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8479 04/29/20 13:11:34 2:03 6055 4933 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8480 04/29/20 13:13:37 3:53 6909 9126 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8481 04/29/20 13:17:29 2:04 5221 6055 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8482 04/29/20 13:17:30 2:04 6055 4933 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8483 04/29/20 13:19:34 2:18 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8484 04/29/20 13:21:51 2:09 5163 6052 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8485 04/29/20 13:21:52 2:09 6052 4875 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8486 04/29/20 13:24:01 1:46 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8487 04/29/20 13:25:46 2:04 5220 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8488 04/29/20 13:25:47 2:04 6055 4932 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 349 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002993 The information contained heraleeNelt PsisTiliAL not for general distribution. EFTA_00I 17069 EFTA01251593 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn IRE' IMISI HARE MODEL Data Time Number Up On (UTC) 8489 04/29/20 13:27:51 0:34 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8490 04/29/20 13:28:24 14:50 5442 7690 nxtgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 8491 04/29/20 13:28:25 14:50 7690 5154 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8492 04/29/20 13:43:15 0:32 7529 5070 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8493 04/29/20 13:43:46 2:09 5224 6112 nxtgenpho 3587080982063726 310410214827503 APPLE IPROME8 no 8494 04/29/20 13:43:47 2:09 6112 4936 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8495 04/29/20 13:45:56 0:34 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8496 04/29/20 13:46:29 2:09 192 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8497 04/29/20 13:46:30 2:08 12921 7106 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8498 04/29/20 13:46:30 2:09 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8499 04/29/20 13:46:31 2:08 7106 12633ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8500 04/29/20 13:48:39 1:16 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 8501 04/29/20 13:49:54 2:26 5256 6098 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8502 04/29/20 13:49:55 2:26 6098 4872 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8503 04/29/20 13:52:21 1:10 13551 5828 nxtgenpho 3587080982063726 310410214827503 APPLE IPROME8 no 8504 04/29/20 13:53:30 9:03 6415 6743ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8505 04/29/20 13:53:31 9:03 6743 6127ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8506 04/29/20 14:01:55 60:00 6956 2896 ims -1 310410214827503 8507 04/29/20 14:02:33 2:05 5220 6107 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8508 04/29/20 14:02:34 2:05 6107 4932ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8509 04/29/20 14:04:39 0:05 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PRONGS no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 350 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002994 The information contained hereCtoNyFti NTstAlt not for general distribution. EFTA_00I 17070 EFTA01251594 MOBILITY ap. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: 18:56:22 Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn par IAZI 14*71 163DCL Data Time Number Op Dn (OTC) 8510 04/29/20 14:05:08 8:47 12010 22627 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 8511 04/29/20 14:05:09 8:47 22627 11722 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 8512 04/29/20 14:13:56 1:13 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 8513 04/29/20 14:15:08 23:30 10514 12459 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 8514 04/29/20 14:15:09 23:30 12459 11285 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 8515 04/29/20 14:38:39 40:38 44472 50191 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 8516 04/29/20 15:01:55 60:00 18532 6248 ins -1 310410214827503 8517 04/29/20 15:19:16 9:49 6204 7547 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 8518 04/29/20 15:19:18 9:48 7547 5916 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 8519 04/29/20 15:29:06 48:38 10205 9123 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 8520 04/29/20 16:01:55 60:00 30100 16380 ins -1 310410214827503 8521 04/29/20 16:17:43 8:21 10299 12188 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 8522 04/29/20 16:17:45 8:20 12188 9915 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 8523 04/29/20 16:26:05 43:12 8300 6121 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 8524 04/29/20 16:53:17 0:06 0 0 ins -1 310410214827503 8525 04/29/20 16:53:43 0:27 1632 11096 ins -1 310410214827503 8526 04/29/20 17:01:55 60:00 8496 2928 ins -1 310410214827503 8527 04/29/20 17:09:16 27:04 5793 6630 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 8528 04/29/20 17:09:17 27:04 6630 5505 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 8529 04/29/20 17:36:21 2:41 6055 4901 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 8530 04/29/20 17:39:01 2:04 5220 6107 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 8531 04/29/20 17:39:02 2:05 6107 4932 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 8532 04/29/20 17:41:07 6:33 6055 4901 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 351 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SIDNYGAL00002995 The information contained hereCtoNelt not for general distribution. NeTtAdti EF-EA_00117071 EFTA01251595 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T arc. Run Data: 06/17/2020 Run Time: 18:56:22 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes, Apn TM= IMBI NAZI Men Data Time Number Up Dn (UTC) 8533 04/29/20 17:47:39 8:23 5222 6023 natgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8534 04/29/20 17:47:40 8:23 6023 4934 natgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8535 04/29/20 17:56:03 35:58 9466 5525 natgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8536 04/29/20 18:01:55 60:00 10736 5036 imp -1 310410214827503 8537 04/29/20 18:32:00 8:27 7411 37583 natgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8538 04/29/20 18:32:01 8:27 37583 7123 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8539 04/29/20 18:40:28 2:04 0 0 natgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8540 04/29/20 18:42:31 2:03 4505 5791 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8541 04/29/20 18:42:32 2:03 5791 4217 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8542 04/29/20 18:44:35 2:38 7493 5026 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8543 04/29/20 18:47:13 20:47 318222 41011 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8544 04/29/20 18:47:14 20:47 41011 317934 natgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8545 04/29/20 19:01:55 60:00 22276 11676 imp -1 310410214827503 8546 04/29/20 19:08:01 3:16 7497 5070 natgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8547 04/29/20 19:11:16 2:03 5282 6083 natgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8548 04/29/20 19:11:17 2:03 6083 4994 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8549 04/29/20 19:13:20 14:38 6194 5002 natgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8550 04/29/20 19:27:57 2:06 7211 8037 natgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8551 04/29/20 19:27:58 2:06 8037 6923 natgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8552 04/29/20 19:29:49 1:04 107732 131604 imp -1 310410214827503 8553 04/29/20 19:30:04 0:49 7497 5071 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8554 04/29/20 19:30:52 2:09 5181 6023 natgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 352 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002996 The information contained her is NeTifikE not for general distribution. EFTA 00117072 EFTA01251596 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytoa Apn IKEI IMSI MARL NICOLL Date flee Number Up Dn (OTC) 8555 04/29/20 19:30:53 2:09 6023 4893 natgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 8556 04/29/20 19:33:02 1:40 6023 4797ruagenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8557 04/29/20 19:34:41 6:16 5387 6923ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 8558 04/29/20 19:34:42 6:16 6923 5099ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 8559 04/29/20 19:40:58 28:47 15758 11439natgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8560 04/29/20 20:01:55 31:27 5072 1588 ims 3587080982063726 310410214827503 APPLE IPHOME8 8561 04/29/20 20:09:44 11:22 5178 6083ruagenpho 3587080982063726 310410214827503 APPLE 'PHONES no 8562 04/29/20 20:09:45 11:22 6083 5835ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 8563 04/29/20 20:21:07 51:08 8016 7012ruagenpho 3587080982063726 310410214827503 APPLE 1PROME8 no 8564 04/29/20 20:33:22 0:24 89576 868 ims 3587080982063726 310410214827503 APPLE DRONES 8565 04/29/20 20:33:22 0:24 496 868 ims 3587080982063726 310410214827503 APPLE DRONES 8566 04/29/20 20:33:46 60:00 28900 16976 ims 3587080982063726 310410214827503 APPLE DRONES 8567 04/29/20 20:52:03 19:55 2746121 3948268 ims 3587080982063726 310410214827503 APPLE DRONES 8568 04/29/20 21:12:14 2:03 5220 6075ruagenpho 3587080982063726 310410214827503 APPLE DRONES no 8569 04/29/20 21:12:15 2:03 6075 4932ruftgenpho 3587080982063726 310410214827503 APPLE DRONES no 8570 04/29/20 21:14:18 30:24 35302 20840ruftgenpho 3587080982063726 310410214827503 APPLE !PROMS no 8571 04/29/20 21:33:46 60:00 13460 4516 ims 3587080982063726 310410214827503 APPLE !PRONGS 8572 04/29/20 21:44:41 2:04 5221 6023ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 8573 04/29/20 21:44:42 2:04 6023 4933natgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8574 04/29/20 21:46:46 60:00 10896 6329ruagenpho 3587080982063726 310410214827503 APPLE !PROMS no 8575 04/29/20 22:33:46 60:00 8496 3036 ims 3587080982063726 310410214827503 APPLE DRONES 8576 04/29/20 22:46:46 60:00 1270 105Ormagenpho 3587080982063726 310410214827503 APPLE DRONES no 8577 04/29/20 23:33:46 60:00 6848 2680 ims 3587080982063726 310410214827503 APPLE DRONES 8578 04/29/20 23:46:46 3:27 24661 17455natgenpho 3587080982063726 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 353 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002997 The information contained her is NTniliAL not for general distribution. EFTA_00I 17073 EFTA01251597 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: 18:56:22 Data Usage Tor: Iten Conn. Conn. Originating ET Bytes Bytos Apn INEI INSI MARL MODEL Data Time Number Up Dn (OTC) 8579 04/29/20 23:50:12 2:36 7211 8037 nactgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8580 04/29/20 23:50:13 2:36 8037 6923ruagonpho 3587080982063726 310410214827503 APPLE !PHONES no 8581 04/29/20 23:52:49 0:33 6023 490Ormagonpho 3587080982063726 310410214827503 APPLE !PHONES no 8582 04/29/20 23:53:21 2:03 5118 6075natTanpho 3587080982063726 310410214827503 APPLE !PHONES no 8583 04/29/20 23:53:22 2:04 6075 4830natTanpho 3587080982063726 310410214827503 APPLE !PHONES no 8584 04/29/20 23:55:26 6:58 7433 4965ruagonpho 3587080982063726 310410214827503 APPLE !PHONES no 8585 04/30/20 00:02:23 54:14 11158 26233ruagonpho 3587080982063726 310410214827503 APPLE !PHONES no 8586 04/30/20 00:02:24 54:14 26233 10774ruagonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8587 04/30/20 00:33:46 60:00 8496 3160 imp 3587080982063726 310410214827503 APPLE !PHONES 8588 04/30/20 00:56:38 49:47 12569 10638ructspanpho 3587080982063726 310410214827503 APPLE !PHONES no 8589 04/30/20 01:33:46 60:00 14252 5876 imp 3587080982063726 310410214827503 APPLE !PHONES 8590 04/30/20 01:46:24 2:15 5222 6075ruagonpho 3587080982063726 310410214827503 APPLE !PHONES no 8591 04/30/20 01:46:25 2:15 6075 4934natTanpho 3587080982063726 310410214827503 APPLE !PHONES no 8592 04/30/20 01:48:40 60:00 7305 6056ruagonpho 3587080982063726 310410214827503 APPLE !PHONES no 8593 04/30/20 02:33:46 47:32 3424 1340 imp 3587080982063726 310410214827503 APPLE !PHONES 8594 04/30/20 02:48:40 3:50 0 315ructgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8595 04/30/20 02:52:29 2:09 5218 6021 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8596 04/30/20 02:52:30 2:09 6021 4930nattranpho 3587080982063726 310410214827503 APPLE !PHONES no 8597 04/30/20 02:54:39 12:16 7606 5122ruagonpho 3587080982063726 310410214827503 APPLE !PHONES no 8598 04/30/20 03:06:54 14:30 7293 11701ructspanpho 3587080982063726 310410214827503 APPLE !PHONES no 8599 04/30/20 03:06:55 14:30 11701 7005ructspanpho 3587080982063726 310410214827503 APPLE !PHONES no 8600 04/30/20 03:15:57 60:00 12077 7785 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 354 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002998 The information contained heraCtoNeli NeTntikE not for general distribution. EF-EAJVII7074 EFTA01251598 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in ......, `•-•°"" a0 AT&T OTC. Run Date: 06/17/2020 Run Time: 18:56:23 Data Osage Tor: Ito. Conn. Conn. originating ET Bytes Bytoa Apn IKI INSI MARL MODEL Date Time Number Up Dn (Inc) 8601 04/30/20 03:21:25 2:04 6023 4902 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8602 04/30/20 03:23:28 2:04 5117 6023 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8603 04/30/20 03:23:30 2:03 6023 4829 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8604 04/30/20 03:25:33 50:04 6959 5961 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8605 04/30/20 04:15:36 2:10 5116 6059 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 8606 04/30/20 04:15:37 2:10 6059 4828 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8607 04/30/20 04:15:57 60:00 12152 4516 ims -1 310410214827503 8608 04/30/20 04:17:47 40:48 8421 5961 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8609 04/30/20 04:58:35 457:36 100637 117159 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8610 04/30/20 04:58:36 60:00 56732 45729 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8611 04/30/20 05:15:57 60:00 7188 2804 ims -1 310410214827503 8612 04/30/20 05:58:36 60:00 6023 6507 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8613 04/30/20 06:09:27 60:00 18029 9207 ims -1 310410214827503 8614 04/30/20 06:15:57 60:00 0 0 ims -1 310410214827503 8615 04/30/20 06:58:36 60:00 12895 13053 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8616 04/30/20 07:09:27 60:00 8388 3036 ims -1 310410214827503 8617 04/30/20 07:15:57 60:00 0 0 ims -1 310410214827503 8618 04/30/20 07:58:36 60:00 1096 1685 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8619 04/30/20 08:09:27 60:00 6924 2680 isms -1 310410214827503 8620 04/30/20 08:15:57 60:00 0 0 isms -1 310410214827503 8621 04/30/20 08:58:36 60:00 225 210 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8622 04/30/20 09:09:27 60:00 6924 2788 isms -1 310410214827503 8623 04/30/20 09:15:57 51:47 0 0 isms -1 310410214827503 8624 04/30/20 09:58:36 60:00 13430 11118 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8625 04/30/20 10:09:27 60:00 11904 4408 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 355 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00002999 The information contained heraleeNeli NeTniliAL not for general distribution. EFTA_00I 17075 EFTA01251599 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ....,,,si •--ss""AT&T OTC. Run Oato: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn INII IMBI NAZI MOLL Date Time Number OP Dn (OTC) 8626 04/30/20 10:58:36 60:00 8085 8384 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 8627 04/30/20 11:09:27 60:00 12228 4752 imo -1 310410214827503 8628 04/30/20 11:58:36 37:36 18673 31685 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8629 04/30/20 12:09:27 60:00 0 0 ins -1 310410214827503 8630 04/30/20 12:21:46 60:00 16705 9046 ins -1 310410214827503 8631 04/30/20 12:36:12 8:51 6482 5132 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8632 04/30/20 12:45:02 8:27 5117 6107 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8633 04/30/20 12:45:03 8:27 6107 4829 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8634 04/30/20 12:53:30 10:09 1247 1833 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 8635 04/30/20 13:03:38 27:22 5746 6645 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8636 04/30/20 13:03:39 27:22 6645 5458 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8637 04/30/20 13:09:27 60:00 0 0 imp -1 310410214827503 8638 04/30/20 13:21:46 60:00 8604 2928 imp -1 310410214827503 8639 04/30/20 13:31:01 24:04 7875 5332 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 8640 04/30/20 13:55:05 42:29 14952 17362 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8641 04/30/20 13:55:06 42:29 17362 14568 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 8642 04/30/20 14:09:27 60:00 0 0 ins -1 310410214827503 8643 04/30/20 14:21:46 60:00 10176 3160 ins -1 310410214827503 8644 04/30/20 14:37:35 3:57 5218 6105 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 8645 04/30/20 14:37:36 3:57 6105 4930 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 8646 04/30/20 14:41:32 5:41 5220 6055 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 8647 04/30/20 14:41:34 5:40 '6055 4932 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 8648 04/30/20 14:47:14 25:25 5219 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8649 04/30/20 14:47:15 25:25 6055 6716 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 356 AT&T does not retain records that can definitively show whether a transaction was PsiTithE customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003000 The information contained heraleeNe not for general distribution. EFTA_00I 17076 EFTA01251600 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tr""a ad e AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytom Apn IBEX INSI MARL NICOLL Dote Time Number Up Dn (UTC) 8650 04/30/20 15:09:27 48:43 0 0 les -1 310410214827503 8651 04/30/20 15:12:40 4:55 6122 5805 mmtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 8652 04/30/20 15:17:34 2:32 5222 6055 mmtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 8653 04/30/20 15:17:35 2:32 6055 4934mmtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 8654 04/30/20 15:20:06 20:00 6921 10297rumgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8655 04/30/20 15:20:07 25:33 10297 6633rumgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8656 04/30/20 15:21:46 60:00 13136 3796 ins -1 310410214827503 8657 04/30/20 15:45:40 17:03 12587 13399rumgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8658 04/30/20 16:02:42 2:10 5181 6107rumgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8659 04/30/20 16:02:43 2:10 6107 4893rumgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 8660 04/30/20 16:04:53 1:09 0 Orumgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 8661 04/30/20 16:06:01 2:29 5217 6105rumgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 8662 04/30/20 16:06:02 2:29 6105 4929rumgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 8663 04/30/20 16:08:30 6:11 192 Orumgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8664 04/30/20 16:08:31 6:10 5221 6107rumgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 8665 04/30/20 16:08:32 6:10 0 Orumgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 8666 04/30/20 16:08:32 6:10 6107 4933rumgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8667 04/30/20 16:14:42 0:40 0 Orumgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8668 04/30/20 16:15:22 2:21 4609 5823mmtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8669 04/30/20 16:15:23 2:21 5823 4321 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 8670 04/30/20 16:17:44 1:06 48 Orumgonpho 3587080982063726 310410214827503 APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 357 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003001 The information contained her is Ns tit not for general distribution. EF-EA_00117077 EFTA01251601 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Osage for: Item Conn. Conn. Originating LT Bytes Bytes Apn INII INSI MAfl NICOLL Data Time Number UP On (OTC) 8671 04/30/20 16:18:49 8:57 10354 6921 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 8672 04/30/20 16:18:50 8:57 6921 10066 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 8673 04/30/20 16:21:46 60:00 15528 5892 imp -1 310410214827503 8674 04/30/20 16:27:47 1:34 7522 5043 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8675 04/30/20 16:29:20 2:04 5217 6053 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8676 04/30/20 16:29:22 2:03 6053 4929 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8677 04/30/20 16:31:25 5:52 6268 5026 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8678 04/30/20 16:37:16 2:19 5112 6053 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8679 04/30/20 16:37:17 2:19 6053 4824 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8680 04/30/20 16:39:35 6:28 5117 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8681 04/30/20 16:39:36 6:28 6055 4829 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 8682 04/30/20 16:46:04 18:53 14215 10250 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8683 04/30/20 16:46:05 18:53 10250 13927 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8684 04/30/20 17:04:58 60:00 11239 6359 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 8685 04/30/20 17:21:46 60:00 9052 3284 ins -1 310410214827503 8686 04/30/20 18:04:58 50:10 924 840 nxtgonpho 3587080982063726 310410214827503 APPLE /PHONES no 8687 04/30/20 18:21:46 60:00 7048 2912 ins -1 310410214827503 8688 04/30/20 18:55:07 2:04 5221 6107 nxtgonpho 3587080982063726 310410214827503 APPLE 110H014Z8 no 8689 04/30/20 18:55:08 2:04 6107 4933 nxtgonpho 3587080982063726 310410214827503 APPLE /PHONES no 8690 04/30/20 18:57:12 36:35 7875 5332 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8691 04/30/20 19:21:46 60:00 21328 11708 ins -1 310410214827503 8692 04/30/20 19:33:47 17:53 11444 10611 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 358 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003002 The information contained her is NeTniliAL not for general distribution. EFTA_00I 17078 EFTA01251602 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tra ""a s,0 AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytom Apn IND I INSI MUD; MODEL Data Time Number Up Dn (OTC) 8693 04/30/20 19:33:47 17:54 10611 11156 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8694 04/30/20 19:51:41 9:22 7593 5280ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8695 04/30/20 20:01:03 20:51 23752 19077ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8696 04/30/20 20:01:04 20:51 19077 23272ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8697 04/30/20 20:13:47 0:31 5348 27765 ins -1 310410214827503 8698 04/30/20 20:21:46 16:23 4980 1588 ins -1 310410214827503 8699 04/30/20 20:21:56 1:45 119 197ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8700 04/30/20 20:23:39 36:44 38816 45759ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8701 04/30/20 20:23:41 36:43 45759 45998ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8702 04/30/20 20:41:03 22:10 18426 12711 ins -1 310410214827503 8703 04/30/20 21:00:24 0:38 6208 4965 nxtgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no 8704 04/30/20 21:01:01 7:28 5286 7465ruftgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no 8705 04/30/20 21:01:03 7:28 7465 4998ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8706 04/30/20 21:03:23 60:00 39179 25972 ins -1 310410214827503 8707 04/30/20 21:08:30 12:11 24451 41082ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8708 04/30/20 21:08:31 12:11 41082 24163ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8709 04/30/20 21:11:20 0:29 1456 13339 ins -1 310410214827503 8710 04/30/20 21:20:41 23:43 19197 32236ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8711 04/30/20 21:20:42 23:43 32236 18717ruftgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no 8712 04/30/20 21:26:42 28:14 5044085 3644470 ins -1 310410214827503 8713 04/30/20 21:44:25 29:09 192 Oruftgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no 8714 04/30/20 21:44:26 29:08 30856 37574ruftgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8715 04/30/20 21:44:26 29:09 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 359 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003003 The information contained her is PsiTnfAck not for general distribution. EFTA_00I 17079 EFTA01251603 MOBILITY • 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Dato: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytoa Apn Der IMBI MART MODEL Date Timo Rumbas Up On (UTC) 8716 04/30/20 21:44:27 29:08 37574 30472 nxtgonpho 3587080982063726 310410214827503 APPLE ITHONE8 no 8717 04/30/20 22:03:23 60:00 8496 3052 imo -1 310410214827503 8718 04/30/20 22:13:35 8:53 7590 5270 nxtgonpho 3587080982063726 310410214827503 APPLE ITHONE8 no 8719 04/30/20 22:22:28 2:09 5113 6053 nxtgonpho 3587080982063726 310410214827503 APPLE ITHONE8 no 8720 04/30/20 22:22:29 2:09 6053 4825 nxtgonpho 3587080982063726 310410214827503 APPLE ITHONE8 no 8721 04/30/20 22:24:38 5:25 7670 5777 nxtgonpho 3587080982063726 310410214827503 APPLE ITHONE8 no 8722 04/30/20 22:30:02 34:33 7639 7278 nxtgonpho 3587080982063726 310410214827503 APPLE ITHONE8 no 8723 04/30/20 22:30:03 34:33 7278 7351 nxtgonpho 3587080982063726 310410214827503 APPLE ITHONE8 no 8724 04/30/20 23:03:23 60:00 19632 10580 imp -1 310410214827503 8725 04/30/20 23:04:35 90:47 34969 51308 nxtgonpho 3587080982063726 310410214827503 APPLE ITHONE8 no 8726 04/30/20 23:04:36 60:00 50132 33877 nxtgonpho 3587080982063726 310410214827503 APPLE ITHONE8 no 8727 04/30/20 23:47:34 5:14 1182018 675854 imp -1 310410214827503 8728 05/01/20 00:03:23 60:00 20448 12472 imp -1 310410214827503 8729 05/01/20 00:04:36 30:47 1176 804 nxtgonpho 3587080982063726 310410214827503 APPLE ITHONE8 no 8730 05/01/20 00:19:24 0:28 3472 11505 imp -1 310410214827503 8731 05/01/20 00:35:23 2:05 11855 13446 nxtgonpho 3587080982063726 310410214827503 APPLE ITHONE8 no 8732 05/01/20 00:35:24 2:05 13446 11471 nxtgonpho 3587080982063726 310410214827503 APPLE ITHONE8 no 8733 05/01/20 00:37:29 1:06 7526 5108 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8734 05/01/20 00:38:35 2:04 5217 6105 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8735 05/01/20 00:38:36 2:04 6105 4929 nxtgonpho 3587080982063726 310410214827503 APPLE ITHONE8 no 8736 05/01/20 00:40:40 6:08 12565 5600 nxtgonpho 3587080982063726 310410214827503 APPLE ITHONE8 no 8737 05/01/20 00:46:48 31:09 14597 7609 nxtgonpho 3587080982063726 310410214827503 APPLE ITHONE8 no 8738 05/01/20 00:46:49 31:09 7609 14309 nxtgonpho 3587080982063726 310410214827503 APPLE ITHONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 360 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003004 The information contained hereCtoNelt NeTnilikk not for general distribution. EFTA_00I 17080 EFTA01251604 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run pato: 06/17/2020 Run Time: 18:56:23 Data Osage for: • Item Conn. Conn. Originating LT Bytes Byte. Apn IKEI INSI MARL MODEL Date Time Number Op Dn (OTC) 8739 05/01/20 01:03:23 60:00 29728 15244 ims -1 310410214827503 8740 05/01/20 01:17:58 37:16 13485 25952 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 8741 05/01/20 01:17:58 37:16 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 8742 05/01/20 01:17:59 37:16 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8743 05/01/20 01:17:59 37:16 25952 13197 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8744 05/01/20 01:27:21 22:28 4535360 3427868 ins -1 310410214827503 8745 05/01/20 01:55:15 0:47 6053 4898 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8746 05/01/20 01:56:01 92:50 6770501 6650759 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8747 05/01/20 01:56:02 60:00 4709751 4757090 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8748 05/01/20 02:03:23 60:00 8388 2820 ins -1 310410214827503 8749 05/01/20 02:56:02 32:50 1941008 2015811 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8750 05/01/20 03:03:23 60:00 8388 2820 ins -1 310410214827503 8751 05/01/20 03:28:52 1:47 11189 9418 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8752 05/01/20 03:30:38 1:34 5587 8688 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8753 05/01/20 03:30:39 1:34 8688 5299 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8754 05/01/20 03:32:13 0:06 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8755 05/01/20 03:34:16 0:42 1130 4551 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8756 05/01/20 03:34:57 9:21 5604 6331 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8757 05/01/20 03:34:58 9:21 6331 5316 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8758 05/01/20 03:44:19 4:21 2261 5958 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8759 05/01/20 03:48:39 2:04 4672 6625 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 8760 05/01/20 03:48:40 2:05 6625 4384 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 361 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003005 The information contained here(F3411:›N i ff::ti not for general distribution. NaTtAdti EF-EA_00117081 EFTA01251605 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Bytoa Apn INC' IMISI MARL MOLL Date Time Number Up Dn (UTC) 8761 05/01/20 03:50:45 1:47 7465 5070 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 8762 05/01/20 03:52:31 66:48 54129 259765 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 8763 05/01/20 03:52:32 60:00 259765 54813 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8764 05/01/20 04:03:23 60:00 8496 2820 imp -1 310410214827503 8765 05/01/20 04:52:32 6:48 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8766 05/01/20 04:59:20 14:07 7226 5437 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8767 05/01/20 05:03:23 23:50 9728 6456 imp -1 310410214827503 8768 05/01/20 05:13:26 142:26 5954 9382 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8769 05/01/20 05:13:27 60:00 9382 7241 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8770 05/01/20 06:13:27 60:00 0 92 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 8771 05/01/20 07:13:27 22:26 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 8772 05/01/20 12:46:09 2:58 452896 99158 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 8773 05/01/20 12:46:11 2:57 99158 452608 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 8774 05/01/20 12:46:12 2:55 6438 7400 imp 3587080982063726 310410214827503 APPLE !PROMS 8775 05/01/20 12:46:13 2:55 7400 6086 imp 3587080982063726 310410214827503 APPLE !PROMS 8776 05/01/20 12:49:08 169:59 151257 92000 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8777 05/01/20 12:49:09 169:58 6226 6776 imp 3587080982063726 310410214827503 APPLE !PROMS 8778 05/01/20 12:49:09 60:00 61736 124963 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8779 05/01/20 12:49:10 60:00 6668 6070 ins 3587080982063726 310410214827503 APPLE IPHONEB 8780 05/01/20 12:51:28 60:00 19793 9764 ims -1 310410214827503 8781 05/01/20 13:49:09 60:00 22784 21696 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 8782 05/01/20 13:49:10 60:00 0 0 ims 3587080982063726 310410214827503 APPLE !PROMS 8783 05/01/20 13:51:28 60:00 7188 2804 ims -1 310410214827503 8784 05/01/20 14:49:09 60:00 7480 8661 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 8785 05/01/20 14:49:10 60:00 0 0 ims 3587080982063726 310410214827503 APPLE !PROMS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 362 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003006 The information contained her is not for general distribution. NeTtAti EFTA 00!17082 EFTA01251606 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. Run Date: 06/17/2020 Run Time: 1S:54:23 Data Osage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn IKEI INSI MAKE MODEL Date Time Number Up Dn (OTC) 8786 05/01/20 14:51:28 60:00 8388 2804 Imo -1 310410214827503 8787 05/01/20 15:39:07 184:19 12350 12924 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8788 05/01/20 15:49:09 60:00 0 92ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8789 05/01/20 15:49:10 60:00 0 0 ims 3587080982063726 310410214827503 APPLE !PHONES 8790 05/01/20 15:51:28 60:00 13600 4532 ims -1 310410214827503 8791 05/01/20 16:49:09 60:00 12636 11486ruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 8792 05/01/20 16:49:10 4:13 0 0 imp 3587080982063726 310410214827503 APPLE !PRONGS 8793 05/01/20 16:51:28 60:00 10596 4504 imp -1 310410214827503 8794 05/01/20 17:49:09 54:18 288 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8795 05/01/20 17:51:28 60:00 0 0 imp -1 310410214827503 8796 05/01/20 18:06:57 44:20 18833 12827 imp -1 310410214827503 8797 05/01/20 18:43:27 7:59 48 Oruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 8798 05/01/20 18:51:25 8:39 288 48ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8799 05/01/20 18:51:27 8:37 6476 7474 imp 3587080982063726 310410214827503 APPLE !PHONES 8800 05/01/20 18:51:27 8:38 48 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8801 05/01/20 18:51:28 0:17 0 0 imp -1 310410214827503 8802 05/01/20 18:51:28 8:37 7406 6212 imp 3587080982063726 310410214827503 APPLE !PRONGS 8803 05/01/20 18:51:45 60:00 15697 10074 imp -1 310410214827503 8804 05/01/20 19:00:05 59:47 48 Oruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 8805 05/01/20 19:51:45 60:00 10036 3284 ims -1 310410214827503 8806 05/01/20 19:59:51 9:28 480 144ruftgonpho 3587080982063726 310410214827503 APPLE IPROMG8 no 8807 05/01/20 19:59:52 9:28 144 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8808 05/01/20 20:09:21 2:15 48 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8809 05/01/20 20:11:35 8:18 288 48ruftgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 8810 05/01/20 20:11:36 8:18 48 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8811 05/01/20 20:19:54 0:06 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 363 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003007 The information contained herreop+Fti NTifikE not for general distribution. EFTA_00I 17083 EFTA01251607 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in 1...„ ‘...6..1# 0/ AT&T (ITC. Run Date: 06/17/2020 Run Timo: Data Usage Tor: Item Conn. Conn. Originating TT Bytes Bytes, Apn IMBI NICOLL Date Time Rumbas UP Dn (UTC) 8812 05/01/20 20:20:44 0:06 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8813 05/01/20 20:22:52 2:25 288 48 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8814 05/01/20 20:22:54 2:24 48 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8815 05/01/20 20:25:17 56:47 19296 29244 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8816 05/01/20 20:25:18 56:48 29244 18720 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8817 05/01/20 20:51:45 60:00 22128 13236 imp -1 310410214827503 8818 05/01/20 20:59:04 0:28 4057 12437 imp -1 310410214827503 8819 05/01/20 21:22:06 59:08 48 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8820 05/01/20 21:51:45 60:00 10144 3392 imo -1 310410214827503 8821 05/01/20 22:21:14 10:57 288 48 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8822 05/01/20 22:21:15 10:57 48 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8823 05/01/20 22:32:12 28:11 288 48 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8824 05/01/20 22:32:13 28:11 48 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8825 05/01/20 22:51:45 60:00 15792 6124 imo -1 310410214827503 8826 05/01/20 23:00:24 7:35 48 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8827 05/01/20 23:07:58 2:04 288 48 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8828 05/01/20 23:08:00 2:03 48 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8829 05/01/20 23:10:03 60:00 48 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8830 05/01/20 23:51:45 60:00 8604 2928 imo -1 310410214827503 8831 05/02/20 00:10:03 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8832 05/02/20 00:51:45 60:00 13568 4748 imo -1 310410214827503 8833 05/02/20 01:10:03 60:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8834 05/02/20 01:51:45 60:00 6956 2788 iris -1 310410214827503 8835 05/02/20 02:10:03 37:49 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 364 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003008 The information contained hereleeNyFtli NTniliAL not for general distribution. EF-EA_00117084 EFTA01251608 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in tr_d `a.rss AT&T OTC. Run Data: 06/17/2020 Run Tame: Data Osage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn I14II IMBI MARL MODEL Data Time Number op Dn (OTC) 8836 05/02/20 02:47:51 29:49 288 48 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8837 05/02/20 02:47:52 29:49 48 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8838 05/02/20 02:51:45 60:00 6956 2680 imp -1 310410214827503 8839 05/02/20 03:17:41 1:05 48 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8840 05/02/20 03:18:45 1:50 288 48 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8841 05/02/20 03:18:47 1:49 48 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 8842 05/02/20 03:20:36 2:45 48 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 8843 05/02/20 03:23:20 2:34 288 48 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8844 05/02/20 03:23:21 2:34 48 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8845 05/02/20 03:25:55 0:52 48 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8846 05/02/20 03:26:46 10:00 288 48 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8847 05/02/20 03:26:47 27:31 96 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8848 05/02/20 03:36:46 17:31 96 48 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 8849 05/02/20 03:51:45 60:00 14788 4748 imp -1 310410214827503 8850 05/02/20 03:54:18 1:58 96 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 8851 05/02/20 03:56:15 6:09 288 48 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 8852 05/02/20 03:56:16 6:10 48 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8853 05/02/20 04:02:26 0:58 48 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8854 05/02/20 04:03:23 10:02 288 48 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8855 05/02/20 04:03:24 10:02 48 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8856 05/02/20 04:13:26 1:56 288 48 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 365 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003009 The information contained her is NeTniliAL not for general distribution. EF-EA_00117085 EFTA01251609 MOBILITY 'MINI 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in `-'s,0 AT&T OTC. Run Date: 06/17/2020 Run Time: 18:56:23 Data Osage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn INLI IMBI MARL MOLL Date Time Number Up Dn (UTC) 8857 05/02/20 04:13:27 1:56 48 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8858 05/02/20 04:15:23 2:58 48 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8859 05/02/20 04:18:20 5:43 288 48 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8860 05/02/20 04:18:22 5:42 48 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8861 05/02/20 04:24:04 0:05 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8862 05/02/20 04:24:54 1:08 48 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8863 05/02/20 04:26:02 0:47 48 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8864 05/02/20 04:26:48 2:04 288 48 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8865 05/02/20 04:26:50 2:03 48 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8866 05/02/20 04:28:53 1:05 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8867 05/02/20 04:29:58 122:06 768 288 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8868 05/02/20 04:29:59 60:00 144 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8869 05/02/20 04:51:45 60:00 17852 5172 ims -1 310410214827503 8870 05/02/20 05:29:59 60:00 144 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8871 05/02/20 05:51:45 1:31 0 0 ims -1 310410214827503 8872 05/02/20 06:25:09 6:55 7246 8278 ims 3587080982063726 310410214827503 APPLE !PHONES 8873 05/02/20 06:25:10 6:55 8210 6982 ims 3587080982063726 310410214827503 APPLE !PHONES 8874 05/02/20 06:29:59 2:06 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8875 05/02/20 06:31:57 60:00 19711 11048 ims -1 310410214827503 8876 05/02/20 06:32:05 52:11 48 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8877 05/02/20 07:24:15 2:04 288 48 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8878 05/02/20 07:24:16 2:04 48 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8879 05/02/20 07:26:20 60:00 48 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 366 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003010 The information contained heraleop+Fti PsisTiliAL not for general distribution. EF-EAJVII7086 EFTA01251610 MOBILITY 41111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ....••=se0 AT&T OTC. Run Data: 06/17/2020 Run Tina: Data Osage Tor: Itea Conn. Conn. Originating ET Bytes Bytes Apn IKEI INSI NICOLL Data Time Number Up Dn (OTC) 8880 05/02/20 07:31:57 60:00 8480 3020 imo -1 310410214827503 8881 05/02/20 08:26:20 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8882 05/02/20 08:31:57 60:00 6940 2648 imo -1 310410214827503 8883 05/02/20 09:26:20 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8884 05/02/20 09:31:57 60:00 7048 2772 imo -1 310410214827503 8885 05/02/20 10:26:20 60:00 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8886 05/02/20 10:31:57 60:00 16652 6076 imo -1 310410214827503 8887 05/02/20 11:26:20 2:28 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 8888 05/02/20 11:28:50 57:24 7511 5065 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8889 05/02/20 11:31:57 60:00 8496 2896 imo -1 310410214827503 8890 05/02/20 12:26:13 8:23 5164 6052 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 8891 05/02/20 12:26:15 8:22 6052 4876 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8892 05/02/20 12:31:57 60:00 8388 2896 imo -1 310410214827503 8893 05/02/20 12:34:37 30:36 7463 5647 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 8894 05/02/20 13:05:12 2:10 5979 9105 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 8895 05/02/20 13:05:13 2:10 9105 5691 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8896 05/02/20 13:07:23 7:44 7462 4955 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8897 05/02/20 13:15:06 30:55 24530 15373 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 8898 05/02/20 13:15:07 30:55 15373 24242 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8899 05/02/20 13:31:57 60:00 6848 2756 imo -1 310410214827503 8900 05/02/20 13:46:02 0:36 6055 4902 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 8901 05/02/20 13:46:37 7:39 7811 9789 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 8902 05/02/20 13:46:38 7:39 9789 7523 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONEB no 8903 05/02/20 13:54:17 0:54 6845 5237 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 367 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00003011 The information contained her is NeTniliAL not for general distribution. EFTA_00I 17087 EFTA01251611 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating CT Bytes Bytom Apn INZI IMSI MAKE MODEL Data Time Number UP Dn (UTC) 8904 05/02/20 13:55:10 8:29 45144 61190 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8905 05/02/20 13:55:11 8:29 61190 44856ruftgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8906 05/02/20 14:03:40 1:07 6873 4966ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8907 05/02/20 14:04:46 10:28 10797 20363ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8908 05/02/20 14:04:47 10:28 20363 10413ruftgenpho 3587080982063726 310410214827503 APPLE IPROME8 no 8909 05/02/20 14:15:15 31:30 19727 19412 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8910 05/02/20 14:15:15 31:31 19412 20288 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8911 05/02/20 14:31:57 60:00 10380 4080 imo -1 310410214827503 8912 05/02/20 14:46:45 17:24 5690 6469 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8913 05/02/20 14:46:46 17:24 6469 5402 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8914 05/02/20 15:04:10 10:46 5642 6408ruftgenpho 3587080982063726 310410214827503 APPLE IPROME8 no 8915 05/02/20 15:04:11 10:46 6408 5354 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8916 05/02/20 15:14:57 1:10 8826 5435 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8917 05/02/20 15:16:07 13:33 12634 16458ruftgenpho 3587080982063726 310410214827503 APPLE IPROME8 no 8918 05/02/20 15:16:07 13:34 16458 13186ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8919 05/02/20 15:29:41 0:37 6937 5174 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8920 05/02/20 15:30:18 10:00 11949 13263ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8921 05/02/20 15:30:19 57:33 65096 46501ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8922 05/02/20 15:31:57 60:00 13460 4860 imo -1 310410214827503 8923 05/02/20 15:40:18 47:33 33631 51833ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8924 05/02/20 16:27:52 5:24 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 8925 05/02/20 16:31:57 60:00 7064 2756 imo -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 368 AT&T does not retain records that can definitively show whether a transaction was PsisTfikE customer initiated or AT&T's network initiated the data transaction. SDNYGM00003012 The information contained hereCtoNyFti not for general distribution. EFTA_00I 17088 EFTA01251612 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn IMSI teal MODEL Date Time Number 0P Dn (OTC) 8926 05/02/20 16:33:15 4:12 5312 6101 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8927 05/02/20 16:33:16 4:12 6101 4928 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8928 05/02/20 16:37:27 6:35 5984 6383 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8929 05/02/20 16:37:28 6:35 6383 5696 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8930 05/02/20 16:44:03 60:00 9930 20336 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 8931 05/02/20 17:31:57 60:00 10036 3144 imp -1 310410214827503 8932 05/02/20 17:44:03 60:00 10405 9628 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 8933 05/02/20 18:31:57 60:00 10036 3252 imp -1 310410214827503 8934 05/02/20 18:44:03 60:00 1171 874 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8935 05/02/20 19:31:57 60:00 9928 3144 imp -1 310410214827503 8936 05/02/20 19:44:03 60:00 751 735 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8937 05/02/20 20:31:57 60:00 15000 4716 imp -1 310410214827503 8938 05/02/20 20:44:03 42:54 15184 13713 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8939 05/02/20 21:26:57 15:58 5326 6212 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 8940 05/02/20 21:26:58 15:58 6212 5038 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 8941 05/02/20 21:31:57 60:00 12136 4396 imp -1 310410214827503 8942 05/02/20 21:42:56 4:04 7463 5065 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8943 05/02/20 21:46:59 2:11 5281 6115 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8944 05/02/20 21:47:00 2:11 6115 4993 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8945 05/02/20 21:49:11 1:14 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8946 05/02/20 21:50:25 27:50 5862 6786 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8947 05/02/20 21:50:26 27:50 6786 5574 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8948 05/02/20 22:18:16 20:45 12004 7372 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 369 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003013 The information contained her is NTniliAL not for general distribution. EF-EA_00117089 EFTA01251613 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ....,„# ••-s` a. AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytom Apn INEI IMSI MART MOTS Date Time Number Up Dn (UTC) 8949 05/02/20 22:18:17 20:45 7372 11716 nxtgonpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 8950 05/02/20 22:31:57 60:00 8496 3004 ims -1 310410214827503 8951 05/02/20 22:39:01 33:44 5847 6643 nxtgonpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 8952 05/02/20 22:39:02 33:45 6643 5559 nxtgonpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 8953 05/02/20 23:12:46 1:24 7529 5070 nxtgonpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 8954 05/02/20 23:14:09 2:05 5282 6167 nxtgonpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 8955 05/02/20 23:14:10 2:05 6167 4994 nxtgonpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 8956 05/02/20 23:16:15 0:53 0 Onxtgonpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 8957 05/02/20 23:17:07 2:03 5220 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8958 05/02/20 23:17:08 2:03 6055 4932ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8959 05/02/20 23:19:11 1:23 48 Oruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 8960 05/02/20 23:20:33 2:04 5390 7529 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8961 05/02/20 23:20:34 2:04 7529 5102 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8962 05/02/20 23:22:38 0:43 6208 4965 nxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 8963 05/02/20 23:23:20 8:23 12303 10928ruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 8964 05/02/20 23:23:21 8:23 10928 12015ruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 8965 05/02/20 23:31:44 21:33 7226 5438ruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 8966 05/02/20 23:31:57 60:00 8496 3004 ims -1 310410214827503 8967 05/02/20 23:53:16 2:04 5344 6977 nxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 8968 05/02/20 23:53:17 2:04 6977 5056ruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 8969 05/02/20 23:55:21 60:00 9134 11383ruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 8970 05/03/20 00:31:57 60:00 17868 5088 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 370 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003014 The information contained heralCoNyFtli NTniliAL not for general distribution. EF-EA_00117090 EFTA01251614 MOBILITY 41111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Tina: Data Osage For: Sim Item Conn. Conn. Originating ET Bytes Bytom Apn INEI IMSI NUM MODEL Data Time Number Up Dn (OTC) 8971 05/03/20 00:55:21 48:58 8255 6904 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8972 05/03/20 01:31:57 60:00 8604 2896 ims -1 310410214827503 8973 05/03/20 01:44:18 25:25 10415 12148 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8974 05/03/20 01:44:19 25:25 12148 11501 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8975 05/03/20 02:09:44 1:23 6171 5036ruagenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8976 05/03/20 02:11:07 40:18 6109 6822 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8977 05/03/20 02:11:08 40:18 6822 5821 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8978 05/03/20 02:31:57 60:00 13568 4752 ins -1 310410214827503 8979 05/03/20 02:51:26 2:01 6873 4964 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8980 05/03/20 02:53:26 6:33 5222 6055 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8981 05/03/20 02:53:27 6:33 6055 4934 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8982 05/03/20 03:00:00 6:26 7465 4965 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8983 05/03/20 03:06:25 7:36 5221 6055 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8984 05/03/20 03:06:27 7:36 6055 4933ruagenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8985 05/03/20 03:14:03 5:25 8722 5271 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8986 05/03/20 03:19:27 20:00 15539 18285ruagenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8987 05/03/20 03:19:28 60:00 32418 29441ruftgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8988 05/03/20 03:31:57 60:00 8604 2896 ins -1 310410214827503 8989 05/03/20 03:39:27 552:50 78246 81091ruftgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8990 05/03/20 04:19:28 60:00 867 945ruagenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8991 05/03/20 04:31:57 60:00 13336 4468 ins -1 310410214827503 8992 05/03/20 05:19:28 60:00 16753 18433ruagenpho 3587080982063726 310410214827503 APPLE IPHONEB no 8993 05/03/20 05:31:57 60:00 8388 2896 was -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 371 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003015 The information contained heralCONyFti NeTniiiikE not for general distribution. EF-EA_00117091 EFTA01251615 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ..z,„,0s`' •- s AT&T OTC. Run Dato: 06/17/2020 Run Time: 18:56:33 Data Osage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INLI IbISI MAKE NICOLL Date Time Mambos UP Dn (UTC) 8994 05/03/20 06:19:28 60:00 18689 15589 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 8995 05/03/20 06:31:57 60:00 8156 2772 ims -1 310410214827503 8996 05/03/20 07:19:28 60:00 8577 8827nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 8997 05/03/20 07:31:57 60:00 10380 4272 imo -1 310410214827503 8998 05/03/20 08:19:28 60:00 1059 1260nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 8999 05/03/20 08:31:57 60:00 11920 4220 imo -1 310410214827503 9000 05/03/20 09:19:28 60:00 6710 5663nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 9001 05/03/20 09:31:57 60:00 9928 3360 imo -1 310410214827503 9002 05/03/20 10:19:28 60:00 12620 10542nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 9003 05/03/20 10:31:57 60:00 8496 3004 imo -1 310410214827503 9004 05/03/20 11:19:28 60:00 578 630nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 9005 05/03/20 11:31:57 60:00 6848 2756 ims -1 310410214827503 9006 05/03/20 12:19:28 32:50 1105 2731 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 9007 05/03/20 12:31:57 60:00 13460 4752 ims -1 310410214827503 9008 05/03/20 12:52:18 35:03 9808 11358 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 9009 05/03/20 13:27:21 24:39 12880 14174 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9010 05/03/20 13:27:22 24:39 14174 12592 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9011 05/03/20 13:31:57 60:00 8496 3128 ims -1 310410214827503 9012 05/03/20 13:52:00 15:02 6518 6904 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 9013 05/03/20 13:52:01 15:02 6904 6230 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 9014 05/03/20 14:07:03 1:00 6053 4897 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 9015 05/03/20 14:08:03 18:54 6063 9075 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9016 05/03/20 14:08:04 18:54 9075 5775 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9017 05/03/20 14:26:58 2:43 7575 5172 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 372 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00003016 The information contained her is NeTtikE not for general distribution. EFTA 00117092 EFTA01251616 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in %°'"ni‘S .....____ tos g° y AT&T OTC. Run Data: 06/17/2020 Run Time: 18:56:33 Data Usage for: Item Conn. Conn. Originating ET Bytes Bytes kpn INEI IMBI MAfl MODEL Date Time Humber Up Dn (OTC) 9018 05/03/20 14:29:40 4:59 5276 6113 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9019 05/03/20 14:29:42 4:58 6113 4988 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9020 05/03/20 14:31:57 60:00 13444 4468 ims -1 310410214827503 9021 05/03/20 14:34:40 3:23 6873 4965 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9022 05/03/20 14:38:02 2:03 5164 6052 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9023 05/03/20 14:38:03 2:03 6052 4876 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 9024 05/03/20 14:40:06 1:35 6268 5120 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 9025 05/03/20 14:41:40 2:10 5222 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9026 05/03/20 14:41:41 2:10 6055 4934 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9027 05/03/20 14:43:51 1:02 6214 5008 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9028 05/03/20 14:44:52 10:48 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9029 05/03/20 14:44:53 10:47 5222 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9030 05/03/20 14:44:53 10:49 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 9031 05/03/20 14:44:54 10:48 6055 5774 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 9032 05/03/20 14:55:41 0:44 5221 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9033 05/03/20 14:55:42 0:44 6055 4933 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 9034 05/03/20 14:56:26 2:03 6933 5025 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 9035 05/03/20 14:58:28 2:03 5222 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9036 05/03/20 14:58:29 2:03 6055 4934 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9037 05/03/20 15:00:32 2:25 6873 4965 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9038 05/03/20 15:02:57 14:20 13328 16186 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 373 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003017 The information contained hereCtoNyFtli not for general distribution. NeTnAL EFTA_00I 17093 EFTA01251617 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. originating ET Bytes Bytoa Apn fez' IMBI ten NICOLL Date Time Number Up Dn (OTC) 9039 05/03/20 15:02:57 14:21 16186 13040nngonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9040 05/03/20 15:17:18 1:25 6923 4961 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9041 05/03/20 15:18:42 6:01 7692 7415ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9042 05/03/20 15:18:44 6:00 7415 7404ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9043 05/03/20 15:24:44 1:12 6055 4902ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9044 05/03/20 15:25:55 2:34 8704 6489ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9045 05/03/20 15:25:56 2:34 6489 8416ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9046 05/03/20 15:28:30 1:32 6873 4963ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9047 05/03/20 15:30:02 1:31 6055 4902ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9048 05/03/20 15:31:32 1:17 5220 6055ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9049 05/03/20 15:31:34 1:16 6055 4932ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9050 05/03/20 15:31:57 60:00 6956 2648 in -1 310410214827503 9051 05/03/20 15:32:50 1:05 6873 4966 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9052 05/03/20 15:33:55 0:36 6871 4961 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9053 05/03/20 15:34:30 8:20 5281 6115ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9054 05/03/20 15:34:32 8:19 6115 4993ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9055 05/03/20 15:42:51 3:47 6055 4901ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9056 05/03/20 15:46:37 6:19 5217 6053ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9057 05/03/20 15:46:38 6:19 6053 4929ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9058 05/03/20 15:52:57 2:15 0 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9059 05/03/20 15:55:11 16:31 5537 6344ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 374 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003018 The information contained her is NTniliAL not for general distribution. EF-EA_00117094 EFTA01251618 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ....,,,• ••-s‘"I‘AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INEI INS' NAfl NCOEL Data Time Number Up Dn (OTC) 9060 05/03/20 15:55:12 16:31 6344 5249 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 9061 05/03/20 16:11:43 51:43 8149 12145ruagenpho 3587080982063726 310410214827503 APPLE 'PHONES no 9062 05/03/20 16:11:44 51:43 12145 7861 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 9063 05/03/20 16:31:57 60:00 6848 2756 ims -1 310410214827503 9064 05/03/20 17:03:27 1:07 7529 5069 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9065 05/03/20 17:04:33 2:03 5282 6871 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9066 05/03/20 17:04:35 2:03 6871 4994ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 9067 05/03/20 17:06:37 0:55 7529 5069ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 9068 05/03/20 17:07:31 20:50 7299 7461ruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 9069 05/03/20 17:07:32 20:50 7461 7011ruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 9070 05/03/20 17:28:22 60:00 8039 6274ruagenpho 3587080982063726 310410214827503 APPLE 'PHONES no 9071 05/03/20 17:31:57 60:00 15324 5124 ims -1 310410214827503 9072 05/03/20 18:28:22 51:43 751 735ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 9073 05/03/20 18:31:57 60:00 13444 4560 ims -1 310410214827503 9074 05/03/20 19:20:04 8:59 7635 7589 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9075 05/03/20 19:20:05 8:59 7589 7347ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 9076 05/03/20 19:29:04 60:00 7285 6862ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 9077 05/03/20 19:31:57 60:00 8604 3128 ims -1 310410214827503 9078 05/03/20 20:29:04 36:13 1502 3094 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9079 05/03/20 20:31:57 60:00 10144 3268 ims -1 310410214827503 9080 05/03/20 21:05:16 8:25 4671 6693 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9081 05/03/20 21:05:18 8:24 6693 4383ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 9082 05/03/20 21:13:42 60:00 8451 6063ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 375 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003019 The information contained hereCtoNelt NTrifikE not for general distribution. EFTA_00I 17095 EFTA01251619 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ..... 1/ 4e'4"11. sa# ill AT&T OTC. Run Date: 06/17/2020 Run Time: 18:56:33 Data Osage Tor: Item Conn. Conn. Originating ET Sytes Bytom Apn IKEI INSI MARL NICOLL Date Time Number UP Dn (OTC) 9083 05/03/20 21:31:57 60:00 19964 6464 imo -1 310410214827503 9084 05/03/20 22:13:42 38:33 55517 10672 nxtgonpho 3587080982063726 310410214827503 APPLE IPXONZ8 no 9085 05/03/20 22:31:57 60:00 6956 2772 imo -1 310410214827503 9086 05/03/20 22:52:14 3:46 31396 384827 nxtgonpho 3587080982063726 310410214827503 APPLE IPXONZ8 no 9087 05/03/20 22:52:15 3:46 384827 31108 nxtgonpho 3587080982063726 310410214827503 APPLE IPXONE8 no 9088 05/03/20 22:56:01 60:00 7984 6277 nxtgonpho 3587080982063726 310410214827503 APPLE IPXONE8 no 9089 05/03/20 23:31:57 60:00 6956 2648 imo -1 310410214827503 9090 05/03/20 23:56:01 2:56 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPXONZ8 no 9091 05/03/20 23:58:56 32:41 19779 24666 nxtgonpho 3587080982063726 310410214827503 APPLE IPXONE8 no 9092 05/03/20 23:58:57 32:41 24666 20760 nxtgonpho 3587080982063726 310410214827503 APPLE IPXONE8 no 9093 05/04/20 00:31:38 0:06 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPXONE8 no 9094 05/04/20 00:31:57 49:07 8388 2896 imo -1 310410214827503 9095 05/04/20 00:44:34 30:57 25696 19313 nxtgonpho 3587080982063726 310410214827503 APPLE IPXONE8 no 9096 05/04/20 01:15:30 26:38 29723 31790 nxtgonpho 3587080982063726 310410214827503 APPLE IPXONE8 no 9097 05/04/20 01:15:31 26:38 31790 30704 nxtgonpho 3587080982063726 310410214827503 APPLE IPXONE8 no 9098 05/04/20 01:15:43 26:25 7296 6524 imo 3587080982063726 310410214827503 APPLE IPXONE8 9099 05/04/20 01:15:44 26:25 6456 6944 imo 3587080982063726 310410214827503 APPLE IPXONE8 9100 05/04/20 01:33:16 60:00 14695 11263 imo -1 310410214827503 9101 05/04/20 01:42:10 60:00 41207 28246 nxtgonpho 3587080982063726 310410214827503 APPLE IPXONE8 no 9102 05/04/20 01:42:16 24:56 8150 6924 imo 3587080982063726 310410214827503 APPLE IPXONE8 9103 05/04/20 02:07:13 4:21 8158 6176 imo 3587080982063726 310410214827503 APPLE IPXONE8 9104 05/04/20 02:11:34 0:22 3532 1448 imo 3587080982063726 310410214827503 APPLE IPXONE8 9105 05/04/20 02:12:04 0:01 0 0 imo 3587080982063726 310410214827503 APPLE IPXONE8 9106 05/04/20 02:12:15 60:00 16976 9162 imo -1 310410214827503 9107 05/04/20 02:33:16 60:00 0 0 imo -1 310410214827503 9108 05/04/20 02:42:10 60:00 9551 11880 nxtgonpho 3587080982063726 310410214827503 APPLE IPXONE8 no 9109 05/04/20 03:12:15 60:00 8496 2928 imo -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 376 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003020 The information contained her is not for general distribution. EFTA_00I 17096 EFTA01251620 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTE. Run Data: 06/17/2020 Run Time: 18:56:33 Data Osage for: Item Conn. Conn. originating ET Bytes Bytes Apn INLI INSI MARL MODEL Data Time Number UP Dn (UTC) 9110 05/04/20 03:33:16 60:00 0 0 ims -1 310410214827503 9111 05/04/20 03:42:10 12:50 0 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9112 05/04/20 04:12:15 60:00 13352 4624 ims -1 310410214827503 9113 05/04/20 04:33:16 60:00 0 0 ims -1 310410214827503 9114 05/04/20 05:12:15 60:00 9928 3284 ims -1 310410214827503 9115 05/04/20 05:33:16 5:16 0 0 ims -1 310410214827503 9116 05/04/20 06:12:15 60:00 8496 3036 ims -1 310410214827503 9117 05/04/20 07:12:15 60:00 13568 4784 ims -1 310410214827503 9118 05/04/20 07:25:07 14:29 7930 5646 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9119 05/04/20 07:39:36 2:21 5165 6104 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 9120 05/04/20 07:39:37 2:21 6104 4877 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 9121 05/04/20 07:41:58 1:07 6052 4940 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9122 05/04/20 07:43:05 2:37 5225 6112 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 9123 05/04/20 07:43:06 2:37 6112 4937 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 9124 05/04/20 07:45:42 5:09 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9125 05/04/20 07:45:43 5:08 5164 6104 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9126 05/04/20 07:45:43 5:09 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 9127 05/04/20 07:45:44 5:08 6104 4876 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 9128 05/04/20 07:50:52 60:00 7625 6751 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9129 05/04/20 08:12:15 60:00 11688 4484 ims -1 310410214827503 9130 05/04/20 08:50:52 11:05 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9131 05/04/20 09:12:15 60:00 8620 3052 ims -1 310410214827503 9132 05/04/20 10:12:15 60:00 6848 2680 ims -1 310410214827503 9133 05/04/20 10:13:52 33:49 8031 10613 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9134 05/04/20 10:47:40 2:10 5165 6052 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 377 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003021 The information contained her is NeTniliAL not for general distribution. EFTA_00I 17097 EFTA01251621 MOBILITY 4011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ..,,,,• ••-s` -' s AT&T OTC. Run Date: 06/17/2020 Run Elmo: Data Osage For: MI= Item Conn. Conn. Originating ET Bytes Bytoa Apn INC' IMBI MARL 1.03DEL Date Time Nutter Up Dn (UTC) 9135 05/04/20 10:47:41 2:10 6052 4877 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 9136 05/04/20 10:49:51 1:16 6873 4964 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 9137 05/04/20 10:51:06 8:25 5224 6112 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9138 05/04/20 10:51:07 8:25 6112 4936 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9139 05/04/20 10:59:32 20:39 6873 6225 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9140 05/04/20 11:12:15 2:37 5088 4728 imp -1 310410214827503 9141 05/04/20 11:14:58 60:00 16867 9216 imp -1 310410214827503 9142 05/04/20 11:20:10 12:36 6215 7230 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 9143 05/04/20 11:20:11 12:36 7230 5831 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 9144 05/04/20 11:32:47 4:33 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 9145 05/04/20 11:37:21 19:55 6873 6436 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9146 05/04/20 11:57:15 11:11 5221 6055 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9147 05/04/20 11:57:16 11:11 6055 5878 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 9148 05/04/20 12:08:27 1:40 6961 5130 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 9149 05/04/20 12:10:06 1:17 5164 6104 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 9150 05/04/20 12:10:08 1:16 6104 4876 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 9151 05/04/20 12:11:24 5:40 6873 4965 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 9152 05/04/20 12:14:58 60:00 8496 3020 imp -1 310410214827503 9153 05/04/20 12:17:03 2:27 5060 6052 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 9154 05/04/20 12:17:04 2:27 6052 4772 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9155 05/04/20 12:19:31 4:27 48 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9156 05/04/20 12:23:58 2:24 5112 6053 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 378 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003022 The information contained her is PsiTnilikk not for general distribution. EFTA_00I 17098 EFTA01251622 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in C %. ‘mnie IPJ S AT&T OTC. Run Data: 06/17/2020 Run Time: 10:56:33 Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn INEI IMBI MARL MODEL Data Time Number Up Dn (UTC) 9157 05/04/20 12:23:59 2:24 6053 4824 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9158 05/04/20 12:26:23 7:15 6873 4965 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9159 05/04/20 12:33:37 2:19 5118 6055 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9160 05/04/20 12:33:38 2:19 6055 4830 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9161 05/04/20 12:35:57 31:52 6119 17605 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9162 05/04/20 13:07:48 6:43 5222 6197 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9163 05/04/20 13:07:49 6:43 6107 4934 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9164 05/04/20 13:14:32 8:59 7569 5129 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9165 05/04/20 13:14:58 60:00 7156 2896 imo -1 310410214827503 9166 05/04/20 13:23:30 29:55 11369 7449 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9167 05/04/20 13:23:31 29:55 7449 11081 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9168 05/04/20 13:53:26 3:09 5133 4692 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9169 05/04/20 13:56:34 30:51 17726 17844 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9170 05/04/20 13:56:35 30:51 17844 18611 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9171 05/04/20 14:14:58 36:55 8696 3020 ism -1 310410214827503 9172 05/04/20 14:27:26 23:15 37999 30929 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9173 05/04/20 14:50:41 32:47 31085 20389 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9174 05/04/20 14:50:42 32:47 20389 30605 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9175 05/04/20 14:51:38 5:26 6422 6736 ins 3587080982063726 310410214827503 APPLE !PHONES 9176 05/04/20 14:51:39 5:26 6668 6070 ims 3587080982063726 310410214827503 APPLE IPHONE8 9177 05/04/20 14:51:53 0:01 0 0 ims -1 310410214827503 9178 05/04/20 14:53:58 9:38 6262 6800 ism 3587080982063726 310410214827503 APPLE IPHONE8 9179 05/04/20 14:53:59 9:38 6672 6106 ims 3587080982063726 310410214827503 APPLE IPHONE8 9180 05/04/20 14:56:59 12:03 9761 6496 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 379 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003023 The information contained hereCtoNyFti NITIAL not for general distribution. EFTA_00I 17099 EFTA01251623 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: 18:56:33 Data Usage For: Item Conn. Conn. Originating ET Bytes Byte. Apn INC' DUI MAKE MODEL Data Time Number Up Dn (OTC) 9181 05/04/20 15:03:35 19:53 7358 7526 ins 3587080982063726 310410214827503 APPLE 1PHONE8 9182 05/04/20 15:03:36 19:53 7526 7202 ins 3587080982063726 310410214827503 APPLE 1PHONE8 9183 05/04/20 15:11:59 60:00 21324 9800 ins -1 310410214827503 9184 05/04/20 15:23:29 4:22 7465 4964nxtganpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 9185 05/04/20 15:27:51 1:05 7529 5069ruftganpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 9186 05/04/20 15:28:55 1:25 5222 6055 nxtgenpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 9187 05/04/20 15:28:56 1:25 6055 4934ruftganpho 3587080982063726 310410214827503 APPLE !PHONES no 9188 05/04/20 15:30:21 0:35 6925 4964 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9189 05/04/20 15:30:55 2:42 5221 6055 nxtgenpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 9190 05/04/20 15:30:56 2:42 6055 4933ruftganpho 3587080982063726 310410214827503 APPLE !PHONES no 9191 05/04/20 15:33:38 0:50 6053 4897 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9192 05/04/20 15:34:28 12:37 20219 37661ruftganpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 9193 05/04/20 15:34:29 12:37 37661 19739ruftganpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 9194 05/04/20 15:47:06 2:32 0 Ormtganpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 9195 05/04/20 15:49:37 9:11 7772 7017 nxtgenpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 9196 05/04/20 15:49:38 9:11 7017 7484 nxtgenpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 9197 05/04/20 15:58:49 19:47 78050 98861 nxtgenpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 9198 05/04/20 16:11:59 60:00 8496 3004 imp -1 310410214827503 9199 05/04/20 16:18:35 2:21 4504 5859 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9200 05/04/20 16:18:36 2:22 5859 4216 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9201 05/04/20 16:20:57 0:49 5220 6107 nxtgenpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 9202 05/04/20 16:20:58 0:49 6107 4932ruftganpho 3587080982063726 310410214827503 APPLE 1PHONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 380 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003024 The information contained hereCtoNelt NTniliAL not for general distribution. EF-EA_00117100 EFTA01251624 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in % C ‘"le .1,00 wd. AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage for: Item Conn. Conn. Originating ET Bytes Bytes Apn IN= INBI MARC SOD= Date Time Number Up Dn (OTC) 9203 05/04/20 16:21:47 0:35 6341 5776 nmtgonpho 3587080982063726 310410214827503 APPLE DRONES no 9204 05/04/20 16:22:21 2:14 5220 6107 nmtgonpho 3587080982063726 310410214827503 APPLE DRONES no 9205 05/04/20 16:22:22 2:14 6107 4932 nmtgonpho 3587080982063726 310410214827503 APPLE DRONES no 9206 05/04/20 16:24:36 34:15 8257 6132 nmtgonpho 3587080982063726 310410214827503 APPLE DRONES no 9207 05/04/20 16:58:50 2:03 5222 6055 nmtgonpho 3587080982063726 310410214827503 APPLE IfROME8 no 9208 05/04/20 16:58:51 2:03 6055 4934 nmtgonpho 3587080982063726 310410214827503 APPLE IfROME8 no 9209 05/04/20 17:00:54 12:41 6228 5006 nmtgonpho 3587080982063726 310410214827503 APPLE IfROME8 no 9210 05/04/20 17:11:59 60:00 8480 3020 imo -1 310410214827503 9211 05/04/20 17:13:34 2:03 5117 6199 nmtgonpho 3587080982063726 310410214827503 APPLE DRONES no 9212 05/04/20 17:13:35 2:03 6055 4829 nmtgonpho 3587080982063726 310410214827503 APPLE DRONES no 9213 05/04/20 17:15:38 17:22 7754 5228 nmtgonpho 3587080982063726 310410214827503 APPLE DRONES no 9214 05/04/20 17:32:59 2:09 5220 6107 nmtgonpho 3587080982063726 310410214827503 APPLE DRONES no 9215 05/04/20 17:33:00 2:09 6107 4932 nmtgonpho 3587080982063726 310410214827503 APPLE DRONES no 9216 05/04/20 17:35:09 8:40 6055 4901 nxtgonpho 3587080982063726 310410214827503 APPLE IfROME8 no 9217 05/04/20 17:43:48 2:26 5277 6209 nmtgonpho 3587080982063726 310410214827503 APPLE IfROME8 no 9218 05/04/20 17:43:50 2:25 6209 4989 nmtgonpho 3587080982063726 310410214827503 APPLE IfROME8 no 9219 05/04/20 17:46:15 3:58 6219 5125 nmtgonpho 3587080982063726 310410214827503 APPLE IfROME8 no 9220 05/04/20 17:50:12 22:00 13726 24680 nmtgonpho 3587080982063726 310410214827503 APPLE IfROME8 no 9221 05/04/20 17:50:13 22:00 24680 14077 nmtgonpho 3587080982063726 310410214827503 APPLE IfROME8 no 9222 05/04/20 18:11:59 60:00 8496 2928 imo -1 310410214827503 9223 05/04/20 18:12:13 4:40 48 0 nmtgonpho 3587080982063726 310410214827503 APPLE IfROME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 381 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003025 The information contained hereCtoNyFti PsiTieMit not for general distribution. EF-EAJVII7101 EFTA01251625 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: 18:56:34 Data Usage For: Item Conn. Conn. Originating ET Bytes Byte. Apn Der IMBI MART MOD= Date Time Number Up Dn (UTC) 9224 05/04/20 18:16:52 1:58 4998 11569 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 9225 05/04/20 18:16:53 1:58 11569 4710 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS no 9226 05/04/20 18:18:51 8:05 6873 4966 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 9227 05/04/20 18:26:55 8:44 5221 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9228 05/04/20 18:26:56 8:44 6055 4933 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 9229 05/04/20 18:35:40 3:11 41645 7334 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9230 05/04/20 18:38:50 3:02 5218 6037 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 9231 05/04/20 18:38:51 3:02 6037 4930 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 9232 05/04/20 18:41:53 29:10 42701 58145 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9233 05/04/20 18:41:54 29:10 58145 42317 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9234 05/04/20 19:11:04 3:23 8690 5512 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9235 05/04/20 19:11:59 60:00 7140 2912 imp -1 310410214827503 9236 05/04/20 19:14:26 9:26 4607 5823 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 9237 05/04/20 19:14:28 9:25 5823 4319 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 9238 05/04/20 19:23:53 5:11 192 Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9239 05/04/20 19:23:54 5:10 4608 5823 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 9240 05/04/20 19:23:54 5:11 0 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 9241 05/04/20 19:23:55 5:10 5823 4320 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9242 05/04/20 19:29:06 1:05 6055 4796 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 9243 05/04/20 19:30:10 0:46 5221 6107 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 9244 05/04/20 19:30:12 0:45 6107 4933 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 382 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003026 The information contained hereCoNftli not for general distribution. EFTA 00117102 EFTA01251626 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: 10:56:34 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytom Apn INLI IMISI MARL MOLL Date Time NUmbor Up Dn (UTC) 9245 05/04/20 19:30:57 0:38 6873 4965 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9246 05/04/20 19:31:34 10:11 5285 6873 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9247 05/04/20 19:31:35 10:11 6873 5627 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9248 05/04/20 19:41:46 60:00 24906 29683 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9249 05/04/20 20:11:59 60:00 17192 6264 ims -1 310410214827503 9250 05/04/20 20:41:46 12:35 0 1365 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9251 05/04/20 20:54:20 2:02 5221 6055 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9252 05/04/20 20:54:21 2:02 6055 4933 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9253 05/04/20 20:56:23 4:09 6107 4902 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9254 05/04/20 21:00:31 3:13 5118 6055 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9255 05/04/20 21:00:32 3:13 6055 4830 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9256 05/04/20 21:03:45 2:21 6857 4966 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9257 05/04/20 21:06:05 2:33 5220 6055 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9258 05/04/20 21:06:06 2:33 6055 4932 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9259 05/04/20 21:08:38 2:43 5117 6107 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9260 05/04/20 21:08:39 2:43 6107 4829 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9261 05/04/20 21:11:21 9:02 5217 6105 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9262 05/04/20 21:11:22 9:02 6105 4929 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9263 05/04/20 21:11:59 60:00 15388 9692 ims -1 310410214827503 9264 05/04/20 21:20:24 3:02 9728 9803 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9265 05/04/20 21:20:25 3:02 9803 9440 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 383 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003027 The information contained heraleeNyFti N:FrliAL not for general distribution. EF-EA_00117103 EFTA01251627 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .... `-a '•-••• s f AT&T OTC. Run Date: 06/17/2020 Run Time: 1S:56:34 Data Usage For: Item Conn. Conn. originating ET Bytes Byte. Apn INSI MARL NICOLL Date Time Number Up Dn (OTC) 9266 05/04/20 21:23:27 11:15 7820 8864 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 9267 05/04/20 21:23:28 11:15 8864 7532 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9268 05/04/20 21:34:43 1:08 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9269 05/04/20 21:35:50 4:12 288 48 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9270 05/04/20 21:35:52 4:11 48 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9271 05/04/20 21:40:03 3:01 6873 4966 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9272 05/04/20 21:43:03 2:07 5216 6105 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9273 05/04/20 21:43:04 2:07 6105 4928 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9274 05/04/20 21:45:11 0:56 7581 5070 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9275 05/04/20 21:46:06 2:20 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 9276 05/04/20 21:46:07 2:19 5388 6329 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 9277 05/04/20 21:46:08 2:19 6329 5100 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 9278 05/04/20 21:46:08 2:19 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9279 05/04/20 21:48:27 1:14 8722 5271 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9280 05/04/20 21:49:40 2:17 5285 6873 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9281 05/04/20 21:49:41 2:17 6873 4997 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9282 05/04/20 21:51:58 1:19 7465 4966 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9283 05/04/20 21:53:17 2:22 5216 6105 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9284 05/04/20 21:53:18 2:22 6105 4928 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9285 05/04/20 21:55:40 1:26 6871 4960 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 9286 05/04/20 21:57:05 2:26 5281 7463 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 384 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003028 The information contained hereCteNe NsTroliAL not for general distribution. EFTA 00117104 EFTA01251628 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: 18:56:34 Data Osage For: Item Conn. Conn. Originating LT Bytes Byte. Apn INLI INBI NUT NICOLL Date Time Number Up Dn (OTC) 9287 05/04/20 21:57:06 2:26 7463 4993 nxtgonpho 3587080982063726 310410214827503 APPLE no 9288 05/04/20 21:59:32 1:43 6055 4900 nxtgonpho 3587080982063726 310410214827503 APPLE no 9289 05/04/20 22:01:14 2:30 5220 6055 nxtgonpho 3587080982063726 310410214827503 APPLE no 9290 05/04/20 22:01:15 2:30 6055 4932 nxtgonpho 3587080982063726 310410214827503 APPLE no 9291 05/04/20 22:03:45 2:18 48 0 nxtgonpho 3587080982063726 310410214827503 APPLE no 9292 05/04/20 22:06:02 14:31 5221 6107 nxtgonpho 3587080982063726 310410214827503 APPLE no 9293 05/04/20 22:06:03 14:31 6107 17893 nxtgonpho 3587080982063726 310410214827503 APPLE no 9294 05/04/20 22:10:14 17:47 2503984 3457584 imo -1 310410214827503 9295 05/04/20 22:11:59 60:00 22572 13164 imo -1 310410214827503 9296 05/04/20 22:20:34 0:53 7447 4960 nxtgonpho 3587080982063726 310410214827503 APPLE no 9297 05/04/20 22:21:26 2:58 7997 9247 nxtgonpho 3587080982063726 310410214827503 APPLE no 9298 05/04/20 22:21:27 2:58 9247 7709 nxtgonpho 3587080982063726 310410214827503 APPLE no 9299 05/04/20 22:24:25 3:03 48 0 nxtgonpho 3587080982063726 310410214827503 APPLE no 9300 05/04/20 22:27:27 2:43 288 48 nxtgonpho 3587080982063726 310410214827503 APPLE no 9301 05/04/20 22:27:28 2:43 48 0 nxtgonpho 3587080982063726 310410214827503 APPLE no 9302 05/04/20 22:30:12 1:13 6067 5610 nxtgonpho 3587080982063726 310410214827503 APPLE no 9303 05/04/20 22:31:24 4:21 5116 6055 nxtgonpho 3587080982063726 310410214827503 APPLE no 9304 05/04/20 22:31:25 4:21 6055 4828 nxtgonpho 3587080982063726 310410214827503 APPLE no 9305 05/04/20 22:35:46 5:27 6055 4797 nxtgonpho 3587080982063726 310410214827503 APPLE no 9306 05/04/20 22:41:13 2:32 5113 6105 nxtgonpho 3587080982063726 310410214827503 APPLE no 9307 05/04/20 22:41:14 2:32 6105 4825 nxtgonpho 3587080982063726 310410214827503 APPLE no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 385 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003029 The information contained hereCtoNyFti PsiTniliAL not for general distribution. EF-EAJVII7105 EFTA01251629 MOBILITY 41111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ‘ •"les /10 1 AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage For: . Item Conn. Conn. Originating ET Bytes Bytes Min per pal MR= MODEL Data rime Nusbor Up Dn (UTC) 9308 05/04/20 22:43:46 1:19 6067 5608 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 9309 05/04/20 22:45:04 8:29 5112 6105 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9310 05/04/20 22:45:05 8:29 6105 4824 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 9311 05/04/20 22:48:38 0:29 1950 12442 mos -1 310410214827503 9312 05/04/20 22:53:34 1:42 6107 4900 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 9313 05/04/20 22:55:15 6:30 5280 6871 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9314 05/04/20 22:55:16 6:30 6871 4992 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9315 05/04/20 23:01:46 9:23 6053 4896 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 9316 05/04/20 23:11:09 15:24 5222 6228 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9317 05/04/20 23:11:10 15:24 6228 4934 nxtgonpho 3587080982063726 310410214827503 APPLE 'PROMS no 9318 05/04/20 23:11:59 60:00 22312 11460 ims -1 310410214827503 9319 05/04/20 23:22:32 0:28 2176 13538 ims -1 310410214827503 9320 05/04/20 23:26:34 1:25 48 OruMgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 9321 05/04/20 23:27:58 14:28 17147 18838 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9322 05/04/20 23:27:59 14:28 18838 17699 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9323 05/04/20 23:42:27 0:59 6055 4901 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 9324 05/04/20 23:43:25 8:32 5284 6208 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9325 05/04/20 23:43:27 8:31 6208 4996 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9326 05/04/20 23:51:58 0:49 7899 5600 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9327 05/04/20 23:52:46 2:24 5116 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 9328 05/04/20 23:52:47 2:24 6055 4828 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 9329 05/04/20 23:55:11 5:25 6873 4966 nxtgonpho 3587080982063726 310410214827503 APPLE /PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 386 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003030 The information contained her is not for general distribution. EF-EA_00117106 EFTA01251630 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in •--- `"" .. a.sti AT&T UTC. Run Data: 06/17/2020 Run Time: 16:56:34 Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn Iie' IMBI ten MODEL Data Time Number Up Dn Gnc) 9330 05/05/20 00:00:35 8:52 5117 6091 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9331 05/05/20 00:00:36 8:52 6091 4829 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9332 05/05/20 00:09:27 1:06 5220 6055 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9333 05/05/20 00:09:29 1:05 6055 4932 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9334 05/05/20 00:10:34 3:29 7184 4965 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9335 05/05/20 00:11:59 60:00 11904 4484 ims -1 310410214827503 9336 05/05/20 00:14:02 5:57 5221 6107 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9337 05/05/20 00:14:04 5:56 6107 4933 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9338 05/05/20 00:20:00 2:14 6052 4892 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9339 05/05/20 00:22:14 33:28 16485 14579 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9340 05/05/20 00:22:15 33:28 14579 16680 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9341 05/05/20 00:55:43 2:29 192 Onmtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9342 05/05/20 00:55:44 2:28 5117 6039 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9343 05/05/20 00:55:44 2:29 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9344 05/05/20 00:55:45 2:28 6039 4829 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9345 05/05/20 00:58:13 2:02 48 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9346 05/05/20 01:00:14 2:18 5113 6105 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9347 05/05/20 01:00:16 2:17 6105 4825 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9348 05/05/20 01:02:33 0:59 7463 4961 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9349 05/05/20 01:03:31 2:39 5116 6055 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9350 05/05/20 01:03:32 2:39 6055 4828 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 387 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003031 The information contained her is NeTniiiikE not for general distribution. EF-EA_00117107 EFTA01251631 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Tama: Data Usage Tor: Item Conn. Conn. Originating CT Bytes Bytom Apn INC' IASI MARL NODEL Data Time fluster OP on (OTC) 9351 05/05/20 01:06:10 2:19 5112 6053 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9352 05/05/20 01:06:12 2:19 6053 4824 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9353 05/05/20 01:08:31 1:32 7526 5061 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9354 05/05/20 01:10:03 15:12 5537 6408 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9355 05/05/20 01:10:04 15:12 6408 5249 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9356 05/05/20 01:11:59 60:00 12012 4752 imp -1 310410214827503 9357 05/05/20 01:25:16 0:58 7529 5070 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9358 05/05/20 01:26:13 2:20 5113 6053 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9359 05/05/20 01:26:14 2:20 6053 4825 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9360 05/05/20 01:28:34 0:41 48 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9361 05/05/20 01:29:14 2:32 5118 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9362 05/05/20 01:29:15 2:32 6055 4830 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9363 05/05/20 01:31:47 6:04 7593 5175 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9364 05/05/20 01:37:50 2:25 5117 6107 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9365 05/05/20 01:37:51 2:25 6107 4829 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9366 05/05/20 01:40:16 11:51 7465 6016 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9367 05/05/20 01:52:06 0:42 5164 6052 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9368 05/05/20 01:52:07 0:43 6052 4876 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9369 05/05/20 01:52:49 0:39 7465 4966 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9370 05/05/20 01:53:28 110:00 31037 35443 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9371 05/05/20 01:53:29 60:00 27646 27453 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 388 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003032 The information contained heraCtoNyFtli NeTniiiikE not for general distribution. EF-EA_00117108 EFTA01251632 MOBILITY 411111 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. originating ET Bytes Bytes Apn ItCEI INSI MARL NICOLL Data Time Number UP Dn (OTC) 9372 05/05/20 02:11:59 60:00 7264 2912 imp -1 310410214827503 9373 05/05/20 02:53:29 60:00 7797 7097 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9374 05/05/20 03:11:59 60:00 8712 3068 imp -1 310410214827503 9375 05/05/20 03:43:28 132:53 117220 102461 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9376 05/05/20 03:53:29 60:00 36703 51546 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9377 05/05/20 04:11:59 60:00 7156 2804 imp -1 310410214827503 9378 05/05/20 04:53:29 60:00 65758 65845 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9379 05/05/20 05:11:59 60:00 13708 4872 imp -1 310410214827503 9380 05/05/20 05:53:29 2:53 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9381 05/05/20 05:56:21 9:18 5222 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9382 05/05/20 05:56:22 9:19 6055 4934 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 9383 05/05/20 06:05:41 3:44 7529 5069 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9384 05/05/20 06:09:24 3:59 5218 6053 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9385 05/05/20 06:09:26 3:58 6053 4930 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9386 05/05/20 06:11:59 60:00 10440 4196 imp -1 310410214827503 9387 05/05/20 06:13:23 3:00 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 9388 05/05/20 06:13:24 2:59 5221 6055 nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 9389 05/05/20 06:13:25 3:00 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9390 05/05/20 06:13:26 2:59 6055 4933 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9391 05/05/20 06:16:24 6:48 6668 10323nxtgonpho 3587080982063726 310410214827503 APPLE IPMONE8 no 9392 05/05/20 06:16:25 6:48 10323 6380 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9393 05/05/20 06:23:13 2:14 7593 5175 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9394 05/05/20 06:25:26 3:28 5221 6107 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 389 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003033 The information contained hereCtoNyFti NeTiliAL not for general distribution. EF-EA_00117109 EFTA01251633 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ‘min# sw :assol AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn ICI ICI MARL MODEL Date Time Mater Up Dn (OTC) 9395 05/05/20 06:25:27 3:28 6107 4933 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9396 05/05/20 06:28:54 7:35 7727 8683 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9397 05/05/20 06:28:55 7:35 8683 7343 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9398 05/05/20 06:36:30 1:35 6067 5606 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9399 05/05/20 06:38:04 4:51 5220 6107 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 9400 05/05/20 06:38:05 4:51 6107 4932 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9401 05/05/20 06:42:55 7:48 5112 6053 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9402 05/05/20 06:42:56 7:48 6053 4824 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9403 05/05/20 06:50:44 2:11 5228 6205 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9404 05/05/20 06:50:45 2:11 6205 4940 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9405 05/05/20 06:52:56 1:33 7527 5065 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9406 05/05/20 06:54:28 7:45 5222 6107 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9407 05/05/20 06:54:29 7:46 6107 4934 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9408 05/05/20 07:02:14 2:11 5221 6055 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9409 05/05/20 07:02:15 2:11 6055 4933 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 9410 05/05/20 07:04:26 0:46 6933 5026 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9411 05/05/20 07:05:11 1:29 5221 6055 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9412 05/05/20 07:05:12 1:29 6055 4933 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9413 05/05/20 07:06:41 0:50 48 Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9414 05/05/20 07:07:31 3:34 5217 6105 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9415 05/05/20 07:07:32 3:34 6105 4929 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 390 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SONYGAL00003034 The information contained her is NsTiliAL not for general distribution. EF-EA_O0117II0 EFTA01251634 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in tr '`s ad AT&T s OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn Tier IMBI NICOLL Date Time Humber Up Dn (UTC) 9416 05/05/20 07:11:05 2:53 5163 6104 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9417 05/05/20 07:11:06 2:53 6104 4875 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9418 05/05/20 07:11:59 60:00 3408 1340 ims -1 310410214827503 9419 05/05/20 07:13:59 4:41 5216 6053 nxtgonpho 3587080982063726 310410214827503 APPLE INIONZ8 no 9420 05/05/20 07:14:00 4:41 6053 4928 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9421 05/05/20 07:18:41 1:20 48 0 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9422 05/05/20 07:20:00 2:11 5221 6107 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9423 05/05/20 07:20:02 2:11 6107 4933 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9424 05/05/20 07:22:12 17:38 15311 17941 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9425 05/05/20 07:22:13 17:38 17941 15968 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9426 05/05/20 07:37:17 60:00 16811 9968 ims -1 310410214827503 9427 05/05/20 07:39:51 2:28 7567 5231 nxtgonpho 3587080982063726 310410214827503 APPLE INIONZ8 no 9428 05/05/20 07:42:18 8:46 5165 6052 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9429 05/05/20 07:42:19 8:46 6052 4877 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9430 05/05/20 07:51:04 6:33 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9431 05/05/20 07:51:06 6:31 288 48 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9432 05/05/20 07:51:06 6:32 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9433 05/05/20 07:51:07 6:31 48 0 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9434 05/05/20 07:57:38 7:11 4608 5823 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9435 05/05/20 07:57:39 7:11 5823 4320 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9436 05/05/20 08:04:50 1:37 6873 4965 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 391 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003035 The information contained her is NTrifikE not for general distribution. EFTA_OOI 1711 I EFTA01251635 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in •...al /14 ' "‘S I° AT&T OTC. Run Date: 06/17/2020 Run Time: 10:56:34 Data Usage For: Item Conn. Conn. Originating ET Bytes Bytoa Apn INC' IMISI MARL MOLL Date Time NUmbor Up Dn (UTC) 9637 05/05/20 08:06:26 2:20 288 48 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONZ8 no 9438 05/05/20 08:06:27 2:20 48 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9439 05/05/20 08:08:47 0:34 302 425ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9440 05/05/20 08:09:20 1:54 288 48ruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9441 05/05/20 08:09:22 1:53 48 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9442 05/05/20 08:11:15 1:03 48 Onxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9443 05/05/20 08:11:59 60:00 0 0 ins -1 310410214827503 9444 05/05/20 08:12:17 18:04 2528 1768 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9445 05/05/20 08:12:18 18:04 1768 1952 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9446 05/05/20 08:30:22 138:31 192 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9447 05/05/20 08:30:23 60:00 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9448 05/05/20 08:30:23 138:30 7281 7109 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9449 05/05/20 08:30:24 60:00 7109 8682 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9450 05/05/20 08:37:17 60:00 6816 2648 ins -1 310410214827503 9451 05/05/20 09:11:59 60:00 0 0 ins -1 310410214827503 9452 05/05/20 09:30:23 60:00 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9453 05/05/20 09:30:24 60:00 0 92 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9454 05/05/20 09:37:17 60:00 6908 2880 ins -1 310410214827503 9455 05/05/20 10:11:59 60:00 0 0 ins -1 310410214827503 9456 05/05/20 10:30:23 18:32 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9457 05/05/20 10:30:24 18:31 0 Oruftgenpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9458 05/05/20 10:37:17 60:00 7048 2664 ins -1 310410214827503 9459 05/05/20 11:11:59 19:44 0 0 ins -1 310410214827503 9460 05/05/20 11:37:17 60:00 10564 4328 ins -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 392 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003036 The information contained her is PsiTniliAL not for general distribution. EFTA 00117112 EFTA01251636 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: 06/17/2020 Run T104: 18:86:34 Data usage For: Item conn. Conn. originating Er Bytes Bytes Apn IMCI IMBI MAME MODEL Date Time Muster Up Dn (OTC) 9461 05/05/20 12:37:17 60:00 12012 4396 ims -1 310410214827503 9462 05/05/20 13:37:17 60:00 7048 2772 ims -1 310410214827503 9463 05/05/20 14:37:17 60:00 8604 3144 ims -1 310410214827503 9464 05/05/20 15:37:17 60:00 13584 4700 ims -1 310410214827503 9465 05/05/20 16:37:17 60:00 6816 2756 ins -1 310410214827503 9466 05/05/20 17:37:17 60:00 12012 4612 ims -1 310410214827503 9467 05/05/20 18:37:17 60:00 8604 2896 ims -1 310410214827503 9468 05/05/20 19:37:17 60:00 8156 2988 ims -1 310410214827503 9469 05/05/20 20:37:17 60:00 48516 33388 ims -1 310410214827503 9470 05/05/20 20:48:56 0:28 1816 13698 ims -1 310410214827503 9471 05/05/20 21:24:53 0:31 2905 26521 ims -1 310410214827503 9472 05/05/20 21:36:36 0:42 10886 16120 ins -1 310410214827503 9473 05/05/20 21:37:17 60:00 13732 5964 ins -1 310410214827503 9474 05/05/20 22:37:17 60:00 10580 4272 ims -1 310410214827503 9475 05/05/20 23:37:17 60:00 7264 2772 ims -1 310410214827503 9476 05/06/20 00:37:17 60:00 46876 28300 ims -1 310410214827503 9477 05/06/20 00:40:44 0:30 2586 15456 ims -1 310410214827503 9478 05/06/20 00:41:32 0:01 0 0 ims -1 310410214827503 9479 05/06/20 00:41:36 0:08 3097 5761 in -1 310410214827503 9480 05/06/20 00:41:47 0:09 5571 18807 ins -1 310410214827503 9481 05/06/20 01:37:17 20:07 216 108 ims -1 310410214827503 9482 05/06/20 01:52:03 60:00 15221 9018 in -1 310410214827503 9483 05/06/20 02:52:03 60:00 10176 3300 in -1 310410214827503 9484 05/06/20 03:52:03 60:00 8496 3036 in -1 310410214827503 9485 05/06/20 04:52:03 60:00 8496 2928 in -1 310410214827503 9486 05/06/20 05:29:39 60:00 15001 8566 in -1 310410214827503 9487 05/06/20 05:52:03 60:00 0 0 in -1 310410214827503 9488 05/06/20 06:29:39 60:00 7048 2772 ins -1 310410214827503 9489 05/06/20 06:52:03 60:00 0 0 ims -1 310410214827503 9490 05/06/20 07:29:39 60:00 6816 2648 ims -1 310410214827503 9491 05/06/20 07:52:03 27:06 0 0 ims -1 310410214827503 9492 05/06/20 08:19:09 60:00 16823 11964 ins -1 310410214827503 9493 05/06/20 08:29:39 60:00 0 0 in -1 310410214827503 9494 05/06/20 09:19:09 60:00 8388 2896 in -1 310410214827503 9495 05/06/20 09:29:39 60:00 0 0 in -1 310410214827503 9496 05/06/20 10:19:09 60:00 7000 2756 in -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 393 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003037 The information contained her is PsiTi not for general distribution. thE EFTA_001 171 13 EFTA01251637 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in tr‘"Ii°a aa# d AT&T OTC. Run Date: 06/17/2020 Run Time: 18:56:35 Data Osage For: Item Conn. Conn. originating Tr Bytes Bytoa Apn IMEI IMSI MAKE 100D6 Date Time Number Up Dn (OTC) 9497 05/06/20 10:29:39 60:00 0 0 isms -1 310410214827503 9498 05/06/20 11:19:09 60:00 10332 4188 isms -1 310410214827503 9499 05/06/20 11:29:39 41:51 0 0 isms -1 310410214827503 9500 05/06/20 12:19:09 60:00 10904 4396 isms -1 310410214827503 9501 05/06/20 13:19:09 60:00 10176 3144 isms -1 310410214827503 9502 05/06/20 14:19:09 60:00 10224 4204 isms -1 310410214827503 9503 05/06/20 15:19:09 60:00 10284 3252 isms -1 310410214827503 9504 05/06/20 16:19:09 60:00 8944 3252 isms -1 310410214827503 9505 05/06/20 17:19:09 60:00 15420 6060 isms -1 310410214827503 9506 05/06/20 18:19:09 48:38 8000 5480 isms -1 310410214827503 9507 05/06/20 18:58:46 3:12 13897 10790 isms -1 310410214827503 9508 05/06/20 19:02:39 60:00 16399 10236 isms -1 310410214827503 9509 05/06/20 20:02:39 60:00 8480 2896 ims -1 310410214827503 9510 05/06/20 21:02:39 60:00 10008 3972 ims -1 310410214827503 9511 05/06/20 22:02:39 60:00 8712 3112 imp -1 310410214827503 9512 05/06/20 23:02:39 60:00 0 0 ims -1 310410214827503 9513 05/06/20 23:15:42 60:00 18753 9868 ims -1 310410214827503 9514 05/07/20 00:02:39 60:00 0 0 ims -1 310410214827503 9515 05/07/20 00:15:42 60:00 6924 2756 ims -1 310410214827503 9516 05/07/20 01:02:39 60:00 0 0 ims -1 310410214827503 9517 05/07/20 01:15:42 60:00 8604 2928 ims -1 310410214827503 9518 05/07/20 02:02:39 52:29 0 0 ims -1 310410214827503 9519 05/07/20 02:15:42 60:00 6924 2588 ims -1 310410214827503 9520 05/07/20 03:15:42 60:00 18564 6264 ims -1 310410214827503 9521 05/07/20 04:15:42 60:00 10176 3284 ims -1 310410214827503 9522 05/07/20 05:15:42 60:00 10240 4360 ims -1 310410214827503 9523 05/07/20 06:15:42 60:00 8944 3268 ims -1 310410214827503 9524 05/07/20 07:15:42 60:00 6924 2896 ims -1 310410214827503 9525 05/07/20 08:15:42 60:00 15096 5660 ims -1 310410214827503 9526 05/07/20 09:15:42 60:00 8928 3268 ims -1 310410214827503 9527 05/07/20 10:15:42 60:00 9960 3176 ims -1 310410214827503 9528 05/07/20 11:15:42 34:25 3516 1232 ims -1 310410214827503 9529 05/07/20 11:47:06 34:37 11893 7738 ims -1 310410214827503 9530 05/07/20 12:21:54 60:00 15463 9040 ims -1 310410214827503 9531 05/07/20 13:21:54 60:00 10068 3144 ims -1 310410214827503 9532 05/07/20 14:21:54 60:00 21356 15812 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 394 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003038 The information contained hereCtoNyFti NTifikE not for general distribution. EF-EAJVII7II4 EFTA01251638 MOBILITY 4.11, 2996479 06/17/2020 AT&T hes queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in .....,,,• `•-s"" AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item cone. Conn. Originating ET Sytes Bytes Apn IMEI INSI MANE MODEL Date Time Number Up Dn (LTC) 9533 05/07/20 14:49:09 0:32 2536 14379 ims -1 310410214827503 9534 05/07/20 15:21:54 60:00 7220 3004 ims -1 310410214827503 9535 05/07/20 16:21:54 60:00 28200 18868 ims -1 310410214827503 9536 05/07/20 17:02:53 0:35 2394 14527 ims -1 310410214827503 9537 05/07/20 17:21:54 41:35 22984 17548 ims -1 310410214827503 9538 05/07/20 17:47:52 0:33 4501 16129 ims -1 310410214827503 9539 05/07/20 18:05:33 60:00 15313 9310 ims -1 310410214827503 9540 05/07/20 19:05:33 60:00 27184 17864 ims -1 310410214827503 9541 05/07/20 19:11:56 0:30 2653 13920 ims -1 310410214827503 9542 05/07/20 19:16:15 0:07 0 104 ims -1 310410214827503 9543 05/07/20 20:05:33 40:01 3532 1836 ims -1 310410214827503 9544 05/07/20 23:13:14 1:05 13325 11049 ims -1 310410214827503 9545 05/07/20 23:32:34 60:00 77325 44204 ims -1 310410214827503 9546 05/07/20 23:32:43 0:58 6037 4896 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9547 05/07/20 23:32:47 0:29 4810 15192 ims -1 310410214827503 9548 05/07/20 23:33:41 15:43 30800 40459 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9549 05/07/20 23:33:41 15:44 40459 31256 nxtgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no 9550 05/07/20 23:33:45 0:02 0 0 ims -1 310410214827503 9551 05/07/20 23:33:54 0:41 8915 16172 ims -1 310410214827503 9552 05/07/20 23:49:25 15:19 8198 15512 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9553 05/07/20 23:49:26 15:19 15512 7910 nxtgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no 9554 05/08/20 00:04:44 17:37 21748 37123 nxtgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no 9555 05/08/20 00:04:45 17:37 37123 21268 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9556 05/08/20 00:18:57 0:28 1942 18297 ims -1 310410214827503 9557 05/08/20 00:22:22 4:28 7529 5070 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9558 05/08/20 00:26:49 24:56 5851 6536 nxtgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 9559 05/08/20 00:26:50 24:56 6536 5563 nxtgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 9560 05/08/20 00:32:34 60:00 10160 3176 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 395 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003039 The information contained hereCtoNfti PsisTiliAL not for general distribution. EF-EA_00117115 EFTA01251639 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in %°67. ‘"Ii° ., sea$ AT&T OTC. Run Date: 06/17/2020 Run Time: 1S:56:35 Data Usage Tor: Item Conn. Conn. Originating TT Bytes Bytes Apn ISM' IMBI teUtT MOTS Date Time Number Up Dn (OTC) 9561 05/08/20 00:51:46 4:14 5875 4321 nxtgenpho 3587080982063726 310410214827503 APPLE IDMONZ8 no 9562 05/08/20 00:56:00 1:47 5221 6107 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 9563 05/08/20 00:56:01 1:47 6107 4933 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 9564 05/08/20 00:57:48 38:44 10174 11093 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 9565 05/08/20 01:32:34 60:00 6924 2680 ims -1 310410214827503 9566 05/08/20 01:36:31 1:57 5285 6925 nxtgenpho 3587080982063726 310410214827503 APPLE IDMONZ8 no 9567 05/08/20 01:36:32 1:57 6925 4997 nxtgenpho 3587080982063726 310410214827503 APPLE IDMONZ8 no 9568 05/08/20 01:38:29 6:27 7529 5070 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 9569 05/08/20 01:44:55 2:03 6072 6437 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 9570 05/08/20 01:44:56 2:03 6437 5784 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 9571 05/08/20 01:46:59 5:21 35763 29661 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 9572 05/08/20 01:52:19 2:03 5221 6055 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 9573 05/08/20 01:52:20 2:03 6055 4933 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 9574 05/08/20 01:54:23 12:08 29799 21807 nxtgenpho 3587080982063726 310410214827503 APPLE IDMONZ8 no 9575 05/08/20 02:06:30 2:16 5756 10555 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 9576 05/08/20 02:06:32 2:15 10555 5468 nxtgenpho 3587080982063726 310410214827503 APPLE IDMONZ8 no 9577 05/08/20 02:08:47 18:24 68368 11439 nxtgenpho 3587080982063726 310410214827503 APPLE IDMONZ8 no 9578 05/08/20 02:27:10 0:58 5222 6023 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 9579 05/08/20 02:27:12 0:57 6023 4934 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 9580 05/08/20 02:28:09 2:10 5390 6809 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 9581 05/08/20 02:28:10 2:10 6809 5102 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 396 AT&T does not retain records that can definitively show whether a transaction was PsiTniliAL customer initiated or AT&T's network initiated the data transaction. SDNYGM00003040 The information contained hereetoNftle not for general distribution. EF-EA_00117116 EFTA01251640 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in tr '`s ao AT&T s arc. Run Data: 06/17/2020 Run Tuna: Data Osage For: Itea Conn. Conn. Originating ET Bytes Byte. Apn INDI ISIS I teal NICOLL Data Time Number UP Dn /OTC) 9582 05/08/20 02:30:20 24:25 10926 15007 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 9583 05/08/20 02:32:34 14:39 5212 1712 ims 3587080982063726 310410214827503 APPLE 'PHONES 9584 05/08/20 02:47:12 0:46 81196 4612 ims 3587080982063726 310410214827503 APPLE 'PHONES 9585 05/08/20 02:47:13 0:45 12268 4612 ims 3587080982063726 310410214827503 APPLE 'PHONES 9586 05/08/20 02:47:58 60:00 13476 4516 ims 3587080982063726 310410214827503 APPLE 'PHONES 9587 05/08/20 02:54:44 2:04 5116 6023 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9588 05/08/20 02:54:46 2:03 6023 4828 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9589 05/08/20 02:56:49 11:48 6438 5421 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 9590 05/08/20 03:08:37 30:00 19917 31074 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9591 05/08/20 03:08:38 60:00 60066 41117 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9592 05/08/20 03:38:37 34:47 20279 28992 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9593 05/08/20 03:47:58 60:00 10440 4396 ims 3587080982063726 310410214827503 APPLE !PHONES 9594 05/08/20 04:08:38 4:47 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9595 05/08/20 04:13:25 0:05 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9596 05/08/20 04:14:06 31:48 12865 13586 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9597 05/08/20 04:14:07 31:48 13586 13207 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9598 05/08/20 04:45:55 8:47 5218 6021 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 9599 05/08/20 04:45:56 8:47 6021 4930 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9600 05/08/20 04:47:58 60:00 6816 2788 ims 3587080982063726 310410214827503 APPLE !PHONES 9601 05/08/20 04:54:42 2:13 5221 6023 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9602 05/08/20 04:54:43 2:13 6023 4933 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9603 05/08/20 04:56:56 1:09 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9604 05/08/20 04:58:04 8:22 5693 6287 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 397 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003041 The information contained her is NsTroliAL not for general distribution. EF-EA_O0117II7 EFTA01251641 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T arc. Run pato: 06/17/2020 Run Time: 1S:56:33 Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn IN= Mal MARC Men Date Time Number Up On (OTC) 9605 05/08/20 04:58:05 8:22 6287 5309 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 9606 05/08/20 05:06:27 0:05 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 9607 05/08/20 05:06:35 7:56 7497 5174 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 9608 05/08/20 05:14:30 2:05 5281 6135 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 9609 05/08/20 05:14:31 2:05 6135 4993 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 9610 05/08/20 05:16:36 11:35 6280 5129 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9611 05/08/20 05:28:10 21:08 7354 7176 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 9612 05/08/20 05:28:11 21:08 7176 7066 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 9613 05/08/20 05:47:58 60:00 8388 2928 ins 3587080982063726 310410214827503 APPLE DRONES 9614 05/08/20 05:49:19 1:18 48 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9615 05/08/20 05:50:37 31:28 5763 6786 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 9616 05/08/20 05:50:38 31:28 6786 5475 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 9617 05/08/20 06:22:06 1:37 6127 4961 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 9618 05/08/20 06:23:42 5:38 5281 6083 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 9619 05/08/20 06:23:44 5:37 6083 4993 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9620 05/08/20 06:29:21 1:05 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE DRONES no 9621 05/08/20 06:30:26 2:09 5220 6023 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 9622 05/08/20 06:30:27 2:09 6023 4932 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9623 05/08/20 06:32:36 4:27 7561 5279 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9624 05/08/20 06:37:02 7:25 5218 6073 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9625 05/08/20 06:37:03 7:25 6073 4930 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 398 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003042 The information contained her is not for general distribution. EF-EA_O0117II8 EFTA01251642 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T arc. Run Data: 06/17/2020 Run Tame: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytom Apn INC' IMISI NAYX MODEL Data Time Dumber Up Dn (UTC) 9626 05/08/20 06:42:35 60:00 16895 9156 ime -1 310410214827503 9627 05/08/20 06:44:28 2:03 7497 5071 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9628 05/08/20 06:46:30 62:49 31824 36266 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9629 05/08/20 06:46:31 60:00 36266 33759 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9630 05/08/20 06:47:58 60:00 0 0 vas 3587080982063726 310410214827503 APPLE !PHONES 9631 05/08/20 07:42:35 60:00 6924 2864 vas -1 310410214827503 9632 05/08/20 07:46:31 2:49 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9633 05/08/20 07:47:58 60:00 0 0 imo 3587080982063726 310410214827503 APPLE !PHONES 9634 05/08/20 07:49:20 0:41 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9635 05/08/20 07:50:01 167:40 10826 10753 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9636 05/08/20 07:50:02 60:00 7500 6508 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9637 05/08/20 08:42:35 60:00 6816 2648 imo -1 310410214827503 9638 05/08/20 08:47:58 60:00 0 0 imp 3587080982063726 310410214827503 APPLE !PRONGS 9639 05/08/20 08:50:02 60:00 1936 2665 nxtgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 9640 05/08/20 09:42:35 60:00 15048 4716 imo -1 310410214827503 9641 05/08/20 09:47:58 39:56 0 0 imp 3587080982063726 310410214827503 APPLE !PHONES 9642 05/08/20 09:50:02 47:40 1317 1365 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9643 05/08/20 10:37:42 1:45 0 Oruftgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 9644 05/08/20 10:39:27 31:40 8578 7724 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9645 05/08/20 10:39:28 31:40 7724 8290 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9646 05/08/20 10:42:35 60:00 10332 4364 imo -1 310410214827503 9647 05/08/20 11:11:08 1:34 10196 5575 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9648 05/08/20 11:12:42 1:21 5280 6115 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9649 05/08/20 11:12:43 1:21 6115 4992 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 399 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003043 The information contained hereleeNelt NsTroliAL not for general distribution. EF-EA_O0117II9 EFTA01251643 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Tima: Data Usage For: Item Conn. Conn. Originating ET Bytes Byte. Apn Tier IMBI N1110: NICOLL Data Time Number OP Dn (OTC) 9650 05/08/20 11:14:04 34:04 13305 14294 nxtgonpho 3587080982063726 310410214827503 APPLE IrMONE8 no 9651 05/08/20 11:14:05 34:04 14294 12921 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9652 05/08/20 11:42:35 60:00 8496 2896 imo -1 310410214827503 9653 05/08/20 11:48:09 1:31 48 0 nxtgonpho 3587080982063726 310410214827503 APPLE INIONZ8 no 9654 05/08/20 11:49:40 19:07 10373 11970 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9655 05/08/20 11:49:41 19:07 11970 9989 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9656 05/08/20 12:08:48 1:33 6055 4901 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9657 05/08/20 12:10:20 9:02 11593 25083 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9658 05/08/20 12:10:22 9:01 25083 11305 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9659 05/08/20 12:19:23 0:53 6873 4965 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9660 05/08/20 12:20:16 11:32 5222 6055 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9661 05/08/20 12:20:17 11:32 6055 5879 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9662 05/08/20 12:31:48 2:10 14672 7357 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9663 05/08/20 12:31:50 2:10 7357 14384 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9664 05/08/20 12:33:59 1:04 0 Onxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9665 05/08/20 12:35:02 2:29 5317 6103 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9666 05/08/20 12:35:03 2:29 6103 4933 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9667 05/08/20 12:37:32 28:47 8821 7077 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no 9668 05/08/20 12:42:35 60:00 7032 2896 imo -1 310410214827503 9669 05/08/20 13:06:18 2:05 5284 6873 nxtgonpho 3587080982063726 310410214827503 APPLE INIONZ8 no 9670 05/08/20 13:06:20 2:04 6873 4996 nxtgonpho 3587080982063726 310410214827503 APPLE INIONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 400 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003044 The information contained heraCtoNyFti NTniiiikE not for general distribution. EFTA 00117120 EFTA01251644 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: 18:56:35 Data Osage for: Item Conn. Conn. Originating 2T Bytes Bytoa Apn INEI ISISI MARL NICOLL Date Time Number Up Dn (OTC) 9671 05/08/20 13:08:24 6:21 7593 5278 nxtgenpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 9672 05/08/20 13:14:44 2:03 5221 6107 nxtgonpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 9673 05/08/20 13:14:45 2:04 6107 4933 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9674 05/08/20 13:16:48 6:55 7529 5070 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9675 05/08/20 13:23:42 2:04 5220 6055 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 9676 05/08/20 13:23:44 2:03 6055 4932 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 9677 05/08/20 13:25:47 40:34 10151 10282 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 9678 05/08/20 13:42:35 60:00 18996 8952 ins -1 310410214827503 9679 05/08/20 14:06:20 13:50 5547 7806 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 9680 05/08/20 14:06:21 13:50 7806 5259 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 9681 05/08/20 14:20:11 0:59 7527 5172 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 9682 05/08/20 14:21:09 8:19 12360 13253 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9683 05/08/20 14:21:10 8:19 13253 11976 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9684 05/08/20 14:29:25 60:00 7851347 10301018 ims -1 310410214827503 9685 05/08/20 14:29:29 0:57 7465 5279 nxtgonpho 3587080982063726 310410214827503 APPLE 1PRONZ8 no 9686 05/08/20 14:30:25 2:04 5220 6107 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 9687 05/08/20 14:30:26 2:04. 6107 4932 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 9688 05/08/20 14:32:30 6:00 6873 4965 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 9689 05/08/20 14:38:29 2:04 5222 6055 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 9690 05/08/20 14:38:30 2:04 6055 4934 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 9691 05/08/20 14:40:34 4:43 8279 5598 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no 9692 05/08/20 14:42:35 60:00 6816 2648 mos 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 401 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003045 The information contained hereCtoNyFti Ns tit not for general distribution. EFTA 00117121 EFTA01251645 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ...„,,,• ••-s`" 1. AT&T arc. Run Date: 06/17/2020 Run Time: 1S:56:33 Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn INLI IMSI MARL MOLL Date Time flusher Up Dn (UTC) 9693 05/08/20 14:45:16 0:23 5221 6055 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9694 05/08/20 14:45:17 0:23 6055 4933 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9695 05/08/20 14:45:40 4:32 9812 7503 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9696 05/08/20 14:50:11 3:29 12904 13820 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9697 05/08/20 14:50:12 3:29 13820 12520 nxtgenpho 3587080982063726 310410214827503 APPLE IPROME8 no 9698 05/08/20 14:53:40 2:12 5877 6567 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 9699 05/08/20 14:53:41 2:12 6567 5589 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 9700 05/08/20 14:55:53 4:15 7191 7008 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9701 05/08/20 15:00:07 2:01 288 48 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 9702 05/08/20 15:00:08 2:01 48 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 9703 05/08/20 15:02:09 5:44 96 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 9704 05/08/20 15:07:52 18:05 13088 13852 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9705 05/08/20 15:07:53 18:05 13852 12608 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 9706 05/08/20 15:25:58 2:00 6053 4897 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 9707 05/08/20 15:27:57 8:31 5220 6055 nxtgenpho 3587080982063726 310410214827503 APPLE IPROME8 no 9708 05/08/20 15:27:58 8:31 6055 4932 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 9709 05/08/20 15:29:25 14:15 1809911 2356871 imo -1 310410214827503 9710 05/08/20 15:36:29 60:00 7209 9021 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 9711 05/08/20 15:42:35 60:00 10888 4504 imo -1 310410214827503 9712 05/08/20 16:36:29 2:43 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 9713 05/08/20 16:42:35 60:00 15528 5860 imo -1 310410214827503 9714 05/08/20 17:42:35 18:48 17980 11860 imo -1 310410214827503 9715 05/08/20 17:49:12 0:35 44326 50691 imo -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 402 AT&T does not retain records that can definitively show whether a transaction was PsisTileiNE customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003046 The information contained her is not for general distribution. EFTA 00117122 EFTA01251646 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Byte. Apn IMCI INSI NUT MODEL Data Time Hurter Up Dn (OTC) 9716 05/08/20 17:58:01 0:45 50425 84329 ims -1 310410214827503 9717 05/08/20 18:03:11 50:57 12884 8789 ims -1 310410214827503 9718 05/08/20 18:49:47 12:20 8547 6445 ims -1 310410214827503 9719 05/08/20 18:57:20 11:41 11453 10143 ims -1 310410214827503 9720 05/08/20 19:35:24 0:01 0 0 ims -1 310410214827503 9721 05/08/20 21:51:29 2:45 14858 9244 ims -1 310410214827503 9722 05/08/20 22:38:15 60:00 8331 6300 ims -1 310410214827503 9723 05/08/20 22:50:07 0:39 756 0 ims -1 310410214827503 9724 05/08/20 23:22:59 47:09 13525 8033 ims -1 310410214827503 9725 05/08/20 23:38:15 39:43 0 0 ims -1 310410214827503 9726 05/09/20 00:10:35 10:15 8313 6829 ims -1 310410214827503 9727 05/09/20 00:17:58 60:00 16443 9470 ims -1 310410214827503 9728 05/09/20 01:17:58 60:00 8496 3004 ims -1 310410214827503 9729 05/09/20 02:17:58 60:00 6924 2756 ims -1 310410214827503 9730 05/09/20 03:17:58 60:00 10176 3252 ims -1 310410214827503 9731 05/09/20 04:17:58 60:00 17008 6200 ims -1 310410214827503 9732 05/09/20 05:17:58 60:00 8820 3112 ims -1 310410214827503 9733 05/09/20 06:17:58 60:00 8496 3112 ims -1 310410214827503 9734 05/09/20 07:17:58 60:00 8620 3128 ims -1 310410214827503 9735 05/09/20 08:17:58 60:00 10332 4080 ims -1 310410214827503 9736 05/09/20 09:17:58 60:00 12120 4484 ims -1 310410214827503 9737 05/09/20 10:17:58 60:00 7140 2772 ims -1 310410214827503 9738 05/09/20 11:17:58 60:00 7032 2988 ims -1 310410214827503 9739 05/09/20 12:17:58 60:00 12904 3716 ims -1 310410214827503 9740 05/09/20 13:17:58 41:31 10068 3252 ims -1 310410214827503 9741 05/09/20 13:50:07 60:00 20336 10029 ims -1 310410214827503 9742 05/09/20 14:50:07 60:00 8620 3036 ims -1 310410214827503 9743 05/09/20 15:50:07 60:00 10284 3300 ims -1 310410214827503 9744 05/09/20 16:50:07 60:00 38404 17840 ims -1 310410214827503 9745 05/09/20 17:19:20 0:23 0 1548 ims -1 310410214827503 9746 05/09/20 17:21:04 60:00 6009 24664 nxtgenpho -1 310410214827503 no 9747 05/09/20 17:23:56 2:24 0 0 nxtgonpho -1 310410214827503 no 9748 05/09/20 17:50:07 60:00 7032 2896 ims -1 310410214827503 9749 05/09/20 18:21:04 60:00 0 0 nxtgonpho -1 310410214827503 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 403 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003047 The information contained heraCtoNelt NaTileikE not for general distribution. EFTA 00117123 EFTA01251647 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in tr '`s a.o AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn IMZI INSI MAKE MODEL Date Time Number Up Dn (OTC) 9750 05/09/20 18:50:07 60:00 10548 4288 ims -1 310410214827503 9751 05/09/20 19:21:04 60:00 0 0 nxtgonpho -1 310410214827503 no 9752 05/09/20 19:50:07 60:00 7140 2912 ims -1 310410214827503 9753 05/09/20 20:21:04 60:00 0 0 nxtgonpho -1 310410214827503 no 9754 05/09/20 20:50:07 60:00 13584 4964 ims -1 310410214827503 9755 05/09/20 21:21:04 0:38 0 0 nxtgonpho -1 310410214827503 no 9756 05/09/20 21:50:07 60:00 8512 3820 ims -1 310410214827503 9757 05/09/20 22:50:07 60:00 8496 3036 ims -1 310410214827503 9758 05/09/20 23:50:07 60:00 11904 4536 ims -1 310410214827503 9759 05/10/20 00:50:07 60:00 8200 2944 ims -1 310410214827503 9760 05/10/20 01:50:07 60:00 15048 4872 ims -1 310410214827503 9761 05/10/20 02:50:07 60:00 8496 3036 ims -1 310410214827503 9762 05/10/20 03:50:07 60:00 6816 2572 ims -1 310410214827503 9763 05/10/20 04:50:07 60:00 13584 4568 ims -1 310410214827503 9764 05/10/20 05:50:07 60:00 13568 4624 ims -1 310410214827503 9765 05/10/20 06:50:07 60:00 8496 3036 ims -1 310410214827503 9766 05/10/20 07:50:07 23:31 0 0 ims -1 310410214827503 9767 05/10/20 08:22:53 60:00 16863 10279 ims -1 310410214827503 9768 05/10/20 09:22:53 60:00 6924 2648 ims -1 310410214827503 9769 05/10/20 10:22:53 60:00 10068 3144 ims -1 310410214827503 9770 05/10/20 11:22:53 60:00 10688 4096 ims -1 310410214827503 9771 05/10/20 12:22:53 60:00 10224 4256 ims -1 310410214827503 9772 05/10/20 13:22:53 60:00 8928 3344 ims -1 310410214827503 9773 05/10/20 14:22:53 60:00 6924 2648 ims -1 310410214827503 9774 05/10/20 15:22:53 60:00 4980 1572 ims -1 310410214827503 9775 05/10/20 15:36:40 60:00 16705 9482 ims -1 310410214827503 9776 05/10/20 16:22:53 60:00 0 0 ims -1 310410214827503 9777 05/10/20 16:36:40 60:00 10192 3176 ims -1 310410214827503 9778 05/10/20 17:22:53 60:00 0 0 ims -1 310410214827503 9779 05/10/20 17:36:40 60:00 8712 3160 ims -1 310410214827503 9780 05/10/20 18:22:53 60:00 0 0 ims -1 310410214827503 9781 05/10/20 18:36:40 60:00 10548 4128 ims -1 310410214827503 9782 05/10/20 19:22:53 3:10 0 0 ims -1 310410214827503 9783 05/10/20 19:36:40 60:00 9960 3284 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 404 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003048 The information contained heraCtoNyFti NTniliAL not for general distribution. EFTA 00117124 EFTA01251648 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tt ‘"I°ai ed. AT&T OTC. Run Date: 06/17/2020 Run Time: 10:54:39 Data Osage For: Item Conn. Conn. Originating ET Bytes Bytes Apn flax INS' MAKE MODEL Date Time Number Up Dn (OTC) 9784 05/10/20 20:36:40 60:00 13800 4784 imp -1 310410214827503 9785 05/10/20 21:36:40 60:00 9960 3176 imp -1 310410214827503 9786 05/10/20 22:36:40 60:00 13616 4764 imp -1 310410214827503 9787 05/10/20 23:36:40 60:00 8604 3036 ims -1 310410214827503 9788 05/11/20 00:36:40 60:00 10284 3316 ims -1 310410214827503 9789 05/11/20 01:36:40 60:00 13584 4784 ims -1 310410214827503 9790 05/11/20 02:36:40 60:00 15156 4980 ims -1 310410214827503 9791 05/11/20 03:36:40 60:00 8728 3052 imp -1 310410214827503 9792 05/11/20 04:36:40 60:00 8604 3052 imp -1 310410214827503 9793 05/11/20 05:36:40 60:00 11796 4160 imp -1 310410214827503 9794 05/11/20 06:36:40 60:00 10440 4412 imp -1 310410214827503 9795 05/11/20 07:36:40 60:00 7048 2804 imp -1 310410214827503 9796 05/11/20 08:36:40 60:00 6924 2788 imp -1 310410214827503 9797 05/11/20 09:36:40 60:00 13476 4640 imp -1 310410214827503 9798 05/11/20 10:36:40 60:00 8620 3052 imp -1 310410214827503 9799 05/11/20 11:36:40 60:00 12012 4536 imp -1 310410214827503 9800 05/11/20 12:36:40 60:00 10068 3176 imp -1 310410214827503 9801 05/11/20 13:36:40 60:00 48464 27052 imp -1 310410214827503 9802 05/11/20 13:49:35 1:11 145669 197339 imp -1 310410214827503 9803 05/11/20 13:52:12 3:23 239229 740490 imp -1 310410214827503 9804 05/11/20 13:55:40 15:58 2164944 3609137 ins -1 310410214827503 9805 05/11/20 14:36:40 60:00 7048 2804 ims -1 310410214827503 9806 05/11/20 15:36:40 60:00 6816 2680 ims -1 310410214827503 9807 05/11/20 16:36:40 60:00 17116 6248 ims -1 310410214827503 9808 05/11/20 17:36:40 60:00 19144 8356 ims -1 310410214827503 9809 05/11/20 17:47:51 0:16 2771 9322 ims -1 310410214827503 9810 05/11/20 18:36:40 21:04 3500 1340 ins -1 310410214827503 9811 05/11/20 18:57:44 60:00 16779 9324 ins -1 310410214827503 9812 05/11/20 19:57:44 60:00 22580 12624 ins -1 310410214827503 9813 05/11/20 20:27:47 0:34 72748 73285 ins -1 310410214827503 9814 05/11/20 20:57:44 60:00 44500 28904 ins -1 310410214827503 9815 05/11/20 21:18:10 0:36 107625 75049 ins -1 310410214827503 9816 05/11/20 21:38:52 1:23 195183 210003 ins -1 310410214827503 9817 05/11/20 21:51:49 0:33 52635 82246 ins -1 310410214827503 9818 05/11/20 21:57:44 60:00 8496 3004 ins -1 310410214827503 9819 05/11/20 22:57:44 60:00 29488 17128 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 405 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003049 The information contained heraCtoNeli not for general distribution. NeTtAdti EFTA 00117125 EFTA01251649 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run pato: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. originating ET Bytes Bytom Apn EMI INSI MAKE MODEL Date Time Number Up Dn (OTC) 9820 05/11/20 23:14:43 0:01 0 0 imp -1 310410214827503 9821 05/11/20 23:14:55 34:02 5303342 7174148 imp -1 310410214827503 9822 05/11/20 23:57:44 60:00 7140 2880 imp -1 310410214827503 9823 05/12/20 00:57:44 60:00 8388 2896 imp -1 310410214827503 9824 05/12/20 01:57:44 60:00 7032 2772 imp -1 310410214827503 9825 05/12/20 02:57:44 60:00 13476 4576 imp -1 310410214827503 9826 05/12/20 03:57:44 60:00 11904 4504 imp -1 310410214827503 9827 05/12/20 04:57:44 60:00 6816 2648 imp -1 310410214827503 9828 05/12/20 05:57:44 60:00 11904 4328 imp -1 310410214827503 9829 05/12/20 06:57:44 60:00 10084 3252 imp -1 310410214827503 9830 05/12/20 07:57:44 60:00 9960 3144 imp -1 310410214827503 9831 05/12/20 08:57:44 60:00 8388 3112 imp -1 310410214827503 9832 05/12/20 09:57:44 60:00 14864 5380 imp -1 310410214827503 9833 05/12/20 10:57:44 60:00 8944 3236 imp -1 310410214827503 9834 05/12/20 11:57:44 60:00 9944 3252 imp -1 310410214827503 9835 05/12/20 12:57:44 60:00 18296 8056 imp -1 310410214827503 9836 05/12/20 13:53:12 0:17 6689 32998 imp -1 310410214827503 9837 05/12/20 13:57:44 60:00 8388 2896 imp -1 310410214827503 9838 05/12/20 14:57:14 60:00 39933 26910 imp -1 310410214827503 9839 05/12/20 14:57:44 3:34 0 0 imp -1 310410214827503 9840 05/12/20 15:01:36 31:03 4731971 5734935 imp -1 310410214827503 9841 05/12/20 15:32:50 20:00 3562355 2678994 imp -1 310410214827503 9842 05/12/20 15:57:14 60:00 29404 16584 imp -1 310410214827503 9843 05/12/20 16:50:26 0:39 3465 25823 imp -1 310410214827503 9844 05/12/20 16:57:14 60:00 10068 3360 imp -1 310410214827503 9845 05/12/20 17:57:14 35:26 16480 10092 imp -1 310410214827503 9846 05/12/20 18:18:43 9:04 1443138 1576561 imp -1 310410214827503 9847 05/12/20 19:10:47 60:00 47016 29960 imp -1 310410214827503 9848 05/12/20 19:13:21 7:37 1221325 1245961 imp -1 310410214827503 9849 05/12/20 19:28:52 0:35 2520 24318 imp -1 310410214827503 9850 05/12/20 20:10:47 60:00 7140 2696 imp -1 310410214827503 9851 05/12/20 21:10:47 60:00 18252 9048 imp -1 310410214827503 9852 05/12/20 22:00:26 28:39 5163431 5326429 imp -1 310410214827503 9853 05/12/20 22:10:47 60:00 9620 3828 imp -1 310410214827503 9854 05/12/20 23:10:47 60:00 8388 2928 imp -1 310410214827503 9855 05/13/20 00:10:47 60:00 16884 6124 isms -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 406 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003050 The information contained hereelaNyFtit NeTifikE not for general distribution. EF-EAJVII7126 EFTA01251650 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: 10:56:39 Data Osage For: Item Conn. Conn. Originating ET Bytes Bytom Apn IMEI IMSI MAKE MODEL Date Time Muster Up Dn (OTC) 9856 05/13/20 01:10:47 60:00 8820 3376 ims -1 310410214827503 9857 05/13/20 02:10:47 60:00 8604 3160 ims -1 310410214827503 9858 05/13/20 03:10:47 60:00 8264 3036 ims -1 310410214827503 9859 05/13/20 04:10:47 60:00 8388 2928 ims -1 310410214827503 9860 05/13/20 05:10:47 60:00 10332 4180 ims -1 310410214827503 9861 05/13/20 06:10:47 60:00 6816 2788 ims -1 310410214827503 9862 05/13/20 07:10:47 60:00 13476 4516 ims -1 310410214827503 9863 05/13/20 08:10:47 60:00 9960 3176 ims -1 310410214827503 9864 05/13/20 09:10:47 60:00 9960 3176 ims -1 310410214827503 9865 05/13/20 10:10:47 60:00 13600 4800 ims -1 310410214827503 9866 05/13/20 11:10:47 60:00 11904 4376 ims -1 310410214827503 9867 05/13/20 12:10:47 35:07 4980 1588 Ina -1 310410214827503 9868 05/13/20 12:52:00 60:00 8499 3130 imp -1 310410214827503 9869 05/13/20 12:53:18 6:34 12706 7464 ims -1 310410214827503 9870 05/13/20 13:18:35 42:26 22025 13226 ins -1 310410214827503 9871 05/13/20 13:52:00 9:42 0 0 ins -1 310410214827503 9872 05/13/20 14:01:42 60:00 9627 6820 ins -1 310410214827503 9873 05/13/20 14:18:58 3:27 8813 6685 ins -1 310410214827503 9874 05/13/20 14:25:33 15:55 9972 6620 ins -1 310410214827503 9875 05/13/20 15:01:42 60:00 0 0 ins -1 310410214827503 9876 05/13/20 15:35:00 10:31 10083 8691 ins -1 310410214827503 9877 05/13/20 15:56:38 45:32 393500 1834028 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9878 05/13/20 15:56:39 45:31 9362 7137 imp 3587080982063726 310410214827503 APPLE !PHONES 9879 05/13/20 16:01:42 60:00 0 0 imp -1 310410214827503 9880 05/13/20 16:42:11 12:09 65205 164586ruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 9881 05/13/20 16:42:15 12:05 9498 6268 imp 3587080982063726 310410214827503 APPLE !PHONES 9882 05/13/20 16:54:20 7:20 49260 52602ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9883 05/13/20 16:54:24 7:16 8458 8094 imp 3587080982063726 310410214827503 APPLE !PHONES 9884 05/13/20 17:01:39 2:03 606547 71250ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9885 05/13/20 17:01:40 2:02 6264 6672 imp 3587080982063726 310410214827503 APPLE !PHONES 9886 05/13/20 17:01:40 2:03 71250 606259ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9887 05/13/20 17:01:41 2:02 6672 6000 imp 3587080982063726 310410214827503 APPLE !PHONES 9888 05/13/20 17:01:42 60:00 0 0 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 407 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003051 The information contained her is WAAL not for general distribution. EFTA 00117127 EFTA01251651 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tr ‘"1° ased. i AT&T UTE. Run Data: 06/17/2020 Run Tame: 16:56:39 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn IND I IMSI MARL MODEL Date Time Number up Dn (DSC) 9889 05/13/20 17:03:43 1:56 13179 28968 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9890 05/13/20 17:03:45 1:54 6672 5961 ins 3587080982063726 310410214827503 APPLE !PHONES 9891 05/13/20 17:05:38 2:11 100510 20424 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9892 05/13/20 17:05:40 2:10 20424 100222 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9893 05/13/20 17:05:40 0:33 6264 6672 1ms 3587080982063726 310410214827503 APPLE !PHONES 9894 05/13/20 17:05:41 0:33 6672 6000 ims 3587080982063726 310410214827503 APPLE !PHONES 9895 05/13/20 17:06:14 60:00 12600 4624 ins 3587080982063726 310410214827503 APPLE !PHONES 9896 05/13/20 17:07:50 59:37 22875 21541 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9897 05/13/20 18:01:42 20:04 0 0 ins -1 310410214827503 9898 05/13/20 18:06:14 60:00 43900 30796 imp 3587080982063726 310410214827503 APPLE !PHONES 9899 05/13/20 18:06:34 0:41 8561 16265 imp 3587080982063726 310410214827503 APPLE !PHONES 9900 05/13/20 18:07:26 1:22 17957 25429 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9901 05/13/20 18:07:27 1:22 25429 17669 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9902 05/13/20 18:08:11 0:33 2955 21751 imp 3587080982063726 310410214827503 APPLE !PHONES 9903 05/13/20 18:08:49 8:23 60185 38597 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9904 05/13/20 18:17:12 15:31 47009 58353 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9905 05/13/20 18:17:13 15:31 58353 48193 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9906 05/13/20 18:32:44 1:40 8690 5271 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9907 05/13/20 18:34:24 2:21 5220 6023 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9908 05/13/20 18:34:25 2:21 6023 4932 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9909 05/13/20 18:36:46 25:53 23000 20545 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9910 05/13/20 19:00:07 15:59 2783683 3628299 ims 3587080982063726 310410214827503 APPLE !PHONES 9911 05/13/20 19:02:38 3:44 5221 6023 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9912 05/13/20 19:02:39 3:44 6023 4933 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9913 05/13/20 19:06:14 60:00 45444 30068 ims 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 408 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003052 The information contained her is NeTnAL not for general distribution. EFTA 00117128 EFTA01251652 MOBILITY 2996479 06/17/2020 STET hes queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Time: 18:56:39 Data Osage for: Item Conn. Conn. Originating ET Bytes Byte. Apn IX= IMSI MARS MODEL Data Time Number Up Dn (um) 9914 05/13/20 19:06:23 4:26 7427 7721nAtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 9915 05/13/20 19:10:48 2:46 5285 7485 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 9916 05/13/20 19:10:50 2:45 7485 4997 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9917 05/13/20 19:13:35 5:07 24911 22059ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9918 05/13/20 19:18:41 9:54 9332 12593natgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9919 05/13/20 19:18:42 9:54 12593 8948 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 9920 05/13/20 19:28:36 4:24 48 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9921 05/13/20 19:33:00 8:20 15805 11150natgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9922 05/13/20 19:41:19 14:58 7943 7512 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 9923 05/13/20 19:41:20 14:58 7512 7655 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9924 05/13/20 19:52:14 0:35 7654 18341 lam 3587080982063726 310410214827503 APPLE !PHONES 9925 05/13/20 19:53:00 1:43 347300 148451 imp 3587080982063726 310410214827503 APPLE !PHONES 9926 05/13/20 19:54:53 4:42 715393 657093 imp 3587080982063726 310410214827503 APPLE !PHONES 9927 05/13/20 19:56:18 1:02 6023 4900 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9928 05/13/20 19:57:19 2:04 6829 7761 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9929 05/13/20 19:57:20 2:04 7761 6541 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 9930 05/13/20 19:59:24 4:50 6023 4902 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9931 05/13/20 20:04:13 8:33 5285 6861 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9932 05/13/20 20:04:14 8:33 6861 4997 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 9933 05/13/20 20:06:14 60:00 24416 10216 imp 3587080982063726 310410214827503 APPLE !PHONES 9934 05/13/20 20:12:47 17:25 7000 6737 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9935 05/13/20 20:30:11 2:03 5221 6023 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 409 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003053 The information contained hereeeNyFti PsisTiliAL not for general distribution. EF-EAJVII7129 EFTA01251653 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in AT&T OTC. Run Onto: 06/17/2020 Run Time: 10:56:40 Data Osage For: Item Conn. Conn. Originating ET Bytes Bytom Apn INEI INSI MARL MODEL Date Time Number Up Dn (OTC) 9936 05/13/20 20:30:12 2:04 6023 4933 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 9937 05/13/20 20:32:16 25:01 7880 10949ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9938 05/13/20 20:57:16 27:33 5747 6549ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9939 05/13/20 20:57:17 27:34 6549 5459ructgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9940 05/13/20 21:06:14 60:00 23964 12932 imp 3587080982063726 310410214827503 APPLE IPM01428 9941 05/13/20 21:24:50 2:03 5221 6075nxtgonpho 3587080982063726 310410214827503 APPLE IPM01428 no 9942 05/13/20 21:24:51 2:04 6075 4933ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9943 05/13/20 21:26:54 0:41 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9944 05/13/20 21:27:35 22:07 14282 21429ruftgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 9945 05/13/20 21:27:35 22:08 21429 14432ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9946 05/13/20 21:35:43 13:54 1755685 2808041 imp 3587080982063726 310410214827503 APPLE !PRONGS 9947 05/13/20 21:49:43 13:36 7609 5581 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9948 05/13/20 22:03:18 2:32 5217 6021 nxtgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 9949 05/13/20 22:03:19 2:32 6021 4929ructgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9950 05/13/20 22:05:51 2:48 6023 4902ructgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9951 05/13/20 22:06:14 60:00 21468 14844 ins 3587080982063726 310410214827503 APPLE IPM01428 9952 05/13/20 22:08:38 9:43 15469 23664nxtgonpho 3587080982063726 310410214827503 APPLE IPM01428 no 9953 05/13/20 22:08:39 9:43 23664 15085ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9954 05/13/20 22:14:27 0:31 1716 13333 imp 3587080982063726 310410214827503 APPLE !PRONGS 9955 05/13/20 22:18:22 9:39 6023 4901 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9956 05/13/20 22:28:00 2:04 5281 6083ruftgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 9957 05/13/20 22:28:02 2:03 6083 4993ruftgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 410 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003054 The information contained hereCtoNftli NeTniliAL not for general distribution. EF-EA_00117B0 EFTA01251654 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: 18:56:40 Data Usage For: Item Conn. Conn. Originating CT Sytes Byte. Rpn INII IMSI MARL MOLL Data Time Number Up Dn (um) 9958 05/13/20 22:30:05 10:06 6023 5426 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 9959 05/13/20 22:40:10 9:15 11579 12144 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 9960 05/13/20 22:40:11 9:15 12144 23142 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 9961 05/13/20 22:49:26 13:19 9791 10331 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9962 05/13/20 23:02:44 1:28 5222 6023 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 9963 05/13/20 23:02:45 1:28 6023 4934 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9964 05/13/20 23:04:13 0:58 7497 5069 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9965 05/13/20 23:05:10 1:28 5281 6083 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9966 05/13/20 23:05:11 1:28 6083 4993 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9967 05/13/20 23:06:14 60:00 36632 24340 imp 3587080982063726 310410214827503 APPLE !PHONES 9968 05/13/20 23:06:39 1:54 5221 6023 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9969 05/13/20 23:06:40 1:54 6023 4933 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 9970 05/13/20 23:08:34 4:12 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9971 05/13/20 23:12:45 44:14 21498 20865 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 9972 05/13/20 23:12:46 44:14 20865 22350 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9973 05/13/20 23:53:50 0:21 0 320 imp 3587080982063726 310410214827503 APPLE IPHONEB 9974 05/13/20 23:54:25 17:49 3771531 2831879 imp 3587080982063726 310410214827503 APPLE IPHONEB 9975 05/13/20 23:57:00 1:16 144 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 9976 05/13/20 23:58:15 8:27 5655 6277 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 9977 05/13/20 23:58:16 8:27 6277 5367 nxtgonpho 3587080982063726 310410214827503 APPLE !PRONGS no 9978 05/14/20 00:06:14 60:00 11388 4816 in 3587080982063726 310410214827503 APPLE !PHONES 9979 05/14/20 00:06:43 10:00 7433 4862 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 411 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003055 The information contained hereelaNyFti not for general distribution. EF-EA_00117131 EFTA01251655 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in tr ‘illie ija AT&T OTC. Run Data: 06/17/2020 Run Time: 18:56:40 Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn INC' DWI MARL MOLL Data Time Number UP Dn (OTC) 9980 05/14/20 00:16:43 18:20 21067 27689 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONE8 no 9981 05/14/20 00:16:44 18:20 27689 20395 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONE8 no 9982 05/14/20 00:35:04 13:48 11671 8396 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9983 05/14/20 00:48:51 5:26 5221 6023 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9984 05/14/20 00:48:52 5:26 6023 4933 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONE8 no 9985 05/14/20 00:54:18 8:51 20350 15479 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9986 05/14/20 01:03:09 16:50 17565 25729 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9987 05/14/20 01:03:10 16:51 25729 18921 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9988 05/14/20 01:06:14 60:00 6848 2788 ims 3587080982063726 310410214827503 APPLE DRONES 9989 05/14/20 01:20:01 52:26 8594 6951 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 9990 05/14/20 02:06:14 60:00 7296 2804 ims 3587080982063726 310410214827503 APPLE !PHONES 9991 05/14/20 02:12:26 5:08 4667 6279 nxtgenpho 3587080982063726 310410214827503 APPLE !PROMS no 9992 05/14/20 02:12:27 5:09 6279 4379 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 9993 05/14/20 02:17:35 6:25 7561 5386 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9994 05/14/20 02:24:00 11:37 20803 21713 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9995 05/14/20 02:24:01 11:37 21713 21460 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9996 05/14/20 02:35:38 44:50 6786 6370 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9997 05/14/20 03:06:14 60:00 12136 4876 ims 3587080982063726 310410214827503 APPLE !PHONES 9998 05/14/20 03:20:27 2:04 5220 6007 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9999 05/14/20 03:20:29 2:03 6007 4932 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 10000 05/14/20 03:22:32 5:23 7557 5130 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 412 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003056 The information contained heraleop+Fti not for general distribution. NsFYNE EFTA 00117132 EFTA01251656 MOBILITY 4110. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm ....„,0 %--s`a. AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. Run Date: 06/17/2020 Run Time: Data Osage Tor: OM= Item Conn. Conn. Originating ET Bytes Bytaa Apn INLI INBI MARL MODEL Date Time Number Up Dn (UTC) 10001 05/14/20 03:27:54 2:04 5222 6023 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 10002 05/14/20 03:27:56 2:03 6023 4934 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 10003 05/14/20 03:29:59 50:20 13313 13297 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 10004 05/14/20 04:06:14 60:00 12724 5088 imp 3587080982063726 310410214827503 APPLE !PHONES 10005 05/14/20 04:20:20 7:37 12722 10767 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 10006 05/14/20 04:27:56 29:08 6790 7051 nxtgenpho 3587080982063726 310410214827503 APPLE 1PRO1428 no 10007 05/14/20 04:27:57 29:08 7051 6502 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 10008 05/14/20 04:57:05 46:49 6705 7317 nxtgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 10009 05/14/20 04:57:06 46:49 7317 6417 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 10010 05/14/20 05:06:14 60:00 6848 2896 imp 3587080982063726 310410214827503 APPLE !PHONES 10011 05/14/20 05:43:55 14:31 12748 10885 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 10012 05/14/20 05:58:25 8:29 5216 6021 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 10013 05/14/20 05:58:26 8:29 6021 4928 nxtgenpho 3587080982063726 310410214827503 APPLE 1PRO1428 no 10014 05/14/20 06:06:14 60:00 6956 2804 imp 3587080982063726 310410214827503 APPLE DRONES 10015 05/14/20 06:06:55 16:01 12408 10814 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 10016 05/14/20 06:22:55 8:31 5216 6021 nxtgenpho 3587080982063726 310410214827503 APPLE !PRONGS no 10017 05/14/20 06:22:57 8:31 6021 4928 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 10018 05/14/20 06:31:27 60:00 7369 5962 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 10019 05/14/20 07:06:14 60:00 6848 2788 imp 3587080982063726 310410214827503 APPLE !PHONES 10020 05/14/20 07:31:27 15:12 6897 6806 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 10021 05/14/20 07:46:38 2:06 5221 6023 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 10022 05/14/20 07:46:39 2:06 6023 4933 nxtgenpho 3587080982063726 310410214827503 APPLE !PRONGS no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 413 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003057 The information contained here(E:IEDLISSiyf::ti PsiTifikE not for general distribution. EF-EA_00117133 EFTA01251657 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: 18:56:40 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn INDI INSI MARL MODEL Date Time Number Up Dn (OTC) 10023 05/14/20 07:48:45 60:00 7445 6573 ructgenpho 3587080982063726 310410214827503 APPLE DRONES no 10024 05/14/20 08:06:14 60:00 13804 5628 ims 3587080982063726 310410214827503 APPLE DRONES 10025 05/14/20 08:48:45 60:00 578 630 ructgenpho 3587080982063726 310410214827503 APPLE DRONES no 10026 05/14/20 09:06:14 60:00 13884 10376 ims 3587080982063726 310410214827503 APPLE DRONES 10027 05/14/20 09:48:45 60:00 462 420 ructgenpho 3587080982063726 310410214827503 APPLE DRONES no 10028 05/14/20 10:06:14 60:00 11596 4268 ims 3587080982063726 310410214827503 APPLE DRONES 10029 05/14/20 10:48:45 60:00 462 420 ructgenpho 3587080982063726 310410214827503 APPLE DRONES no 10030 05/14/20 11:06:14 60:00 8712 3252 ins 3587080982063726 310410214827503 APPLE DRONES 10031 05/14/20 11:48:45 3:48 4336 430 ructgenpho 3587080982063726 310410214827503 APPLE DRONES no 10032 05/14/20 11:52:32 2:34 5220 6023 ructgenpho 3587080982063726 310410214827503 APPLE DRONES no 10033 05/14/20 11:52:34 2:33 6023 4932 ructgenpho 3587080982063726 310410214827503 APPLE DRONES no 10034 05/14/20 11:55:07 14:25 8624 5163 ructgenpho 3587080982063726 310410214827503 APPLE DRONES no 10035 05/14/20 12:06:14 60:00 8496 3036 ims 3587080982063726 310410214827503 APPLE DRONES 10036 05/14/20 12:09:31 113:12 50089 60693 ructgenpho 3587080982063726 310410214827503 APPLE DRONES no 10037 05/14/20 12:09:32 60:00 45066 34789 ructgenpho 3587080982063726 310410214827503 APPLE DRONES no 10038 05/14/20 13:06:14 60:00 15560 6092 ims 3587080982063726 310410214827503 APPLE DRONES 10039 05/14/20 13:09:32 53:12 15627 14820 ructgenpho 3587080982063726 310410214827503 APPLE DRONES no 10040 05/14/20 14:02:44 2:57 6083 4962 ructgenpho 3587080982063726 310410214827503 APPLE DRONES no 10041 05/14/20 14:05:41 1:51 7497 5070 ructgenpho 3587080982063726 310410214827503 APPLE DRONES no 10042 05/14/20 14:06:14 51:24 33888 22164 ims 3587080982063726 310410214827503 APPLE DRONES 10043 05/14/20 14:07:31 8:46 5220 6023 ructgenpho 3587080982063726 310410214827503 APPLE DRONES no 10044 05/14/20 14:07:33 8:45 6023 4932 ructgenpho 3587080982063726 310410214827503 APPLE DRONES no 10045 05/14/20 14:16:18 7:00 7433 4966 ructgenpho 3587080982063726 310410214827503 APPLE DRONES no 10046 05/14/20 14:23:17 2:21 5216 6073 ructgenpho 3587080982063726 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 414 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003058 The information contained her is NTifikE not for general distribution. EF-EA_00117134 EFTA01251658 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ...,,,sfAT&T •--s`' OTC. Run pato: 06/17/2020 Run Tama: 18:56:40 Data Usage For: Item Conn. Conn. originating ET Bytes Byte. Apn ItCEI INSI MARL NICOLL Dote Time Number UP Dn (OTC) 10047 05/14/20 14:23:19 2:20 6073 4928 nxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 10048 05/14/20 14:25:39 14:20 6246 5001 nxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 10049 05/14/20 14:39:07 0:32 8014 14652 ism 3587080982063726 310410214827503 APPLE IPROME8 10050 05/14/20 14:39:40 0:09 0 0 ism 3587080982063726 310410214827503 APPLE IPROME8 10051 05/14/20 14:40:00 1:36 7561 5175 nxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 10052 05/14/20 14:41:36 2:04 5221 6023 nxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 10053 05/14/20 14:41:37 2:04 6023 4933 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10054 05/14/20 14:43:41 1:37 6809 4965 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10055 05/14/20 14:45:17 3:32 5221 6023 nxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 10056 05/14/20 14:45:19 3:31 6023 4933 nxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 10057 05/14/20 14:48:50 1:23 6075 4901 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10058 05/14/20 14:50:12 2:27 5286 6809 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10059 05/14/20 14:50:13 2:27 6809 4998 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 10060 05/14/20 14:52:40 12:20 6113 6930 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10061 05/14/20 14:52:41 12:20 6930 5825 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 10062 05/14/20 14:55:12 9:48 6333 6716 imp 3587080982063726 310410214827503 APPLE !PHONES 10063 05/14/20 14:55:13 9:48 6648 6069 imp 3587080982063726 310410214827503 APPLE !PHONES 10064 05/14/20 14:58:25 60:00 30734 16158 imp -1 310410214827503 10065 05/14/20 15:05:01 13:57 6930 6517 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10066 05/14/20 15:18:57 2:04 5220 6075 nxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 10067 05/14/20 15:18:58 2:04 6075 4932 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10068 05/14/20 15:21:02 2:05 7495 5067 nxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 10069 05/14/20 15:23:06 2:03 5221 6023 nxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 415 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003059 The information contained hereCteNe not for general distribution. EF-EA_00117135 EFTA01251659 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in %---st `a. AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytom Apn INF' INSI MARL NICOLL Date Time Number Up Dn (OTC) 10070 05/14/20 15:23:07 2:03 6023 4933 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 10071 05/14/20 15:25:10 13:32 6376 5321 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 10072 05/14/20 15:38:41 9:28 10473 13600 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10073 05/14/20 15:38:42 9:28 13600 10089 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10074 05/14/20 15:48:10 3:28 96 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 10075 05/14/20 15:51:37 0:58 4609 5791 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 10076 05/14/20 15:51:38 0:58 5791 4321 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 10077 05/14/20 15:52:36 1:05 6023 4901 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 10078 05/14/20 15:52:36 1:16 226451 122799 ims -1 310410214827503 10079 05/14/20 15:53:40 1:25 5344 6897 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 10080 05/14/20 15:53:42 1:25 6897 5056 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 10081 05/14/20 15:55:06 6:11 22403 27200 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10082 05/14/20 15:55:07 6:11 27200 22115 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10083 05/14/20 15:58:25 60:00 16828 10328 ims -1 310410214827503 10084 05/14/20 16:01:18 1:33 48 Oruftgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 10085 05/14/20 16:02:50 2:08 5218 6005 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 10086 05/14/20 16:02:52 2:07 6005 4930 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 10087 05/14/20 16:04:59 10:57 7722 5332 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no 10088 05/14/20 16:15:04 1:04 119248 182985 ims -1 310410214827503 10089 05/14/20 16:15:55 2:03 5116 6023 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10090 05/14/20 16:15:56 2:03 6023 4828 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10091 05/14/20 16:17:59 60:00 15324 19803 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 416 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003060 The information contained hereCtoNfti NTrifikE not for general distribution. EF-EA_00117B6 EFTA01251660 MOBILITY 411., 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T arc. Run Data: 06/17/2020 Run Time: 18:56:40 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn INZI INSI MARL NICOLL Data Time Number UP Dn (OTC) 10092 05/14/20 16:58:25 60:00 24724 20656 ims -1 310410214827503 10093 05/14/20 17:17:59 3:26 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10094 05/14/20 17:20:39 8:52 2110819 1091819 ims -1 310410214827503 10095 05/14/20 17:21:25 6:26 6809 4964 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10096 05/14/20 17:27:50 2:17 5118 6023 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10097 05/14/20 17:27:51 2:17 6023 4830 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10098 05/14/20 17:30:08 0:43 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10099 05/14/20 17:30:50 27:31 18508 17937 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10100 05/14/20 17:30:51 27:31 17937 18124 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10101 05/14/20 17:58:22 17:27 7046 5226 nxtgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 10102 05/14/20 17:58:25 60:00 18260 9032 ims -1 310410214827503 10103 05/14/20 18:14:41 1:36 331361 211069 ims -1 310410214827503 10104 05/14/20 18:15:48 2:10 5217 6005 nxtgonpho 3587080982063726 310410214827503 APPLE 1PHONZ8 no 10105 05/14/20 18:15:49 2:10 6005 4929 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10106 05/14/20 18:17:59 60:00 7833 7427 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10107 05/14/20 18:58:25 60:00 20208 10192 ims -1 310410214827503 10108 05/14/20 19:17:59 60:00 2345 1382 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10109 05/14/20 19:40:52 0:22 0 4126 ims -1 310410214827503 10110 05/14/20 19:58:25 60:00 13676 4752 ims -1 310410214827503 10111 05/14/20 20:17:59 21:44 223028 308863 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10112 05/14/20 20:39:43 9:06 6162 6461 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10113 05/14/20 20:39:44 9:06 6461 5874 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10114 05/14/20 20:48:50 15:56 8459 6466 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10115 05/14/20 20:58:25 60:00 6832 2648 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 417 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003061 The information contained hore(34E:)LISSiyf::ti NTntAlt not for general distribution. EFTA_OOI 17137 EFTA01251661 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in .... •--setf AT&T a OTC. Run Data: 06/17/2020 Run Time: 16:56:41 Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INC' INSI MARL MODEL Data Time NUmbor Up Dn (UTC) 10116 05/14/20 21:04:45 2:04 5222 6023 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10117 05/14/20 21:04:46 2:04 6023 4934 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10118 05/14/20 21:06:50 23:54 8201 5670 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10119 05/14/20 21:30:43 3:11 288 48 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 10120 05/14/20 21:30:45 3:10 48 Onatgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 10121 05/14/20 21:33:55 5:59 6023 4900 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10122 05/14/20 21:39:53 2:03 5116 6075 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 10123 05/14/20 21:39:54 2:03 6075 4828 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 10124 05/14/20 21:41:57 60:00 7988 11134 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10125 05/14/20 21:58:25 60:00 11920 4560 ims -1 310410214827503 10126 05/14/20 22:41:57 56:13 1033 840 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 10127 05/14/20 22:58:25 60:00 7064 2864 ims -1 310410214827503 10128 05/14/20 23:38:09 2:03 5117 6023 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 10129 05/14/20 23:38:10 2:03 6023 4829 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10130 05/14/20 23:40:13 60:00 12030 11587 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 10131 05/14/20 23:58:25 60:00 6848 2756 ims -1 310410214827503 10132 05/15/20 00:40:13 60:00 2207 8559 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 10133 05/15/20 00:58:25 60:00 10164 3268 ims -1 310410214827503 10134 05/15/20 01:40:13 28:34 462 420 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 10135 05/15/20 01:58:25 60:00 16992 6400 ims -1 310410214827503 10136 05/15/20 02:08:46 90:00 6944 8254 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 10137 05/15/20 02:08:47 60:00 7965 6341 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 10138 05/15/20 02:58:25 60:00 8604 2896 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 418 AT&T does not retain records that can definitively show whether a transaction was PsiTifikE customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003062 The information contained heraCtoNyFtit not for general distribution. EF-EA_00117138 EFTA01251662 NOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ....„.• ••-a` -'s AT&T OTC. Run Data: 06/17/2020 Run Time: 18:56:41 Data Usage For: Item Conn. Conn. Originating ET Bytes Bytom Apn IN= INBI MUM MOLL Data Time Number Up On (UTC) 10139 05/15/20 03:08:47 60:00 578 630 nxtgenpho 3587080982063726 310410214827503 APPLE INIONZ8 no 10140 05/15/20 03:38:46 155:54 5970 2590 nxtgonpho 3587080982063726 310410214827503 APPLE INIONZ8 no 10141 05/15/20 03:58:25 60:00 6956 2648 ims -1 310410214827503 10142 05/15/20 04:08:47 60:00 578 630 nxtgonpho 3587080982063726 310410214827503 APPLE INIONZ8 no 10143 05/15/20 04:58:25 60:00 11920 4436 ims -1 310410214827503 10144 05/15/20 05:08:47 60:00 1591 4868nxtgonpho 3587080982063726 310410214827503 APPLE INIONZ8 no 10145 05/15/20 05:58:25 16:16 4748 2084 ims -1 310410214827503 10146 05/15/20 06:08:47 5:54 132 157nxtgonpho 3587080982063726 310410214827503 APPLE INIONZ8 no 10147 05/15/20 06:20:04 2:14 14047 25126nxtgonpho 3587080982063727 310410214827503 APPLE INIONZ8 no 10148 05/15/20 06:20:04 0:03 2382 192 ims -1 310410214827503 10149 05/15/20 06:20:05 2:14 25126 13759nxtgonpho 3587080982063727 310410214827503 APPLE INIONZ8 no 10150 05/15/20 06:20:05 0:22 6324 6669 ims 3587080982063727 310410214827503 APPLE !PHONES 10151 05/15/20 06:20:07 0:22 6669 6060 ims 3587080982063727 310410214827503 APPLE !PHONES 10152 05/15/20 06:20:24 0:04 2526 1159 ims -1 310410214827503 10153 05/15/20 06:20:27 0:38 8330 8619 ims 3587080982063727 310410214827503 APPLE !PHONES 10154 05/15/20 06:20:28 0:38 8619 8066 ims 3587080982063727 310410214827503 APPLE !PHONES 10155 05/15/20 06:20:44 0:01 0 0 ims -1 310410214827503 10156 05/15/20 06:20:49 0:20 6264 6737 ims 3587080982063727 310410214827503 APPLE !PHONES 10157 05/15/20 06:20:50 0:20 6673 6000 ims 3587080982063727 310410214827503 APPLE !PHONES 10158 05/15/20 06:21:06 0:04 2382 132 ims -1 310410214827503 10159 05/15/20 06:21:08 0:41 7312 6741 ims 3587080982063727 310410214827503 APPLE !PHONES 10160 05/15/20 06:21:09 0:42 6741 7048 ims 3587080982063727 310410214827503 APPLE INIONZ8 10161 05/15/20 06:21:25 60:00 5838 3212 ims -1 310410214827503 10162 05/15/20 06:21:44 60:00 18030 9144 ims -1 310410214827503 10163 05/15/20 06:22:19 347:54 23390 19206nxtgonpho 3587080982063727 310410214827503 APPLE INIONZ8 no 10164 05/15/20 06:22:20 60:00 6533 5193 nxtgonpho 3587080982063727 310410214827503 APPLE INIONZ8 no 10165 05/15/20 07:21:25 60:00 0 0 ims -1 310410214827503 10166 05/15/20 07:21:44 60:00 8496 2912 ims -1 310410214827503 10167 05/15/20 07:22:20 60:00 225 210 nxtgonpho 3587080982063727 310410214827503 APPLE INIONZ8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 419 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003063 The information contained her is NeTniliAL not for general distribution. EFTA_OOI 17139 EFTA01251663 MOBILITY arn. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tr `'s ad ad AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage For: iiiiIIIIII Item Conn. Conn. Originating ET Bytes Bytes Apn IND I INSI MARE MODEL Date Time Number Up On (OTC) 10168 05/15/20 08:21:25 60:00 0 0 imp -1 310410214827503 10169 05/15/20 08:21:44 60:00 6924 2772 imp -1 310410214827503 10170 05/15/20 08:22:20 60:00 225 210nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10171 05/15/20 09:21:25 60:00 0 0 imo -1 310410214827503 10172 05/15/20 09:21:44 60:00 13584 4608 imo -1 310410214827503 10173 05/15/20 09:22:20 60:00 642 735nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10174 05/15/20 10:21:25 0:16 0 0 imo -1 310410214827503 10175 05/15/20 10:21:44 60:00 12120 4428 imo -1 310410214827503 10176 05/15/20 10:22:20 60:00 6688 5473nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10177 05/15/20 11:21:44 60:00 9728 3052 imo -1 310410214827503 10178 05/15/20 11:22:20 47:54 4893 11281 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10179 05/15/20 12:10:14 1:45 5229 6296nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10180 05/15/20 12:10:15 1:45 6296 4941 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10181 05/15/20 12:12:00 13:39 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10182 05/15/20 12:21:44 60:00 6924 2804 imo -1 310410214827503 10183 05/15/20 12:25:40 10:27 12965 11226 nxtgonpho 3587080982063727 310410214827503 APPLE 11080=8 no 10184 05/15/20 12:36:06 28:45 5799 6820 nxtgonpho 3587080982063727 310410214827503 APPLE 1PHONE8 no 10185 05/15/20 12:36:07 28:45 6820 5511 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10186 05/15/20 13:04:52 14:36 5168 6230nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10187 05/15/20 13:04:52 14:37 6230 4880nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10188 05/15/20 13:19:29 8:17 280 581 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10189 05/15/20 13:21:44 60:00 10332 4020 imo -1 310410214827503 10190 05/15/20 13:27:45 2:09 288 48nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10191 05/15/20 13:27:46 2:09 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 420 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003064 The information contained heraCtop+R NT4AL not for general distribution. EFTA_00I 17140 EFTA01251664 MOBILITY 410. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: 18:56:41 Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INCI INSI NAZI MODEL Date Time Number Up Dn (UTC) 10192 05/15/20 13:29:55 11:01 14690 9892 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONZ8 no 10193 05/15/20 13:40:55 115:52 14738 16163 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 10194 05/15/20 13:40:56 60:00 14834 12604 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 10195 05/15/20 14:21:44 60:00 7032 2788 imp -1 310410214827503 10196 05/15/20 14:40:56 55:53 1329 1558 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 10197 05/15/20 15:21:44 60:00 8140 2804 imp -1 310410214827503 10198 05/15/20 15:36:48 60:00 11376 6343 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 10199 05/15/20 16:21:44 58:44 11904 4536 imp -1 310410214827503 10200 05/15/20 16:36:48 38:46 952 945 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 10201 05/15/20 17:15:33 33:23 17926 12685 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10202 05/15/20 17:15:34 33:23 12685 17638 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10203 05/15/20 17:17:52 2:57 6262 6689 imp 3587080982063727 310410214827503 APPLE IPHONE8 10204 05/15/20 17:17:53 2:57 6689 5998 imp 3587080982063727 310410214827503 APPLE IPHONE8 10205 05/15/20 17:20:28 2:56 8374 6182 imp -1 310410214827503 10206 05/15/20 17:20:49 28:07 6336 6685 imp 3587080982063727 310410214827503 APPLE IPHONE8 10207 05/15/20 17:20:50 28:07 6685 6072 imp 3587080982063727 310410214827503 APPLE IPHONE8 10208 05/15/20 17:23:24 43:38 12810 8043 imp 3587080982063727 310410214827503 APPLE IPHONE8 10209 05/15/20 17:48:57 12:07 7766 5120 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 10210 05/15/20 18:01:03 1:09 5065 6230 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 10211 05/15/20 18:01:04 1:09 6230 4777 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 10212 05/15/20 18:02:13 60:00 9611 9449 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 10213 05/15/20 18:07:02 1:23 7588 4512 imp 3587080982063727 310410214827503 APPLE IPHONE8 10214 05/15/20 18:07:02 1:23 7524 4512 imp 3587080982063727 310410214827503 APPLE IPHONE8 10215 05/15/20 18:08:25 0:11 16584 7152 imp 3587080982063727 310410214827503 APPLE IPHONE8 10216 05/15/20 18:09:32 2:05 11081 9131 imp 3587080982063727 310410214827503 APPLE IPHONE8 10217 05/15/20 18:11:37 60:00 13460 4576 imp 3587080982063727 310410214827503 APPLE IPHONE8 10218 05/15/20 19:02:13 0:11 0 105 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 421 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGMMO0K65 The information contained her is NTroleiNE not for general distribution. EF-EA_00117141 EFTA01251665 MOBILITY 41. 1 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ...., `•-••• "" s0 AT&T OTC. Run Data: 06/17/2020 Run Tina: 18:56:41 Data Osage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn ICI INSI MARL MODEL Date Time Number DP On (OTC) 10219 05/15/20 19:02:23 21:01 5905 6936 natgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10220 05/15/20 19:02:24 21:02 6936 5617 natgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10221 05/15/20 19:11:37 60:00 9928 3252 imp 3587080982063727 310410214827503 APPLE !PHONES 10222 05/15/20 19:23:26 0:51 280 581 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10223 05/15/20 19:24:16 21:04 5589 6583 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10224 05/15/20 19:24:17 21:04 6583 5301 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10225 05/15/20 19:45:21 5:48 280 581 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10226 05/15/20 19:51:08 8:26 5060 6280 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10227 05/15/20 19:51:10 8:25 6280 4772 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10228 05/15/20 19:59:35 15:46 89863 53822 natgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10229 05/15/20 20:11:37 35:47 5072 1572 imp 3587080982063727 310410214827503 APPLE !PHONES 10230 05/15/20 20:15:20 9:10 5168 6230 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10231 05/15/20 20:15:21 9:10 6230 4880 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10232 05/15/20 20:24:31 10:17 48 0 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10233 05/15/20 20:34:47 46:36 13435 17056 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10234 05/15/20 20:34:48 46:36 17056 13051 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10235 05/15/20 20:49:42 13:38 0 0 Imp -1 310410214827503 10236 05/15/20 21:02:52 18:31 6354 6751 imp 3587080982063727 310410214827503 APPLE !PHONES 10237 05/15/20 21:02:53 18:31 6683 6090 imp 3587080982063727 310410214827503 APPLE !PHONES 10238 05/15/20 21:03:20 60:00 22729 9614 imp -1 310410214827503 10239 05/15/20 21:21:24 25:39 7328 14433 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10240 05/15/20 21:21:25 25:39 14433 7040 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10241 05/15/20 21:47:04 4:28 7830 5225 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 422 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003066 The information contained her is NT-31AL not for general distribution. EFTA 00117142 EFTA01251666 MOBILITY 41.1 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 il:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Tina: Data Osage Tor: Item conn. cotta. Conn. Originating ET Bytes Byte. Apn IKEI INS! MAKE NODEL Data Time Number Up On (UTC) 10242 05/15/20 21:51:31 22:13 7226 7255 nxtgenpho 3587080982063727 310410214827503 APPLE &PHONES no 10243 05/15/20 21:51:32 22:13 7255 6938 nxtgenpho 3587080982063727 310410214827503 APPLE &PHONES no 10244 05/15/20 22:03:20 60:00 10036 3176 ems -1 310410214827503 10245 05/15/20 22:13:45 0:43 6230 4848 nxtgenpho 3587080982063727 310410214827503 APPLE &PROMS no 10246 05/15/20 22:14:27 98:27 115558 120761 nxtgenpho 3587080982063727 310410214827503 APPLE &PHONES no 10247 05/15/20 22:14:28 60:00 42979 25548 nxtgenpho 3587080982063727 310410214827503 APPLE &PHONES no 10248 05/15/20 23:03:20 50:01 8712 3036 ems -1 310410214827503 10249 05/15/20 23:14:28 38:27 77782 89722 nxtgenpho 3587080982063727 310410214827503 APPLE &PROMS no 10250 05/15/20 23:52:55 5:38 6660 7602 nxtgenpho 3587080982063727 310410214827503 APPLE &PHONES no 10251 05/15/20 23:56:59 1:34 6693 5997 Las 3587080982063727 310410214827503 APPLE IPRONE8 10252 05/15/20 23:58:32 8:11 10328 14425 nxtgenpho 3587080982063727 310410214827503 APPLE IPRONE8 no 10253 05/15/20 23:58:33 8:11 14425 10040 nxtgenpho 3587080982063727 310410214827503 APPLE IPRONE8 no 10254 05/15/20 23:59:32 7:11 7154 6813 ems 3587080982063727 310410214827503 APPLE &PHONES 10255 05/15/20 23:59:33 7:11 6813 6890 ems 3587080982063727 310410214827503 APPLE &PHONES 10256 05/16/20 00:05:06 60:00 22545 10229 ems -1 310410214827503 10257 05/16/20 00:06:44 14:49 6797 8414 nxtgenpho 3587080982063727 310410214827503 APPLE &PHONES no 10258 05/16/20 00:21:33 19:16 10248 12498 nxtgenpho 3587080982063727 310410214827503 APPLE &PHONES no 10259 05/16/20 00:21:34 19:16 12498 11124 nxtgenpho 3587080982063727 310410214827503 APPLE &PHONES no 10260 05/16/20 00:40:50 38:02 7794 7052 nxtgenpho 3587080982063727 310410214827503 APPLE IPRONE8 no 10261 05/16/20 01:05:06 60:00 7048 2788 ems -1 310410214827503 10262 05/16/20 01:18:52 3:30 6230 4848 nxtgenpho 3587080982063727 310410214827503 APPLE &PROMS no 10263 05/16/20 01:22:21 8:17 5678 6514 nxtgenpho 3587080982063727 310410214827503 APPLE &PHONES no 10264 05/16/20 01:22:22 8:18 6514 5390 nxtgenpho 3587080982063727 310410214827503 APPLE &PHONES no 10265 05/16/20 01:30:40 31:22 12898 13145 nxtgenpho 3587080982063727 310410214827503 APPLE &PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 423 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00003067 The information contained hereeNelt Pfinfiat not for general distribution. EF-EA_00117143 EFTA01251667 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Tama: Data Usage For: MS= Item Conn. Conn. Originating ET Bytes Byte. Apn INLI INBI KARL MODEL Data Time Number UP Dn (UTC) 10266 05/16/20 02:02:02 8:15 288 48 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10267 05/16/20 02:02:03 8:15 48 0 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10268 05/16/20 02:05:06 60:00 9928 3284 ims -1 310410214827503 10269 05/16/20 02:10:18 1:20 2121 9933 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10270 05/16/20 02:11:37 2:07 5286 6436 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10271 05/16/20 02:11:39 2:06 6436 4998 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10272 05/16/20 02:13:45 1:13 0 0 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10273 05/16/20 02:14:57 79:59 6934 7616 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10274 05/16/20 02:14:58 60:00 7327 6331 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10275 05/16/20 03:05:06 60:00 13336 4608 ims -1 310410214827503 10276 05/16/20 03:14:58 60:00 514 525 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10277 05/16/20 03:34:56 105:57 2512 1532 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10278 05/16/20 04:05:06 45:47 5072 1588 ims -1 310410214827503 10279 05/16/20 04:14:58 60:00 845 1882 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10280 05/16/20 04:45:27 35:26 6370 6669 ims 3587080982063727 310410214827503 APPLE !PHONES 10281 05/16/20 04:45:28 35:26 6669 6106 ins 3587080982063727 310410214827503 APPLE !PHONES 10282 05/16/20 04:58:33 60:00 22789 9924 ins -1 310410214827503 10283 05/16/20 05:14:58 5:56 462 420 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10284 05/16/20 05:20:54 0:37 0 0 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10285 05/16/20 05:21:31 48:30 7833 7488 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10286 05/16/20 05:21:32 48:30 7488 7449 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10287 05/16/20 05:58:33 60:00 9928 3176 ims -1 310410214827503 10288 05/16/20 06:10:02 0:50 0 0 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10289 05/16/20 06:10:51 1:36 288 48 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 424 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003068 The information contained hereCtoNyFti PsiTatikE not for general distribution. EF-EA_00117144 EFTA01251668 NOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in cz̀as ""i se AT&T OTC. Run Date: 06/17/2020 Run Tame: 18:56:47 Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn IMLI INSI MARL NICOLL Date Time Number Up Dn (DSC) 10290 05/16/20 06:10:52 1:37 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONZ8 no 10291 05/16/20 06:12:28 21:29 576 192 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 10292 05/16/20 06:12:29 21:29 192 Oruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10293 05/16/20 06:33:57 7:10 288 48nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10294 05/16/20 06:33:59 7:09 48 Onxtgonpho 3587080982063727 310410214827503 APPLE IPRONE8 no 10295 05/16/20 06:41:08 1:36 8042 5921 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10296 05/16/20 06:42:43 0:57 288 48 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10297 05/16/20 06:42:44 0:57 48 Oruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10298 05/16/20 06:43:41 1:12 48 Oruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10299 05/16/20 06:44:52 2:27 288 48nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10300 05/16/20 06:44:53 2:27 48 Onxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10301 05/16/20 06:47:20 0:28 0 0 nxtgonpho 3587080982063727 310410214827503 APPLE IPRONE8 no 10302 05/16/20 06:47:47 12:40 288 48 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10303 05/16/20 06:47:48 12:40 48 Oruftgonpho 3587080982063727 310410214827503 APPLE IPRONE8 no 10304 05/16/20 06:58:33 60:00 10036 3160 ins -1 310410214827503 10305 05/16/20 07:00:28 0:38 48 Oruftgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 10306 05/16/20 07:01:05 66:40 15290 12603 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10307 05/16/20 07:01:06 60:00 12603 15002 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10308 05/16/20 07:58:33 60:00 12028 4484 ins -1 310410214827503 10309 05/16/20 08:01:06 6:40 0 Oruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10310 05/16/20 08:07:46 0:48 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 425 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003069 The information contained hereCtoNelt PIETIAL not for general distribution. EF-EA_00117145 EFTA01251669 NOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytom Apn ICI DUI MAKE MODEL Data Time Humber Up Dn (UTC) 10311 05/16/20 08:08:33 4:27 288 48 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10312 05/16/20 08:08:34 4:27 48 Oruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10313 05/16/20 08:13:01 0:37 48 Oruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10314 05/16/20 08:13:38 21:12 5485 6599ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10315 05/16/20 08:13:39 21:13 6599 5197ruftgonpho 3587080982063727 310410214827503 APPLE IPRONE8 no 10316 05/16/20 08:34:51 1:04 280 581ruftgonpho 3587080982063727 310410214827503 APPLE IPRONE8 no 10317 05/16/20 08:35:54 64:09 6211 7068ruftgonpho 3587080982063727 310410214827503 APPLE IPRONE8 no 10318 05/16/20 08:35:55 60:00 7068 5923nxtgonpho 3587080982063727 310410214827503 APPLE IPRONE8 no 10319 05/16/20 08:58:33 60:00 9928 3176 ins -1 310410214827503 10320 05/16/20 09:35:55 4:09 0 Onxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10321 05/16/20 09:40:04 5:50 48 Oruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10322 05/16/20 09:45:53 8:16 288 48ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10323 05/16/20 09:45:54 8:16 48 Oruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10324 05/16/20 09:54:10 1:08 0 Oruftgonpho 3587080982063727 310410214827503 APPLE IPRONE8 no 10325 05/16/20 09:55:17 8:46 5168 6246ruftgonpho 3587080982063727 310410214827503 APPLE IPRONE8 no 10326 05/16/20 09:55:18 8:46 6246 4880nxtgonpho 3587080982063727 310410214827503 APPLE IPRONE8 no 10327 05/16/20 09:58:33 60:00 11920 4644 ins -1 310410214827503 10328 05/16/20 10:04:04 3:24 351 778nxtgonpho 3587080982063727 310410214827503 APPLE IPRONE8 no 10329 05/16/20 10:07:27 20:46 5590 6583ruftgonpho 3587080982063727 310410214827503 APPLE IPRONE8 no 10330 05/16/20 10:07:28 20:46 6583 5302ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10331 05/16/20 10:28:13 4:22 901 280ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 426 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003070 The information contained heraleeNe PsiTniliAL not for general distribution. EF-EA_00117146 EFTA01251670 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tr ""s ao AT&T ‘ OTC. Run Data: 06/17/2020 Run Time: Data Osage for: Salim Item Conn. Conn. Originating ET Bytes Byte. Apn INZI INS1 NUT NICOLL Data Time Number UP Dn (OTC) 10332 05/16/20 10:28:14 4:22 280 613 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10333 05/16/20 10:32:35 0:55 288 48 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10334 05/16/20 10:32:37 0:54 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10335 05/16/20 10:33:31 5:34 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10336 05/16/20 10:39:04 3:02 288 48 nxtgonpho 3587080982063727 310410214827503 APPLE DRONES no 10337 05/16/20 10:39:06 3:01 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10338 05/16/20 10:42:07 0:39 288 48 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10339 05/16/20 10:42:08 0:39 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10340 05/16/20 10:42:47 1:47 9083 5335 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10341 05/16/20 10:44:33 0:52 901 280 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10342 05/16/20 10:44:35 0:51 280 613 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10343 05/16/20 10:45:26 18:19 7750 5014 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10344 05/16/20 10:58:33 60:00 13352 4516 ipso -1 310410214827503 10345 05/16/20 11:03:44 2:08 5622 6426 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10346 05/16/20 11:03:45 2:08 6426 5334 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10347 05/16/20 11:05:53 0:05 0 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10348 05/16/20 11:06:00 25:13 9103 8034 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10349 05/16/20 11:31:13 30:01 11965 13972 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10350 05/16/20 11:58:33 60:00 9928 3284 ipso -1 310410214827503 10351 05/16/20 12:01:14 14:42 5065 6230 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10352 05/16/20 12:01:15 14:42 6230 5932 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 427 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00003071 The information contained heraleop+Fti not for general distribution. EF-EA_00117147 EFTA01251671 MOBILITY 4111111 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T (ITC. Run Data: 06/17/2020 Run Time: Data Usage Tor: iiiiiIIIII Item Conn. Conn. Originating ET Bytes Byte. Apn IMS2 tiCOTS Data Time Number Up Dn (UTC) 10353 05/16/20 12:15:57 16:56 2016 2157 nxtgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 10354 05/16/20 12:32:53 81:38 19337 21791roftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 10355 05/16/20 12:32:54 60:00 21502 19925ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 10356 05/16/20 12:58:33 60:00 8388 2820 imp -1 310410214827503 10357 05/16/20 13:32:54 21:38 289 315ruftgonpho 3587080982063727 310410214827503 APPLE !PROMS no 10358 05/16/20 13:54:32 30:58 7828 549Ormagonpho 3587080982063727 310410214827503 APPLE !PROMS no 10359 05/16/20 13:58:33 45:42 17880 9156 imp -1 310410214827503 10360 05/16/20 14:25:29 5:01 288 48ruagonpho 3587080982063727 310410214827503 APPLE !PROMS no 10361 05/16/20 14:25:31 5:00 48 Ormagonpho 3587080982063727 310410214827503 APPLE !PROMS no 10362 05/16/20 14:30:31 2:55 48 Ormagonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 10363 05/16/20 14:33:25 14:54 288 48ruagonpho 3587080982063727 310410214827503 APPLE !PROMS no 10364 05/16/20 14:33:26 14:54 48 Onxtgonpho 3587080982063727 310410214827503 APPLE !PROMS no 10365 05/16/20 14:48:20 60:00 152909 993040 nxtgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 10366 05/16/20 14:48:22 60:00 15325 9124 imp 3587080982063727 310410214827503 APPLE IPHOME8 10367 05/16/20 15:48:20 51:25 0 1522ruftgonpho 3587080982063727 310410214827503 APPLE 'PROMS no 10368 05/16/20 15:48:22 51:23 0 0 imp 3587080982063727 310410214827503 APPLE !PROMS 10369 05/16/20 16:46:05 3:44 72646 1108814ruftgonpho 3587080982063727 310410214827503 APPLE !PROMS no 10370 05/16/20 16:46:08 3:41 8103 6068 imp 3587080982063727 310410214827503 APPLE IPHOME8 10371 05/16/20 16:48:21 13:59 9534 6095 imp -1 310410214827503 10372 05/16/20 16:49:48 17:02 37527 47607ruftgonpho 3587080982063727 310410214827503 APPLE !PROMS no 10373 05/16/20 16:49:49 17:02 47607 37047ruftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 10374 05/16/20 17:01:10 1:28 6334 6771 imp 3587080982063727 310410214827503 APPLE !PROMS 10375 05/16/20 17:01:11 1:28 6663 5982 imp 3587080982063727 310410214827503 APPLE !PROMS 10376 05/16/20 17:02:19 0:21 8634 3013 imp -1 310410214827503 10377 05/16/20 17:02:37 4:13 7674 19605 imp 3587080982063727 310410214827503 APPLE !PROMS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 428 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003072 The information contained hereCtoNeli not for general distribution. EFTA_OOI 17148 EFTA01251672 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run pato: 06/17/2020 Run Time: 18:56:47 Data Osage for: Item Conn. Conn. originating ET Bytes Bytes Apn IND I INSI MARL MODEL Date Time Butter UP Dn (OTC) 10378 05/16/20 17:02:39 4:12 11433 7410 ims 3587080982063727 310410214827503 APPLE !PHONES 10379 05/16/20 17:02:55 60:00 20238 9668 ims -1 310410214827503 10380 05/16/20 17:06:51 60:00 24499 22370 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10381 05/16/20 18:02:55 60:00 8604 2928 ims -1 310410214827503 10382 05/16/20 18:06:51 14:24 346 210 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10383 05/16/20 18:21:15 20:52 54209 72094 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10384 05/16/20 18:21:16 20:52 72094 55132 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10385 05/16/20 18:42:08 1:10 8530 5930 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10386 05/16/20 18:43:18 15:17 9775 7636 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10387 05/16/20 18:43:18 15:18 7636 9487 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10388 05/16/20 18:58:36 49:44 9781 14223 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10389 05/16/20 19:02:55 60:00 8388 2928 ims -1 310410214827503 10390 05/16/20 19:48:20 32:47 13375 21586 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10391 05/16/20 19:48:20 32:48 21586 12799 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10392 05/16/20 20:02:55 60:00 11920 4500 ims -1 310410214827503 10393 05/16/20 20:21:08 5:56 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10394 05/16/20 20:27:03 7:00 4724 7488 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10395 05/16/20 20:27:05 6:59 7488 4436 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10396 05/16/20 20:34:04 8:35 6863 5722 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10397 05/16/20 20:42:38 5:41 5169 6230 nxtgonpho 3587080982063727 310410214827503 APPLE 1PHONE8 no 10398 05/16/20 20:42:39 5:41 6230 4881 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10399 05/16/20 20:48:20 15:53 7978 6599 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10400 05/16/20 21:02:55 60:00 6956 2788 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 429 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003073 The information contained heraleeNe PsiTifikE not for general distribution. EF-EA_00117149 EFTA01251673 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in `s tt- ad a. AT&T UTC. Run Date: 06/17/2020 Run Time: 18:56:47 Data Osage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn INC' DWI MAKE MODEL Date Time Number Up Dn (UTC) 10401 05/16/20 21:04:12 9:11 5169 6230 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 10402 05/16/20 21:04:13 9:11 6230 4881 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 10403 05/16/20 21:13:24 44:43 9010 10765 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10404 05/16/20 21:58:06 1:52 5169 6230 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10405 05/16/20 21:58:07 1:52 6230 4881 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 10406 05/16/20 21:59:59 4:33 2760 5158 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10407 05/16/20 22:02:55 60:00 13568 4676 imp -1 310410214827503 10408 05/16/20 22:04:31 77:10 26551 42184 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10409 05/16/20 22:04:32 60:00 23907 17378 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10410 05/16/20 23:02:55 60:00 13012 3424 imp -1 310410214827503 10411 05/16/20 23:04:32 17:10 18277 8213 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10412 05/16/20 23:21:42 8:05 7704 5019 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10413 05/16/20 23:29:46 2:08 5065 6230 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 10414 05/16/20 23:29:47 2:08 6230 4777 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10415 05/16/20 23:31:55 60:00 45745 114089 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10416 05/17/20 00:02:55 60:00 13784 4640 imp -1 310410214827503 10417 05/17/20 00:31:55 7:15 0 6138 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 10418 05/17/20 00:39:10 0:05 0 0 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 10419 05/17/20 00:40:08 0:54 6114 4328 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 10420 05/17/20 00:41:01 130:17 288 48 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10421 05/17/20 00:41:02 60:00 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10422 05/17/20 01:02:55 60:00 10036 3176 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 430 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003074 The information contained her is MTV& not for general distribution. EF-EA_00117150 EFTA01251674 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tras ""s,# AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage For: MOM Item Conn. Conn. Originating ET Bytes Bytea Apn ICI IMSI NAZI MODEL Date Time Number Up Dn (UTC) 10423 05/17/20 01:41:02 60:00 0 0 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10424 05/17/20 02:02:55 60:00 16776 5908 ims -1 310410214827503 10425 05/17/20 02:41:02 10:17 0 0 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10426 05/17/20 03:02:55 60:00 10252 3284 ims -1 310410214827503 10427 05/17/20 03:04:31 40:00 5399 7860 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10428 05/17/20 03:04:32 60:00 7860 6686 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10429 05/17/20 03:44:31 132:48 8553 10174 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10430 05/17/20 04:02:55 60:00 8388 3036 ins -1 310410214827503 10431 05/17/20 04:04:32 60:00 9270 7535 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10432 05/17/20 05:02:55 60:00 6848 2680 ims -1 310410214827503 10433 05/17/20 05:04:32 52:49 904 630 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10434 05/17/20 05:57:20 0:51 48 0 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10435 05/17/20 05:58:10 3:47 288 48 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10436 05/17/20 05:58:11 3:47 48 0 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10437 05/17/20 06:01:58 60:00 96 0 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10438 05/17/20 06:02:55 60:00 9696 3052 ims -1 310410214827503 10439 05/17/20 07:01:58 60:00 0 0 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10440 05/17/20 07:02:55 60:00 13460 4732 ims -1 310410214827503 10441 05/17/20 08:01:58 60:00 0 0 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10442 05/17/20 08:02:55 60:00 12028 4428 ims -1 310410214827503 10443 05/17/20 09:01:58 60:00 0 0 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10444 05/17/20 09:02:55 60:00 9928 3176 ims -1 310410214827503 10445 05/17/20 10:01:58 12:04 0 0 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10446 05/17/20 10:02:55 60:00 8496 3036 las -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 431 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003075 The information contained hereCtoNyFti PIETIAL not for general distribution. EF-EA_00117151 EFTA01251675 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ttle# a‘S ° AT&T UTC. Run Data: 06/17/2020 Run Time: 18:56:48 Data Osage For: Item conn. Conn. originating ET Bytes bytes Apn mkt IMBI NAZI moon Date Time Number Up On (UTC) 10447 05/17/20 10:14:03 60:00 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10448 05/17/20 11:02:55 60:00 11920 4376 ims -1 310410214827503 10449 05/17/20 11:14:03 43:29 0 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10450 05/17/20 11:57:31 10:36 288 48nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10451 05/17/20 11:57:32 10:36 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10452 05/17/20 12:02:55 60:00 8496 2928 ims -1 310410214827503 10453 05/17/20 12:08:08 2:35 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10454 05/17/20 12:10:43 33:05 288 48mxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10455 05/17/20 12:10:44 33:05 48 Onxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10456 05/17/20 12:43:49 58:16 48 Onxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 10457 05/17/20 13:02:55 22:38 11856 4324 ims -1 310410214827503 10458 05/17/20 13:23:58 60:00 20044 9695 ims -1 310410214827503 10459 05/17/20 14:23:58 24:02 10052 3316 ims -1 310410214827503 10460 05/17/20 14:46:29 60:00 0 0 ims -1 310410214827503 10461 05/17/20 14:48:00 60:00 18554 9484 ims -1 310410214827503 10462 05/17/20 15:46:29 60:00 0 0 ims -1 310410214827503 10463 05/17/20 15:48:00 60:00 8388 2820 ims -1 310410214827503 10464 05/17/20 15:58:09 7:16 64406 30274 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 10465 05/17/20 16:05:25 3:35 288 48nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10466 05/17/20 16:05:26 3:35 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10467 05/17/20 16:09:01 2:46 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10468 05/17/20 16:11:47 5:58 6909 5720 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10469 05/17/20 16:17:43 4:04 897 278 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 10470 05/17/20 16:17:45 4:03 278 609 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 432 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003076 The information contained hernia:Aft NTIAL not for general distribution. EFTA 00117152 EFTA01251676 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in %...,00 ‘"Ii. .1# AT&T UTC. Run Data: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn INEI IMISI MAKE MODEL Date Time Number Up Dn (UTC) 10471 05/17/20 16:21:48 1:29 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10472 05/17/20 16:23:17 8:16 5066 6282 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10473 05/17/20 16:23:18 8:16 6282 4778 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10474 05/17/20 16:31:34 42:01 8514 6280 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10475 05/17/20 16:46:29 31:51 0 0 imp -1 310410214827503 10476 05/17/20 16:48:00 31:00 4980 1588 imp -1 310410214827503 10477 05/17/20 17:13:34 12:36 4615821 761486 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10478 05/17/20 17:13:35 12:36 761486 4615437 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10479 05/17/20 17:18:19 7:51 6358 8187 imp 3587080982063727 310410214827503 APPLE !PHONES 10480 05/17/20 17:18:20 7:51 8119 6094 imp 3587080982063727 310410214827503 APPLE DRONES 10481 05/17/20 17:26:11 18:07 36437 46608 nxtgonpho 3587080982063727 310410214827503 APPLE DRONES no 10482 05/17/20 17:26:14 18:04 11385 9122 imp 3587080982063727 310410214827503 APPLE !PHONES 10483 05/17/20 17:44:18 17:17 827111 19205770 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10484 05/17/20 17:44:20 41:54 9285 7276 imp 3587080982063727 310410214827503 APPLE !PHONES 10485 05/17/20 18:01:35 20:41 517789 19510119 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10486 05/17/20 18:22:16 3:58 66543 1031939 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10487 05/17/20 18:26:14 2:15 12257 2684 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10488 05/17/20 18:26:14 2:15 0 0 imp 3587080982063727 310410214827503 APPLE DRONES 10489 05/17/20 18:28:28 1:46 30782 15616 nxtgonpho 3587080982063727 310410214827503 APPLE DRONES no 10490 05/17/20 18:28:29 1:45 7231 6815 imp 3587080982063727 310410214827503 APPLE DRONES 10491 05/17/20 18:28:29 1:46 15552 30494 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10492 05/17/20 18:28:30 1:45 6815 6967 ins 3587080982063727 310410214827503 APPLE !PHONES 10493 05/17/20 18:30:15 7:50 0 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10494 05/17/20 18:38:05 4:59 171964 59546 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10495 05/17/20 18:38:06 4:58 6226 10501 imp 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 433 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00003077 The information contained heraCeNyFtli WinfikE not for general distribution. EF-EA_00117153 EFTA01251677 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: 18:56:48 Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn INEI IMS1 MARE MODEL Date Time Number Up Dn (OTC) 10496 05/17/20 18:38:06 4:59 59546 171676 nxtgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 10497 05/17/20 18:38:07 4:58 6685 5962 imp 3587080982063727 310410214827503 APPLE IPMONEB 10498 05/17/20 18:43:05 5:41 15417 17834ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10499 05/17/20 18:43:07 5:39 7405 6123 imp 3587080982063727 310410214827503 APPLE IPMONEB 10500 05/17/20 18:48:46 14:37 100199 49913ruftgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 10501 05/17/20 18:48:47 6:54 6334 6685 imp 3587080982063727 310410214827503 APPLE IPMONEB 10502 05/17/20 18:48:47 14:37 49913 99911ruftgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 10503 05/17/20 18:48:48 6:54 6685 6070 imp 3587080982063727 310410214827503 APPLE IPMONEB 10504 05/17/20 18:52:06 8:56 9721 6481 imp -1 310410214827503 10505 05/17/20 18:55:40 7:43 6246 6687 imp 3587080982063727 310410214827503 APPLE IPMONEB 10506 05/17/20 18:55:42 7:42 6687 5982 imp 3587080982063727 310410214827503 APPLE IPMONEB 10507 05/17/20 19:03:24 55:21 16661 10738ruftgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 10508 05/17/20 19:03:26 55:19 9791 7609 imp 3587080982063727 310410214827503 APPLE IPMONEB 10509 05/17/20 19:58:44 2:41 288 48nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 10510 05/17/20 19:58:45 2:40 6633 10033 imp 3587080982063727 310410214827503 APPLE IPMONEB 10511 05/17/20 19:58:45 2:42 48 Oruftgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 10512 05/17/20 19:58:46 2:40 10033 6369 imp 3587080982063727 310410214827503 APPLE IPMONEB 10513 05/17/20 20:01:26 0:54 48 Oruftgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 10514 05/17/20 20:01:29 0:51 10307 8044 imp 3587080982063727 310410214827503 APPLE IPMONEB 10515 05/17/20 20:02:19 2:10 288 48ruftgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 10516 05/17/20 20:02:20 2:09 6609 7363 imp 3587080982063727 310410214827503 APPLE IPMONEB 10517 05/17/20 20:02:20 2:10 48 Oruftgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 10518 05/17/20 20:02:21 2:09 7255 6345 imp 3587080982063727 310410214827503 APPLE IPMONEB 10519 05/17/20 20:04:30 5:13 48 Oruftgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 10520 05/17/20 20:04:32 5:11 8899 7048 imp 3587080982063727 310410214827503 APPLE IPMONEB 10521 05/17/20 20:09:43 8:56 4556 6014ruftgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 10522 05/17/20 20:09:44 8:56 6014 4268ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 434 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003078 The information contained her is NeTniliAL not for general distribution. EF-EA_00117154 EFTA01251678 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage Tor: iiiiiIIIII Item Conn. Conn. Originating ET Bytes Byte. Apn INC' IMBI NAZI MODEL Data Time Hurter Up Dn (UTC) 10523 05/17/20 20:09:48 8:51 6224 6771 imp 3587080982063727 310410214827503 APPLE IPHONEB 10524 05/17/20 20:09:49 8:51 6663 5960 imp 3587080982063727 310410214827503 APPLE IPHONEB 10525 05/17/20 20:18:40 41:19 46289 50120 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 10526 05/17/20 20:18:44 9:08 8905 7068 ims 3587080982063727 310410214827503 APPLE IPHONEB 10527 05/17/20 20:27:52 60:00 13320 4344 ims 3587080982063727 310410214827503 APPLE !PHONES 10528 05/17/20 20:59:58 11:35 5065 6230 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10529 05/17/20 20:59:59 11:36 6230 5722 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10530 05/17/20 21:11:35 0:42 7640 5019 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10531 05/17/20 21:12:16 6:40 901 280ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10532 05/17/20 21:12:17 6:40 280 613ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10533 05/17/20 21:18:57 0:05 0 Oruftgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 10534 05/17/20 21:19:14 8:41 628 1252 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10535 05/17/20 21:27:52 60:00 16788 8720 ims 3587080982063727 310410214827503 APPLE IPHONEB 10536 05/17/20 21:27:55 1:35 19101 23254ruftgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 10537 05/17/20 21:27:56 1:35 23254 18813ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10538 05/17/20 21:29:31 6:14 19810 18360ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10539 05/17/20 21:35:44 1:22 288 48 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10540 05/17/20 21:35:45 1:22 48 Onxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10541 05/17/20 21:37:07 14:26 48 Oruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10542 05/17/20 21:51:33 4:13 6230 4746 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 10543 05/17/20 21:54:18 3:11 670404 340887 ims 3587080982063727 310410214827503 APPLE IPHONEB 10544 05/17/20 21:55:46 2:39 4692 3968 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 10545 05/17/20 21:58:24 2:09 15875 16224 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 435 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003079 The information contained heraCtoNyFti NeTifikE not for general distribution. EF-EA_00117155 EFTA01251679 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ......,,f `•-s`"I‘ AT&T OTC. Run Data: 06/17/2020 Run Elmo: Data Usage For: iiiiiIMIN Item Conn. Conn. Originating ET Bytes Byte. Apn tier IMBI MA= 1.03DEL Data Time fluster DO Dn (UTC) 10546 05/17/20 21:58:25 2:09 16156 15587 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10547 05/17/20 22:00:34 1:03 280 581 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10548 05/17/20 22:01:36 6:26 5265 6278 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES ne 10549 05/17/20 22:01:37 6:26 6278 4881 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES ne 10550 05/17/20 22:08:03 2:27 280 581 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONZ8 ne 10551 05/17/20 22:10:29 22:15 5761 6709 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES ne 10552 05/17/20 22:10:30 22:15 6709 5089 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10553 05/17/20 22:27:52 4:01 6568 9748 ipso 3587080982063727 310410214827503 APPLE !PHONES 10554 05/17/20 22:31:29 11:28 18310 12114 ipso -1 310410214827503 10555 05/17/20 22:32:45 1:20 192 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10556 05/17/20 22:32:46 1:19 288 48 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10557 05/17/20 22:32:46 1:20 0 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10558 05/17/20 22:32:47 1:19 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONZ8 no 10559 05/17/20 22:34:06 0:32 6230 4849 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10560 05/17/20 22:34:37 21:24 6880 7486 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10561 05/17/20 22:34:38 21:25 7486 17723 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10562 05/17/20 22:43:13 60:00 15626 9206 ipso -1 310410214827503 10563 05/17/20 22:56:02 20:12 10234 12648 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10564 05/17/20 22:56:03 20:13 12596 10813 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10565 05/17/20 23:16:15 6:48 7877 5176 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10566 05/17/20 23:23:03 14:27 5060 6228 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10567 05/17/20 23:23:03 14:28 6228 4772 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONZ8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 436 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003080 The information contained hereCteNelt PsisTiliAL not for general distribution. EFTA_00I 17156 EFTA01251680 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in ......s••-es AT&T (ITC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytom Apn INE' NCOEL Date Time Number Up On (OTC) 10568 05/17/20 23:37:31 3:06 6426 5270 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 10569 05/17/20 23:40:36 1:22 901 280ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 10570 05/17/20 23:40:37 1:23 280 613ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10571 05/17/20 23:42:00 0:53 48 Oruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10572 05/17/20 23:42:53 1:13 48 Oruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10573 05/17/20 23:43:13 60:00 8712 3804 imp -1 310410214827503 10574 05/17/20 23:44:05 6:26 288 48nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10575 05/17/20 23:44:06 6:26 48 Onxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10576 05/17/20 23:50:32 0:34 7640 4913ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10577 05/17/20 23:51:05 2:08 901 280ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10578 05/17/20 23:51:06 2:08 280 613ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 10579 05/17/20 23:53:14 8:32 48 Oruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10580 05/18/20 00:01:45 2:29 5062 6244ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10581 05/18/20 00:01:47 2:28 6244 4774ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10582 05/18/20 00:03:56 7:35 278 577ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10583 05/18/20 00:11:30 14:49 5235 6576ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 10584 05/18/20 00:11:31 14:49 6576 4947ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 10585 05/18/20 00:26:20 12:15 8075 5601 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10586 05/18/20 00:38:34 2:29 288 48ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10587 05/18/20 00:38:35 2:29 48 Oruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10588 05/18/20 00:41:03 6:11 288 48ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 437 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003081 The information contained her is NITifikE not for general distribution. EF-EA_00117157 EFTA01251681 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ....,,,• ••-s` a. AT&T OTC. Run Data: 06/17/2020 Run Tina: 18:56:48 Data Osage For: Item Conn. Conn. Originating ET Bytes Bytom Apn INEI INSI MARE MODEL Data Time Number Up Dn (OTC) 10589 05/18/20 00:41:04 6:11 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONZ8 no 10590 05/18/20 00:43:13 60:00 10068 3300 imo -1 310410214827503 10591 05/18/20 00:47:15 18:30 7409 11148 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONZ8 no 10592 05/18/20 01:05:44 80:04 5491 7927 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONZ8 no 10593 05/18/20 01:05:45 60:00 7927 6778 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10594 05/18/20 01:43:13 60:00 10068 3176 imp -1 310410214827503 10595 05/18/20 02:05:45 20:05 0 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10596 05/18/20 02:25:49 14:49 6523 7168 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10597 05/18/20 02:25:50 14:49 7168 6139 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10598 05/18/20 02:40:39 5:37 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10599 05/18/20 02:43:13 60:00 8604 3036 imp -1 310410214827503 10600 05/18/20 02:46:15 49:59 13297 8101 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10601 05/18/20 02:46:16 60:00 8274 13018 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10602 05/18/20 03:36:14 353:33 117402 109264nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10603 05/18/20 03:43:13 60:00 13584 4892 imp -1 310410214827503 10604 05/18/20 03:46:16 60:00 1386 1260nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10605 05/18/20 04:43:13 60:00 12012 4392 imp -1 310410214827503 10606 05/18/20 04:46:16 60:00 1727 1680nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10607 05/18/20 05:43:13 60:00 8388 2928 imp -1 310410214827503 10608 05/18/20 05:46:16 60:00 95072 105489nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10609 05/18/20 06:43:13 60:00 13260 4408 imp -1 310410214827503 10610 05/18/20 06:46:16 60:00 10906 11703 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10611 05/18/20 07:43:13 60:00 8804 3036 imp -1 310410214827503 10612 05/18/20 07:46:16 60:00 0 92nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 438 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00003082 The information contained her is NTailiAL not for general distribution. EF-EA_00117158 EFTA01251682 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:S9pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run pato: 06/17/2020 Run Time: Data Osage for: Item Conn. Conn. Originating ET Bytes Bytes Aprt INZI INSI MAKE NODAL Date Time Number Up Dn (OTC) 10613 05/18/20 08:43:13 60:00 11796 4536 imo -1 310410214827503 10614 05/18/20 08:46:16 43:33 0 0 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONZ8 no 10615 05/18/20 09:43:13 60:00 6924 2680 imo -1 310410214827503 10616 05/18/20 10:43:13 60:00 9852 3316 imo -1 310410214827503 10617 05/18/20 10:56:06 31:15 5799 6820 nxtgonpho 3587080982063727 310410214827503 APPLE 1PHONZ8 no 10618 05/18/20 10:56:07 31:15 6820 5511 nxtgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 10619 05/18/20 11:27:22 44:31 16580 12714 nxtgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 10620 05/18/20 11:43:13 60:00 12012 4376 ims -1 310410214827503 10621 05/18/20 12:11:52 130:16 288 48 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10622 05/18/20 12:11:53 60:00 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10623 05/18/20 12:43:13 60:00 6924 2680 ims -1 310410214827503 10624 05/18/20 13:11:53 60:00 0 0 nxtgonpho 3587080982063727 310410214827503 APPLE IPRONZ8 no 10625 05/18/20 13:43:13 37:04 8356 3440 ims -1 310410214827503 10626 05/18/20 14:11:53 10:17 0 Onxtgonpho 3587080982063727 310410214827503 APPLE IPRONZ8 no 10627 05/18/20 14:20:42 3:53 11322 6726 ims -1 310410214827503 10628 05/18/20 14:24:57 19:38 13798 12056 ims -1 310410214827503 10629 05/18/20 14:28:12 0:55 5323 6372 nxtgonpho 3587080982063727 310410214827503 APPLE 1PRONZ8 no 10630 05/18/20 14:28:13 0:55 6372 5035 nxtgonpho 3587080982063727 310410214827503 APPLE 1PROME8 no 10631 05/18/20 14:29:08 3:12 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE 1PROME8 no 10632 05/18/20 14:32:19 48:45 767044 134635 nxtgonpho 3587080982063727 310410214827503 APPLE 1PROME8 no 10633 05/18/20 14:32:20 48:45 134635 778311 nxtgonpho 3587080982063727 310410214827503 APPLE 1PROME8 no 10634 05/18/20 14:38:41 0:00 0 0 ims 3587080982063727 310410214827503 APPLE !PHONES 10635 05/18/20 14:42:26 2:09 8250 6280 ims -1 310410214827503 10636 05/18/20 14:44:34 36:30 7352 7205 ims 3587080982063727 310410214827503 APPLE !PHONES 10637 05/18/20 14:44:35 36:30 7137 7196 ims 3587080982063727 310410214827503 APPLE 1PROME8 10638 05/18/20 15:02:51 60:00 17572 9459 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 439 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003083 The information contained heralCoNe PsisTiliAL not for general distribution. EF-EA_00117159 EFTA01251683 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Tame: Data Usage For: Item Conn. Conn. Originating LT Bytes Byte. Apn INLI IMSI MAKE MODEL Data Time Number Up Dn (OTC) 10639 05/18/20 15:21:05 60:00 238592 45185 nxtgonpho 3587080982063727 310410214827503 APPLE !PROMS no 10640 05/18/20 16:02:51 60:00 6816 2756 imp -1 310410214827503 10641 05/18/20 16:21:05 60:00 109591 71979 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10642 05/18/20 17:02:51 6:41 6196 4316 imp -1 310410214827503 10643 05/18/20 17:09:35 60:00 18658 10346 imp -1 310410214827503 10644 05/18/20 17:21:05 60:00 12631 45043 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10645 05/18/20 18:09:35 3:55 0 0 imp 3587080982063727 310410214827503 APPLE IPROME8 10646 05/18/20 18:13:29 0:41 4176 1448 imp 3587080982063727 310410214827503 APPLE IPROME8 10647 05/18/20 18:13:30 0:40 4044 1448 imp 3587080982063727 310410214827503 APPLE IPROME8 10648 05/18/20 18:14:10 60:00 11796 4468 imp 3587080982063727 310410214827503 APPLE IPROME8 10649 05/18/20 18:21:05 60:00 1820 1992ruftgonpho 3587080982063727 310410214827503 APPLE IPROME8 no 10650 05/18/20 19:14:10 60:00 10300 3408 imp 3587080982063727 310410214827503 APPLE !PHONES 10651 05/18/20 19:21:05 60:00 35779 21739ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10652 05/18/20 20:14:10 38:10 4980 1820 imp 3587080982063727 310410214827503 APPLE !PRONGS 10653 05/18/20 20:21:05 60:00 6848 46191 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10654 05/18/20 20:52:19 5:09 17752 2340 imp 3587080982063727 310410214827503 APPLE IPROME8 10655 05/18/20 20:52:20 5:08 5556 2340 imp 3587080982063727 310410214827503 APPLE IPROME8 10656 05/18/20 20:57:28 0:00 0 0 imp 3587080982063727 310410214827503 APPLE !PHONES 10657 05/18/20 20:57:36 60:00 24589 10552 imp -1 310410214827503 10658 05/18/20 21:21:05 60:00 4123 1207 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10659 05/18/20 21:57:36 60:00 10144 3376 imp -1 310410214827503 10660 05/18/20 22:21:05 60:00 1877 5801 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10661 05/18/20 22:57:36 60:00 7296 3880 imp -1 310410214827503 10662 05/18/20 23:21:05 60:00 1270 1050 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10663 05/18/20 23:57:36 60:00 8712 3004 imp -1 310410214827503 10664 05/19/20 00:21:05 60:00 4878 2427 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10665 05/19/20 00:57:36 60:00 21144 7016 imp -1 310410214827503 10666 05/19/20 01:21:05 60:00 981 735ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 440 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003084 The information contained hereCtoNyFti not for general distribution. EFTA_O0I 17160 EFTA01251684 MOBILITY 4.111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T'S records ere stored and provided in .....„ ••-s`' 0 AT&T OTC. Run Data: 06/17/2020 Run Time: a l Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn IMEI IMSI MARE MODEL Date Time Number Up Dn (OTC) 10667 05/19/20 01:55:50 0:01 0 0 ims -1 310410214827503 10668 05/19/20 01:57:36 60:00 13676 4536 ims -1 310410214827503 10669 05/19/20 02:21:05 60:00 751 735 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10670 05/19/20 02:57:36 60:00 8388 3004 ims -1 310410214827503 10671 05/19/20 03:21:05 60:00 635 525 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10672 05/19/20 03:57:36 60:00 14676 4716 ims -1 310410214827503 10673 05/19/20 04:21:05 24:21 173 105 nxtgenpho 3587080982063727 310410214827503 APPLE 110)(0=8 no 10674 05/19/20 04:45:26 60:00 7113 5585ruagenpho 3587080982063727 310410214827503 APPLE 110)(01428 no 10675 05/19/20 04:57:36 60:00 7172 2756 ims -1 310410214827503 10676 05/19/20 05:45:26 60:00 3276 2205 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10677 05/19/20 05:57:36 60:00 9928 3252 ims -1 310410214827503 10678 05/19/20 06:45:26 60:00 635 525ruagenpho 3587080982063727 310410214827503 APPLE !PHONES no 10679 05/19/20 06:57:36 60:00 15668 5936 ims -1 310410214827503 10680 05/19/20 07:45:26 60:00 519 315ruagenpho 3587080982063727 310410214827503 APPLE !PHONES no 10681 05/19/20 07:57:36 60:00 10036 3144 ims -1 310410214827503 10682 05/19/20 08:45:26 60:00 6133 4369 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10683 05/19/20 08:57:36 60:00 6956 2756 ims -1 310410214827503 10684 05/19/20 09:45:26 60:00 11243 6323 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10685 05/19/20 09:57:36 60:00 10020 3144 ims -1 310410214827503 10686 05/19/20 10:45:26 60:00 9722 8482 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10687 05/19/20 10:57:36 60:00 6848 2648 ims -1 310410214827503 10688 05/19/20 11:45:26 45:39 47591 78486ruagenpho 3587080982063727 310410214827503 APPLE !PRONGS no 10689 05/19/20 11:57:36 6:47 0 0 ims 3587080982063727 310410214827503 APPLE !PHONES 10690 05/19/20 12:04:23 12:10 5256 2824 vas 3587080982063727 310410214827503 APPLE 110)(01428 10691 05/19/20 12:04:23 12:10 5192 2824 vas 3587080982063727 310410214827503 APPLE 110)(01428 10692 05/19/20 12:16:33 5:47 3532 1448 vas 3587080982063727 310410214827503 APPLE 110)(01428 10693 05/19/20 12:22:20 1:36 3968 1448 vas 3587080982063727 310410214827503 APPLE !PHONES 10694 05/19/20 12:22:20 1:36 3904 1448 ims 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 441 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003085 The information contained her is N:Frolikk not for general distribution. EF-EA_00117161 EFTA01251685 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in .....,„•AT&T `•—s" -se OTC. Run Date: 06/17/2020 Run Time: Data Osage Tor: IiiiiiIIIIII Item Conn. Conn. Originating ET Bytes Bytes Apn IILI IMSI MARE MODEL Date Time Number Up Dn (OTC) 10695 05/19/20 12:23:56 0:06 3100 2200 ims 3587080982063727 310410214827503 APPLE 'PHONES 10696 05/19/20 12:24:02 1:53 2768 1324 ims 3587080982063727 310410214827503 APPLE 'PHONES 10697 05/19/20 12:24:02 1:53 2704 1324 ims 3587080982063727 310410214827503 APPLE 'PHONES 10698 05/19/20 12:25:55 18:57 8404 3548 ins 3587080982063727 310410214827503 APPLE 'PHONES 10699 05/19/20 12:31:04 0:35 5166 6228 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 10700 05/19/20 12:31:06 0:34 6228 4878 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10701 05/19/20 12:31:40 60:00 278 577rumgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10702 05/19/20 13:31:40 60:00 48579 431926 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 10703 05/19/20 13:40:26 16:00 10182 6478 ims 3587080982063727 310410214827503 APPLE 'PHONES 10704 05/19/20 13:56:26 0:17 2752 1340 ims 3587080982063727 310410214827503 APPLE 'PHONES 10705 05/19/20 13:56:26 0:17 2688 1340 ims 3587080982063727 310410214827503 APPLE 'PHONES 10706 05/19/20 13:56:43 3:30 3192 1788 ims 3587080982063727 310410214827503 APPLE 'PHONES 10707 05/19/20 14:00:13 20:04 2644 1340 ims 3587080982063727 310410214827503 APPLE 'PHONES 10708 05/19/20 14:00:13 20:04 2580 1340 ims 3587080982063727 310410214827503 APPLE 'PHONES 10709 05/19/20 14:20:17 60:00 11904 4500 ims 3587080982063727 310410214827503 APPLE 'PHONES 10710 05/19/20 14:31:40 60:00 1294 5333 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 10711 05/19/20 15:20:17 60:00 6816 2664 ims 3587080982063727 310410214827503 APPLE 'PHONES 10712 05/19/20 15:31:40 60:00 41304 31357rmtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10713 05/19/20 16:20:17 46:41 15140 8028 ims 3587080982063727 310410214827503 APPLE !PHONES 10714 05/19/20 16:31:40 41:04 42687 29513rmtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 10715 05/19/20 17:07:02 60:00 18524 9806 ims -1 310410214827503 10716 05/19/20 17:12:44 60:00 48777 30257 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10717 05/19/20 18:07:02 60:00 8604 2896 ims -1 310410214827503 10718 05/19/20 18:12:44 60:00 18506 20803rmtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10719 05/19/20 19:07:02 60:00 7188 2880 ims -1 310410214827503 10720 05/19/20 19:12:44 60:00 4284 11716rmtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10721 05/19/20 20:07:02 60:00 47520 25436 ims -1 310410214827503 10722 05/19/20 20:12:44 60:00 116096 92793rmtgonpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 442 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003086 The information contained heraCtoNyFti NeTniliAL not for general distribution. EF-EAJVII7162 EFTA01251686 MOBILITY 41.1, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run pato: 06/17/2020 Run Time: 18:56:49 Data Osage Tor: Item Conn. Conn. originating ET Bytes Bytes Apn IMSI MARL MODEL Date Time Number UP Dn (UTC) 10723 05/19/20 20:41:03 8:15 1442730 1301211 imo -1 310410214827503 10724 05/19/20 20:49:25 2:38 532877 387830 imo -1 310410214827503 10725 05/19/20 21:07:02 18:16 16916 14228 imo 3587080982063727 310410214827503 APPLE !PHONES 10726 05/19/20 21:12:44 60:00 169672 316498 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10727 05/19/20 21:14:35 0:32 2963 20327 imo -1 310410214827503 10728 05/19/20 21:25:18 40:36 114540 3648 imo 3587080982063727 310410214827503 APPLE !PHONES 10729 05/19/20 21:25:18 40:36 6140 3648 imo 3587080982063727 310410214827503 APPLE !PHONES 10730 05/19/20 22:05:54 60:00 50268 31928 ins 3587080982063727 310410214827503 APPLE !PHONES 10731 05/19/20 22:12:44 60:00 53647 36614 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10732 05/19/20 22:29:15 0:32 5388 19273 ims 3587080982063727 310410214827503 APPLE 'PHONES 10733 05/19/20 23:03:37 0:22 0 0 ims 3587080982063727 310410214827503 APPLE 'PHONES 10734 05/19/20 23:04:22 2:19 519759 265795 ims 3587080982063727 310410214827503 APPLE 'PHONES 10735 05/19/20 23:05:54 19:20 4416 1904 ims 3587080982063727 310410214827503 APPLE 'PHONES 10736 05/19/20 23:12:44 60:00 257347 731383 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10737 05/19/20 23:25:14 20:35 24596 2308 ims 3587080982063727 310410214827503 APPLE 'PHONES 10738 05/19/20 23:25:14 20:35 5572 2308 ims 3587080982063727 310410214827503 APPLE 'PHONES 10739 05/19/20 23:45:49 5:33 3424 1324 ims 3587080982063727 310410214827503 APPLE !PHONES 10740 05/19/20 23:51:22 1:48 2660 1324 ims 3587080982063727 310410214827503 APPLE !PHONES 10741 05/19/20 23:51:22 1:48 2596 1324 ins 3587080982063727 310410214827503 APPLE !PHONES 10742 05/19/20 23:53:10 60:00 12136 4220 imo 3587080982063727 310410214827503 APPLE 'PHONES 10743 05/20/20 00:12:44 60:00 93211 75998 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10744 05/20/20 00:53:10 1:09 0 0 ims 3587080982063727 310410214827503 APPLE 'PHONES 10745 05/20/20 00:54:19 0:22 15524 1448 imo 3587080982063727 310410214827503 APPLE 'PHONES 10746 05/20/20 00:54:19 0:22 3328 1448 imo 3587080982063727 310410214827503 APPLE 'PHONES 10747 05/20/20 00:54:41 60:00 10504 4204 imo 3587080982063727 310410214827503 APPLE 'PHONES 10748 05/20/20 01:12:44 60:00 70778 59040 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10749 05/20/20 01:54:41 16:51 0 0 ims 3587080982063727 310410214827503 APPLE 'PHONES 10750 05/20/20 02:11:32 60:00 32548 3988 ims 3587080982063727 310410214827503 APPLE !PHONES 10751 05/20/20 02:11:32 60:00 8112 3988 ims 3587080982063727 310410214827503 APPLE !PHONES 10752 05/20/20 02:12:44 60:00 3655 1604 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10753 05/20/20 03:11:32 60:00 7788 4148 imo 3587080982063727 310410214827503 APPLE IPHONE8 10754 05/20/20 03:11:32 60:00 7788 4148 ins 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 443 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003087 The information contained hereCtop+R not for general distribution. EF-EA_00117163 EFTA01251687 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in tr ‘ligli. mi a AT&T (ITC. Run Data: 06/17/2020 Run Tame: 18:56:49 Data Usage Tor: Item Conn. Conn. originating ET Bytes Byte. Apn INLI IM9I NUT MODEL Date Time Rumbor Up Dn (UTC) 10755 05/20/20 03:12:44 60:00 751 735 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10756 05/20/20 04:11:32 60:00 5192 2432 imp 3587080982063727 310410214827503 APPLE !PHONES 10757 05/20/20 04:11:32 60:00 5192 2432 imp 3587080982063727 310410214827503 APPLE !PHONES 10758 05/20/20 04:12:44 60:00 751 735 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10759 05/20/20 05:11:32 60:00 5192 2628 imp 3587080982063727 310410214827503 APPLE IPROME8 10760 05/20/20 05:11:32 60:00 5192 2540 imp 3587080982063727 310410214827503 APPLE IPROME8 10761 05/20/20 05:12:44 60:00 635 525 nxtgonpho 3587080982063727 310410214827503 APPLE IPROME8 no 10762 05/20/20 06:11:32 60:00 7788 3864 imp 3587080982063727 310410214827503 APPLE !PHONES 10763 05/20/20 06:11:32 60:00 7788 3864 imp 3587080982063727 310410214827503 APPLE !PHONES 10764 05/20/20 06:12:44 60:00 578 630 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10765 05/20/20 07:11:32 60:00 5516 2772 imp 3587080982063727 310410214827503 APPLE IPROME8 10766 05/20/20 07:11:32 60:00 5516 2772 imp 3587080982063727 310410214827503 APPLE IPROME8 10767 05/20/20 07:12:44 60:00 398 315 nxtgonpho 3587080982063727 310410214827503 APPLE IPROME8 no 10768 05/20/20 08:11:32 60:00 7788 4040 imp 3587080982063727 310410214827503 APPLE !PHONES 10769 05/20/20 08:11:32 60:00 7788 4040 imp 3587080982063727 310410214827503 APPLE !PHONES 10770 05/20/20 08:12:44 60:00 346 210 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10771 05/20/20 09:11:32 60:00 5192 2540 imp 3587080982063727 310410214827503 APPLE IPROME8 10772 05/20/20 09:11:32 60:00 5192 2540 ins 3587080982063727 310410214827503 APPLE IPROME8 10773 05/20/20 09:12:44 60:00 462 420 nxtgonpho 3587080982063727 310410214827503 APPLE IPROME8 no 10774 05/20/20 10:11:32 22:25 2596 1324 imp 3587080982063727 310410214827503 APPLE !PHONES 10775 05/20/20 10:11:32 22:25 2596 1324 imp 3587080982063727 310410214827503 APPLE !PHONES 10776 05/20/20 10:12:44 60:00 3870 1197 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10777 05/20/20 10:33:57 60:00 10488 4080 imp 3587080982063727 310410214827503 APPLE IPROME8 10778 05/20/20 11:12:44 59:40 24619 15577 nxtgonpho 3587080982063727 310410214827503 APPLE IPROME8 no 10779 05/20/20 11:33:57 60:00 7420 3648 imp 3587080982063727 310410214827503 APPLE IPROME8 10780 05/20/20 12:12:24 1:47 48 Oruftgonpho 3587080982063727 310410214827503 APPLE IPROME8 no 10781 05/20/20 12:14:11 60:00 46707 18829 nxtgonpho 3587080982063727 310410214827503 APPLE IPROME8 no 10782 05/20/20 12:33:57 60:00 0 0 imp 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 444 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003088 The information contained heraCteNftli PsisTfAL not for general distribution. EFTA 00117164 EFTA01251688 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in ..z. •- `s a. d AT&T arc. Run Date: 06/17/2020 Run Time: 18:56:49 Data Osage For: Item Conn. Conn. originating ET Bytes Bytes Apn INLI IH3I MARL MODEL Date Time Number Up Dn (UTC) 10783 05/20/20 12:38:30 60:00 19197 9043 ims -1 310410214827503 10784 05/20/20 13:14:11 53:50 111892 197148 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10785 05/20/20 13:33:57 34:25 0 0 ims 3587080982063727 310410214827503 APPLE !PHONES 10786 05/20/20 13:38:30 3:27 108 108 ims 3587080982063727 310410214827503 APPLE DRONES 10787 05/20/20 13:41:57 2:58 33368 1556 ims 3587080982063727 310410214827503 APPLE DRONES 10788 05/20/20 13:41:57 2:58 3136 1556 ims 3587080982063727 310410214827503 APPLE DRONES 10789 05/20/20 13:44:55 28:27 3500 1448 ims 3587080982063727 310410214827503 APPLE DRONES 10790 05/20/20 14:08:00 1:40 5926 6294roftgonpho 3587080982063727 310410214827503 APPLE DRONES no 10791 05/20/20 14:08:01 1:40 6294 5638ruagonpho 3587080982063727 310410214827503 APPLE 1PRONE8 no 10792 05/20/20 14:08:21 1:19 6227 6733 ims 3587080982063727 310410214827503 APPLE !PHONES 10793 05/20/20 14:08:22 1:19 6665 5963 ims 3587080982063727 310410214827503 APPLE !PHONES 10794 05/20/20 14:09:41 60:00 4249469 4633859ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 10795 05/20/20 14:09:43 11:21 6671 5982 ims 3587080982063727 310410214827503 APPLE !PHONES 10796 05/20/20 14:21:04 2:13 3532 1324 ins 3587080982063727 310410214827503 APPLE !PHONES 10797 05/20/20 14:23:17 19:36 2628 1324 ins 3587080982063727 310410214827503 APPLE !PHONES 10798 05/20/20 14:42:53 60:00 12152 5436 ins 3587080982063727 310410214827503 APPLE !PHONES 10799 05/20/20 15:09:41 60:00 1754 1422 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10800 05/20/20 15:42:53 60:00 9928 3144 ins 3587080982063727 310410214827503 APPLE !PHONES 10801 05/20/20 16:09:41 60:00 27188 15520roftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10802 05/20/20 16:42:53 60:00 10268 3268 ims 3587080982063727 310410214827503 APPLE !PHONES 10803 05/20/20 17:09:41 60:00 9200 8732ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 10804 05/20/20 17:42:53 35:00 9712 3036 ims 3587080982063727 310410214827503 APPLE !PHONES 10805 05/20/20 18:09:41 60:00 97000 619433ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 10806 05/20/20 18:17:53 17:39 2860 1432 ims 3587080982063727 310410214827503 APPLE !PHONES 10807 05/20/20 18:35:32 2:37 3408 1432 ims 3587080982063727 310410214827503 APPLE !PHONES 10808 05/20/20 18:38:09 2:49 2644 1324 ims 3587080982063727 310410214827503 APPLE !PHONES 10809 05/20/20 18:40:58 60:00 29328 14628 ims 3587080982063727 310410214827503 APPLE !PHONES 10810 05/20/20 18:53:48 0:59 153404 129915 ims 3587080982063727 310410214827503 APPLE !PHONES 10811 05/20/20 19:09:41 60:00 1073 945ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 10812 05/20/20 19:40:58 60:00 7172 2880 vas 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 445 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003089 The information contained her is PsiTifikE not for general distribution. EF-EA_00117165 EFTA01251689 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in %e,. ‘...6 tt s% AT&T arc. Run Date: 06/17/2020 Run Time: 18:56:49 Data Osage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn IMEI IHSI MAKE MODEL Date Time Hunter OP Dn (OTC) 10813 05/20/20 20:09:41 60:00 29856 25365netgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10814 05/20/20 20:40:58 60:00 12248 3760 ins 3587080982063727 310410214827503 APPLE !PHONES 10815 05/20/20 21:09:41 60:00 169811 123321ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10816 05/20/20 21:40:56 0:33 6166 20242 ins 3587080982063727 310410214827503 APPLE 'PHONES 10817 05/20/20 21:40:58 60:00 74996 53644 ins 3587080982063727 310410214827503 APPLE 'PHONES 10818 05/20/20 21:58:02 0:31 2369 17098 ins 3587080982063727 310410214827503 APPLE 'PHONES 10819 05/20/20 21:59:00 0:02 0 0 ins 3587080982063727 310410214827503 APPLE 'PHONES 10820 05/20/20 21:59:04 0:40 5165 17796 ins 3587080982063727 310410214827503 APPLE 'PHONES 10821 05/20/20 21:59:58 0:32 3097 16236 ins 3587080982063727 310410214827503 APPLE 'PHONES 10822 05/20/20 22:09:41 60:00 722458 760111ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 10823 05/20/20 22:40:58 35:07 5180 1804 ins 3587080982063727 310410214827503 APPLE 'PHONES 10824 05/20/20 23:09:41 60:00 123570 269139 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 10825 05/20/20 23:16:05 59:07 13787 10574 ins 3587080982063727 310410214827503 APPLE !PHONES 10826 05/21/20 00:09:41 60:00 197570 287167ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10827 05/21/20 00:15:12 1:10 3640 1432 ins 3587080982063727 310410214827503 APPLE !PHONES 10828 05/21/20 00:16:22 3:12 2644 1324 ins 3587080982063727 310410214827503 APPLE 'PHONES 10829 05/21/20 00:19:34 10:36 3424 1324 ins 3587080982063727 310410214827503 APPLE 'PHONES 10830 05/21/20 00:30:10 0:48 3376 1448 ins 3587080982063727 310410214827503 APPLE 'PHONES 10831 05/21/20 00:30:58 35:40 16708 11852 ins 3587080982063727 310410214827503 APPLE 'PHONES 10832 05/21/20 00:31:06 35:32 6159356 7038910 ins 3587080982063727 310410214827503 APPLE 'PHONES 10833 05/21/20 01:06:38 0:16 5348 2824 ins 3587080982063727 310410214827503 APPLE 'PHONES 10834 05/21/20 01:06:38 0:16 68497 32096 ins 3587080982063727 310410214827503 APPLE 'PHONES 10835 05/21/20 01:06:54 18:19 3268478 3666668 ins 3587080982063727 310410214827503 APPLE 'PHONES 10836 05/21/20 01:06:54 60:00 18824 7732 ins 3587080982063727 310410214827503 APPLE 'PHONES 10837 05/21/20 01:09:41 60:00 92313 43476ruagonpho 3587080982063727 310410214827503 APPLE 'PHONES no 10838 05/21/20 02:06:54 60:00 10144 3284 ins 3587080982063727 310410214827503 APPLE 'PHONES 10839 05/21/20 02:09:41 9:58 0 Onatgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 10840 05/21/20 02:19:39 60:00 10408 8185natgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 10841 05/21/20 03:06:54 60:00 8496 3344 ins 3587080982063727 310410214827503 APPLE 'PHONES 10842 05/21/20 03:19:39 60:00 867 945ruagonpho 3587080982063727 310410214827503 APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 446 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003090 The information contained heralCONyFti N:FoleikE not for general distribution. EF-EA_00117166 EFTA01251690 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in sc"`s eo AT&T 1° OTC. Run Data: 06/17/2020 Run Time: Data Usage Tor: Itea Conn. Conn. Originating ET Bytes Bytes Apn IKEI INSI MAKE NICOLL Data Time Number Up Dn (UTC) 10843 05/21/20 04:06:54 60:00 13800 4700 los 3587080982063727 310410214827503 APPLE !PHONES 10844 05/21/20 04:19:39 60:00 828 915 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10845 05/21/20 05:06:54 60:00 6956 2864 ins 3587080982063727 310410214827503 APPLE !PHONES 10846 05/21/20 05:19:39 60:00 751 735ruftgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10847 05/21/20 06:06:54 60:00 10596 4380 ins 3587080982063727 310410214827503 APPLE 'PHONES 10848 05/21/20 06:19:39 41:33 514 525ruftgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10849 05/21/20 07:01:12 20:48 384 48ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10850 05/21/20 07:01:13 20:48 48 Oruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10851 05/21/20 07:06:54 60:00 8388 3236 ins 3587080982063727 310410214827503 APPLE !PHONES 10852 05/21/20 07:22:01 60:00 10303 6163ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10853 05/21/20 08:06:54 60:00 8728 3020 ins 3587080982063727 310410214827503 APPLE 'PHONES 10854 05/21/20 08:22:01 38:19 3493 6127nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10855 05/21/20 09:00:19 8:23 901 280nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10856 05/21/20 09:00:21 8:22 280 613ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10857 05/21/20 09:06:54 60:00 13228 4452 imp 3587080982063727 310410214827503 APPLE 'PHONES 10858 05/21/20 09:08:43 60:00 7090 5839ruftgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10859 05/21/20 10:06:54 60:00 7172 2988 imp 3587080982063727 310410214827503 APPLE 'PHONES 10860 05/21/20 10:08:43 60:00 578 682 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 10861 05/21/20 11:06:54 60:00 13584 4768 imp 3587080982063727 310410214827503 APPLE 'PHONES 10862 05/21/20 11:08:43 60:00 24598 14281 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10863 05/21/20 12:06:54 60:00 7188 2772 imp 3587080982063727 310410214827503 APPLE !PHONES 10864 05/21/20 12:08:43 60:00 4413 5826ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10865 05/21/20 13:06:54 60:00 7064 2772 ins 3587080982063727 310410214827503 APPLE !PHONES 10866 05/21/20 13:08:43 60:00 5130 4237ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10867 05/21/20 14:06:54 60:00 12260 4344 ins 3587080982063727 310410214827503 APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 447 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003091 The information contained her is NeTniliAL not for general distribution. EF-EA_00117167 EFTA01251691 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tr,`s Ld. AT&T a arc. Run Data: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn INEI IMSI NUM MODEL Data Time Number Up On (U2C) 10868 05/21/20 14:08:43 29:29 65195 32700 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10869 05/21/20 14:38:12 60:00 160066 95355 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10870 05/21/20 15:06:54 6:06 15728 9280 ions 3587080982063727 310410214827503 APPLE 'PHONES 10871 05/21/20 15:07:02 0:13 7216 25435 ions 3587080982063727 310410214827503 APPLE 'PHONES 10872 05/21/20 15:13:00 0:41 106012 1412 ions 3587080982063727 310410214827503 APPLE 'PHONES 10873 05/21/20 15:13:00 0:41 2736 1324 ions 3587080982063727 310410214827503 APPLE 'PHONES 10874 05/21/20 15:13:41 14:44 3424 1432 ions 3587080982063727 310410214827503 APPLE 'PHONES 10875 05/21/20 15:28:25 0:44 2644 1412 ions 3587080982063727 310410214827503 APPLE 'PHONES 10876 05/21/20 15:28:25 0:44 2644 1324 ions 3587080982063727 310410214827503 APPLE 'PHONES 10877 05/21/20 15:29:09 23:27 3424 1324 ions 3587080982063727 310410214827503 APPLE 'PHONES 10878 05/21/20 15:38:12 60:00 125739 390337 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10879 05/21/20 15:52:36 4:36 2692 1412 ions 3587080982063727 310410214827503 APPLE !PHONES 10880 05/21/20 15:52:36 4:36 2644 1324 ions 3587080982063727 310410214827503 APPLE !PHONES 10881 05/21/20 15:57:12 10:30 0 0 ions 3587080982063727 310410214827503 APPLE !PHONES 10882 05/21/20 15:57:16 21:51 6685 5998 ions 3587080982063727 310410214827503 APPLE 'PHONES 10883 05/21/20 16:19:07 60:00 10488 4020 ions 3587080982063727 310410214827503 APPLE 'PHONES 10884 05/21/20 16:38:12 60:00 24070 23600 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10885 05/21/20 17:19:07 60:00 6848 2772 ions 3587080982063727 310410214827503 APPLE !PHONES 10886 05/21/20 17:38:12 60:00 9536 52201 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10887 05/21/20 18:19:07 4:21 0 0 ions 3587080982063727 310410214827503 APPLE !PHONES 10888 05/21/20 18:23:28 3:58 3624 3248 ions 3587080982063727 310410214827503 APPLE 'PHONES 10889 05/21/20 18:27:26 2:34 3424 1448 ions 3587080982063727 310410214827503 APPLE 'PHONES 10890 05/21/20 18:30:00 49:25 5240 2664 ions 3587080982063727 310410214827503 APPLE 'PHONES 10891 05/21/20 18:38:12 60:00 22214 126841 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10892 05/21/20 19:19:25 60:00 10380 4236 ions 3587080982063727 310410214827503 APPLE 'PHONES 10893 05/21/20 19:38:12 60:00 41781 32225 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 10894 05/21/20 20:19:25 60:00 22572 13908 ions 3587080982063727 310410214827503 APPLE 'PHONES 10895 05/21/20 20:31:24 0:10 7021 17491 ions 3587080982063727 310410214827503 APPLE 'PHONES 10896 05/21/20 20:38:12 60:00 1203 582 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10897 05/21/20 21:19:25 55:10 33544 18284 ins 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 448 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003092 The information contained her is not for general distribution. EF-EA_00117168 EFTA01251692 MOBILITY 41111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in .....,./AT&T ••-•°"" s OTC. Run Data: 06/17/2020 Run Tama: 18:56:49 Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn IKEI INSI MARL MODEL Data Time Number Op Dn (OTC) 10898 05/21/20 21:23:45 0:14 0 6272 imp 3587080982063727 310410214827503 APPLE IPHONZ8 10899 05/21/20 21:30:47 27:03 3320968 3864666 imp 3587080982063727 310410214827503 APPLE IPHONZ8 10900 05/21/20 21:38:12 60:00 216793 1386922 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONZ8 no 10901 05/21/20 22:14:35 23:46 2752 1340 imp 3587080982063727 310410214827503 APPLE !PHONES 10902 05/21/20 22:38:12 60:00 24203 16911ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10903 05/21/20 22:38:21 60:00 11920 4392 imp 3587080982063727 310410214827503 APPLE !PHONES 10904 05/21/20 23:38:12 60:00 1968607 1981511ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10905 05/21/20 23:38:21 43:22 28892 17792 ins 3587080982063727 310410214827503 APPLE DRONES 10906 05/22/20 00:17:49 0:21 0 14904 ins 3587080982063727 310410214827503 APPLE DRONES 10907 05/22/20 00:20:30 0:22 0 12635 ins 3587080982063727 310410214827503 APPLE DRONES 10908 05/22/20 00:21:43 5:22 2752 1340 ins 3587080982063727 310410214827503 APPLE DRONES 10909 05/22/20 00:27:05 0:27 3656 2340 imp 3587080982063727 310410214827503 APPLE DRONES 10910 05/22/20 00:27:32 12:45 2644 1340 imp 3587080982063727 310410214827503 APPLE !PHONES 10911 05/22/20 00:38:12 60:00 323571 325669ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10912 05/22/20 00:40:17 60:00 15328 5876 imp 3587080982063727 310410214827503 APPLE !PHONES 10913 05/22/20 01:38:12 19:08 2438269 2563449ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10914 05/22/20 01:40:17 11:50 0 0 imp 3587080982063727 310410214827503 APPLE !PHONES 10915 05/22/20 01:52:07 0:49 3376 1464 imp 3587080982063727 310410214827503 APPLE !PHONES 10916 05/22/20 01:52:56 4:24 9944 3688 imp 3587080982063727 310410214827503 APPLE !PHONES 10917 05/22/20 02:00:46 60:00 99955 354713ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10918 05/22/20 02:00:49 20:24 6675 5922 imp 3587080982063727 310410214827503 APPLE !PHONES 10919 05/22/20 02:21:13 60:00 13568 4468 imp 3587080982063727 310410214827503 APPLE !PHONES 10920 05/22/20 03:00:46 60:00 578 630ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10921 05/22/20 03:21:13 60:00 10144 3144 imp 3587080982063727 310410214827503 APPLE !PHONES 10922 05/22/20 04:00:46 60:00 6258 4115ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10923 05/22/20 04:21:13 60:00 8496 2896 imp 3587080982063727 310410214827503 APPLE !PHONES 10924 05/22/20 05:00:46 60:00 289 315ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10925 05/22/20 05:21:13 60:00 11596 4112 imp 3587080982063727 310410214827503 APPLE !PHONES 10926 05/22/20 06:00:46 60:00 1839 646ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 449 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003093 The information contained her is NTifikE not for general distribution. EFTA_OOI 17169 EFTA01251693 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T (ITC. Run Date: 06/17/2020 Run Time: Data Osage For: iiiiiIIIII Item Conn. Conn. Originating ET Bytes Bytes Apn INEI INSI MARE MODEL Date Time Number Up On (OTC) 10927 05/22/20 06:21:13 60:00 10704 4596 imo 3587080982063727 310410214827503 APPLE IPHONE8 10928 05/22/20 07:00:46 60:00 735 1015 nxtgenpho 3587080982063727 310410214827503 APPLE IPHONE8 no 10929 05/22/20 07:21:13 60:00 8480 3128 imo 3587080982063727 310410214827503 APPLE IPHONE8 10930 05/22/20 08:00:46 60:00 7317 6162 nxtgenpho 3587080982063727 310410214827503 APPLE IPHONE8 no 10931 05/22/20 08:21:13 60:00 8604 2912 imo 3587080982063727 310410214827503 APPLE IPHONE8 10932 05/22/20 09:00:46 60:00 289 315 nxtgenpho 3587080982063727 310410214827503 APPLE IPHONE8 no 10933 05/22/20 09:21:13 60:00 12152 4344 imo 3587080982063727 310410214827503 APPLE IPHONE8 10934 05/22/20 10:00:46 60:00 578 630 nxtgenpho 3587080982063727 310410214827503 APPLE IPHONE8 no 10935 05/22/20 10:21:13 60:00 9912 3268 imo 3587080982063727 310410214827503 APPLE IPHONE8 10936 05/22/20 11:00:46 58:35 3315 577 nxtgenpho 3587080982063727 310410214827503 APPLE IPHONE8 no 10937 05/22/20 11:21:13 60:00 8388 2896 imo 3587080982063727 310410214827503 APPLE IPHONE8 10938 05/22/20 11:59:20 2:03 5169 6298 nxtgenpho 3587080982063727 310410214827503 APPLE IPHONE8 no 10939 05/22/20 11:59:21 2:03 6298 4881 nxtgenpho 3587080982063727 310410214827503 APPLE IPHONE8 no 10940 05/22/20 12:01:24 31:36 6635 5535 nxtgenpho 3587080982063727 310410214827503 APPLE IPHONE8 no 10941 05/22/20 12:21:13 60:00 18640 6324 imo 3587080982063727 310410214827503 APPLE IPHONE8 10942 05/22/20 12:33:00 60:00 8022 10825 nxtgenpho 3587080982063727 310410214827503 APPLE IPHONE8 no 10943 05/22/20 13:21:13 60:00 10144 3144 imo 3587080982063727 310410214827503 APPLE IPHONE8 10944 05/22/20 13:33:00 38:32 76483 62020 nxtgenpho 3587080982063727 310410214827503 APPLE IPHONE8 no 10945 05/22/20 14:11:33 37:10 96 0 nxtgenpho 3587080982063727 310410214827503 APPLE IPHONE8 no 10946 05/22/20 14:21:13 60:00 10144 3252 imo 3587080982063727 310410214827503 APPLE IPHONE8 10947 05/22/20 14:48:42 2:04 5065 6230 nxtgenpho 3587080982063727 310410214827503 APPLE IPHONE8 no 10948 05/22/20 14:48:43 2:04 6230 4777 nxtgenpho 3587080982063727 310410214827503 APPLE IPHONE8 no 10949 05/22/20 14:50:47 60:00 18274 14179 nxtgenpho 3587080982063727 310410214827503 APPLE IPHONE8 no 10950 05/22/20 15:21:13 60:00 8712 3020 imo 3587080982063727 310410214827503 APPLE IPHONE8 10951 05/22/20 15:50:47 60:00 31465 67761 nxtgenpho 3587080982063727 310410214827503 APPLE IPHONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 450 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained herself:3W+ PsiTniliAL not for general distribution. SDNY_GM_00003094 EF-EA_00117170 EFTA01251694 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in t—a `"se s. d AT&T OTC. Run Data: 06/17/2020 Run Time: 18:56:49 Data Osage Tor: Item Conn. Conn. Originating Cr Bytes Bytea Apn MAKE NICOLL Data Time Butter op Dn (OTC) 10952 05/22/20 16:21:13 8:04 0 496 imo 3587080982063727 310410214827503 APPLE 1PRONE8 10953 05/22/20 16:29:17 28:28 5972 2772 imo 3587080982063727 310410214827503 APPLE 1PRONE8 10954 05/22/20 16:29:17 28:28 38084 2860 imo 3587080982063727 310410214827503 APPLE 1PRONE8 10955 05/22/20 16:50:47 60:00 1120886 1403792 nxtgonpho 3587080982063727 310410214827503 APPLE 1PRONE8 no 10956 05/22/20 16:57:48 38:33 9281 7286 imp 3587080982063727 310410214827503 APPLE 1PRONE8 10957 05/22/20 17:36:21 60:00 56848 36412 imp 3587080982063727 310410214827503 APPLE 1PRONE8 10958 05/22/20 17:37:13 22:49 2683566 4485860 imp 3587080982063727 310410214827503 APPLE 1PRONE8 10959 05/22/20 17:50:47 60:00 171721 73247ruftgonpho 3587080982063727 310410214827503 APPLE 1PRONE8 no 10960 05/22/20 18:00:15 7:11 1273372 1140381 imp 3587080982063727 310410214827503 APPLE 1PRONE8 10961 05/22/20 18:33:36 0:34 4151 16952 imp 3587080982063727 310410214827503 APPLE 1PRONE8 10962 05/22/20 18:36:21 5:31 0 0 imp 3587080982063727 310410214827503 APPLE 1PRONE8 10963 05/22/20 18:50:47 60:00 1131141 1827889ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10964 05/22/20 19:04:32 0:18 6689 5997 its 3587080982063727 310410214827503 APPLE !PRONGS 10965 05/22/20 19:04:50 10:55 5088 3744 its 3587080982063727 310410214827503 APPLE !PHONES 10966 05/22/20 19:15:45 0:40 3184 1480 its 3587080982063727 310410214827503 APPLE 1PRONE8 10967 05/22/20 19:16:25 1:19 5072 1588 imp 3587080982063727 310410214827503 APPLE 1PRONE8 10968 05/22/20 19:17:44 60:00 7836 4020 imp 3587080982063727 310410214827503 APPLE 1PRONE8 10969 05/22/20 19:50:47 60:00 111519 1095348ruftgonpho 3587080982063727 310410214827503 APPLE 1PRONE8 no 10970 05/22/20 20:17:44 8:22 0 0 imo 3587080982063727 310410214827503 APPLE 1PRONE8 10971 05/22/20 20:26:06 48:08 8604 3144 ins 3587080982063727 310410214827503 APPLE 1PRONE8 10972 05/22/20 20:50:47 60:00 80314 80650natgonpho 3587080982063727 310410214827503 APPLE 1PRONE8 no 10973 05/22/20 21:14:14 0:19 3952 1464 imp 3587080982063727 310410214827503 APPLE 1PRONE8 10974 05/22/20 21:14:33 60:00 38844 26188 its 3587080982063727 310410214827503 APPLE 1PRONE8 10975 05/22/20 21:26:09 0:21 0 320 its 3587080982063727 310410214827503 APPLE 1PRONE8 10976 05/22/20 21:43:29 0:53 113142 129805 imp 3587080982063727 310410214827503 APPLE 1PRONE8 10977 05/22/20 21:45:37 30:28 3898920 5589939 imp 3587080982063727 310410214827503 APPLE 1PRONE8 10978 05/22/20 21:50:47 60:00 73381 49473ruftgonpho 3587080982063727 310410214827503 APPLE 1PRONE8 no 10979 05/22/20 22:14:33 12:47 31636 20604 its 3587080982063727 310410214827503 APPLE !PHONES 10980 05/22/20 22:26:03 0:28 1615 12111 its 3587080982063727 310410214827503 APPLE 1PRONE8 10981 05/22/20 22:26:32 0:48 123701 100938 its 3587080982063727 310410214827503 APPLE 1PRONE8 10982 05/22/20 22:27:20 6:11 860476 992457 imp 3587080982063727 310410214827503 APPLE 1PRONE8 10983 05/22/20 22:27:20 6:18 10600 6452 imp 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 451 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003095 The information contained hereCtoNyFti Ns tit not for general distribution. EF-EA_00117171 EFTA01251695 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: 10:54:52 Data Usage For: Item Conn. Conn. Originating IT Sytes Byte. Apn ItrrI NICOLL Date Time Humber Up Dn (UTC) 10984 05/22/20 22:33:38 15:37 17532 9812 imp 3587080982063727 310410214827503 APPLE IPHOME8 10985 05/22/20 22:45:48 3:27 717501 334437 imp 3587080982063727 310410214827503 APPLE IPHOME8 10986 05/22/20 22:49:15 0:49 14672 9816 imp 3587080982063727 310410214827503 APPLE IPHOME8 10987 05/22/20 22:49:15 0:49 57613 192300 imp 3587080982063727 310410214827503 APPLE IPHOME8 10988 05/22/20 22:50:04 2:57 17120 11032 imp 3587080982063727 310410214827503 APPLE IPHOME8 10989 05/22/20 22:50:04 2:57 417781 612942 imp 3587080982063727 310410214827503 APPLE IPHOME8 10990 05/22/20 22:50:47 60:00 101363 51735 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 10991 05/22/20 22:53:01 17:28 2822737 3638181 imp 3587080982063727 310410214827503 APPLE 10992 05/22/20 22:53:01 17:34 13860 11932 imp 3587080982063727 310410214827503 APPLE 10993 05/22/20 23:10:35 5:32 5180 1588 imp 3587080982063727 310410214827503 APPLE 10994 05/22/20 23:16:07 4:28 2644 1340 imp 3587080982063727 310410214827503 APPLE 10995 05/22/20 23:20:35 60:00 13352 4624 imp 3587080982063727 310410214827503 APPLE 10996 05/22/20 23:50:47 60:00 65449 46806ruftgonpho 3587080982063727 310410214827503 APPLE no 10997 05/23/20 00:20:35 60:00 8604 3268 imp 3587080982063727 310410214827503 APPLE IPM01428 10998 05/23/20 00:50:47 60:00 1395 6437ruftgonpho 3587080982063727 310410214827503 APPLE IPM01428 no 10999 05/23/20 01:20:35 60:00 8728 3052 imp 3587080982063727 310410214827503 APPLE IPM01428 11000 05/23/20 01:50:47 60:00 623 525ruftgonpho 3587080982063727 310410214827503 APPLE IPM01428 no 11001 05/23/20 02:20:35 60:00 8388 2928 imp 3587080982063727 310410214827503 APPLE IPM01428 11002 05/23/20 02:50:47 60:00 346 21Ormagonpho 3587080982063727 310410214827503 APPLE 'PROMS no 11003 05/23/20 03:20:35 60:00 19840 6172 imp 3587080982063727 310410214827503 APPLE IPM01428 11004 05/23/20 03:50:47 60:00 514 525 nxtgonpho 3587080982063727 310410214827503 APPLE IPM01428 no 11005 05/23/20 04:20:35 60:00 10144 3176 imp 3587080982063727 310410214827503 APPLE IPM01428 11006 05/23/20 04:50:47 60:00 514 525 nxtgonpho 3587080982063727 310410214827503 APPLE !PROMS no 11007 05/23/20 05:20:35 60:00 10036 3392 imp 3587080982063727 310410214827503 APPLE !PROMS 11008 05/23/20 05:50:47 60:00 346 21Ormagonpho 3587080982063727 310410214827503 APPLE !PROMS no 11009 05/23/20 06:20:35 60:00 8604 3036 imp 3587080982063727 310410214827503 APPLE !PROMS 11010 05/23/20 06:50:47 60:00 519 315roftgonpho 3587080982063727 310410214827503 APPLE !PROMS no 11011 05/23/20 07:20:35 60:00 9928 3160 imp 3587080982063727 310410214827503 APPLE !PROMS 11012 05/23/20 07:50:47 60:00 462 42Ormagonpho 3587080982063727 310410214827503 APPLE !PROMS no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 452 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003096 The information contained heraCtoNyFtli not for general distribution. NTifikE EFTA 00117172 EFTA01251696 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tr"`s ad I‘ AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn IKEI INSI NUT NICOLL Data Time Number Up Dn (OTC) 11013 05/23/20 08:20:35 60:00 13460 4676 ims 3587080982063727 310410214827503 APPLE !PHONES 11014 05/23/20 08:50:47 60:00 751 735 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11015 05/23/20 09:20:35 60:00 10488 4376 ins 3587080982063727 310410214827503 APPLE 'PHONES 11016 05/23/20 09:50:47 60:00 462 420 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 11017 05/23/20 10:20:35 60:00 8928 3036 ins 3587080982063727 310410214827503 APPLE !PHONES 11018 05/23/20 10:50:47 60:00 467 274 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11019 05/23/20 11:20:35 60:00 6956 2572 ins 3587080982063727 310410214827503 APPLE !PHONES 11020 05/23/20 11:50:47 60:00 126754 9337 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11021 05/23/20 12:20:35 60:00 16668 6140 ins 3587080982063727 310410214827503 APPLE !PHONES 11022 05/23/20 12:50:47 60:00 5213 6882 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11023 05/23/20 13:20:35 60:00 7712 3036 ins 3587080982063727 310410214827503 APPLE !PHONES 11024 05/23/20 13:50:47 60:00 462 420 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11025 05/23/20 14:20:35 60:00 7296 2912 ins 3587080982063727 310410214827503 APPLE 'PHONES 11026 05/23/20 14:50:47 60:00 74064 57167 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 11027 05/23/20 15:20:35 60:00 10036 3176 ins 3587080982063727 310410214827503 APPLE 'PHONES 11028 05/23/20 15:50:47 60:00 4418 6736 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 11029 05/23/20 16:20:35 60:00 15108 4996 ins 3587080982063727 310410214827503 APPLE 'PHONES 11030 05/23/20 16:50:47 60:00 514 525 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11031 05/23/20 17:20:35 60:00 12028 4536 ins 3587080982063727 310410214827503 APPLE !PHONES 11032 05/23/20 17:50:47 60:00 346 210 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 11033 05/23/20 18:20:35 60:00 8496 3036 ins 3587080982063727 310410214827503 APPLE 'PHONES 11034 05/23/20 18:50:47 60:00 346 210 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 11035 05/23/20 19:20:35 60:00 13800 4888 ins 3587080982063727 310410214827503 APPLE 'PHONES 11036 05/23/20 19:50:47 60:00 346 210 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 11037 05/23/20 20:20:35 60:00 8496 3144 ins 3587080982063727 310410214827503 APPLE !PHONES 11038 05/23/20 20:50:47 60:00 6674 5550 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11039 05/23/20 21:20:35 60:00 8388 2928 ins 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 453 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained hereCtoNe PsiTniliAL not for general distribution. SDNYGM00003097 EF-EA_00117173 EFTA01251697 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T arc. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn INCI IMPI HUM MODEL Date Time Number Up Dn (UTC) 11040 05/23/20 21:50:47 60:00 83025 66455 nxtgonpho 3587080982063727 310410214827503 APPLE !PROMS no 11041 05/23/20 22:20:35 60:00 20308 10332 ins 3587080982063727 310410214827503 APPLE !PHONES 11042 05/23/20 22:50:47 60:00 36629 20088ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11043 05/23/20 22:54:35 30:57 3590137 6247105 ins 3587080982063727 310410214827503 APPLE !PHONES 11044 05/23/20 23:20:35 60:00 26656 12480 ins 3587080982063727 310410214827503 APPLE !PHONES 11045 05/23/20 23:25:43 11:48 2306428 1670455 ins 3587080982063727 310410214827503 APPLE !PHONES 11046 05/23/20 23:50:47 60:00 26531 12418ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11047 05/24/20 00:20:35 60:00 7080 2912 ins 3587080982063727 310410214827503 APPLE !PHONES 11048 05/24/20 00:50:47 60:00 57330 35698 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11049 05/24/20 01:20:35 60:00 6956 2912 imp 3587080982063727 310410214827503 APPLE !PHONES 11050 05/24/20 01:50:47 60:00 3633 1003ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11051 05/24/20 02:20:35 60:00 9928 3176 imp 3587080982063727 310410214827503 APPLE !PHONES 11052 05/24/20 02:50:47 60:00 225 21Ormagonpho 3587080982063727 310410214827503 APPLE !PHONES no 11053 05/24/20 03:20:35 60:00 13804 5860 imp 3587080982063727 310410214827503 APPLE !PHONES 11054 05/24/20 03:50:47 60:00 554 630 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11055 05/24/20 04:20:35 60:00 6972 3540 imp 3587080982063727 310410214827503 APPLE !PHONES 11056 05/24/20 04:50:47 60:00 225 21Ormagonpho 3587080982063727 310410214827503 APPLE !PHONES no 11057 05/24/20 05:20:35 60:00 6956 2788 ins 3587080982063727 310410214827503 APPLE !PHONES 11058 05/24/20 05:50:47 60:00 225 21Ormagonpho 3587080982063727 310410214827503 APPLE !PHONES no 11059 05/24/20 06:20:35 60:00 10488 4144 ins 3587080982063727 310410214827503 APPLE !PHONES 11060 05/24/20 06:50:47 60:00 277 262ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11061 05/24/20 07:20:35 60:00 10036 3300 imp 3587080982063727 310410214827503 APPLE !PHONES 11062 05/24/20 07:50:47 60:00 346 210 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11063 05/24/20 08:20:35 60:00 8604 3284 imp 3587080982063727 310410214827503 APPLE !PHONES 11064 05/24/20 08:50:47 60:00 329 419ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11065 05/24/20 09:20:35 60:00 13120 4552 imp 3587080982063727 310410214827503 APPLE !PHONES 11066 05/24/20 09:50:47 60:00 329 367ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 454 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003098 The information contained her is NTrifikE not for general distribution. EF-EA_00117174 EFTA01251698 NOBILITY 411111i 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T arc. Run pato: 06/17/2020 Run Time: Data Osage for: Item Conn. Conn. Originating ET Bytes Byte. Apn INCI INSI MARL MODEL Date Time Number Up Dn (OTC) 11067 05/24/20 10:20:35 60:00 8604 3268 ims 3587080982063727 310410214827503 APPLE IPMONEB 11068 05/24/20 10:50:47 60:00 105717 13502 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 11069 05/24/20 11:20:35 60:00 15108 4980 ins 3587080982063727 310410214827503 APPLE IPH01428 11070 05/24/20 11:50:47 60:00 173 105ruagonpho 3587080982063727 310410214827503 APPLE IPH01428 no 11071 05/24/20 12:20:35 7:08 0 0 ins 3587080982063727 310410214827503 APPLE IPH01428 11072 05/24/20 12:27:43 0:01 0 0 ins 3587080982063727 310410214827503 APPLE IPMONEB 11073 05/24/20 12:27:49 60:00 19676 9528 ins -1 310410214827503 11074 05/24/20 12:50:47 59:18 48816 36522ruagonpho 3587080982063727 310410214827503 APPLE IPMONEB no 11075 05/24/20 13:27:49 60:00 7420 3004 ins -1 310410214827503 11076 05/24/20 13:50:05 60:00 7287 11686nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 11077 05/24/20 14:27:49 60:00 8496 3004 ins -1 310410214827503 11078 05/24/20 14:50:05 60:00 20381 14005nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 11079 05/24/20 15:27:49 44:15 7080 3524 ins 3587080982063727 310410214827503 APPLE IPMONEB 11080 05/24/20 15:50:05 60:00 211351 248792ruagonpho 3587080982063727 310410214827503 APPLE IPMONEB no 11081 05/24/20 16:12:04 0:42 32152 1324 ins 3587080982063727 310410214827503 APPLE IPMONEB 11082 05/24/20 16:12:04 0:42 2704 1324 ins 3587080982063727 310410214827503 APPLE IPMONEB 11083 05/24/20 16:12:46 60:00 16852 6828 ins 3587080982063727 310410214827503 APPLE IPMONEB 11084 05/24/20 16:50:05 60:00 29232 25422nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 11085 05/24/20 17:12:46 60:00 7172 2772 ins 3587080982063727 310410214827503 APPLE IPMONEB 11086 05/24/20 17:50:05 31:52 23593 17913ruftgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 11087 05/24/20 18:12:46 60:00 10272 3972 ins 3587080982063727 310410214827503 APPLE IPMONEB 11088 05/24/20 18:21:56 2:04 288 48ruagonpho 3587080982063727 310410214827503 APPLE IPMONEB no 11089 05/24/20 18:21:57 2:04 48 Onxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 11090 05/24/20 18:24:01 60:00 6599 5270nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 11091 05/24/20 19:12:46 60:00 7280 2972 ins 3587080982063727 310410214827503 APPLE IPMONEB 11092 05/24/20 19:24:01 60:00 346 210ruagonpho 3587080982063727 310410214827503 APPLE IPMONEB no 11093 05/24/20 20:12:46 60:00 8496 2896 ins 3587080982063727 310410214827503 APPLE IPMONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 455 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003099 The information contained her is NeTntikE not for general distribution. EFTA_OOI 17175 EFTA01251699 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn ICI IMSI MARL MODEL Date Time Number Up Dn (OTC) 11094 05/24/20 20:24:01 60:00 699 630 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11095 05/24/20 21:12:46 60:00 8388 3004 imp 3587080982063727 310410214827503 APPLE !PHONES 11096 05/24/20 21:24:01 60:00 462 420ruagenpho 3587080982063727 310410214827503 APPLE !PHONES no 11097 05/24/20 22:12:46 60:00 13676 4768 imp 3587080982063727 310410214827503 APPLE IPMONE8 11098 05/24/20 22:24:01 60:00 8399 8432ruagenpho 3587080982063727 310410214827503 APPLE IPH01428 no 11099 05/24/20 23:12:46 60:00 10952 4328 imp 3587080982063727 310410214827503 APPLE IPMONE8 11100 05/24/20 23:24:01 60:00 142078 88636ruagenpho 3587080982063727 310410214827503 APPLE IPMONE8 no 11101 05/25/20 00:12:46 60:00 8836 3020 imp 3587080982063727 310410214827503 APPLE !PHONES 11102 05/25/20 00:24:01 60:00 346 210ruagenpho 3587080982063727 310410214827503 APPLE !PHONES no 11103 05/25/20 01:12:46 60:00 7064 2756 imp 3587080982063727 310410214827503 APPLE !PHONES 11104 05/25/20 01:24:01 60:00 519 315ruagenpho 3587080982063727 310410214827503 APPLE !PHONES no 11105 05/25/20 02:12:46 60:00 6956 2648 imp 3587080982063727 310410214827503 APPLE IPMONE8 11106 05/25/20 02:24:01 60:00 526 525ruagenpho 3587080982063727 310410214827503 APPLE IPMONE8 no 11107 05/25/20 03:12:46 60:00 18748 6788 imp 3587080982063727 310410214827503 APPLE IPMONE8 11108 05/25/20 03:24:01 60:00 346 210ruagenpho 3587080982063727 310410214827503 APPLE IPMONE8 no 11109 05/25/20 04:12:46 60:00 6956 2648 imp 3587080982063727 310410214827503 APPLE IPMONE8 11110 05/25/20 04:24:01 60:00 346 210ruagenpho 3587080982063727 310410214827503 APPLE IPMONE8 no 11111 05/25/20 05:12:46 60:00 6956 2648 imp 3587080982063727 310410214827503 APPLE IPMONE8 11112 05/25/20 05:24:01 60:00 519 315ruagenpho 3587080982063727 310410214827503 APPLE IPMONE8 no 11113 05/25/20 06:12:46 60:00 7280 2896 imp 3587080982063727 310410214827503 APPLE !PHONES 11114 05/25/20 06:24:01 60:00 346 210ruagenpho 3587080982063727 310410214827503 APPLE !PHONES no 11115 05/25/20 07:12:46 60:00 10596 4312 imp 3587080982063727 310410214827503 APPLE !PHONES 11116 05/25/20 07:24:01 60:00 519 315ruagenpho 3587080982063727 310410214827503 APPLE !PHONES no 11117 05/25/20 08:12:46 60:00 10380 4364 imp 3587080982063727 310410214827503 APPLE IPMONE8 11118 05/25/20 08:24:01 60:00 346 210ruagenpho 3587080982063727 310410214827503 APPLE IPMONE8 no 11119 05/25/20 09:12:46 60:00 6848 2756 imp 3587080982063727 310410214827503 APPLE IPMONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 456 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003100 The information contained her is NaTiliAL not for general distribution. EF-EA_00117176 EFTA01251700 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ....,,,• ••-s` a. AT&T arc. Run Data: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Sytes Bytom Apn INEI IMPI MAKE HOD= Data Time Number Up Dn (OTC) 11120 05/25/20 09:24:01 60:00 346 210 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11121 05/25/20 10:12:46 60:00 8620 3772 imp 3587080982063727 310410214827503 APPLE !PRONGS 11122 05/25/20 10:24:01 60:00 346 210 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11123 05/25/20 11:12:46 60:00 6956 2756 imp 3587080982063727 310410214827503 APPLE !PHONES 11124 05/25/20 11:24:01 60:00 519 315ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11125 05/25/20 12:12:46 60:00 13676 4700 imp 3587080982063727 310410214827503 APPLE !PHONES 11126 05/25/20 12:24:01 60:00 346 210ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11127 05/25/20 13:12:46 60:00 7080 2772 imp 3587080982063727 310410214827503 APPLE !PHONES 11128 05/25/20 13:24:01 60:00 346 210 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11129 05/25/20 14:12:46 52:27 15108 5000 imp 3587080982063727 310410214827503 APPLE !PHONES 11130 05/25/20 14:24:01 60:00 58442 119003ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11131 05/25/20 15:05:13 60:00 129047 11765 imp 3587080982063727 310410214827503 APPLE !PHONES 11132 05/25/20 15:05:13 60:00 21279 12641 imp 3587080982063727 310410214827503 APPLE !PHONES 11133 05/25/20 15:24:01 60:00 69319 499950ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11134 05/25/20 16:05:13 48:34 0 0 imp 3587080982063727 310410214827503 APPLE !PRONGS 11135 05/25/20 16:05:13 48:34 0 108 imp 3587080982063727 310410214827503 APPLE !PHONES 11136 05/25/20 16:24:01 29:46 0 840ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11137 05/25/20 16:53:47 4:57 248099 641220ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11138 05/25/20 16:53:49 4:55 6693 6000 imp 3587080982063727 310410214827503 APPLE !PHONES 11139 05/25/20 16:58:44 60:00 48947 93202 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11140 05/25/20 16:58:46 60:00 11983 8737 ins 3587080982063727 310410214827503 APPLE !PHONES 11141 05/25/20 17:58:44 60:00 23550 58827ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11142 05/25/20 17:58:46 32:30 2596 1324 ins 3587080982063727 310410214827503 APPLE !PHONES 11143 05/25/20 18:31:16 23:24 3424 1324 ins 3587080982063727 310410214827503 APPLE !PHONES 11144 05/25/20 18:54:40 3:47 2628 1324 ins 3587080982063727 310410214827503 APPLE !PHONES 11145 05/25/20 18:58:27 60:00 12260 4344 ins 3587080982063727 310410214827503 APPLE !PHONES 11146 05/25/20 18:58:44 60:00 8657 12745ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 457 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00003101 The information contained hereCtoNyFti not for general distribution. EFTA_00I 17177 EFTA01251701 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ..... ‘"1. e# 00 AT&T arc. Run pato: 06/17/2020 Run Time: Data Osage Tor: Itea Conn. Conn. Originating ET Byte. Byte. Apn INSI MARL MODEL Data Time Number Up Dn (OTC) 11147 05/25/20 19:58:27 60:00 10036 3144 ins 3587080982063727 310410214827503 APPLE !PHONES 11148 05/25/20 19:58:44 60:00 1230 5994 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11149 05/25/20 20:58:27 60:00 8496 3004 ins 3587080982063727 310410214827503 APPLE IPHOME8 11150 05/25/20 20:58:44 60:00 832 4118ruftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11151 05/25/20 21:58:27 60:00 15812 6308 ins 3587080982063727 310410214827503 APPLE IPHOME8 11152 05/25/20 21:58:44 60:00 571 420 nxtgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11153 05/25/20 22:58:27 60:00 10144 3252 ins 3587080982063727 310410214827503 APPLE IPHOME8 11154 05/25/20 22:58:44 6:35 3026 366 nxtgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11155 05/25/20 23:05:18 1:45 288 48ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11156 05/25/20 23:05:19 1:45 48 Oruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11157 05/25/20 23:07:04 60:00 7351 13113ruftgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11158 05/25/20 23:58:27 60:00 8480 2896 ins 3587080982063727 310410214827503 APPLE IPHOME8 11159 05/26/20 00:07:04 60:00 46662 34373ruftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11160 05/26/20 00:58:27 60:00 8496 3004 ins 3587080982063727 310410214827503 APPLE !PHONES 11161 05/26/20 01:07:04 60:00 57410 35601ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11162 05/26/20 01:58:27 60:00 11168 4668 ins 3587080982063727 310410214827503 APPLE IPHOME8 11163 05/26/20 02:07:04 60:00 739 735ruftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11164 05/26/20 02:58:27 60:00 11920 4396 ins 3587080982063727 310410214827503 APPLE IPHOME8 11165 05/26/20 03:07:04 60:00 578 630ruftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11166 05/26/20 03:58:27 60:00 7172 2988 ins 3587080982063727 310410214827503 APPLE IPHOME8 11167 05/26/20 04:07:04 60:00 4320 7358ruftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11168 05/26/20 04:58:27 60:00 10272 4096 ins 3587080982063727 310410214827503 APPLE !PHONES 11169 05/26/20 05:07:04 60:00 1109 1073ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11170 05/26/20 05:58:27 60:00 8496 3004 ins 3587080982063727 310410214827503 APPLE IPHOME8 11171 05/26/20 06:07:04 60:00 803 892ruftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11172 05/26/20 06:58:27 60:00 8388 2896 ins 3587080982063727 310410214827503 APPLE IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 458 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003102 The information contained her is NTnilikk not for general distribution. EF-EA_00117178 EFTA01251702 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in tr ‘"g° af edi AT&T UTC. Run Date: 06/17/2020 Run Time: 1S:54:53 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes( Apn INEI IMSI N11YL MODEL Date Time Number Up Dn (UTC) 11173 05/26/20 07:07:04 60:00 1040 1050 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 11174 05/26/20 07:58:27 60:00 13804 5472 ims 3587080982063727 310410214827503 APPLE IPHONEB 11175 05/26/20 08:07:04 60:00 514 525 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 11176 05/26/20 08:58:27 60:00 7064 2880 ims 3587080982063727 310410214827503 APPLE IPHONEB 11177 05/26/20 09:07:04 60:00 514 525 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 11178 05/26/20 09:58:27 60:00 8388 2896 ims 3587080982063727 310410214827503 APPLE 'PHONES 11179 05/26/20 10:07:04 60:00 225 210 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11180 05/26/20 10:58:27 60:00 6848 2756 ims 3587080982063727 310410214827503 APPLE !PHONES 11181 05/26/20 11:07:04 60:00 10185 7444 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11182 05/26/20 11:58:27 60:00 11920 4436 ims 3587080982063727 310410214827503 APPLE !PHONES 11183 05/26/20 12:07:04 60:00 173 105 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 11184 05/26/20 12:58:27 60:00 12028 4612 ims 3587080982063727 310410214827503 APPLE IPHONEB 11185 05/26/20 13:07:04 31:15 173 105 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 11186 05/26/20 13:38:18 2:04 5234 6399 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11187 05/26/20 13:38:20 2:03 6399 4946 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11188 05/26/20 13:40:23 60:00 6905 5937 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 11189 05/26/20 13:58:27 60:00 20392 9244 vas 3587080982063727 310410214827503 APPLE IPHONEB 11190 05/26/20 14:10:31 0:05 0 0 mos 3587080982063727 310410214827503 APPLE IPHONEB 11191 05/26/20 14:40:23 60:00 35173 31137 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 11192 05/26/20 14:58:27 60:00 8728 3128 ims 3587080982063727 310410214827503 APPLE 'PHONES 11193 05/26/20 15:40:23 60:00 31738 18963 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11194 05/26/20 15:58:27 34:13 3764 1448 ims 3587080982063727 310410214827503 APPLE !PHONES 11195 05/26/20 16:32:40 0:33 81484 1412 ims 3587080982063727 310410214827503 APPLE !PHONES 11196 05/26/20 16:32:40 0:33 2752 1324 ims 3587080982063727 310410214827503 APPLE IPHONEB 11197 05/26/20 16:33:13 60:00 13444 4468 ims 3587080982063727 310410214827503 APPLE IPHONEB 11198 05/26/20 16:40:23 60:00 53176 37079 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 11199 05/26/20 17:33:13 53:51 21888 17644 ims 3587080982063727 310410214827503 APPLE IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 459 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003103 The information contained her is NTailiAL not for general distribution. EF-EA_00117179 EFTA01251703 MOBILITY dal 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T arc. Run Date: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating LT Bytes Bytoa Apn IND I INSI MARL NICOLL Date Time Number Up Dn (OTC) 11200 05/26/20 17:40:23 36:13 40724 33425rumgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 11201 05/26/20 18:03:20 0:38 13253 34786 ims 3587080982063727 310410214827503 APPLE 'PHONES 11202 05/26/20 18:16:36 60:00 117250 95888 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 11203 05/26/20 18:27:04 3:49 37984 1412 ims 3587080982063727 310410214827503 APPLE 'PHONES 11204 05/26/20 18:27:04 3:49 2752 1324 ims 3587080982063727 310410214827503 APPLE 'PHONES 11205 05/26/20 18:30:53 60:00 100784 69504 ims 3587080982063727 310410214827503 APPLE 'PHONES 11206 05/26/20 19:02:23 0:29 0 1649 ims 3587080982063727 310410214827503 APPLE 'PHONES 11207 05/26/20 19:12:50 0:24 0 10712 ims 3587080982063727 310410214827503 APPLE 'PHONES 11208 05/26/20 19:16:36 60:00 27077 17602 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 11209 05/26/20 19:19:49 0:48 111993 116256 ims 3587080982063727 310410214827503 APPLE 'PHONES 11210 05/26/20 19:20:46 0:05 845 11451 ims 3587080982063727 310410214827503 APPLE 'PHONES 11211 05/26/20 19:20:56 0:32 7629 19005 ims 3587080982063727 310410214827503 APPLE 'PHONES 11212 05/26/20 19:21:34 7:01 1434820 762443 ims 3587080982063727 310410214827503 APPLE 'PHONES 11213 05/26/20 19:30:53 60:00 41316 22656 ims 3587080982063727 310410214827503 APPLE 'PHONES 11214 05/26/20 20:00:28 5:32 603763 572496 ims 3587080982063727 310410214827503 APPLE 'PHONES 11215 05/26/20 20:06:10 0:45 89257 76088 ims 3587080982063727 310410214827503 APPLE 'PHONES 11216 05/26/20 20:16:36 60:00 5619893 4931777 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 11217 05/26/20 20:30:53 18:56 5072 1572 ims 3587080982063727 310410214827503 APPLE 'PHONES 11218 05/26/20 20:49:49 0:53 101448 1412 ims 3587080982063727 310410214827503 APPLE 'PHONES 11219 05/26/20 20:49:49 0:53 2644 1324 ims 3587080982063727 310410214827503 APPLE 'PHONES 11220 05/26/20 20:50:42 2:39 3424 1432 ims 3587080982063727 310410214827503 APPLE 'PHONES 11221 05/26/20 20:53:21 3:47 15932 1412 ims 3587080982063727 310410214827503 APPLE 'PHONES 11222 05/26/20 20:53:21 3:47 2644 1324 ims 3587080982063727 310410214827503 APPLE 'PHONES 11223 05/26/20 20:57:08 37:07 8620 3020 ims 3587080982063727 310410214827503 APPLE 'PHONES 11224 05/26/20 21:16:36 60:00 20410 60185 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 11225 05/26/20 21:34:14 1:25 2644 1412 ims 3587080982063727 310410214827503 APPLE 'PHONES 11226 05/26/20 21:34:15 1:24 2644 1324 ims 3587080982063727 310410214827503 APPLE 'PHONES 11227 05/26/20 21:35:39 1:05 4964 1572 ims 3587080982063727 310410214827503 APPLE 'PHONES 11228 05/26/20 21:36:44 45:05 5240 2736 ims 3587080982063727 310410214827503 APPLE 'PHONES 11229 05/26/20 21:36:44 45:05 5240 2648 ism 3587080982063727 310410214827503 APPLE 'PHONES 11230 05/26/20 22:16:36 60:00 17332 93390 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 11231 05/26/20 22:21:49 60:00 22232 12448 ism 3587080982063727 310410214827503 APPLE &PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 460 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003104 The information contained hereCtoNelt N s—Ent/Mal not for general distribution. EFTA_00I 17180 EFTA01251704 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. originating ET Bytes Bytom Apn INZI INSI MARL MODEL Date Timo Number Up Dn (UTC) 11232 05/26/20 22:46:26 0:43 9346 18783 ims 3587080982063727 310410214827503 APPLE !PHONES 11233 05/26/20 23:16:36 60:00 120503 36202 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11234 05/26/20 23:21:49 9:19 0 0 ims 3587080982063727 310410214827503 APPLE IPHOME8 11235 05/26/20 23:31:08 54:34 20076 3952 ims 3587080982063727 310410214827503 APPLE IPHOME8 11236 05/26/20 23:31:08 54:34 7944 3864 ims 3587080982063727 310410214827503 APPLE IPHOME8 11237 05/27/20 00:16:36 60:00 751 735ruftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11238 05/27/20 00:25:42 60:00 17100 6092 ims 3587080982063727 310410214827503 APPLE !PHONES 11239 05/27/20 01:16:36 60:00 751 735ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11240 05/27/20 01:25:42 60:00 8388 2896 ims 3587080982063727 310410214827503 APPLE IPHOME8 11241 05/27/20 02:16:36 29:02 46307 31337ruftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11242 05/27/20 02:25:42 60:00 6956 2648 ims 3587080982063727 310410214827503 APPLE IPHOME8 11243 05/27/20 02:45:37 2:02 288 48ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11244 05/27/20 02:45:38 2:02 48 Oruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11245 05/27/20 02:47:40 60:00 139139 80811ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11246 05/27/20 03:25:42 60:00 10380 3972 ims 3587080982063727 310410214827503 APPLE IPHOME8 11247 05/27/20 03:47:40 60:00 45200 27992ruftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11248 05/27/20 04:25:42 60:00 8388 2896 ims 3587080982063727 310410214827503 APPLE IPHOME8 11249 05/27/20 04:47:40 60:00 3688 6316ruftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11250 05/27/20 05:25:42 60:00 12244 4860 ims 3587080982063727 310410214827503 APPLE !PHONES 11251 05/27/20 05:47:40 60:00 751 735ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11252 05/27/20 06:25:42 60:00 8512 3772 ims 3587080982063727 310410214827503 APPLE !PHONES 11253 05/27/20 06:47:40 60:00 744 525 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11254 05/27/20 07:25:42 60:00 11920 4344 ims 3587080982063727 310410214827503 APPLE IPHOME8 11255 05/27/20 07:47:40 60:00 808 630 nxtgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11256 05/27/20 08:25:42 60:00 8496 3020 ims 3587080982063727 310410214827503 APPLE IPHOME8 11257 05/27/20 08:47:40 60:00 462 420ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11258 05/27/20 09:25:42 60:00 7080 2664 ims 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 461 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003105 The information contained hereCtoNyFti PsisTiliAL not for general distribution. EF-EAJVII7181 EFTA01251705 MOBILITY 41111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ....,./ ••-s` -a AT&T OTC. Run Data: 06/17/2020 Run TIM*: Data Osage For: Iten Conn. Conn. Originating ET Bytes Bytom Apn INEI IMSI NUM MODEL Data Time Number Op On (OTC) 11259 05/27/20 09:47:40 60:00 346 210ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11260 05/27/20 10:25:42 60:00 6848 2648 ins 3587080982063727 310410214827503 APPLE 'PHONES 11261 05/27/20 10:47:40 60:00 58296 22185ruftgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 11262 05/27/20 11:25:42 60:00 18640 6448 ins 3587080982063727 310410214827503 APPLE 'PHONES 11263 05/27/20 11:47:40 60:00 17401 5763ruftgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 11264 05/27/20 12:25:42 60:00 10144 3252 ims 3587080982063727 310410214827503 APPLE 'PHONES 11265 05/27/20 12:47:40 60:00 346 210ruftgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 11266 05/27/20 13:25:42 60:00 7296 2880 ims 3587080982063727 310410214827503 APPLE 'PHONES 11267 05/27/20 13:47:40 60:00 48449 41613ruftgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 11268 05/27/20 14:25:42 60:00 12420 3284 ins 3587080982063727 310410214827503 APPLE 'PHONES 11269 05/27/20 14:47:40 60:00 19491 5874ruftgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 11270 05/27/20 15:25:42 60:00 15576 5984 ins 3587080982063727 310410214827503 APPLE 'PHONES 11271 05/27/20 15:47:40 60:00 48403 20501 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11272 05/27/20 16:25:42 60:00 8496 3004 ins 3587080982063727 310410214827503 APPLE !PHONES 11273 05/27/20 16:47:40 60:00 112706 2897288ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11274 05/27/20 17:25:42 60:00 7188 2772 ins 3587080982063727 310410214827503 APPLE !PHONES 11275 05/27/20 17:47:40 53:52 92506 76534ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11276 05/27/20 18:25:42 23:48 3548 2200 ins 3587080982063727 310410214827503 APPLE !PHONES 11277 05/27/20 18:41:31 0:55 288 48ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11278 05/27/20 18:41:32 0:55 48 Oruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11279 05/27/20 18:42:27 60:00 7652706 7794856ruftgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 11280 05/27/20 18:49:29 1:14 227312 1536 ims 3587080982063727 310410214827503 APPLE 'PHONES 11281 05/27/20 18:49:30 1:13 3376 1448 ims 3587080982063727 310410214827503 APPLE 'PHONES 11282 05/27/20 18:50:43 1:21 3548 2308 ims 3587080982063727 310410214827503 APPLE 'PHONES 11283 05/27/20 18:52:04 1:45 29164 1536 ins 3587080982063727 310410214827503 APPLE 'PHONES 11284 05/27/20 18:52:04 1:45 3952 1448 ins 3587080982063727 310410214827503 APPLE 'PHONES 11285 05/27/20 18:53:49 15:27 4964 1572 ins 3587080982063727 310410214827503 APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 462 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003106 The information contained heralCONe not for general distribution. NaTtAdti EFTA 00117182 EFTA01251706 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating LT Sytes Byte. Apn INCI INSI MAfl MODEL Data Time Number Up Dn (OTC) 11286 05/27/20 19:09:16 6:37 2644 1412 ims 3587080982063727 310410214827503 APPLE 110HONZ8 11287 05/27/20 19:09:16 6:37 2644 1324 imp 3587080982063727 310410214827503 APPLE 110HONZ8 11288 05/27/20 19:15:53 10:11 4964 1680 imp 3587080982063727 310410214827503 APPLE 110HONZ8 11289 05/27/20 19:26:04 21:42 29328 1412 imp 3587080982063727 310410214827503 APPLE 110HONZ8 11290 05/27/20 19:26:04 21:42 2644 1324 imp 3587080982063727 310410214827503 APPLE 110HONZ8 11291 05/27/20 19:42:27 60:00 1468651 2192847 nxtgonpho 3587080982063727 310410214827503 APPLE IOHONZ8 no 11292 05/27/20 19:47:46 34:04 47948 29992 imp 3587080982063727 310410214827503 APPLE IOHONZ8 11293 05/27/20 19:57:45 0:29 2059 12321 imp 3587080982063727 310410214827503 APPLE IOHONZ8 11294 05/27/20 20:19:34 2:16 310500 439921 imp 3587080982063727 310410214827503 APPLE IOHONZ8 11295 05/27/20 20:21:50 0:20 22759 3904 imp 3587080982063727 310410214827503 APPLE IOHONZ8 11296 05/27/20 20:21:50 0:20 8512 3816 imp 3587080982063727 310410214827503 APPLE IOHONZ8 11297 05/27/20 20:21:50 0:06 24743 24066 los 3587080982063727 310410214827503 APPLE IOHONZ8 11298 05/27/20 20:21:50 0:06 24743 24066 los 3587080982063727 310410214827503 APPLE IOHONZ8 11299 05/27/20 20:22:10 5:19 48648 35140 los 3587080982063727 310410214827503 APPLE IOHONZ8 11300 05/27/20 20:22:13 0:16 5753 28311 imp 3587080982063727 310410214827503 APPLE IOHONZ8 11301 05/27/20 20:22:31 0:19 2956 14614 ism 3587080982063727 310410214827503 APPLE IOHONZ8 11302 05/27/20 20:26:59 0:14 10995 24979 imp 3587080982063727 310410214827503 APPLE IOHONZ8 11303 05/27/20 20:27:15 0:14 26901 13651 imp 3587080982063727 310410214827503 APPLE IOHONZ8 11304 05/27/20 20:27:28 2:17 34632 11196 imp 3587080982063727 310410214827503 APPLE IOHONZ8 11305 05/27/20 20:27:29 2:16 308528 407579 imp 3587080982063727 310410214827503 APPLE IOHONZ8 11306 05/27/20 20:27:29 2:16 12828 11108 imp 3587080982063727 310410214827503 APPLE IOHONZ8 11307 05/27/20 20:27:29 2:16 308528 407579 imp 3587080982063727 310410214827503 APPLE IOHONZ8 11308 05/27/20 20:29:45 13:26 23900 15528 imp 3587080982063727 310410214827503 APPLE IOHONZ8 11309 05/27/20 20:29:45 0:09 2623 789 imp 3587080982063727 310410214827503 APPLE IOHONZ8 11310 05/27/20 20:31:25 0:02 0 0 imp 3587080982063727 310410214827503 APPLE IOHONZ8 11311 05/27/20 20:34:23 8:48 1792647 899650 ins 3587080982063727 310410214827503 APPLE IOHONZ8 11312 05/27/20 20:42:27 60:00 60200 43002nxtgonpho 3587080982063727 310410214827503 APPLE IOHONZ8 no 11313 05/27/20 20:43:11 7:48 1416988 1143983 ins 3587080982063727 310410214827503 APPLE IOHONE8 11314 05/27/20 20:43:11 7:49 1416988 1143983 ins 3587080982063727 310410214827503 APPLE IOHONE8 11315 05/27/20 20:43:11 7:59 50126 7860 ins 3587080982063727 310410214827503 APPLE IOHONE8 11316 05/27/20 20:43:11 7:59 15840 7772 ins 3587080982063727 310410214827503 APPLE IOHONE8 11317 05/27/20 20:51:10 0:00 0 0 ins 3587080982063727 310410214827503 APPLE IOHONE8 11318 05/27/20 20:51:10 0:00 0 0 ins 3587080982063727 310410214827503 APPLE IOHONE8 11319 05/27/20 20:51:10 38:58 6540666 7950919 ins 3587080982063727 310410214827503 APPLE IOHONE8 11320 05/27/20 20:51:10 60:00 44124 31640 ins 3587080982063727 310410214827503 APPLE IOHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 463 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00003107 The information contained her is NTnAL not for general distribution. EF-EA_00117183 EFTA01251707 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Timo: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes( Apn Tier IMBI MAfl MODEL Date Time Humber Up Dn (UTC) 11321 05/27/20 21:37:03 0:33 2854 17432 imp 3587080982063727 310410214827503 APPLE ITHOME8 11322 05/27/20 21:42:27 60:00 56058 35389nxtgonpho 3587080982063727 310410214827503 APPLE DRONES no 11323 05/27/20 21:51:10 60:00 8944 3468 imp 3587080982063727 310410214827503 APPLE ITROME8 11324 05/27/20 22:42:27 60:00 256806 93639roftgonpho 3587080982063727 310410214827503 APPLE ITROME8 no 11325 05/27/20 22:51:10 60:00 6956 2772 imp 3587080982063727 310410214827503 APPLE ITROME8 11326 05/27/20 23:42:27 60:00 80529 87769roftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11327 05/27/20 23:51:10 17:41 3424 1324 imp 3587080982063727 310410214827503 APPLE !PHONES 11328 05/28/20 00:08:51 8:07 153176 1660 imp 3587080982063727 310410214827503 APPLE !PHONES 11329 05/28/20 00:08:51 8:07 4416 1572 imp 3587080982063727 310410214827503 APPLE !PHONES 11330 05/28/20 00:16:58 4:15 5056 1712 imp 3587080982063727 310410214827503 APPLE !PHONES 11331 05/28/20 00:21:13 60:00 7836 3756 imp 3587080982063727 310410214827503 APPLE !PHONES 11332 05/28/20 00:21:13 60:00 7836 3844 imp 3587080982063727 310410214827503 APPLE !PHONES 11333 05/28/20 00:42:27 60:00 6034 6629roftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11334 05/28/20 01:21:13 35:08 5624 2964 imp 3587080982063727 310410214827503 APPLE !PHONES 11335 05/28/20 01:21:13 35:08 5624 2964 imp 3587080982063727 310410214827503 APPLE !PHONES 11336 05/28/20 01:42:27 16:10 39032 122533ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 11337 05/28/20 01:56:21 2:16 8080 3408 imp 3587080982063727 310410214827503 APPLE ITROME8 11338 05/28/20 02:01:35 60:00 76938 325868ruagonpho 3587080982063727 310410214827503 APPLE DRONES no 11339 05/28/20 02:01:38 60:00 13065 8742 imp 3587080982063727 310410214827503 APPLE DRONES 11340 05/28/20 03:01:35 60:00 578 630roftgonpho 3587080982063727 310410214827503 APPLE DRONES no 11341 05/28/20 03:01:38 60:00 5408 2788 imp 3587080982063727 310410214827503 APPLE DRONES 11342 05/28/20 04:01:35 60:00 735 1639roftgonpho 3587080982063727 310410214827503 APPLE DRONES no 11343 05/28/20 04:01:38 60:00 5192 2680 imp 3587080982063727 310410214827503 APPLE DRONES 11344 05/28/20 05:01:35 60:00 225 210ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 11345 05/28/20 05:01:38 60:00 5192 2664 imp 3587080982063727 310410214827503 APPLE !PHONES 11346 05/28/20 06:01:35 60:00 3194 21908roftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11347 05/28/20 06:01:38 60:00 5300 2680 imp 3587080982063727 310410214827503 APPLE !PHONES 11348 05/28/20 07:01:35 60:00 289 315roftgonpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 464 AT&T does not retain records that can definitively show whether a transaction was NITIAL customer initiated or AT&T's network initiated the data transaction. SDNYGM00003108 The information contained hereeNyFtli not for general distribution. EF-EA_00117184 EFTA01251708 MOBILITY 41111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: 18:56:56 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytom Apn 1/482 IMBI MUM MODEL Data Time Number Up Dn (UTC) 11349 05/28/20 07:01:38 60:00 10492 5412 imo 3587080982063727 310410214827503 APPLE !PHONES 11350 05/28/20 08:01:35 60:00 555 1020 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11351 05/28/20 08:01:38 60:00 5408 2588 ins 3587080982063727 310410214827503 APPLE IPHONE8 11352 05/28/20 09:01:35 60:00 289 315ruftgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11353 05/28/20 09:01:38 60:00 5408 2696 ins 3587080982063727 310410214827503 APPLE IPHONE8 11354 05/28/20 10:01:35 60:00 3101 21777ruftgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11355 05/28/20 10:01:38 60:00 7572 3912 ins 3587080982063727 310410214827503 APPLE IPHONE8 11356 05/28/20 11:01:35 55:07 46383 155843ruftgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11357 05/28/20 11:01:38 52:17 2812 1448 ins 3587080982063727 310410214827503 APPLE IPHONE8 11358 05/28/20 11:53:55 60:00 15560 6124 ins 3587080982063727 310410214827503 APPLE IPHONE8 11359 05/28/20 11:56:41 5:33 288 48ruftgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11360 05/28/20 11:56:42 5:33 48 Oruftgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11361 05/28/20 12:02:15 1:23 2494 2402ruftgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11362 05/28/20 12:03:37 2:04 4557 6014 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11363 05/28/20 12:03:38 2:04 6014 4269 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11364 05/28/20 12:05:42 15:48 0 Oruftgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11365 05/28/20 12:21:29 2:04 288 48ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11366 05/28/20 12:21:31 2:03 48 Oruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11367 05/28/20 12:23:34 60:00 6419 4850ruftgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11368 05/28/20 12:53:55 60:00 8836 3268 ins 3587080982063727 310410214827503 APPLE IPHONE8 11369 05/28/20 13:23:34 60:00 63701 69842 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11370 05/28/20 13:53:55 27:21 5072 1588 ins 3587080982063727 310410214827503 APPLE IPHONE8 11371 05/28/20 14:21:16 4:27 14776 1428 ins 3587080982063727 310410214827503 APPLE IPHONE8 11372 05/28/20 14:21:16 4:27 2644 1340 ins 3587080982063727 310410214827503 APPLE 'PHONES 11373 05/28/20 14:23:34 60:00 5788 9155ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 465 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003109 The information contained her is NToliAlt not for general distribution. EF-EA_00117185 EFTA01251709 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: 18:56:56 Data Osage For: Item Conn. Conn. originating ET Bytes Bytes Apn IKEI INSI MAKE NODAL Date Time Number Up Dn (OTC) 11374 05/28/20 14:25:43 1:43 3532 1448 ims 3587080982063727 310410214827503 APPLE IPHONZ8 11375 05/28/20 14:27:26 1:03 2644 1428 ims 3587080982063727 310410214827503 APPLE IPHONZ8 11376 05/28/20 14:27:26 1:03 2644 1340 ins 3587080982063727 310410214827503 APPLE IPHONZ8 11377 05/28/20 14:28:29 14:58 3440 2448 ins 3587080982063727 310410214827503 APPLE IPHONZ8 11378 05/28/20 14:43:27 60:00 7836 4108 ims 3587080982063727 310410214827503 APPLE IPHONZ8 11379 05/28/20 14:43:27 60:00 7836 4020 ins 3587080982063727 310410214827503 APPLE !PHONES 11380 05/28/20 15:23:34 60:00 9735 9332 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11381 05/28/20 15:43:27 41:49 42176 1340 ins 3587080982063727 310410214827503 APPLE !PHONES 11382 05/28/20 15:43:27 41:49 2596 1340 ins 3587080982063727 310410214827503 APPLE IPHONE8 11383 05/28/20 16:23:34 60:00 3657935 3735645 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11384 05/28/20 16:25:16 15:34 5072 1712 ims 3587080982063727 310410214827503 APPLE !PHONES 11385 05/28/20 16:40:50 4:57 39512 1428 ins 3587080982063727 310410214827503 APPLE !PHONES 11386 05/28/20 16:40:50 4:57 2644 1340 ins 3587080982063727 310410214827503 APPLE IPHONE8 11387 05/28/20 16:45:50 0:34 6685 5999 ins 3587080982063727 310410214827503 APPLE IPHONE8 11388 05/28/20 16:46:24 56:32 80324 54744 ins 3587080982063727 310410214827503 APPLE IPHONE8 11389 05/28/20 16:49:17 0:36 4888 22127 ins 3587080982063727 310410214827503 APPLE IPHONE8 11390 05/28/20 16:50:02 0:05 4216 10007 ins 3587080982063727 310410214827503 APPLE IPHONE8 11391 05/28/20 16:50:18 0:23 25630 41481 ins 3587080982063727 310410214827503 APPLE IPHONE8 11392 05/28/20 16:50:45 0:09 0 0 ins 3587080982063727 310410214827503 APPLE IPHONE8 11393 05/28/20 17:10:07 4:02 711572 520280 ins 3587080982063727 310410214827503 APPLE IPHONE8 11394 05/28/20 17:14:16 22:37 3682982 3256721 ins 3587080982063727 310410214827503 APPLE IPHONE8 11395 05/28/20 17:23:34 60:00 1664510 1837148 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11396 05/28/20 17:42:56 14:15 2752 1340 ins 3587080982063727 310410214827503 APPLE !PHONES 11397 05/28/20 17:57:11 2:20 4748 1464 ins 3587080982063727 310410214827503 APPLE !PHONES 11398 05/28/20 17:59:31 18:35 2752 1340 ins 3587080982063727 310410214827503 APPLE IPHONE8 11399 05/28/20 18:18:06 16:16 4964 1588 ins 3587080982063727 310410214827503 APPLE !PHONES 11400 05/28/20 18:23:34 60:00 47446 36906 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11401 05/28/20 18:34:22 1:58 2644 1340 ins 3587080982063727 310410214827503 APPLE !PHONES 11402 05/28/20 18:36:20 0:18 4964 1588 ins 3587080982063727 310410214827503 APPLE IPHONE8 11403 05/28/20 18:36:38 3:57 2644 1340 ins 3587080982063727 310410214827503 APPLE IPHONE8 11404 05/28/20 18:40:35 2:15 7940 2084 ins 3587080982063727 310410214827503 APPLE IPHONE8 11405 05/28/20 18:42:50 0:53 2644 1340 ins 3587080982063727 310410214827503 APPLE IPHONE8 11406 05/28/20 18:43:43 4:44 4964 1480 ins 3587080982063727 310410214827503 APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 466 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003110 The information contained her is not for general distribution. NsFYNE EF-EA_00117186 EFTA01251710 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in trai am‘S ° / AT&T OTC. Run Date: 06/17/2020 Run Time: 16:66:56 Data Osage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INZI IMBI teal NICOLL Date Time Number Up On (OTC) 11407 05/28/20 18:48:27 9:17 2644 1340 ins 3587080982063727 310410214827503 APPLE 1PHONZ8 11408 05/28/20 18:57:44 5:54 4964 1588 ims 3587080982063727 310410214827503 APPLE 1PHONZ8 11409 05/28/20 19:03:38 7:51 2644 1340 ins 3587080982063727 310410214827503 APPLE 1PHONZ8 11410 05/28/20 19:11:29 1:11 4556 2464 ins 3587080982063727 310410214827503 APPLE 1PHONZ8 11411 05/28/20 19:12:40 0:18 2644 1340 imp 3587080982063727 310410214827503 APPLE 1PHONZ8 11412 05/28/20 19:12:58 60:00 10596 4252 imp 3587080982063727 310410214827503 APPLE 1PHONZ8 11413 05/28/20 19:23:34 60:00 90472 61202 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 11414 05/28/20 20:12:58 60:00 8604 3160 ins 3587080982063727 310410214827503 APPLE !PHONES 11415 05/28/20 20:23:34 10:56 550 525 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11416 05/28/20 20:34:29 5:40 288 48 nxtgonpho 3587080982063727 310410214827503 APPLE 1PHONZ8 no 11417 05/28/20 20:34:31 5:39 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 11418 05/28/20 20:40:10 25:46 35557 34463 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11419 05/28/20 21:05:56 60:00 142518 98080 nxtgonpho 3587080982063727 310410214827503 APPLE 1PHONZ8 no 11420 05/28/20 21:12:58 60:00 9912 2944 Las 3587080982063727 310410214827503 APPLE 1PHONZ8 11421 05/28/20 22:05:56 60:00 38816 28220 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 11422 05/28/20 22:12:58 60:00 15236 5984 Las 3587080982063727 310410214827503 APPLE !PHONES 11423 05/28/20 23:05:56 60:00 7540 11121 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11424 05/28/20 23:12:58 60:00 8496 3036 ins 3587080982063727 310410214827503 APPLE 1PHONZ8 11425 05/29/20 00:05:56 60:00 142580 62595 nxtgonpho 3587080982063727 310410214827503 APPLE 1PHONZ8 no 11426 05/29/20 00:12:58 1:21 0 0 ins 3587080982063727 310410214827503 APPLE 1PHONZ8 11427 05/29/20 00:14:19 1:52 2644 1340 ins 3587080982063727 310410214827503 APPLE 1PHONZ8 11428 05/29/20 00:16:11 60:00 12044 4500 ins 3587080982063727 310410214827503 APPLE 1PHONZ8 11429 05/29/20 01:05:56 53:24 43622 29764 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11430 05/29/20 01:16:11 60:00 6956 2680 ins 3587080982063727 310410214827503 APPLE 1PHONZ8 11431 05/29/20 01:59:20 0:33 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE 1PHONZ8 no 11432 05/29/20 01:59:52 2:05 5170 6246 nxtgonpho 3587080982063727 310410214827503 APPLE 1PHONZ8 no 11433 05/29/20 01:59:53 2:06 6246 4882 nxtgonpho 3587080982063727 310410214827503 APPLE 1PHONZ8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 467 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003111 The information contained heraleeNe PsiTniliAL not for general distribution. EFTA_OOI 17187 EFTA01251711 MOBILITY ap. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in trae ""seiAT&T arc. Run Date: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. originating ET Bytes Byte. Apn INLI IMSI MARL MODEL Date Time Number Up Dn (UTC) 11434 05/29/20 02:01:58 60:00 644077 49388 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11435 05/29/20 02:16:11 46:39 6956 2896 ins 3587080982063727 310410214827503 APPLE !PRONGS 11436 05/29/20 03:01:58 60:00 297501 812446ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11437 05/29/20 03:02:50 4:03 5972 2964 ins 3587080982063727 310410214827503 APPLE DRONES 11438 05/29/20 03:06:53 60:00 11920 4500 ins 3587080982063727 310410214827503 APPLE !PRONGS 11439 05/29/20 04:01:58 40:38 4010 5034ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11440 05/29/20 04:06:53 60:00 10036 3176 ins 3587080982063727 310410214827503 APPLE !PHONES 11441 05/29/20 04:42:35 3:14 288 48ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11442 05/29/20 04:42:36 3:14 48 Oruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11443 05/29/20 04:45:50 60:00 9319 8347ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11444 05/29/20 05:06:53 60:00 9928 3176 ins 3587080982063727 310410214827503 APPLE !PRONGS 11445 05/29/20 05:45:50 60:00 751 735ruftgenpho 3587080982063727 310410214827503 APPLE !PRONGS no 11446 05/29/20 06:06:53 60:00 6956 2896 ins 3587080982063727 310410214827503 APPLE !PRONGS 11447 05/29/20 06:45:50 60:00 635 525ruftgenpho 3587080982063727 310410214827503 APPLE !PRONGS no 11448 05/29/20 07:06:53 60:00 8388 2928 ins 3587080982063727 310410214827503 APPLE !PHONES 11449 05/29/20 07:45:50 60:00 751 735 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11450 05/29/20 08:06:53 60:00 13912 5628 ins 3587080982063727 310410214827503 APPLE !PHONES 11451 05/29/20 08:45:50 60:00 519 315ruftgenpho 3587080982063727 310410214827503 APPLE !PRONGS no 11452 05/29/20 09:06:53 60:00 6848 2788 ins 3587080982063727 310410214827503 APPLE !PRONGS 11453 05/29/20 09:45:50 60:00 3199 471ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11454 05/29/20 10:06:53 60:00 9928 3284 ins 3587080982063727 310410214827503 APPLE !PHONES 11455 05/29/20 10:45:50 60:00 519 315ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11456 05/29/20 11:06:53 60:00 8604 3144 ins 3587080982063727 310410214827503 APPLE !PHONES 11457 05/29/20 11:45:50 60:00 30962 17214ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11458 05/29/20 12:06:53 46:14 8388 2928 ins 3587080982063727 310410214827503 APPLE !PHONES 11459 05/29/20 12:45:50 60:00 56745 235626ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 468 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003112 The information contained hereCteNe NTrifikE not for general distribution. EF-EA_00117188 EFTA01251712 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in .....,,,,• ••-s"" s AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytom Apn INZI IMBI MAfl MODEL Data Time Number Up Dn (OTC) 11460 05/29/20 12:53:07 3:30 32968 1428 imp 3587080982063727 310410214827503 APPLE IPHONZ8 11461 05/29/20 12:53:07 3:30 2644 1340 imp 3587080982063727 310410214827503 APPLE IPHONZ8 11462 05/29/20 12:56:37 10:30 3332 1448 imp 3587080982063727 310410214827503 APPLE IPHONZ8 11463 05/29/20 13:09:32 0:54 8757 6209 imp 3587080982063727 310410214827503 APPLE IPHONZ8 11464 05/29/20 13:10:26 1:08 3532 1324 imp 3587080982063727 310410214827503 APPLE !PHONES 11465 05/29/20 13:11:34 0:45 2628 1324 imp 3587080982063727 310410214827503 APPLE IPHONZ8 11466 05/29/20 13:12:19 1:03 8496 6192 isms 3587080982063727 310410214827503 APPLE IPHONZ8 11467 05/29/20 13:14:00 60:00 20045 9784 imp -1 310410214827503 11468 05/29/20 13:45:50 60:00 79832 45211 nxtgenpho 3587080982063727 310410214827503 APPLE IPHONZ8 no 11469 05/29/20 14:14:00 60:00 8496 2912 imp -1 310410214827503 11470 05/29/20 14:45:50 60:00 3789 997ruftgenpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11471 05/29/20 15:14:00 43:31 8604 2928 imp 3587080982063727 310410214827503 APPLE IPHOME8 11472 05/29/20 15:45:50 60:00 93318 70359 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 11473 05/29/20 15:57:31 1:40 15492 1464 imp 3587080982063727 310410214827503 APPLE 1PROME8 11474 05/29/20 15:57:31 1:40 3296 1464 imp 3587080982063727 310410214827503 APPLE 1PROME8 11475 05/29/20 15:59:11 17:32 3408 1340 imp 3587080982063727 310410214827503 APPLE 1PROME8 11476 05/29/20 16:16:43 0:29 14792 1340 imam 3587080982063727 310410214827503 APPLE 1PROME8 11477 05/29/20 16:16:43 0:29 2596 1340 imam 3587080982063727 310410214827503 APPLE 1PROME8 11478 05/29/20 16:17:12 0:21 3408 1340 ins 3587080982063727 310410214827503 APPLE 1PROME8 11479 05/29/20 16:17:33 15:08 2660 1340 isms 3587080982063727 310410214827503 APPLE 1PROME8 11480 05/29/20 16:17:33 15:08 2596 1340 isms 3587080982063727 310410214827503 APPLE 1PROME8 11481 05/29/20 16:32:41 60:00 11904 4268 isms 3587080982063727 310410214827503 APPLE 1PROME8 11482 05/29/20 16:45:50 60:00 4765 11177ruagenpho 3587080982063727 310410214827503 APPLE 1PROME8 no 11483 05/29/20 17:32:41 59:25 18824 13508 imp 3587080982063727 310410214827503 APPLE 1PROME8 11484 05/29/20 17:45:50 60:00 177801 176243nxtgenpho 3587080982063727 310410214827503 APPLE 1PROME8 no 11485 05/29/20 18:23:39 8:27 1726405 1092481 imp 3587080982063727 310410214827503 APPLE 1PROME8 11486 05/29/20 18:32:06 6:23 893694 1158271 imp 3587080982063727 310410214827503 APPLE 1PROME8 11487 05/29/20 18:32:06 6:31 53756 10036 imp 3587080982063727 310410214827503 APPLE 1PROME8 11488 05/29/20 18:32:06 6:31 14536 10036 imp 3587080982063727 310410214827503 APPLE 1PROME8 11489 05/29/20 18:32:07 6:22 894572 1158271 imp 3587080982063727 310410214827503 APPLE 1PROME8 11490 05/29/20 18:38:37 6:26 3408 1448 imam 3587080982063727 310410214827503 APPLE 1PROME8 11491 05/29/20 18:45:03 0:24 23444 1340 imam 3587080982063727 310410214827503 APPLE 1PROME8 11492 05/29/20 18:45:03 0:24 2596 1340 imam 3587080982063727 310410214827503 APPLE 1PROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 469 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00003113 The information contained hereCtoNeli not for general distribution. EF-EA_00117189 EFTA01251713 MOBILITY 411111i 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T UTC. Run pato: 06/17/2020 Run Time: 1S:66:57 Data Usage For: Item Conn. Conn. originating ET Bytes Bytes Apn INTI INSI MIT MODEL Date Time Number Up Dn (UrC) 11493 05/29/20 18:45:27 1:25 5088 1588 ims 3587080982063727 310410214827503 APPLE !PHONES 11494 05/29/20 18:45:50 20:01 2221740 2250309 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11495 05/29/20 18:46:51 0:51 2660 1340 ims 3587080982063727 310410214827503 APPLE !PHONES 11496 05/29/20 18:46:52 0:50 2596 1340 ims 3587080982063727 310410214827503 APPLE 110)(0=8 11497 05/29/20 18:47:42 29:35 13364 9832 ims 3587080982063727 310410214827503 APPLE 110)(0=8 11498 05/29/20 18:52:19 24:58 4773957 4358860 ims 3587080982063727 310410214827503 APPLE 110)(0=8 11499 05/29/20 19:05:50 2:04 5061 6212 nxtgonpho 3587080982063727 310410214827503 APPLE 110)(0=8 no 11500 05/29/20 19:05:52 2:03 6212 4773 ructgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11501 05/29/20 19:07:55 60:00 109777 162255ructgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11502 05/29/20 19:17:17 3:04 515194 672966 ims 3587080982063727 310410214827503 APPLE 110)(0=8 11503 05/29/20 19:17:17 3:04 515194 672966 ims 3587080982063727 310410214827503 APPLE 110)(0=8 11504 05/29/20 19:17:17 3:10 16204 8292 ims 3587080982063727 310410214827503 APPLE 110)(0=8 11505 05/29/20 19:17:17 3:10 15628 8204 ims 3587080982063727 310410214827503 APPLE 110)(0=8 11506 05/29/20 19:20:27 1:44 3516 1448 ims 3587080982063727 310410214827503 APPLE 110)(0=8 11507 05/29/20 19:22:11 14:24 2660 1340 ims 3587080982063727 310410214827503 APPLE 110)(0=8 11508 05/29/20 19:22:11 14:24 2596 1340 ims 3587080982063727 310410214827503 APPLE 110)(0=8 11509 05/29/20 19:36:35 60:00 15156 4872 ims 3587080982063727 310410214827503 APPLE 110)(0=8 11510 05/29/20 20:07:55 60:00 118957 25277rumgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11511 05/29/20 20:36:35 60:00 8388 3144 ims 3587080982063727 310410214827503 APPLE !PHONES 11512 05/29/20 21:07:55 60:00 1012 5000 ructgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11513 05/29/20 21:36:35 60:00 8604 3052 ims 3587080982063727 310410214827503 APPLE 110)(0=8 11514 05/29/20 22:07:55 60:00 519 315 ructgonpho 3587080982063727 310410214827503 APPLE 110)(0=8 no 11515 05/29/20 22:36:35 43:36 13784 8136 ims 3587080982063727 310410214827503 APPLE !PHONES 11516 05/29/20 23:07:55 12:15 410 262ructgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11517 05/30/20 00:35:05 17:41 76056 328882ructgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11518 05/30/20 00:35:08 17:38 6671 5921 ims 3587080982063727 310410214827503 APPLE !PHONES 11519 05/30/20 00:52:46 60:00 148124 126933 ructgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11520 05/30/20 00:52:48 5:50 6671 5982 ims 3587080982063727 310410214827503 APPLE !PHONES 11521 05/30/20 00:58:38 60:00 14016 4948 ims 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 470 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003114 The information contained her is not for general distribution. NaTtAdti EFTA_O0I 17190 EFTA01251714 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ....,„# ••-a` a. AT&T arc. Run Data: 06/17/2020 Run Time: 18:56:57 Data Usage Tor: Item Conn. Conn. Originating LT Bytes Byte. Apn INTI IMBI HUM MOLL Data Time Number Up Dn (OTC) 11522 05/30/20 01:52:46 60:00 2720578 2661896 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 11523 05/30/20 01:58:38 45:23 8604 2896 imp 3587080982063727 310410214827503 APPLE 'PHONES 11524 05/30/20 02:44:01 5:16 6332 1944 imp 3587080982063727 310410214827503 APPLE 'PHONES 11525 05/30/20 02:49:17 1:20 5072 1680 imp 3587080982063727 310410214827503 APPLE 'PHONES 11526 05/30/20 02:50:37 1:29 3376 1448 imp 3587080982063727 310410214827503 APPLE 'PHONES 11527 05/30/20 02:52:06 12:54 3764 1448 imp 3587080982063727 310410214827503 APPLE !PHONES 11528 05/30/20 02:52:46 60:00 112473 35958 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11529 05/30/20 03:05:00 2:43 2644 1324 imp 3587080982063727 310410214827503 APPLE !PHONES 11530 05/30/20 03:07:43 60:00 13784 4592 imp 3587080982063727 310410214827503 APPLE !PHONES 11531 05/30/20 03:52:46 60:00 5683 12712ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11532 05/30/20 04:07:43 60:00 8712 3004 imp 3587080982063727 310410214827503 APPLE !PHONES 11533 05/30/20 04:52:46 60:00 1454 1470ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 11534 05/30/20 05:07:43 60:00 6956 2772 imp 3587080982063727 310410214827503 APPLE 'PHONES 11535 05/30/20 05:52:46 60:00 1402 1365ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 11536 05/30/20 06:07:43 60:00 10520 4396 imp 3587080982063727 310410214827503 APPLE 'PHONES 11537 05/30/20 06:52:46 60:00 4339 7071ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 11538 05/30/20 07:07:43 60:00 13196 4436 imp 3587080982063727 310410214827503 APPLE !PHONES 11539 05/30/20 07:52:46 60:00 727 735ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11540 05/30/20 08:07:43 60:00 7296 3004 imp 3587080982063727 310410214827503 APPLE !PHONES 11541 05/30/20 08:52:46 60:00 554 630nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11542 05/30/20 09:07:43 60:00 11920 4220 imp 3587080982063727 310410214827503 APPLE !PHONES 11543 05/30/20 09:52:46 60:00 225 210ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11544 05/30/20 10:07:43 60:00 6848 2864 imp 3587080982063727 310410214827503 APPLE !PHONES 11545 05/30/20 10:52:46 60:00 3681 5026ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11546 05/30/20 11:07:43 60:00 15216 5140 imp 3587080982063727 310410214827503 APPLE 'PHONES 11547 05/30/20 11:52:46 60:00 20918 5577ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 11548 05/30/20 12:07:43 60:00 7296 2896 ins 3587080982063727 310410214827503 APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 471 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00003115 The information contained hereCtlaNyR WinfikE not for general distribution. EF-EAJVII7191 EFTA01251715 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ..„,,,,• ••-s" -". AT&T arc. Run pato: 06/17/2020 Run TIM*: Data Osage For: Item Conn. Conn. Originating LT Bytes Bytom Apn INLI IMSI NUM MODEL Date Tao Number Up Dn (OTC) 11549 05/30/20 12:52:46 60:00 69854 303257 nxtgenpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11550 05/30/20 13:07:43 12:25 4964 1572 ims 3587080982063727 310410214827503 APPLE IPHONE8 11551 05/30/20 13:20:08 18:05 3952 1448 ims 3587080982063727 310410214827503 APPLE IPHONE8 11552 05/30/20 13:38:16 6:09 9665 7168 ims 3587080982063727 310410214827503 APPLE IPHONE8 11553 05/30/20 13:44:28 1:41 6687 5979 ims 3587080982063727 310410214827503 APPLE IPHONE8 11554 05/30/20 13:46:13 50:49 9267 7305 ims 3587080982063727 310410214827503 APPLE IPHONE8 11555 05/30/20 13:52:46 60:00 23941 109256 nxtgenpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11556 05/30/20 14:37:05 9:08 6673 5924 ims 3587080982063727 310410214827503 APPLE DRONES 11557 05/30/20 14:46:18 60:00 30390 21458 ims -1 310410214827503 11558 05/30/20 14:52:46 7:13 446 700 nxtgenpho 3587080982063727 310410214827503 APPLE DRONES no 11559 05/30/20 14:59:59 60:00 30303 23912 nxtgenpho 3587080982063727 310410214827503 APPLE DRONES no 11560 05/30/20 15:17:08 0:21 0 8905 ims -1 310410214827503 11561 05/30/20 15:23:34 36:25 6212479 6241405 ims -1 310410214827503 11562 05/30/20 15:46:18 60:00 9616 4660 ims -1 310410214827503 11563 05/30/20 15:59:59 60:00 72441 58851 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11564 05/30/20 16:46:18 10:24 0 0 ims 3587080982063727 310410214827503 APPLE DRONES 11565 05/30/20 16:56:42 3:49 72644 1340 ims 3587080982063727 310410214827503 APPLE DRONES 11566 05/30/20 16:56:42 3:49 2596 1340 ims 3587080982063727 310410214827503 APPLE DRONES 11567 05/30/20 16:59:59 60:00 144356 465987 nxtgenpho 3587080982063727 310410214827503 APPLE DRONES no 11568 05/30/20 17:00:31 25:45 3656 1340 ims 3587080982063727 310410214827503 APPLE DRONES 11569 05/30/20 17:26:16 21:45 3644 1340 ims 3587080982063727 310410214827503 APPLE DRONES 11570 05/30/20 17:26:16 21:45 2596 1340 ims 3587080982063727 310410214827503 APPLE DRONES 11571 05/30/20 17:48:01 12:55 3424 1448 ims 3587080982063727 310410214827503 APPLE DRONES 11572 05/30/20 17:59:59 60:00 24302 65784 nxtgenpho 3587080982063727 310410214827503 APPLE DRONES no 11573 05/30/20 18:00:56 0:51 35612 480 ims 3587080982063727 310410214827503 APPLE DRONES 11574 05/30/20 18:00:56 0:51 1540 480 ims 3587080982063727 310410214827503 APPLE DRONES 11575 05/30/20 18:01:47 2:02 8689 3361 ims 3587080982063727 310410214827503 APPLE DRONES 11576 05/30/20 18:03:49 1:55 6689 5998 ims 3587080982063727 310410214827503 APPLE DRONES 11577 05/30/20 18:03:49 1:55 6625 5998 ims 3587080982063727 310410214827503 APPLE DRONES 11578 05/30/20 18:05:44 1:19 3316 1324 ims 3587080982063727 310410214827503 APPLE DRONES 11579 05/30/20 18:07:03 23:33 5596 2772 ims 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 472 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003116 The information contained her is NT-31AL not for general distribution. EFTA 00117192 EFTA01251716 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ....,,,•AT&T ••-s`' OTC. Run Oato: 06/17/2020 Run Time: 111:56:57 Data Osage For: Item Conn. Conn. Originating Bytes Byte. Apn INZI INSI NAZI MODEL Date Time Number UP Dn (UTC) 11580 05/30/20 18:07:03 23:33 5532 2772 low 3587080982063727 310410214827503 APPLE !PHONES 11581 05/30/20 18:30:36 7:42 3424 1340 low 3587080982063727 310410214827503 APPLE !PHONES 11582 05/30/20 18:38:18 1:39 2660 1340 low 3587080982063727 310410214827503 APPLE 110110=8 11583 05/30/20 18:38:18 1:39 2596 1340 low 3587080982063727 310410214827503 APPLE 110110=8 11584 05/30/20 18:39:57 60:00 13568 4624 low 3587080982063727 310410214827503 APPLE 110110=8 11585 05/30/20 18:59:59 60:00 5469 18862 mtgonpho 3587080982063727 310410214827503 APPLE 110110=8 no 11586 05/30/20 19:39:57 60:00 8388 2928 imp 3587080982063727 310410214827503 APPLE DRONES 11587 05/30/20 19:59:59 60:00 83785 48437ruftgonpho 3587080982063727 310410214827503 APPLE DRONES no 11588 05/30/20 20:39:57 60:00 8728 2944 imp 3587080982063727 310410214827503 APPLE DRONES 11589 05/30/20 20:59:59 12:27 26118 19322 mtgonpho 3587080982063727 310410214827503 APPLE !PRIMES no 11590 05/30/20 21:12:25 1:31 288 48ruftgonpho 3587080982063727 310410214827503 APPLE !PRIMES no 11591 05/30/20 21:12:26 1:32 48 Oruftgonpho 3587080982063727 310410214827503 APPLE !PRIMES no 11592 05/30/20 21:13:57 60:00 144310 101814ruftgonpho 3587080982063727 310410214827503 APPLE !PRIMES no 11593 05/30/20 21:39:57 60:00 6956 2680 ins 3587080982063727 310410214827503 APPLE !PRIMES 11594 05/30/20 22:13:57 60:00 879 945ruftgonpho 3587080982063727 310410214827503 APPLE !PRIMES no 11595 05/30/20 22:39:57 60:00 12244 4676 ins 3587080982063727 310410214827503 APPLE DRONES 11596 05/30/20 23:13:57 60:00 1081 2041ruftgonpho 3587080982063727 310410214827503 APPLE DRONES no 11597 05/30/20 23:39:57 60:00 10036 3176 ins 3587080982063727 310410214827503 APPLE !PRIMES 11598 05/31/20 00:13:57 34:24 60624 43394ruftgonpho 3587080982063727 310410214827503 APPLE !PRIMES no 11599 05/31/20 00:39:57 60:00 13568 4624 into 3587080982063727 310410214827503 APPLE !PRIMES 11600 05/31/20 00:48:20 2:04 5065 6214ruftgonpho 3587080982063727 310410214827503 APPLE !PRIMES no 11601 05/31/20 00:48:22 2:03 6214 4777ruftgonpho 3587080982063727 310410214827503 APPLE !PRIMES no 11602 05/31/20 00:50:25 60:00 79456 101692ruftgonpho 3587080982063727 310410214827503 APPLE !PRIMES no 11603 05/31/20 01:39:57 9:41 4996 3164 ins 3587080982063727 310410214827503 APPLE DRONES 11604 05/31/20 01:50:25 1:11 0 Oruftgonpho 3587080982063727 310410214827503 APPLE !PRIMES no 11605 05/31/20 01:51:36 60:00 91356 352870ruftgonpho 3587080982063727 310410214827503 APPLE !PRIMES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 473 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00003117 The information contained her is not for general distribution. EF-EA_00117193 EFTA01251717 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T arc. Run pato: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes( Apn ICI INS I MIME NICOLL Date Time Humber Up Dn (UTC) 11606 05/31/20 01:51:38 60:00 12193 8910 imp 3587080982063727 310410214827503 APPLE !PHONES 11607 05/31/20 02:51:36 60:00 10696 11747 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11608 05/31/20 02:51:38 60:00 5532 2772 ims 3587080982063727 310410214827503 APPLE !PHONES 11609 05/31/20 03:51:36 60:00 2731 11571ruftgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11610 05/31/20 03:51:38 60:00 5516 2664 ims 3587080982063727 310410214827503 APPLE IPHONE8 11611 05/31/20 04:51:36 60:00 2250 3672ruftgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11612 05/31/20 04:51:38 60:00 5516 2788 ims 3587080982063727 310410214827503 APPLE IPHONE8 11613 05/31/20 05:51:36 60:00 3925 22922ruftgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11614 05/31/20 05:51:38 60:00 11884 6388 ims 3587080982063727 310410214827503 APPLE IPHONE8 11615 05/31/20 06:51:36 60:00 1053 2097ruftgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11616 05/31/20 06:51:38 60:00 5192 2680 ims 3587080982063727 310410214827503 APPLE IPHONE8 11617 05/31/20 07:51:36 60:00 1214 1770ruftgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11618 05/31/20 07:51:38 60:00 5732 2928 ims 3587080982063727 310410214827503 APPLE !PHONES 11619 05/31/20 08:51:36 60:00 960 1177 ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11620 05/31/20 08:51:38 60:00 7572 3912 ims 3587080982063727 310410214827503 APPLE !PHONES 11621 05/31/20 09:51:36 60:00 3191 22221 ructgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11622 05/31/20 09:51:38 60:00 5408 2788 ims 3587080982063727 310410214827503 APPLE IPHONE8 11623 05/31/20 10:51:36 60:00 33477 58128ruftgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11624 05/31/20 10:51:38 41:04 2596 1340 ims 3587080982063727 310410214827503 APPLE IPHONE8 11625 05/31/20 11:32:42 60:00 13804 5752 ims 3587080982063727 310410214827503 APPLE IPHONE8 11626 05/31/20 11:51:36 2:45 0 Oruftgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11627 05/31/20 11:54:21 43:25 52232 9857ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11628 05/31/20 12:32:42 7:51 0 0 ims 3587080982063727 310410214827503 APPLE !PHONES 11629 05/31/20 12:37:47 16:09 6282 5795ruftgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11630 05/31/20 12:40:33 3:01 3376 1552 ims 3587080982063727 310410214827503 APPLE IPHONE8 11631 05/31/20 12:40:33 3:01 3376 1464 ims 3587080982063727 310410214827503 APPLE IPHONE8 11632 05/31/20 12:43:34 10:33 4964 1588 lain 3587080982063727 310410214827503 APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 474 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003118 The information contained her is not for general distribution. NeTtAti EF-EA_00117194 EFTA01251718 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in • AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. originating NT Bytes Byte. Apn INN1 INSI MAKE NICOLL Date T1me Number UP Dn (OTC) 11633 05/31/20 12:53:56 14:06 16087 61340 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11634 05/31/20 12:54:07 13:55 2644 1428 imp 3587080982063727 310410214827503 APPLE !PRONGS 11635 05/31/20 12:54:07 13:55 2644 1340 imp 3587080982063727 310410214827503 APPLE !PHONES 11636 05/31/20 13:08:01 0:45 295117 38720 nxtgenpho 3587080982063727 310410214827503 APPLE !PRONGS no 11637 05/31/20 13:08:02 0:44 6245 6675 imp 3587080982063727 310410214827503 APPLE 'PRONGS 11638 05/31/20 13:08:02 0:45 38720 294829 nxtgenpho 3587080982063727 310410214827503 APPLE 'PRONGS no 11639 05/31/20 13:08:04 0:43 6675 5981 imp 3587080982063727 310410214827503 APPLE 'PRONGS 11640 05/31/20 13:08:28 2:46 9695 6018 imp 3587080982063727 310410214827503 APPLE 'PRONGS 11641 05/31/20 13:08:47 50:21 18474 76422 nxtgenpho 3587080982063727 310410214827503 APPLE 'PRONGS no 11642 05/31/20 13:11:14 3:42 2768 1324 imp 3587080982063727 310410214827503 APPLE 'PRONGS 11643 05/31/20 13:11:14 3:42 2704 1324 imp 3587080982063727 310410214827503 APPLE 'PRONGS 11644 05/31/20 13:14:56 60:00 10704 4436 imp 3587080982063727 310410214827503 APPLE 'PRONGS 11645 05/31/20 13:59:07 8:18 5168 6230 nxtgenpho 3587080982063727 310410214827503 APPLE 'PRONGS no 11646 05/31/20 13:59:09 8:17 6230 4880 nxtgenpho 3587080982063727 310410214827503 APPLE 'PRONGS no 11647 05/31/20 14:07:26 0:33 0 0 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11648 05/31/20 14:07:58 1:26 901 280 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11649 05/31/20 14:07:59 1:26 280 613 nxtgenpho 3587080982063727 310410214827503 APPLE !PRONGS no 11650 05/31/20 14:09:25 21:08 13744 9093 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11651 05/31/20 14:09:26 21:08 9093 13456 nxtgenpho 3587080982063727 310410214827503 APPLE !PRONGS no 11652 05/31/20 14:14:56 60:00 8836 3144 imp 3587080982063727 310410214827503 APPLE 'PRONGS 11653 05/31/20 14:30:34 11:54 288 48 nxtgenpho 3587080982063727 310410214827503 APPLE 'PRONGS no 11654 05/31/20 14:30:35 11:55 48 0 nxtgenpho 3587080982063727 310410214827503 APPLE 'PRONGS no 11655 05/31/20 14:42:29 2:04 192 0 nxtgenpho 3587080982063727 310410214827503 APPLE 'PRONGS no 11656 05/31/20 14:42:30 2:03 5328 6230 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 475 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003119 The information contained hereCtoNyFti not for general distribution. EF-EA_00117195 EFTA01251719 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Byte. Apn INLI DWI MARL MOLL Date Time Number Op Dn (UTC) 11657 05/31/20 14:42:30 2:04 0 0 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 11658 05/31/20 14:42:31 2:03 6230 4944 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 11659 05/31/20 14:44:34 1:10 280 581 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11660 05/31/20 14:45:43 5:13 288 48 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11661 05/31/20 14:45:44 5:13 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE 1PRONZ8 no 11662 05/31/20 14:50:57 7:53 8532 6874 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11663 05/31/20 14:58:49 8:27 5337 6431 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11664 05/31/20 14:58:50 8:27 6431 5049 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11665 05/31/20 15:07:17 9:36 6282 4744 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11666 05/31/20 15:14:56 60:00 8496 3004 imp 3587080982063727 310410214827503 APPLE !PHONES 11667 05/31/20 15:16:52 1:25 5165 6228 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11668 05/31/20 15:16:53 1:25 6228 4877 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11669 05/31/20 15:18:18 0:33 278 577 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11670 05/31/20 15:18:51 2:28 288 48 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11671 05/31/20 15:18:52 2:28 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11672 05/31/20 15:21:20 60:00 50296 39152 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11673 05/31/20 16:14:56 60:00 13584 4592 imp 3587080982063727 310410214827503 APPLE !PHONES 11674 05/31/20 16:21:20 60:00 54089 34043 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11675 05/31/20 17:14:56 60:00 8604 2896 imp 3587080982063727 310410214827503 APPLE !PHONES 11676 05/31/20 17:21:20 60:00 41758 20779 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11677 05/31/20 18:14:56 60:00 12152 4628 imp 3587080982063727 310410214827503 APPLE !PHONES 11678 05/31/20 18:21:20 60:00 2044 1422 nxtgonpho 3587080982063727 310410214827503 APPLE 1PRONZ8 no 11679 05/31/20 19:14:56 60:00 6848 2432 imp 3587080982063727 310410214827503 APPLE DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 476 AT&T does not retain records that can definitively show whether a transaction was PsisTiliAL customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003120 The information contained her is not for general distribution. EF-EA_00117196 EFTA01251720 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T UTC. Run pato: 06/17/2020 Run Time: IS:56:57 Data Osage for: Itom Conn. Conn. Originating ET Sytes Byte. Apn IX= IMSI MARX MODEL. Date Time Number OP on moo) 11680 05/31/20 19:21:20 60:00 4032 6445 nxtgonpho 3587080982063727 310410214827503 APPLE !PRONGS no 11681 05/31/20 20:14:56 60:00 6956 2648 imp 3587080982063727 310410214827503 APPLE !PRONGS 11682 05/31/20 20:21:20 60:00 1611 1470 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11683 05/31/20 21:14:56 60:00 10612 4096 ins 3587080982063727 310410214827503 APPLE IPHOME8 11684 05/31/20 21:21:20 60:00 1090 735ruftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11685 05/31/20 22:14:56 60:00 8264 2896 imp 3587080982063727 310410214827503 APPLE IPHOME8 11686 05/31/20 22:21:20 60:00 1154 840ruftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11687 05/31/20 23:14:56 60:00 10612 4380 imp 3587080982063727 310410214827503 APPLE !PHONES 11688 05/31/20 23:21:20 60:00 94805 61150ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11689 06/01/20 00:14:56 60:00 8604 3128 imp 3587080982063727 310410214827503 APPLE !PHONES 11690 06/01/20 00:21:20 54:24 8979 7411 nxtgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11691 06/01/20 01:14:56 0:48 4764 2084 imp 3587080982063727 310410214827503 APPLE IPHOME8 11692 06/01/20 01:19:10 60:00 363521 876459ruftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11693 06/01/20 01:19:13 29:29 9271 7244 imp 3587080982063727 310410214827503 APPLE IPHOME8 11694 06/01/20 01:48:42 52:50 15108 5272 imp 3587080982063727 310410214827503 APPLE IPHOME8 11695 06/01/20 02:19:10 1:59 0 Oruftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11696 06/01/20 02:21:09 60:00 14525 9834 ructgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11697 06/01/20 02:48:35 0:29 6689 5997 imp 3587080982063727 310410214827503 APPLE IPHOME8 11698 06/01/20 02:49:04 60:00 12352 4608 imp 3587080982063727 310410214827503 APPLE IPHOME8 11699 06/01/20 03:21:09 13:00 277 315ruftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11700 06/01/20 03:34:09 28:42 6532 5252ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11701 06/01/20 03:49:04 60:00 8496 3036 imp 3587080982063727 310410214827503 APPLE !PRONGS 11702 06/01/20 04:02:50 2:13 288 48ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11703 06/01/20 04:02:51 2:13 48 Oruftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11704 06/01/20 04:05:04 60:00 7584 6400 nxtgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11705 06/01/20 04:49:04 60:00 6940 2896 imp 3587080982063727 310410214827503 APPLE IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 477 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003121 The information contained heraCtoNeli NTifikE not for general distribution. EFTA_00I 17197 EFTA01251721 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in 1/4 %.,,' ‘inli. sd00 AT&T OTC. Run Data: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating TT Bytes Byte. Man Int1 Inn MIT MODEL Data Time Muster Up Dn (UTC) 11706 06/01/20 05:05:04 60:00 1213 1207 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11707 06/01/20 05:49:04 60:00 10272 4128 ins 3587080982063727 310410214827503 APPLE !PHONES 11708 06/01/20 06:05:04 60:00 692 420ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 11709 06/01/20 06:49:04 60:00 8388 2928 ins 3587080982063727 310410214827503 APPLE !PHONES 11710 06/01/20 07:05:04 60:00 924 840 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11711 06/01/20 07:49:04 60:00 12028 4628 ins 3587080982063727 310410214827503 APPLE !PHONES 11712 06/01/20 08:05:04 60:00 976 945ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 11713 06/01/20 08:49:04 60:00 8388 2928 ins 3587080982063727 310410214827503 APPLE !PHONES 11714 06/01/20 09:05:04 60:00 1033 840ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 11715 06/01/20 09:49:04 60:00 10844 4268 ins 3587080982063727 310410214827503 APPLE !PHONES 11716 06/01/20 10:05:04 60:00 808 630ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 11717 06/01/20 10:49:04 60:00 8264 2928 ins 3587080982063727 310410214827503 APPLE !PHONES 11718 06/01/20 11:05:04 60:00 1176 676ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 11719 06/01/20 11:49:04 60:00 10036 3176 ins 3587080982063727 310410214827503 APPLE !PHONES 11720 06/01/20 12:05:04 60:00 6242 8975ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 11721 06/01/20 12:49:04 60:00 11796 4736 ins 3587080982063727 310410214827503 APPLE !PHONES 11722 06/01/20 13:05:04 60:00 1292 938ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 11723 06/01/20 13:49:04 60:00 12028 4268 ins 3587080982063727 310410214827503 APPLE !PHONES 11724 06/01/20 14:05:04 52:50 97659 63430ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11725 06/01/20 14:49:04 1:01 6304 2224 ins 3587080982063727 310410214827503 APPLE !PHONES 11726 06/01/20 14:50:09 18:13 9393 8466 ins 3587080982063727 310410214827503 APPLE !PHONES 11727 06/01/20 14:57:54 19:38 53238 283837ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11728 06/01/20 15:08:22 9:10 3052 1432 ins 3587080982063727 310410214827503 APPLE !PHONES 11729 06/01/20 15:08:22 9:10 2920 1432 ins 3587080982063727 310410214827503 APPLE DRONES 11730 06/01/20 15:17:31 2:04 54413 18936ruagonpho 3587080982063727 310410214827503 APPLE DRONES no 11731 06/01/20 15:17:32 2:03 6228 6689 ins 3587080982063727 310410214827503 APPLE !PHONES 11732 06/01/20 15:17:32 2:04 18936 54125ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 478 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003122 The information contained her is PsiTniliAL not for general distribution. EFTA_00I 17198 EFTA01251722 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tra `a.hel AT&T arc. Run Data: 06/17/2020 Run Time: 10:56:57 Data Osage For: Item Conn. Conn. Originating ET Bytes Bytes Apn IRE' IMIDI MARC NOD= Data Time Number Up Dn (OTC) 11733 06/01/20 15:17:34 2:02 6689 5964 ins 3587080982063727 310410214827503 APPLE IPHONEB 11734 06/01/20 15:19:36 60:00 235957 176510 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 11735 06/01/20 15:19:38 31:40 9383 7358 imp 3587080982063727 310410214827503 APPLE !PHONES 11736 06/01/20 15:51:18 16:00 3872 1556 ins 3587080982063727 310410214827503 APPLE IPHONE8 11737 06/01/20 16:07:18 0:15 6676 1820 ins 3587080982063727 310410214827503 APPLE IPHONEB 11738 06/01/20 16:07:33 43:40 6832 2648 ins 3587080982063727 310410214827503 APPLE IPHONEB 11739 06/01/20 16:19:36 60:00 81016 209053 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11740 06/01/20 16:51:13 0:51 2644 1324 ins 3587080982063727 310410214827503 APPLE !PHONES 11741 06/01/20 16:52:04 12:52 3532 1432 ins 3587080982063727 310410214827503 APPLE IPHONEB 11742 06/01/20 17:04:56 1:09 2644 1324 ins 3587080982063727 310410214827503 APPLE IPHONEB 11743 06/01/20 17:06:05 60:00 11996 4328 ins 3587080982063727 310410214827503 APPLE IPHONEB 11744 06/01/20 17:19:36 60:00 1138 1936 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11745 06/01/20 18:06:05 60:00 8480 3020 ins 3587080982063727 310410214827503 APPLE !PRONGS 11746 06/01/20 18:19:36 60:00 36198 25369 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11747 06/01/20 19:06:05 21:04 5072 1572 ins 3587080982063727 310410214827503 APPLE !PHONES 11748 06/01/20 19:19:36 60:00 80090 154219 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11749 06/01/20 19:27:09 14:38 2644 1324 ins 3587080982063727 310410214827503 APPLE !PHONES 11750 06/01/20 19:41:47 60:00 12136 4684 ins 3587080982063727 310410214827503 APPLE !PHONES 11751 06/01/20 20:19:36 60:00 9626 23893 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11752 06/01/20 20:41:47 60:00 11060 4952 ins 3587080982063727 310410214827503 APPLE !PHONES 11753 06/01/20 21:19:36 35:09 12444 6123 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11754 06/01/20 21:41:47 54:22 8480 2896 ins 3587080982063727 310410214827503 APPLE !PHONES 11755 06/01/20 21:54:44 2:03 288 48 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11756 06/01/20 21:54:45 2:03 48 Onxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11757 06/01/20 21:56:48 1:48 48 Onxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11758 06/01/20 21:58:36 3:37 48 Onxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11759 06/01/20 22:02:12 1:45 288 48nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 479 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003123 The information contained her is PsFinfikE not for general distribution. EFTA_00I 17199 EFTA01251723 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: 111:54:57 Data Usage Tor: Item Conn. Conn. Originating CT Bytes Byte. Apn IICI ISIS I MARL NICOLL Data Time Mambos OP Dn (UTC) 11760 06/01/20 22:02:13 1:45 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11761 06/01/20 22:03:58 60:00 74045 78426 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11762 06/01/20 22:36:09 21:23 26404 1412 ims 3587080982063727 310410214827503 APPLE !PHONES 11763 06/01/20 22:36:09 21:23 2644 1324 ims 3587080982063727 310410214827503 APPLE !PHONES 11764 06/01/20 22:57:32 11:56 8280 2820 imo 3587080982063727 310410214827503 APPLE !PHONES 11765 06/01/20 23:03:58 60:00 4095 4941 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11766 06/01/20 23:09:28 0:02 0 0 imo 3587080982063727 310410214827503 APPLE !PHONES 11767 06/01/20 23:09:28 0:02 0 0 imo 3587080982063727 310410214827503 APPLE !PHONES 11768 06/01/20 23:09:41 60:00 35795 18581 imo -1 310410214827503 11769 06/02/20 00:03:58 60:00 5974 7569 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11770 06/02/20 00:09:41 60:00 8728 3252 imo -1 310410214827503 11771 06/02/20 01:03:58 60:00 3725 892 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11772 06/02/20 01:09:41 60:00 10160 3284 imo -1 310410214827503 11773 06/02/20 02:03:58 30:02 490 1155 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11774 06/02/20 02:09:41 60:00 8496 3036 imo -1 310410214827503 11775 06/02/20 02:33:59 0:35 5168 6230 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11776 06/02/20 02:34:00 0:35 6230 4880 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11777 06/02/20 02:34:35 51:01 19228 7931 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11778 06/02/20 03:09:41 60:00 15344 5768 imo -1 310410214827503 11779 06/02/20 03:25:35 0:54 288 48 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11780 06/02/20 03:25:37 0:53 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11781 06/02/20 03:26:30 60:00 7623 6111 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11782 06/02/20 04:09:41 60:00 6956 2664 imo -1 310410214827503 11783 06/02/20 04:26:30 60:00 1559 1365 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11784 06/02/20 05:09:41 60:00 6956 2788 imo -1 310410214827503 11785 06/02/20 05:26:30 60:00 1443 1155 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 480 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003124 The information contained her is NITIAL not for general distribution. EFTA 00117200 EFTA01251724 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tr '`s ad AT&T s OTC. Run Date: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Byte. Bytes Apn IKE I INSI MAKE NICOLL Date Time Number UP Dn (OTC) 11786 06/02/20 06:09:41 60:00 6848 2680 imo -1 310410214827503 11787 06/02/20 06:26:30 60:00 1722 2051 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11788 06/02/20 07:09:41 60:00 7064 2804 imo -1 310410214827503 11789 06/02/20 07:26:30 60:00 9292 13711 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11790 06/02/20 08:09:41 60:00 15452 5768 ins -1 310410214827503 11791 06/02/20 08:26:30 60:00 1097 945ruagenpho 3587080982063727 310410214827503 APPLE !PHONES no 11792 06/02/20 09:09:41 60:00 6848 2572 ins -1 310410214827503 11793 06/02/20 09:26:30 60:00 808 630 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11794 06/02/20 10:09:41 60:00 6956 2804 ins -1 310410214827503 11795 06/02/20 10:26:30 60:00 3604 996 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11796 06/02/20 11:09:41 60:00 12060 6052 isms -1 310410214827503 11797 06/02/20 11:26:30 60:00 740 420 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11798 06/02/20 12:09:41 60:00 6956 2772 isms -1 310410214827503 11799 06/02/20 12:26:30 60:00 578 630 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11800 06/02/20 13:09:41 60:00 10488 4288 ins -1 310410214827503 11801 06/02/20 13:26:30 60:00 467 210ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11802 06/02/20 14:09:41 44:54 20088 10876 ins 3587080982063727 310410214827503 APPLE 1PHONE8 11803 06/02/20 14:26:30 60:00 49577 154114nxtgenpho 3587080982063727 310410214827503 APPLE 1PHONE8 no 11804 06/02/20 14:43:50 10:45 1146262 2105550 ins 3587080982063727 310410214827503 APPLE 'PHONES 11805 06/02/20 14:54:35 0:15 5526 2840 ins 3587080982063727 310410214827503 APPLE !PHONES 11806 06/02/20 14:54:35 0:15 5192 2840 ins 3587080982063727 310410214827503 APPLE !PHONES 11807 06/02/20 14:54:35 0:15 52007 29291 ins 3587080982063727 310410214827503 APPLE !PHONES 11808 06/02/20 14:54:35 0:15 52074 29291 ins 3587080982063727 310410214827503 APPLE 1PHONE8 11809 06/02/20 14:54:50 6:46 1277744 902121 ins 3587080982063727 310410214827503 APPLE 'PHONES 11810 06/02/20 14:54:50 10:37 10112 4792 ins 3587080982063727 310410214827503 APPLE !PHONES 11811 06/02/20 15:05:27 2:59 2660 1340 ins 3587080982063727 310410214827503 APPLE !PHONES 11812 06/02/20 15:05:27 2:59 2596 1340 ins 3587080982063727 310410214827503 APPLE !PHONES 11813 06/02/20 15:08:30 0:16 6689 5999 ins 3587080982063727 310410214827503 APPLE 1PHONE8 11814 06/02/20 15:08:46 4:21 3532 1340 ins 3587080982063727 310410214827503 APPLE 1PHONE8 11815 06/02/20 15:13:07 10:32 2644 1324 ins 3587080982063727 310410214827503 APPLE 1PHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 481 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00003125 The information contained her is WinfikE not for general distribution. EFTA 00117201 EFTA01251725 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ...... ‘"S° .1# 00 AT&T arc. Run Data: 06/17/2020 Run Tina: 18:54:57 Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn IND I INSI HAKE MODEL Data Time Number Up Dn (OTC) 11816 06/02/20 15:23:39 60:00 12028 4484 imp 3587080982063727 310410214827503 APPLE !PHONES 11817 06/02/20 15:26:30 60:00 99974 67663 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11818 06/02/20 16:23:39 60:00 14832 9324 imp 3587080982063727 310410214827503 APPLE !PHONES 11819 06/02/20 16:26:30 60:00 43565 32662ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 11820 06/02/20 17:04:21 10:23 1523437 1820730 ins 3587080982063727 310410214827503 APPLE 'PHONES 11821 06/02/20 17:23:39 60:00 25120 13800 ins 3587080982063727 310410214827503 APPLE 'PHONES 11822 06/02/20 17:26:30 25:51 6237 7511ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11823 06/02/20 17:33:52 1:01 126707 153540 vas 3587080982063727 310410214827503 APPLE !PHONES 11824 06/02/20 17:52:21 60:00 15314 18255nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11825 06/02/20 18:23:39 60:00 6956 2680 vas 3587080982063727 310410214827503 APPLE 'PHONES 11826 06/02/20 18:52:21 60:00 751 735nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 11827 06/02/20 19:23:39 60:00 12136 4592 imp 3587080982063727 310410214827503 APPLE !PHONES 11828 06/02/20 19:52:21 60:00 34062 35324nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11829 06/02/20 20:23:39 60:00 12368 4444 ins 3587080982063727 310410214827503 APPLE !PHONES 11830 06/02/20 20:52:21 60:00 16138 17233roftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11831 06/02/20 21:23:39 28:19 124 496 imp 3587080982063727 310410214827503 APPLE !PHONES 11832 06/02/20 21:43:17 8:41 10410 6526 imp -1 310410214827503 11833 06/02/20 21:51:58 60:00 0 0 imp -1 310410214827503 11834 06/02/20 21:52:21 60:00 83690 71751ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11835 06/02/20 21:53:02 9:02 9853 6222 ims 3587080982063727 310410214827503 APPLE !PHONES 11836 06/02/20 22:02:04 7:42 2820 1340 imp 3587080982063727 310410214827503 APPLE !PHONES 11837 06/02/20 22:02:04 7:42 2688 1340 imp 3587080982063727 310410214827503 APPLE 'PHONES 11838 06/02/20 22:09:46 0:20 3408 1324 imp 3587080982063727 310410214827503 APPLE 'PHONES 11839 06/02/20 22:10:06 2:06 2660 1324 imp 3587080982063727 310410214827503 APPLE 'PHONES 11840 06/02/20 22:10:06 2:06 2596 1324 imp 3587080982063727 310410214827503 APPLE 'PHONES 11841 06/02/20 22:12:12 60:00 11996 4392 imp 3587080982063727 310410214827503 APPLE 'PHONES 11842 06/02/20 22:51:58 60:00 0 0 imp -1 310410214827503 11843 06/02/20 22:52:21 60:00 53259 29558nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11844 06/02/20 23:12:12 60:00 16884 9908 imp 3587080982063727 310410214827503 APPLE !PHONES 11845 06/02/20 23:51:58 60:00 0 0 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 482 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003126 The information contained heraCtoNyFti NTroliAL not for general distribution. EFTA 00/17202 EFTA01251726 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T arc. Run Data: 06/17/2020 Run Time: 16:56:56 Data Osage For: Item cone. Conn. Originating ET Bytes Bytes Apn INZI IMSI NUM MODEL Data Time Number Up Dn (OTC) 11846 06/02/20 23:52:21 60:00 113776 20487 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11847 06/03/20 00:07:02 6:55 1488519 757807 los 3587080982063727 310410214827503 APPLE !PHONES 11848 06/03/20 00:12:12 60:00 9280 3612 iros 3587080982063727 310410214827503 APPLE !PHONES 11849 06/03/20 00:51:58 60:00 0 0 iros -1 310410214827503 11850 06/03/20 00:52:21 59:45 616690 47854 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11851 06/03/20 01:12:12 36:32 3408 1340 ins 3587080982063727 310410214827503 APPLE !PHONES 11852 06/03/20 01:48:43 1:43 61788 1340 ins 3587080982063727 310410214827503 APPLE !PHONES 11853 06/03/20 01:48:44 1:42 2596 1340 ins 3587080982063727 310410214827503 APPLE !PHONES 11854 06/03/20 01:50:26 0:20 3408 1340 ins 3587080982063727 310410214827503 APPLE !PHONES 11855 06/03/20 01:50:46 1:17 2660 1340 ins 3587080982063727 310410214827503 APPLE !PHONES 11856 06/03/20 01:50:46 1:17 2596 1340 ins 3587080982063727 310410214827503 APPLE !PHONES 11857 06/03/20 01:51:58 0:01 0 0 ins -1 310410214827503 11858 06/03/20 01:52:03 60:00 24624 7240 ins 3587080982063727 310410214827503 APPLE !PHONES 11859 06/03/20 01:52:05 1:07 288 48nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11860 06/03/20 01:52:06 1:07 48 Oruftgenpho 3587080982063727 310410214827503 APPLE !PRONGS no 11861 06/03/20 01:53:13 60:00 107627 64507 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11862 06/03/20 02:52:03 60:00 6816 2680 ins 3587080982063727 310410214827503 APPLE !PHONES 11863 06/03/20 02:53:13 60:00 514 525 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 11864 06/03/20 03:52:03 8:25 0 0 ins 3587080982063727 310410214827503 APPLE 'PHONES 11865 06/03/20 03:53:13 60:00 514 525 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 11866 06/03/20 04:00:27 4:35 48740 1340 isms 3587080982063727 310410214827503 APPLE 'PHONES 11867 06/03/20 04:00:28 4:33 2596 1340 isms 3587080982063727 310410214827503 APPLE 'PHONES 11868 06/03/20 04:05:01 60:00 12120 4732 isms 3587080982063727 310410214827503 APPLE 'PHONES 11869 06/03/20 04:53:13 60:00 578 630 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 11870 06/03/20 05:05:01 60:00 8496 3036 ins 3587080982063727 310410214827503 APPLE 'PHONES 11871 06/03/20 05:53:13 60:00 462 420 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 11872 06/03/20 06:05:01 60:00 6816 2664 ins 3587080982063727 310410214827503 APPLE 'PHONES 11873 06/03/20 06:53:13 60:00 803 840 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 11874 06/03/20 07:05:01 33:19 4980 1588 ins 3587080982063727 310410214827503 APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 483 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003127 The information contained heraleeNelt not for general distribution. NeTtikEl EFTA 00117203 EFTA01251727 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tr "4 -". a AT&T OTC. Run Data: 06/17/2020 Run Time: 10:56:58 Data Usage Tor: Item Conn. Conn. Originating LT Bytes Bytes Apn INLI INSI MARL NICOLL Data Time Number Up Dn (OTC) 11875 06/03/20 07:38:20 0:02 0 0 ims 3587080982063727 310410214827503 APPLE IPMONE8 11876 06/03/20 07:38:20 0:02 0 0 ims 3587080982063727 310410214827503 APPLE IPMONE8 11877 06/03/20 07:45:17 60:00 11869 8788 ims 3587080982063727 310410214827503 APPLE IPMONE8 11878 06/03/20 07:53:13 60:00 3620 996 nxtgenpho 3587080982063727 310410214827503 APPLE IPMONE8 no 11879 06/03/20 08:45:17 35:25 2596 1340 ins 3587080982063727 310410214827503 APPLE IPMONE8 11880 06/03/20 08:53:13 60:00 514 525 nxtgenpho 3587080982063727 310410214827503 APPLE IPMONE8 no 11881 06/03/20 09:20:42 0:01 0 0 imp 3587080982063727 310410214827503 APPLE IPMONE8 11882 06/03/20 09:20:59 60:00 18242 9408 imp -1 310410214827503 11883 06/03/20 09:53:13 60:00 578 630 nxtgenpho 3587080982063727 310410214827503 APPLE IPMONE8 no 11884 06/03/20 10:20:59 60:00 6956 2772 imp -1 310410214827503 11885 06/03/20 10:53:13 60:00 3488 786 nxtgenpho 3587080982063727 310410214827503 APPLE IPMONE8 no 11886 06/03/20 11:20:59 60:00 13460 4624 ism -1 310410214827503 11887 06/03/20 11:53:13 43:06 346 210 nxtgenpho 3587080982063727 310410214827503 APPLE IPMONE8 no 11888 06/03/20 12:20:59 60:00 8496 2928 imp -1 310410214827503 11889 06/03/20 12:36:19 60:00 17171 19006 nxtgenpho 3587080982063727 310410214827503 APPLE IPMONE8 no 11890 06/03/20 13:20:59 60:00 6848 2680 imp -1 310410214827503 11891 06/03/20 13:36:19 60:00 1076 5194 nxtgenpho 3587080982063727 310410214827503 APPLE IPMONE8 no 11892 06/03/20 14:20:59 60:00 17440 7140 imp -1 310410214827503 11893 06/03/20 14:36:19 60:00 33285 20450 nxtgenpho 3587080982063727 310410214827503 APPLE IPMONE8 no 11894 06/03/20 15:20:59 60:00 8388 2928 imp -1 310410214827503 11895 06/03/20 15:36:19 60:00 68804 52255 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11896 06/03/20 16:20:59 25:43 3532 1340 imp 3587080982063727 310410214827503 APPLE !PHONES 11897 06/03/20 16:36:19 60:00 73150 319642 nxtgenpho 3587080982063727 310410214827503 APPLE IPRONE8 no 11898 06/03/20 16:46:42 35:56 18696 2804 imp 3587080982063727 310410214827503 APPLE IPRONE8 11899 06/03/20 16:46:42 35:56 6500 2804 ins 3587080982063727 310410214827503 APPLE IPRONE8 11900 06/03/20 17:22:38 60:00 12152 5500 ins 3587080982063727 310410214827503 APPLE !PHONES 11901 06/03/20 17:36:19 60:00 6217 8569 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 11902 06/03/20 18:22:38 50:15 20272 14536 as 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 484 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003128 The information contained her is PsiTniliAL not for general distribution. EFTA 00117204 EFTA01251728 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ...,,,• ••—•st` a. AT&T OTC. Run Date: 06/17/2020 Run Time: 10:44:58 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes( Apn per IMBI MART MOTS Date Time Number Up Dn (OTC) 11903 06/03/20 18:36:19 60:00 65601 74295 nxtgonpho 3587080982063727 310410214827503 APPLE ITHOME8 no 11904 06/03/20 19:08:57 0:32 3390 17716 ims 3587080982063727 310410214827503 APPLE ITHOME8 11905 06/03/20 19:12:53 1:08 29864 1588 ims 3587080982063727 310410214827503 APPLE ITHOME8 11906 06/03/20 19:12:53 1:08 4244 1588 ims 3587080982063727 310410214827503 APPLE ITHOME8 11907 06/03/20 19:14:01 60:00 15452 6108 ims 3587080982063727 310410214827503 APPLE ITHOME8 11908 06/03/20 19:36:19 49:02 154491 104472 nxtgonpho 3587080982063727 310410214827503 APPLE ITHOME8 no 11909 06/03/20 20:14:01 12:54 0 0 ims 3587080982063727 310410214827503 APPLE ITHOME8 11910 06/03/20 20:25:20 1:52 118093 19163ruagonpho 3587080982063727 310410214827503 APPLE ITHOME8 no 11911 06/03/20 20:25:21 1:51 6244 6715 ims 3587080982063727 310410214827503 APPLE ITHOME8 11912 06/03/20 20:25:21 1:52 19163 117805nxtgonpho 3587080982063727 310410214827503 APPLE ITHOME8 no 11913 06/03/20 20:25:22 1:51 6647 5980 ims 3587080982063727 310410214827503 APPLE ITHOME8 11914 06/03/20 20:26:55 21:44 15066 11650 ims 3587080982063727 310410214827503 APPLE ITHOME8 11915 06/03/20 20:27:13 60:00 29899 22731ruftgonpho 3587080982063727 310410214827503 APPLE ITHOME8 no 11916 06/03/20 20:31:01 17:38 2582971 3580061 ims 3587080982063727 310410214827503 APPLE ITHOME8 11917 06/03/20 20:48:39 20:58 3222937 4174165 ims 3587080982063727 310410214827503 APPLE ITHOME8 11918 06/03/20 20:48:39 20:58 9450 5464 ims 3587080982063727 310410214827503 APPLE ITHOME8 11919 06/03/20 20:48:39 20:58 3222937 4174165 ims 3587080982063727 310410214827503 APPLE ITHOME8 11920 06/03/20 20:48:39 20:58 9200 5464 ims 3587080982063727 310410214827503 APPLE ITHOME8 11921 06/03/20 21:09:37 22:11 3048535 4722292 ims 3587080982063727 310410214827503 APPLE ITHOME8 11922 06/03/20 21:09:37 60:00 25284 10868 ims 3587080982063727 310410214827503 APPLE ITHOME8 11923 06/03/20 21:27:13 56:17 30089 21364ruagonpho 3587080982063727 310410214827503 APPLE ITHOME8 no 11924 06/03/20 22:09:37 60:00 8604 3144 ims 3587080982063727 310410214827503 APPLE ITHOME8 11925 06/03/20 22:23:29 0:34 288 48nxtgonpho 3587080982063727 310410214827503 APPLE ITHOME8 no 11926 06/03/20 22:23:30 0:34 48 Onxtgonpho 3587080982063727 310410214827503 APPLE ITHOME8 no 11927 06/03/20 22:24:03 60:00 187528 117996ruagonpho 3587080982063727 310410214827503 APPLE ITHOME8 no 11928 06/03/20 23:09:37 60:00 8836 3160 ims 3587080982063727 310410214827503 APPLE ITHOME8 11929 06/03/20 23:24:03 60:00 44474 24371ruftgonpho 3587080982063727 310410214827503 APPLE ITHOME8 no 11930 06/04/20 00:09:37 60:00 10144 3176 ims 3587080982063727 310410214827503 APPLE ITHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 485 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003129 The information contained her is NeTniliAL not for general distribution. EFTA 00117205 EFTA01251729 MOBILITY AMINO 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run pato: 06/17/2020 Run Time: 10:56:58 Data Usage Tor: Tee Conn. Conn. originating TT Bytes Bytes Ann INDI INSI MAKE MODEL Date Time Number Up Dn (UTC) 11931 06/04/20 00:24:03 60:00 1976 5865 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11932 06/04/20 01:09:37 60:00 6956 2680 imp 3587080982063727 310410214827503 APPLE !PHONES 11933 06/04/20 01:24:03 23:49 35215 21990 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11934 06/04/20 01:47:52 60:00 58507 36707 nxtgonpho 3587080982063727 310410214827503 APPLE IPH01428 no 11935 06/04/20 02:09:37 60:00 18640 6280 imp 3587080982063727 310410214827503 APPLE IPH01428 11936 06/04/20 02:47:52 60:00 7541 1994 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 11937 06/04/20 03:09:37 60:00 6848 2896 imp 3587080982063727 310410214827503 APPLE !PHONES 11938 06/04/20 03:47:52 60:00 2284 3777 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11939 06/04/20 04:09:37 60:00 8604 2928 imp 3587080982063727 310410214827503 APPLE !PHONES 11940 06/04/20 04:47:52 60:00 1670 1785 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11941 06/04/20 05:09:37 60:00 8388 2928 moo 3587080982063727 310410214827503 APPLE IPHONE8 11942 06/04/20 05:47:52 60:00 1651 1575 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11943 06/04/20 06:09:37 60:00 11920 4144 moo 3587080982063727 310410214827503 APPLE 'PHONES 11944 06/04/20 06:47:52 60:00 1092 1155 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11945 06/04/20 07:09:37 60:00 11920 4412 ins 3587080982063727 310410214827503 APPLE !PHONES 11946 06/04/20 07:47:52 60:00 450 420 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11947 06/04/20 08:09:37 60:00 6848 2680 imp 3587080982063727 310410214827503 APPLE !PHONES 11948 06/04/20 08:47:52 60:00 514 525 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11949 06/04/20 09:09:37 60:00 11920 4592 imp 3587080982063727 310410214827503 APPLE IPHONE8 11950 06/04/20 09:47:52 60:00 3251 576 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11951 06/04/20 10:09:37 60:00 6848 2680 imp 3587080982063727 310410214827503 APPLE IPHONE8 11952 06/04/20 10:47:52 60:00 42253 3025 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11953 06/04/20 11:09:37 38:20 3424 1340 imp 3587080982063727 310410214827503 APPLE IPHONE8 11954 06/04/20 11:47:52 24:27 10549 17309 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONE8 no 11955 06/04/20 11:47:57 7:10 195712 2208 imp 3587080982063727 310410214827503 APPLE IPHONE8 11956 06/04/20 11:47:57 7:10 7524 2208 ins 3587080982063727 310410214827503 APPLE !PHONES 11957 06/04/20 11:55:07 18:31 3532 1340 into 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 486 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003130 The information contained hereCtoNelt NsTroliAL not for general distribution. EFTA 00117206 EFTA01251730 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ....7s,„ •- `' .0 AT&T arc. Run Date: 06/17/2020 Run Time: Data Osage for: Item Conn. Conn. Originating ET Bytes Bytes Apn IX= IMSI NUM MODEL Date Time Number UP Dn (OTC) 11958 06/04/20 12:12:18 2:04 288 48 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11959 06/04/20 12:12:19 2:04 48 Oruftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11960 06/04/20 12:13:36 0:46 6471 7525 ins 3587080982063727 310410214827503 APPLE IPHOME8 11961 06/04/20 12:13:37 0:46 7525 6207 ins 3587080982063727 310410214827503 APPLE IPHOME8 11962 06/04/20 12:14:23 52:50 19803 32618ruftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11963 06/04/20 12:14:24 2:22 6683 5919 ins 3587080982063727 310410214827503 APPLE IPHOME8 11964 06/04/20 12:16:46 51:41 11920 4344 ins 3587080982063727 310410214827503 APPLE IPHOME8 11965 06/04/20 13:07:12 0:45 288 48nxtgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11966 06/04/20 13:07:14 0:44 48 Oruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11967 06/04/20 13:07:59 60:00 90315 877381ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11968 06/04/20 13:08:27 4:47 2736 1536 ins 3587080982063727 310410214827503 APPLE IPHOME8 11969 06/04/20 13:08:27 4:47 2736 1448 ins 3587080982063727 310410214827503 APPLE IPHOME8 11970 06/04/20 13:13:14 0:29 3208 1216 ins 3587080982063727 310410214827503 APPLE IPHOME8 11971 06/04/20 13:13:43 2:34 2752 1412 ins 3587080982063727 310410214827503 APPLE IPHOME8 11972 06/04/20 13:13:43 2:34 2752 1324 ins 3587080982063727 310410214827503 APPLE IPHOME8 11973 06/04/20 13:16:17 1:51 3532 1340 ins 3587080982063727 310410214827503 APPLE IPHOME8 11974 06/04/20 13:18:08 20:43 2644 1412 ins 3587080982063727 310410214827503 APPLE IPHOME8 11975 06/04/20 13:18:08 20:43 2644 1324 ins 3587080982063727 310410214827503 APPLE IPHOME8 11976 06/04/20 13:38:51 1:46 3424 1324 ins 3587080982063727 310410214827503 APPLE IPHOME8 11977 06/04/20 13:40:37 4:42 3500 2412 ins 3587080982063727 310410214827503 APPLE IPHOME8 11978 06/04/20 13:40:37 4:42 3500 2324 ins 3587080982063727 310410214827503 APPLE IPHOME8 11979 06/04/20 13:45:19 2:47 3424 1324 ins 3587080982063727 310410214827503 APPLE IPHOME8 11980 06/04/20 13:48:06 2:08 3952 1536 ins 3587080982063727 310410214827503 APPLE IPHOME8 11981 06/04/20 13:48:06 2:08 3952 1448 ins 3587080982063727 310410214827503 APPLE IPHOME8 11982 06/04/20 13:50:14 60:00 29360 13004 ins 3587080982063727 310410214827503 APPLE IPHOME8 11983 06/04/20 14:07:59 46:54 11593 1675nxtgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11984 06/04/20 14:30:02 1:48 273405 246324 ins 3587080982063727 310410214827503 APPLE IPHOME8 11985 06/04/20 14:50:14 60:00 8496 3004 ins 3587080982063727 310410214827503 APPLE IPHOME8 11986 06/04/20 14:54:53 1:41 288 48ruftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 11987 06/04/20 14:54:54 1:41 48 Oruftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 487 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003131 The information contained hereCtoNyFti N:FoleikE not for general distribution. EFTA 00/17207 EFTA01251731 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in tt ni‘S g° air/ AT&T UTC. Run Data: 06/17/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn INEI INBI NAME MODEL Data Time Number Up Dn (UTC) 11988 06/04/20 14:56:35 60:00 162860 104092 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 11989 06/04/20 15:50:14 60:00 8496 2896 inn 3587080982063727 310410214827503 APPLE IPHONEB 11990 06/04/20 15:56:35 60:00 53947 4385 nxtgonpho 3587080982063727 310410214827503 APPLE !PROMS no 11991 06/04/20 16:50:14 60:00 16776 6092 inn 3587080982063727 310410214827503 APPLE IPHONEB 11992 06/04/20 16:56:35 60:00 1944 6715 nxtgonpho 3587080982063727 310410214827503 APPLE 1PROME8 no 11993 06/04/20 17:50:14 51:35 5396 1680 inn 3587080982063727 310410214827503 APPLE DRONES 11994 06/04/20 17:56:35 60:00 35568 39441 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 11995 06/04/20 18:41:49 1:00 60184 2412 inn 3587080982063727 310410214827503 APPLE DRONES 11996 06/04/20 18:41:49 1:00 3484 2324 inn 3587080982063727 310410214827503 APPLE DRONES 11997 06/04/20 18:42:49 60:00 15680 5072 inn 3587080982063727 310410214827503 APPLE DRONES 11998 06/04/20 18:56:35 60:00 10263 5883natgonpho 3587080982063727 310410214827503 APPLE DRONES no 11999 06/04/20 19:42:49 60:00 8496 3020 inn 3587080982063727 310410214827503 APPLE !PHONES 12000 06/04/20 19:56:35 60:00 8052 6043 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12001 06/04/20 20:42:49 39:08 5072 1572 inn 3587080982063727 310410214827503 APPLE !PHONES 12002 06/04/20 20:56:35 60:00 4093 1356natgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12003 06/04/20 21:21:57 0:26 2644 1412 inn 3587080982063727 310410214827503 APPLE !PHONES 12004 06/04/20 21:21:57 0:26 2644 1324 inn 3587080982063727 310410214827503 APPLE DRONES 12005 06/04/20 21:22:23 60:00 15000 4716 inn 3587080982063727 310410214827503 APPLE DRONES 12006 06/04/20 21:56:35 39:14 5719913 14280470natgonpho 3587080982063727 310410214827503 APPLE DRONES no 12007 06/04/20 22:22:23 12:02 0 0 inn 3587080982063727 310410214827503 APPLE DRONES 12008 06/04/20 22:34:25 2:40 90252 2696 inn 3587080982063727 310410214827503 APPLE DRONES 12009 06/04/20 22:34:25 2:40 5240 2608 inn 3587080982063727 310410214827503 APPLE DRONES 12010 06/04/20 22:35:49 1:46 1831454 6936581 nxtgonpho 3587080982063727 310410214827503 APPLE DRONES no 12011 06/04/20 22:37:05 0:31 17188 5524 inn 3587080982063727 310410214827503 APPLE !PHONES 12012 06/04/20 22:47:30 60:00 123438 507848 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12013 06/04/20 22:47:33 1:23 6667 5982 inn 3587080982063727 310410214827503 APPLE DRONES 12014 06/04/20 22:48:56 60:00 11920 4328 inn 3587080982063727 310410214827503 APPLE DRONES 12015 06/04/20 23:47:30 60:00 872 735natgonpho 3587080982063727 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 488 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003132 The information contained her is PIETIAL not for general distribution. EFTA 00/17208 EFTA01251732 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Onto: 06/17/2020 Run Time: 18:56:58 Data Osage Tor: Item Conn. Conn. originating ET Bytes Bytes Apn IKEI INSI MAKE NICOLL Date Time Number Up Dn (OTC) 12016 06/04/20 23:48:56 60:00 8604 2896 in 3587080982063727 310410214827503 APPLE !PHONES 12017 06/05/20 00:47:30 0:31 0 Onxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12018 06/05/20 00:48:02 60:00 155415 89338mtgonpho 3587080982063727 310410214827503 APPLE !PRIMES no 12019 06/05/20 00:48:56 60:00 8388 2896 in 3587080982063727 310410214827503 APPLE 1PRONE8 12020 06/05/20 01:48:02 60:00 12724 8711rtxtgonpho 3587080982063727 310410214827503 APPLE 1PRONE8 no 12021 06/05/20 01:48:56 60:00 11920 4112 ins 3587080982063727 310410214827503 APPLE DRONES 12022 06/05/20 02:48:02 60:00 969 735ruftgonpho 3587080982063727 310410214827503 APPLE DRONES no 12023 06/05/20 02:48:56 60:00 6956 2540 ins 3587080982063727 310410214827503 APPLE !PRIMES 12024 06/05/20 03:48:02 15:20 173 105mtgonpho 3587080982063727 310410214827503 APPLE !PRIMES no 12025 06/05/20 03:48:56 60:00 13352 4860 ins 3587080982063727 310410214827503 APPLE !PRIMES 12026 06/05/20 04:03:21 0:46 288 48ruagonpho 3587080982063727 310410214827503 APPLE 1PRONE8 no 12027 06/05/20 04:03:22 0:46 48 Onxtgonpho 3587080982063727 310410214827503 APPLE DRONES no 12028 06/05/20 04:04:08 60:00 7363 6195mtgonpho 3587080982063727 310410214827503 APPLE DRONES no 12029 06/05/20 04:48:56 60:00 13568 4576 imp 3587080982063727 310410214827503 APPLE 1PRONE8 12030 06/05/20 05:04:08 60:00 635 525ruftgonpho 3587080982063727 310410214827503 APPLE !PRIMES no 12031 06/05/20 05:48:56 60:00 11256 3268 ins 3587080982063727 310410214827503 APPLE !PRIMES 12032 06/05/20 06:04:08 60:00 687 630ruftgonpho 3587080982063727 310410214827503 APPLE !PRIMES no 12033 06/05/20 06:48:56 60:00 6956 2664 ins 3587080982063727 310410214827503 APPLE DRONES 12034 06/05/20 07:04:08 60:00 635 525mtgonpho 3587080982063727 310410214827503 APPLE DRONES no 12035 06/05/20 07:48:56 60:00 8496 3004 ins 3587080982063727 310410214827503 APPLE DRONES 12036 06/05/20 08:04:08 60:00 635 525mtgonpho 3587080982063727 310410214827503 APPLE DRONES no 12037 06/05/20 08:48:56 60:00 13696 5364 ins 3587080982063727 310410214827503 APPLE !PRIMES 12038 06/05/20 09:04:08 60:00 751 735mtgonpho 3587080982063727 310410214827503 APPLE !PRIMES no 12039 06/05/20 09:48:56 60:00 8712 3220 ins 3587080982063727 310410214827503 APPLE !PRIMES 12040 06/05/20 10:04:08 60:00 578 630mtgonpho 3587080982063727 310410214827503 APPLE 1PRONE8 no 12041 06/05/20 10:48:56 60:00 6848 2648 ins 3587080982063727 310410214827503 APPLE !PRIMES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 489 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003133 The information contained hereCtoNe Nei-4AL not for general distribution. EF-EAJVII7209 EFTA01251733 MOBILITY 41111P 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: Data Usage For: NM= Item Conn. Conn. originating ET Bytes Bytom Apn INEI IMBI MAKE MODEL Date Time Number Up Dn (UTC) 12042 06/05/20 11:04:08 60:00 398 315 nxtgonpho 3587080982063727 310410214827503 APPLE !PROMS no 12043 06/05/20 11:48:56 60:00 8604 3252 imp 3587080982063727 310410214827503 APPLE !PROMS 12044 06/05/20 12:04:08 60:00 6730 5064 nxtgonpho 3587080982063727 310410214827503 APPLE !PROMS no 12045 06/05/20 12:48:56 60:00 6832 2648 imp 3587080982063727 310410214827503 APPLE !PROMS 12046 06/05/20 13:04:08 60:00 450 420 nxtgonpho 3587080982063727 310410214827503 APPLE !PROMS no 12047 06/05/20 13:48:56 60:00 15684 6940 imp 3587080982063727 310410214827503 APPLE !PROMS 12048 06/05/20 14:04:08 60:00 450 420 nxtgonpho 3587080982063727 310410214827503 APPLE !PROMS no 12049 06/05/20 14:48:56 60:00 6848 2648 imp 3587080982063727 310410214827503 APPLE !PROMS 12050 06/05/20 15:04:08 60:00 659 4452 nxtgonpho 3587080982063727 310410214827503 APPLE !PROMS no 12051 06/05/20 15:48:56 60:00 8496 2896 imp 3587080982063727 310410214827503 APPLE !PROMS 12052 06/05/20 16:04:08 60:00 3372 472 nxtgonpho 3587080982063727 310410214827503 APPLE !PROMS no 12053 06/05/20 16:48:56 60:00 8496 2896 imp 3587080982063727 310410214827503 APPLE !PROMS 12054 06/05/20 17:04:08 15:22 0 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PROMS no 12055 06/05/20 17:19:30 60:00 35972 24529 nxtgonpho 3587080982063727 310410214827503 APPLE !PROMS no 12056 06/05/20 17:48:56 60:00 8604 3128 imp 3587080982063727 310410214827503 APPLE !PROMS 12057 06/05/20 18:19:30 60:00 3536 682 nxtgonpho 3587080982063727 310410214827503 APPLE !PROMS no 12058 06/05/20 18:48:56 60:00 41944 22316 imp 3587080982063727 310410214827503 APPLE !PROMS 12059 06/05/20 19:19:30 60:00 6492 17785 nxtgonpho 3587080982063727 310410214827503 APPLE !PROMS no 12060 06/05/20 19:33:43 0:22 0 320 imp 3587080982063727 310410214827503 APPLE IPROME8 12061 06/05/20 19:34:13 0:24 0 320 imp 3587080982063727 310410214827503 APPLE IPROME8 12062 06/05/20 19:48:56 60:00 40528 31092 imp 3587080982063727 310410214827503 APPLE IPROME8 12063 06/05/20 20:19:30 60:00 3424 577 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12064 06/05/20 20:45:10 0:33 3038 17869 1ms 3587080982063727 310410214827503 APPLE IPROME8 12065 06/05/20 20:46:07 0:33 3750 20453 1ms 3587080982063727 310410214827503 APPLE IPROME8 12066 06/05/20 20:48:56 60:00 7172 2988 Imp 3587080982063727 310410214827503 APPLE 'PHONES 12067 06/05/20 21:19:30 60:00 1012 4808 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12068 06/05/20 21:48:56 58:49 13568 4592 isms 3587080982063727 310410214827503 APPLE !PROMS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 490 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003134 The information contained her is NsTroliAL not for general distribution. EFTA 00/17210 EFTA01251734 MOBILITY 41.1, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating LT Bytes Byte. Rpn INDI IMPI MUM MODEL Date Time Number UP On (UTC) 12069 06/05/20 22:19:30 60:00 1220 687 nxtgonpho 3587080982063727 310410214827503 APPLE !PROMS no 12070 06/05/20 22:47:45 2:43 118304 1412 imp 3587080982063727 310410214827503 APPLE 1101(01428 12071 06/05/20 22:47:45 2:43 2752 1324 imp 3587080982063727 310410214827503 APPLE 1101(01428 12072 06/05/20 22:50:28 60:00 11044 4344 ins 3587080982063727 310410214827503 APPLE 1101(01428 12073 06/05/20 23:19:30 60:00 462 420 nxtgonpho 3587080982063727 310410214827503 APPLE 1101(01428 no 12074 06/05/20 23:50:28 60:00 15232 5108 imp 3587080982063727 310410214827503 APPLE 1101(01428 12075 06/06/20 00:19:30 60:00 711 4833 nxtgonpho 3587080982063727 310410214827503 APPLE 1101(01428 no 12076 06/06/20 00:50:28 60:00 15324 4840 yes 3587080982063727 310410214827503 APPLE 1101(01428 12077 06/06/20 01:19:30 60:00 32521 22185 nxtgonpho 3587080982063727 310410214827503 APPLE 1101(01428 no 12078 06/06/20 01:50:28 60:00 6848 2540 as 3587080982063727 310410214827503 APPLE 1101(01428 12079 06/06/20 02:19:30 60:00 6756 5215 nxtgonpho 3587080982063727 310410214827503 APPLE 1101(01428 no 12080 06/06/20 02:50:28 1:24 0 0 as 3587080982063727 310410214827503 APPLE !PROMS 12081 06/06/20 02:51:52 6:21 13120 1536 las 3587080982063727 310410214827503 APPLE !PROMS 12082 06/06/20 02:51:52 6:21 3376 1448 ins 3587080982063727 310410214827503 APPLE IPM01428 12083 06/06/20 02:58:13 60:00 14876 4716 imp 3587080982063727 310410214827503 APPLE IPM01428 12084 06/06/20 03:19:30 60:00 3718 682 nxtgonpho 3587080982063727 310410214827503 APPLE IPM01428 no 12085 06/06/20 03:58:13 60:00 8388 2896 imp 3587080982063727 310410214827503 APPLE IPM01428 12086 06/06/20 04:19:30 60:00 872 735 nxtgonpho 3587080982063727 310410214827503 APPLE !PROMS no 12087 06/06/20 04:58:13 60:00 9928 3144 imp 3587080982063727 310410214827503 APPLE !PROMS 12088 06/06/20 05:19:30 60:00 867 945 nxtgonpho 3587080982063727 310410214827503 APPLE !PROMS no 12089 06/06/20 05:58:13 60:00 15344 6044 imp 3587080982063727 310410214827503 APPLE !PROMS 12090 06/06/20 06:19:30 60:00 908 1120 nxtgonpho 3587080982063727 310410214827503 APPLE !PROMS no 12091 06/06/20 06:58:13 60:00 8496 2896 imp 3587080982063727 310410214827503 APPLE !PROMS 12092 06/06/20 07:19:30 60:00 635 525 nxtgonpho 3587080982063727 310410214827503 APPLE IPM01428 no 12093 06/06/20 07:58:13 60:00 8604 3004 imp 3587080982063727 310410214827503 APPLE IPM01428 12094 06/06/20 08:19:30 60:00 346 210 nxtgonpho 3587080982063727 310410214827503 APPLE IPM01428 no 12095 06/06/20 08:58:13 60:00 10380 4204 imp 3587080982063727 310410214827503 APPLE IPM01428 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 491 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003135 The information contained her is NTniliAL not for general distribution. EF-EA_00117211 EFTA01251735 MOBILITY 41111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in te ‘mse r : 1 10 AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytom Apn IMEI DWI MARL MODEL Date Time Number Up On (UTC) 12096 06/06/20 09:19:30 60:00 519 315 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12097 06/06/20 09:58:13 60:00 8496 2896 imp 3587080982063727 310410214827503 APPLE !PRONGS 12098 06/06/20 10:19:30 60:00 578 630ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12099 06/06/20 10:58:13 60:00 12152 4520 imp 3587080982063727 310410214827503 APPLE !PHONES 12100 06/06/20 11:19:30 47:23 16469 13411ruMmonpho 3587080982063727 310410214827503 APPLE !PHONES no 12101 06/06/20 11:58:13 60:00 7080 2988 imp 3587080982063727 310410214827503 APPLE !PHONES 12102 06/06/20 12:06:53 60:00 6834 5371 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12103 06/06/20 12:58:13 60:00 8496 2896 imp 3587080982063727 310410214827503 APPLE !PHONES 12104 06/06/20 13:06:53 60:00 35211 18104roftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12105 06/06/20 13:58:13 60:00 12028 4328 imp 3587080982063727 310410214827503 APPLE !PHONES 12106 06/06/20 14:06:53 60:00 1126 5579ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12107 06/06/20 14:58:13 60:00 8388 2896 imp 3587080982063727 310410214827503 APPLE !PHONES 12108 06/06/20 15:06:53 60:00 3922 4868ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12109 06/06/20 15:58:13 60:00 13676 4892 imp 3587080982063727 310410214827503 APPLE !PHONES 12110 06/06/20 16:06:53 60:00 462 420ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12111 06/06/20 16:58:13 60:00 8496 3004 imp 3587080982063727 310410214827503 APPLE !PHONES 12112 06/06/20 17:06:53 60:00 1012 5048ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12113 06/06/20 17:58:13 13:19 4964 1572 imp 3587080982063727 310410214827503 APPLE !PHONES 12114 06/06/20 18:06:53 60:00 14636 14580ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12115 06/06/20 18:11:32 3:46 2644 1324 imp 3587080982063727 310410214827503 APPLE !PHONES 12116 06/06/20 18:11:32 3:47 13456 1412 imp 3587080982063727 310410214827503 APPLE !PHONES 12117 06/06/20 18:15:18 60:00 12028 4328 imp 3587080982063727 310410214827503 APPLE !PHONES 12118 06/06/20 19:06:53 60:00 13602 14022 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12119 06/06/20 19:15:18 60:00 8604 3020 imp 3587080982063727 310410214827503 APPLE !PHONES 12120 06/06/20 20:06:53 60:00 867 945 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12121 06/06/20 20:15:18 60:00 8388 3004 imp 3587080982063727 310410214827503 APPLE !PHONES 12122 06/06/20 21:06:53 60:00 4045 10186ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 492 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003136 The information contained heraCtopelt NTrifikE not for general distribution. EF-EAJVII7212 EFTA01251736 MOBILITY del 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: 16:56:58 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn IX= IMSI NUM MODEL Date Time Number Up Dn (UTC) 12123 06/06/20 21:15:18 60:00 17224 6108 in 3587080982063727 310410214827503 APPLE !PHONES 12124 06/06/20 22:06:53 40:49 173 105 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12125 06/06/20 22:15:18 19:10 0 0 in 3587080982063727 310410214827503 APPLE !PHONES 12126 06/06/20 22:34:28 0:02 0 0 in 3587080982063727 310410214827503 APPLE !PHONES 12127 06/06/20 22:34:28 0:02 0 0 in 3587080982063727 310410214827503 APPLE !PHONES 12128 06/06/20 22:34:36 6:42 20846 19472 in 3587080982063727 310410214827503 APPLE !PHONES 12129 06/06/20 22:40:48 0:30 979 3143 ims 3587080982063727 310410214827503 APPLE !PHONES 12130 06/06/20 22:41:18 3:19 19216 12680 imp 3587080982063727 310410214827503 APPLE !PHONES 12131 06/06/20 22:41:18 3:19 17772 12680 imp 3587080982063727 310410214827503 APPLE !PHONES 12132 06/06/20 22:41:18 1:03 209603 84563 in 3587080982063727 310410214827503 APPLE !PHONES 12133 06/06/20 22:41:18 1:03 209603 84563 in 3587080982063727 310410214827503 APPLE !PHONES 12134 06/06/20 22:43:39 0:58 174366 84571 ims 3587080982063727 310410214827503 APPLE !PHONES 12135 06/06/20 22:43:39 0:58 174366 84571 ims 3587080982063727 310410214827503 APPLE !PHONES 12136 06/06/20 22:44:37 2:40 407479 313778 imp 3587080982063727 310410214827503 APPLE !PHONES 12137 06/06/20 22:44:37 2:45 23520 12096 imp 3587080982063727 310410214827503 APPLE !PHONES 12138 06/06/20 22:47:33 60:00 20211 9806 imp -1 310410214827503 12139 06/06/20 22:47:41 8:26 5065 6246 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12140 06/06/20 22:47:43 8:25 6246 4777 nxtgonpho 3587080982063727 310410214827503 APPLE !PRONGS no 12141 06/06/20 22:56:08 60:00 8145 11569 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12142 06/06/20 23:47:33 60:00 6924 2648 ims -1 310410214827503 12143 06/06/20 23:56:08 60:00 1347 1262 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12144 06/07/20 00:47:33 60:00 10084 3036 imp -1 310410214827503 12145 06/07/20 00:56:08 60:00 808 630 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12146 06/07/20 01:47:33 60:00 12244 4452 imp -1 310410214827503 12147 06/07/20 01:56:08 60:00 692 420 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12148 06/07/20 02:47:33 60:00 13584 4644 lam -1 310410214827503 12149 06/07/20 02:56:08 60:00 692 420 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12150 06/07/20 03:47:33 60:00 8728 2804 imp -1 310410214827503 12151 06/07/20 03:56:08 60:00 865 525 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12152 06/07/20 04:47:33 60:00 9960 3036 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 493 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003137 The information contained heraleeNyFti NTniliAL not for general distribution. EFTA 00117213 EFTA01251737 MOBILITY • 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: 18:54:59 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytom Apn IIBI IM3I MAIM MOOTS Date Time Humber Up Dn (UTC) 12153 06/07/20 04:56:08 60:00 699 630 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12154 06/07/20 05:47:33 60:00 13368 4468 imp -1 310410214827503 12155 06/07/20 05:56:08 60:00 865 525 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12156 06/07/20 06:47:33 60:00 7264 2772 imp -1 310410214827503 12157 06/07/20 06:56:08 60:00 751 735 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12158 06/07/20 07:47:33 60:00 13476 4644 ins -1 310410214827503 12159 06/07/20 07:56:08 60:00 635 525 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12160 06/07/20 08:47:33 60:00 10068 3144 imp -1 310410214827503 12161 06/07/20 08:56:08 60:00 519 315 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12162 06/07/20 09:47:33 60:00 11904 4436 imp -1 310410214827503 12163 06/07/20 09:56:08 60:00 519 315 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12164 06/07/20 10:47:33 60:00 9960 3036 imp -1 310410214827503 12165 06/07/20 10:56:08 60:00 5502 7165 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12166 06/07/20 11:47:33 60:00 6924 2988 imp -1 310410214827503 12167 06/07/20 11:56:08 25:31 3199 471 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12168 06/07/20 12:21:39 60:00 10267 5332 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12169 06/07/20 12:47:33 60:00 14816 4876 imp -1 310410214827503 12170 06/07/20 13:21:39 60:00 763 735natgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12171 06/07/20 13:47:33 60:00 13368 4360 imp -1 310410214827503 12172 06/07/20 14:21:39 60:00 42891 28310 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12173 06/07/20 14:47:33 60:00 8496 2896 imp -1 310410214827503 12174 06/07/20 15:21:39 60:00 3488 682 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12175 06/07/20 15:47:33 60:00 8604 2896 imp -1 310410214827503 12176 06/07/20 16:21:39 16:38 75874 50048 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12177 06/07/20 16:38:16 1:49 288 48nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 494 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGO0003138 The information contained her is PsiTniliAL not for general distribution. EFTA 00117214 EFTA01251738 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Oato: 06/17/2020 Run Time: Data Osage for: Item Conn. Conn. Originating ET Bytes Bytom Apn IKE I INSI MAKE MODEL Date Time Number Up Dn (OTC) 12178 06/07/20 16:38:17 1:49 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12179 06/07/20 16:40:06 2:35 48 Oruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12180 06/07/20 16:42:40 0:41 5065 6246ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12181 06/07/20 16:42:41 0:41 6246 4777ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12182 06/07/20 16:43:22 60:00 28254 16020 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12183 06/07/20 16:47:33 60:00 10176 3252 ins -1 310410214827503 12184 06/07/20 17:43:22 60:00 364517 42816ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12185 06/07/20 17:47:33 60:00 18688 6356 ins -1 310410214827503 12186 06/07/20 18:43:22 60:00 981 735ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12187 06/07/20 18:47:33 60:00 8712 3112 ins -1 310410214827503 12188 06/07/20 19:43:22 60:00 924 840ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12189 06/07/20 19:47:33 60:00 7048 2772 ins -1 310410214827503 12190 06/07/20 20:43:22 60:00 6110 8869 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12191 06/07/20 20:47:33 60:00 10068 4020 ins -1 310410214827503 12192 06/07/20 21:43:22 60:00 79051 47955ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12193 06/07/20 21:47:33 60:00 8496 2896 ism -1 310410214827503 12194 06/07/20 22:43:22 13:06 34981 20953ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12195 06/07/20 22:47:33 60:00 13584 4644 ins -1 310410214827503 12196 06/07/20 22:56:29 48:56 35786 37486ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12197 06/07/20 23:45:24 0:43 288 48ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12198 06/07/20 23:45:25 0:43 48 Oruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12199 06/07/20 23:46:08 60:00 52762 20554ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12200 06/07/20 23:47:33 60:00 10008 4080 ins -1 310410214827503 12201 06/08/20 00:46:08 60:00 867 945ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 495 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00003139 The information contained her is NsToliAL not for general distribution. EFTA 00117215 EFTA01251739 MOBILITY 41.1 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T UTC. Run pato: 06/17/2020 Run Time: 10:44:59 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn IKE I ISIS I MAfl NICOLL Date Time Number Up Dn (UTC) 12202 06/08/20 00:47:33 60:00 10284 3252 imo -1 310410214827503 12203 06/08/20 01:46:08 60:00 746 1106 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12204 06/08/20 01:47:33 60:00 8496 3020 imo -1 310410214827503 12205 06/08/20 02:46:08 60:00 6780 7607 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12206 06/08/20 02:47:33 60:00 10176 3144 imo -1 310410214827503 12207 06/08/20 03:46:08 60:00 25665 16313 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12208 06/08/20 03:47:33 60:00 10332 4056 ims -1 310410214827503 12209 06/08/20 04:46:08 60:00 9060 7108 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12210 06/08/20 04:47:33 60:00 12012 4560 ims -1 310410214827503 12211 06/08/20 05:46:08 60:00 18026 13171 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12212 06/08/20 05:47:33 60:00 6924 2648 ims -1 310410214827503 12213 06/08/20 06:46:08 60:00 7047 6226 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12214 06/08/20 06:47:33 60:00 8496 3004 ims -1 310410214827503 12215 06/08/20 07:46:08 60:00 7818 8164 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12216 06/08/20 07:47:33 60:00 10332 3972 ims -1 310410214827503 12217 06/08/20 08:46:08 60:00 9845 7517 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12218 06/08/20 08:47:33 60:00 12012 4504 ims -1 310410214827503 12219 06/08/20 09:46:08 60:00 8976 8696 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12220 06/08/20 09:47:33 60:00 8388 2788 ims -1 310410214827503 12221 06/08/20 10:46:08 60:00 995 840 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12222 06/08/20 10:47:33 60:00 6940 3524 ims -1 310410214827503 12223 06/08/20 11:46:08 60:00 793883 55327 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12224 06/08/20 11:47:33 60:00 11796 4328 ims -1 310410214827503 12225 06/08/20 12:46:08 60:00 50438 31769 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12226 06/08/20 12:47:33 3:06 0 0 ims -1 310410214827503 12227 06/08/20 12:54:20 6:06 7193 6158 ims 3587080982063727 310410214827503 APPLE IPMONE8 12228 06/08/20 13:00:26 60:00 13552 4684 ims 3587080982063727 310410214827503 APPLE IPMONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 496 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003140 The information contained heraleeNyFti NTniliAL not for general distribution. EFTA 00117216 EFTA01251740 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 1L:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: 18:56:59 Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn IMEI IMSI MUT MODEL Data Time Number Up Dn (OTC) 12229 06/08/20 13:46:08 60:00 17843 6938 nxtgenpho 3587080982063727 310410214827503 APPLE !PROMS no 12230 06/08/20 14:00:26 60:00 8712 3128 imp 3587080982063727 310410214827503 APPLE 'PHONES 12231 06/08/20 14:46:08 60:00 27331 86706ructgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12232 06/08/20 15:00:26 32:51 3424 1324 imp 3587080982063727 310410214827503 APPLE 'PHONES 12233 06/08/20 15:33:17 4:42 4076 2324 imp 3587080982063727 310410214827503 APPLE 'PHONES 12234 06/08/20 15:37:59 60:00 14076 7740 imp 3587080982063727 310410214827503 APPLE 'PHONES 12235 06/08/20 15:46:08 60:00 19087 9600ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12236 06/08/20 16:37:59 60:00 13676 4768 imp 3587080982063727 310410214827503 APPLE 'PHONES 12237 06/08/20 16:46:08 60:00 647969 594639ruagonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12238 06/08/20 17:37:59 3:23 0 0 imp 3587080982063727 310410214827503 APPLE 'PHONES 12239 06/08/20 17:41:22 2:08 2644 1324 imp 3587080982063727 310410214827503 APPLE 'PHONES 12240 06/08/20 17:43:30 0:22 3640 1448 imp 3587080982063727 310410214827503 APPLE 'PHONES 12241 06/08/20 17:43:52 2:18 2644 1324 imp 3587080982063727 310410214827503 APPLE 'PHONES 12242 06/08/20 17:46:08 60:00 4306491 5451466ruagonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12243 06/08/20 17:46:10 0:29 3424 1216 imp 3587080982063727 310410214827503 APPLE 'PHONES 12244 06/08/20 17:46:39 0:26 2644 1324 imp 3587080982063727 310410214827503 APPLE 'PHONES 12245 06/08/20 17:47:05 0:16 5072 1680 imp 3587080982063727 310410214827503 APPLE 'PHONES 12246 06/08/20 17:47:21 0:32 2644 1324 imp 3587080982063727 310410214827503 APPLE 'PHONES 12247 06/08/20 17:47:53 1:35 3424 1324 imp 3587080982063727 310410214827503 APPLE 'PHONES 12248 06/08/20 17:49:28 2:36 2644 1324 imp 3587080982063727 310410214827503 APPLE 'PHONES 12249 06/08/20 17:52:04 24:12 10036 3036 imp 3587080982063727 310410214827503 APPLE 'PHONES 12250 06/08/20 18:16:16 11:54 2644 1324 imp 3587080982063727 310410214827503 APPLE 'PHONES 12251 06/08/20 18:28:10 0:44 3532 1540 ins 3587080982063727 310410214827503 APPLE 'PHONES 12252 06/08/20 18:28:54 16:28 2644 1324 ins 3587080982063727 310410214827503 APPLE 'PHONES 12253 06/08/20 18:45:22 0:13 3316 1648 imp 3587080982063727 310410214827503 APPLE 'PHONES 12254 06/08/20 18:45:35 3:36 2876 1432 imp 3587080982063727 310410214827503 APPLE 'PHONES 12255 06/08/20 18:46:08 60:00 60107 19783 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12256 06/08/20 18:49:11 60:00 11796 4328 imp 3587080982063727 310410214827503 APPLE !PHONES 12257 06/08/20 19:46:08 60:00 12076 7056ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 12258 06/08/20 19:49:11 60:00 7080 2664 imp 3587080982063727 310410214827503 APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 497 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003141 The information contained heraCteNyFti not for general distribution. EFTA 00117217 EFTA01251741 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T UTC. Run Data: 06/17/2020 Run Time: 14:54:59 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytom Apn INEI IMSI MAKE MODEL Data Time Number Up Dn (UTC) 12259 06/08/20 20:46:08 60:00 1975 2926 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12260 06/08/20 20:49:11 60:00 6956 2756 ims 3587080982063727 310410214827503 APPLE !PHONES 12261 06/08/20 21:46:08 60:00 1379 1102 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12262 06/08/20 21:49:11 59:12 15684 6572 ims 3587080982063727 310410214827503 APPLE IPHOME8 12263 06/08/20 22:46:08 2:15 277 209ruftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 12264 06/08/20 22:48:55 60:00 279778 966831 nxtgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 12265 06/08/20 22:48:58 1:31 6673 5940 ims 3587080982063727 310410214827503 APPLE !PHONES 12266 06/08/20 22:50:29 0:27 3532 1340 ims 3587080982063727 310410214827503 APPLE IPHOME8 12267 06/08/20 22:50:56 0:15 2644 1340 ims 3587080982063727 310410214827503 APPLE IPHOME8 12268 06/08/20 22:51:11 60:00 12028 4608 ims 3587080982063727 310410214827503 APPLE IPHOME8 12269 06/08/20 23:48:55 60:00 860 735nxtgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 12270 06/08/20 23:51:11 60:00 8388 3128 ims 3587080982063727 310410214827503 APPLE IPHOME8 12271 06/09/20 00:48:55 60:00 20227 23698ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12272 06/09/20 00:51:11 60:00 10268 3408 ims 3587080982063727 310410214827503 APPLE !PHONES 12273 06/09/20 01:48:55 60:00 751 735ruftgonpho 3587080982063727 310410214827503 APPLE !PRONGS no 12274 06/09/20 01:51:11 60:00 8604 3036 ims 3587080982063727 310410214827503 APPLE !PHONES 12275 06/09/20 02:48:55 60:00 578 630nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12276 06/09/20 02:51:11 60:00 15668 6108 ims 3587080982063727 310410214827503 APPLE IPHOME8 12277 06/09/20 03:48:55 60:00 578 630ruftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 12278 06/09/20 03:51:11 60:00 7544 3820 ims 3587080982063727 310410214827503 APPLE IPHOME8 12279 06/09/20 04:48:55 60:00 828 867ruftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 12280 06/09/20 04:51:11 60:00 6848 2680 ims 3587080982063727 310410214827503 APPLE IPHOME8 12281 06/09/20 05:48:55 60:00 225 210ruftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 12282 06/09/20 05:51:11 60:00 7064 2804 ims 3587080982063727 310410214827503 APPLE IPHOME8 12283 06/09/20 06:48:55 60:00 289 315ruftgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 12284 06/09/20 06:51:11 60:00 11920 4500 ims 3587080982063727 310410214827503 APPLE !PHONES 12285 06/09/20 07:48:55 60:00 398 315ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 498 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003142 The information contained her is NTniliAL not for general distribution. EFTA 00117218 EFTA01251742 MOBILITY 4111. 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ``c,„„#est a. AT&T OTC. Run Data: 06/17/2020 Run Tama: Data Osage For: IIIIIIIIII Item Conn. Conn. Originating CT Bytes Bytes Apn INR1 ISIS I MAKE NICOLL Data Time Number Up Dn (UPC) 12286 06/09/20 07:51:11 60:00 7172 3020 imo 3587080982063727 310410214827503 APPLE !PHONES 12287 06/09/20 08:48:55 60:00 225 210 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12288 06/09/20 08:51:11 60:00 10488 4536 imp 3587080982063727 310410214827503 APPLE !PHONES 12289 06/09/20 09:48:55 60:00 277 262 nxtgonpho 3587080982063727 310410214827503 APPLE IPHO1428 no 12290 06/09/20 09:51:11 3:50 0 0 vas 3587080982063727 310410214827503 APPLE IPHO1428 12291 06/09/20 09:58:39 0:38 6675 5980 vas 3587080982063727 310410214827503 APPLE IPHO1428 12292 06/09/20 09:59:17 60:00 10720 4420 vas 3587080982063727 310410214827503 APPLE !PHONES 12293 06/09/20 10:48:55 60:00 341 367 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12294 06/09/20 10:59:17 60:00 8496 3128 imp 3587080982063727 310410214827503 APPLE !PHONES 12295 06/09/20 11:48:55 60:00 3074 262 nxtgonpho 3587080982063727 310410214827503 APPLE IPRONE8 no 12296 06/09/20 11:59:17 60:00 7172 3220 imp 3587080982063727 310410214827503 APPLE IPRONE8 12297 06/09/20 12:48:55 23:58 341 367 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12298 06/09/20 12:59:17 60:00 8388 3004 imp 3587080982063727 310410214827503 APPLE !PHONES 12299 06/09/20 13:12:53 11:46 98124 66778 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12300 06/09/20 13:24:39 60:00 7508 15117 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12301 06/09/20 13:59:17 52:10 15468 8244 imp 3587080982063727 310410214827503 APPLE !PHONES 12302 06/09/20 14:24:39 22:50 0 Ormtgonpho 3587080982063727 310410214827503 APPLE IPRONE8 no 12303 06/09/20 14:47:28 2:05 5064 6314 nxtgonpho 3587080982063727 310410214827503 APPLE IPRONE8 no 12304 06/09/20 14:47:29 2:05 6314 4776 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12305 06/09/20 14:49:34 3:11 280 581 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12306 06/09/20 14:51:33 10:30 8368 6156 imp -1 310410214827503 12307 06/09/20 14:52:44 0:37 5453 6094 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12308 06/09/20 14:52:46 0:35 6315 8165 imp 3587080982063727 310410214827503 APPLE !PHONES 12309 06/09/20 14:52:46 0:36 6094 5165 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12310 06/09/20 14:52:47 0:35 8097 6051 ins 3587080982063727 310410214827503 APPLE !PHONES 12311 06/09/20 14:53:22 44:46 2021706 2314792 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 499 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003143 The information contained heraleeNelt not for general distribution. NeTtAti EF-EA_00117219 EFTA01251743 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ...., ••—•°"" e0 AT&T arc. Run pato: 06/17/2020 Run Tina: 10:56:59 Data Osage Tor: Itea Conn. Conn. Originating ET Bytes Bytoa Apn INSI MARL NICOLL Date Time Number up Dn (OTC) 12312 06/09/20 14:53:24 2:22 0 0 ins 3587080982063727 310410214827503 APPLE IPRONE8 12313 06/09/20 14:55:55 0:00 0 0 ins 3587080982063727 310410214827503 APPLE IPRONE8 12314 06/09/20 14:56:10 0:37 10745 6428 imp 3587080982063727 310410214827503 APPLE IPRONE8 12315 06/09/20 14:56:47 33:26 17928 2804 imp 3587080982063727 310410214827503 APPLE IPRONE8 12316 06/09/20 14:56:47 33:26 5624 2804 imp 3587080982063727 310410214827503 APPLE IPRONE8 12317 06/09/20 15:30:13 60:00 10632 4236 imp 3587080982063727 310410214827503 APPLE IPMONEB 12318 06/09/20 15:38:07 0:32 5220 6314 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12319 06/09/20 15:38:09 0:31 6314 4932 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12320 06/09/20 15:38:40 60:00 45938 25244 nxtgonpho 3587080982063727 310410214827503 APPLE IPRONE8 no 12321 06/09/20 16:30:13 60:00 6848 2680 imp 3587080982063727 310410214827503 APPLE IPRONE8 12322 06/09/20 16:38:40 60:00 142769 4687229 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12323 06/09/20 17:30:13 60:00 8496 2928 imp 3587080982063727 310410214827503 APPLE !PHONES 12324 06/09/20 17:38:40 60:00 2367 875 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12325 06/09/20 18:30:13 60:00 8620 3052 imp 3587080982063727 310410214827503 APPLE IPMONEB 12326 06/09/20 18:38:40 60:00 180792 103730 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 12327 06/09/20 19:30:13 60:00 26512 13248 mug 3587080982063727 310410214827503 APPLE IPRONE8 12328 06/09/20 19:38:40 60:00 2079 3220 nxtgonpho 3587080982063727 310410214827503 APPLE IPRONE8 no 12329 06/09/20 20:00:47 2:23 372588 270899 imp 3587080982063727 310410214827503 APPLE IPRONE8 12330 06/09/20 20:30:13 60:00 15388 8752 imp 3587080982063727 310410214827503 APPLE IPRONE8 12331 06/09/20 20:38:40 60:00 51601 38466 nxtgonpho 3587080982063727 310410214827503 APPLE IPRONE8 no 12332 06/09/20 20:59:47 40:16 6008484 8878545 imp 3587080982063727 310410214827503 APPLE IPRONE8 12333 06/09/20 21:30:13 29:49 32156 20948 imp 3587080982063727 310410214827503 APPLE IPRONE8 12334 06/09/20 21:38:40 60:00 337102 301510 nxtgonpho 3587080982063727 310410214827503 APPLE IPRONE8 no 12335 06/09/20 21:45:27 0:43 6452 17206 imp 3587080982063727 310410214827503 APPLE IPRONE8 12336 06/09/20 21:46:22 0:19 1381 10147 imp 3587080982063727 310410214827503 APPLE IPRONE8 12337 06/09/20 22:00:02 0:44 179116 1712 imp 3587080982063727 310410214827503 APPLE IPRONE8 12338 06/09/20 22:00:02 0:44 4744 1712 imp 3587080982063727 310410214827503 APPLE IPRONE8 12339 06/09/20 22:00:46 1:09 3424 1340 imp 3587080982063727 310410214827503 APPLE IPRONE8 12340 06/09/20 22:01:55 0:43 2660 1340 imp 3587080982063727 310410214827503 APPLE IPRONE8 12341 06/09/20 22:01:55 0:43 2596 1340 imp 3587080982063727 310410214827503 APPLE IPRONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 500 AT&T does not retain records that can definitively show whether a transaction was PsisTiliAL customer initiated or AT&T's network initiated the data transaction. SDNYGM00003144 The information contained her is not for general distribution. EFTA 00/17220 EFTA01251744 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in .....,./AT&T %--s UTC. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Sytes Bytes kpn tiCOEL Data Time Rumbas UP Dn (UTC) 12342 06/09/20 22:02:38 32:47 8388 2928 imo 3587080982063727 310410214827503 APPLE !PHONES 12343 06/09/20 22:35:25 0:53 2660 1340 imo 3587080982063727 310410214827503 APPLE !PHONES 12344 06/09/20 22:35:25 0:53 2596 1340 imo 3587080982063727 310410214827503 APPLE !PHONES 12345 06/09/20 22:36:18 0:52 4840 1588 imo 3587080982063727 310410214827503 APPLE !PHONES 12346 06/09/20 22:37:10 13:39 2596 1340 imo 3587080982063727 310410214827503 APPLE !PHONES 12347 06/09/20 22:37:10 13:40 2660 1340 imo 3587080982063727 310410214827503 APPLE !PHONES 12348 06/09/20 22:38:40 40:24 125226 85387 matgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12349 06/09/20 22:50:49 60:00 35576 21760 imo 3587080982063727 310410214827503 APPLE !PHONES 12350 06/09/20 23:19:03 0:37 5285 6451 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12351 06/09/20 23:19:05 0:36 6451 4997 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12352 06/09/20 23:19:22 0:14 3297 14724 imo 3587080982063727 310410214827503 APPLE !PHONES 12353 06/09/20 23:19:38 0:10 1431 12839 imo 3587080982063727 310410214827503 APPLE !PHONES 12354 06/09/20 23:19:41 60:00 108959 73126 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12355 06/09/20 23:50:49 60:00 19884 11412 imo 3587080982063727 310410214827503 APPLE !PHONES 12356 06/09/20 23:58:54 0:08 2460 11189 imo 3587080982063727 310410214827503 APPLE !PHONES 12357 06/10/20 00:19:41 1:32 39417 20149 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12358 06/10/20 00:21:12 2:03 288 48 nxtgonpho 3587080982063727 310410214827503 APPLE IPROME8 no 12359 06/10/20 00:21:13 2:03 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE IPROME8 no 12360 06/10/20 00:23:15 3:45 7211 8328 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12361 06/10/20 00:23:16 3:45 8328 6923 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12362 06/10/20 00:27:01 2:48 78953 60993 nxtgonpho 3587080982063727 310410214827503 APPLE IPROME8 no 12363 06/10/20 00:29:48 24:08 7773 7645 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12364 06/10/20 00:29:49 24:08 7645 7485 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 12365 06/10/20 00:50:49 14:49 3424 1340 ins 3587080982063727 310410214827503 APPLE !PHONES 12366 06/10/20 00:53:57 3:57 48 0 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 12367 06/10/20 00:57:53 1:12 288 48 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 501 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003145 The information contained heraleeNyFtli Ns-EV& not for general distribution. EFTA 00117221 EFTA01251745 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Tina: Data Osage For: IiiiiIIIII Item Conn. Conn. Originating LT Bytes Byte. Apn INF' IMBI MARE MODEL Data Time Number Up On (OTC) 12368 06/10/20 00:57:55 1:11 48 0 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12369 06/10/20 00:59:06 28:09 91843 405897ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12370 06/10/20 01:05:38 4:36 149256 3496 imp 3587080982063727 310410214827503 APPLE 'PHONES 12371 06/10/20 01:05:38 4:36 6160 3496 imp 3587080982063727 310410214827503 APPLE !PHONES 12372 06/10/20 01:10:14 17:03 10176 8292 imp 3587080982063727 310410214827503 APPLE !PHONES 12373 06/10/20 01:30:49 8:06 298180 975215ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12374 06/10/20 01:30:51 6:57 6671 5904 imp 3587080982063727 310410214827503 APPLE !PHONES 12375 06/10/20 01:37:48 60:00 13568 4684 imp 3587080982063727 310410214827503 APPLE 'PHONES 12376 06/10/20 01:38:55 14:43 288 48ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12377 06/10/20 01:38:56 14:43 48 Oruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12378 06/10/20 01:53:39 5:39 8614 8797ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12379 06/10/20 01:59:18 60:00 15777 16256ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12380 06/10/20 02:37:48 60:00 8496 3112 imp 3587080982063727 310410214827503 APPLE 'PHONES 12381 06/10/20 02:59:18 60:00 687 630ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12382 06/10/20 03:37:48 60:00 7172 2756 imp 3587080982063727 310410214827503 APPLE 'PHONES 12383 06/10/20 03:59:18 60:00 578 630ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12384 06/10/20 04:37:48 60:00 14892 4824 imp 3587080982063727 310410214827503 APPLE 'PHONES 12385 06/10/20 04:59:18 60:00 289 315ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12386 06/10/20 05:37:48 60:00 13352 4752 imp 3587080982063727 310410214827503 APPLE 'PHONES 12387 06/10/20 05:59:18 60:00 462 420ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12388 06/10/20 06:37:48 60:00 6956 2648 imp 3587080982063727 310410214827503 APPLE !PHONES 12389 06/10/20 06:59:18 60:00 173 105ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12390 06/10/20 07:37:48 60:00 8388 3004 imp 3587080982063727 310410214827503 APPLE !PHONES 12391 06/10/20 07:59:18 60:00 346 210ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12392 06/10/20 08:37:48 60:00 6848 2864 imp 3587080982063727 310410214827503 APPLE !PHONES 12393 06/10/20 08:59:18 60:00 346 210ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 502 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003146 The information contained her is NTIAL not for general distribution. EFTA 00117222 EFTA01251746 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tra ‘"Ii° ed /. AT&T arc. Run Date: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Byte. Apn INEI pal NAZI HOD= Date Time Naar Up Dn (UTC) 12394 06/10/20 09:37:48 60:00 8496 3112 imo 3587080982063727 310410214827503 APPLE !PHONES 12395 06/10/20 09:59:18 60:00 792 910 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12396 06/10/20 10:37:48 60:00 14020 5596 imo 3587080982063727 310410214827503 APPLE IPRONE8 12397 06/10/20 10:59:18 53:48 73033 46330 nxtgonpho 3587080982063727 310410214827503 APPLE IPRONE8 no 12398 06/10/20 11:37:48 59:15 10036 3252 imo 3587080982063727 310410214827503 APPLE IPRONE8 12399 06/10/20 11:53:05 2:03 5221 6330 nxtgonpho 3587080982063727 310410214827503 APPLE IPRONE8 no 12400 06/10/20 11:53:06 2:03 6330 4933 nxtgonpho 3587080982063727 310410214827503 APPLE IPRONE8 no 12401 06/10/20 11:55:09 60:00 6915 5746 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12402 06/10/20 12:37:03 2:44 3376 1448 ins 3587080982063727 310410214827503 APPLE DRONES 12403 06/10/20 12:39:47 60:00 15000 4716 ins 3587080982063727 310410214827503 APPLE DRONES 12404 06/10/20 12:55:09 56:15 1071 5832 nxtgonpho 3587080982063727 310410214827503 APPLE DRONES no 12405 06/10/20 13:39:47 60:00 8496 2896 imp 3587080982063727 310410214827503 APPLE DRONES 12406 06/10/20 13:51:23 2:04 5062 6328 nxtgonpho 3587080982063727 310410214827503 APPLE DRONES no 12407 06/10/20 13:51:24 2:04 6328 4774 nxtgonpho 3587080982063727 310410214827503 APPLE DRONES no 12408 06/10/20 13:53:28 56:30 70376 54700 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12409 06/10/20 14:39:47 60:00 31844 22980 ins 3587080982063727 310410214827503 APPLE DRONES 12410 06/10/20 14:49:57 0:22 288 48 nxtgonpho 3587080982063727 310410214827503 APPLE DRONES no 12411 06/10/20 14:49:59 0:21 48 Oruftgonpho 3587080982063727 310410214827503 APPLE DRONES no 12412 06/10/20 14:50:20 8:44 48 Onxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12413 06/10/20 14:54:49 0:29 1590 14344 ins 3587080982063727 310410214827503 APPLE !PHONES 12414 06/10/20 14:55:26 0:16 9756 24842 imo 3587080982063727 310410214827503 APPLE !PHONES 12415 06/10/20 14:59:03 3:32 288 48 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12416 06/10/20 14:59:05 3:31 48 Onxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12417 06/10/20 15:02:36 60:00 92707 50816 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12418 06/10/20 15:39:47 60:00 15236 5936 imp 3587080982063727 310410214827503 APPLE DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 503 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00003147 The information contained hereCtlaNyR NT ifikE not for general distribution. EFTA 00117223 EFTA01251747 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. Run Data: 06/17/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INZI IMBI MUM NICOLL Date Time Number Up Dn (OTC) 12419 06/10/20 16:02:36 60:00 2961 11328 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12420 06/10/20 16:39:47 60:00 10252 3376 imp 3587080982063727 310410214827503 APPLE 'PHONES 12421 06/10/20 17:02:36 24:14 4741 797ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12422 06/10/20 17:26:50 60:00 96839 37310ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12423 06/10/20 17:39:47 60:00 8388 2896 imp 3587080982063727 310410214827503 APPLE 'PHONES 12424 06/10/20 18:26:50 60:00 169501 105986ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12425 06/10/20 18:39:47 60:00 34924 26900 imp 3587080982063727 310410214827503 APPLE 'PHONES 12426 06/10/20 18:50:57 0:33 2804 18349 imp 3587080982063727 310410214827503 APPLE 'PHONES 12427 06/10/20 19:11:28 0:27 2059 12714 imp 3587080982063727 310410214827503 APPLE 'PHONES 12428 06/10/20 19:26:50 37:20 40083 29088ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12429 06/10/20 19:39:47 60:00 13676 4684 imp 3587080982063727 310410214827503 APPLE 'PHONES 12430 06/10/20 20:04:10 2:03 5566 8034ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12431 06/10/20 20:04:11 2:03 8034 5278ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12432 06/10/20 20:06:14 60:00 13685 12191ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12433 06/10/20 20:39:47 43:51 3408 1324 imp 3587080982063727 310410214827503 APPLE 'PHONES 12434 06/10/20 21:06:14 37:19 59742 42049ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12435 06/10/20 21:23:38 0:35 163424 2912 imp 3587080982063727 310410214827503 APPLE 'PHONES 12436 06/10/20 21:23:38 0:35 5240 2824 imp 3587080982063727 310410214827503 APPLE 'PHONES 12437 06/10/20 21:24:13 4:48 3424 1432 imp 3587080982063727 310410214827503 APPLE 'PHONES 12438 06/10/20 21:29:01 14:32 7580 2908 imp 3587080982063727 310410214827503 APPLE 'PHONES 12439 06/10/20 21:29:01 14:32 7580 2820 imp 3587080982063727 310410214827503 APPLE 'PHONES 12440 06/10/20 21:43:33 1:15 23581 106165 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12441 06/10/20 21:43:36 1:12 8191 6178 imp 3587080982063727 310410214827503 APPLE 'PHONES 12442 06/10/20 21:44:48 55:44 93041 251870 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12443 06/10/20 21:44:50 0:29 7407 6090 imp 3587080982063727 310410214827503 APPLE 'PHONES 12444 06/10/20 21:45:19 3:27 3748 1556 imp 3587080982063727 310410214827503 APPLE 'PHONES 12445 06/10/20 21:48:46 1:03 2644 1324 imp 3587080982063727 310410214827503 APPLE 'PHONES 12446 06/10/20 21:49:49 45:13 21796 15580 imp 3587080982063727 310410214827503 APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 504 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNCGM00003148 The information contained hereeNyFtit NTifikE not for general distribution. EFTA 00117224 EFTA01251748 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ...,,,• ••—•••"" e AT&T arc. Run Dato: 06/17/2020 Run Time: Data Osage for: Item Conn. Conn. Originating ET Bytes Byte. Apn IRE' INBI ten ROOM Date Time Number Up Dn (OTC) 12447 06/10/20 22:20:49 0:30 4259 15173 ins 3587080982063727 310410214827503 APPLE 1PHONZ8 12448 06/10/20 22:35:02 5:27 2752 1324 ins 3587080982063727 310410214827503 APPLE 1PHONZ8 12449 06/10/20 22:40:29 2:19 4948 1680 ins 3587080982063727 310410214827503 APPLE IPMONE8 12450 06/10/20 22:40:31 2:03 5065 6314 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONE8 no 12451 06/10/20 22:40:32 2:03 6314 4777 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONE8 no 12452 06/10/20 22:42:35 60:00 33070 35962 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONE8 no 12453 06/10/20 22:42:48 0:28 2644 1412 ins 3587080982063727 310410214827503 APPLE IPMONE8 12454 06/10/20 22:42:48 0:28 2644 1324 ins 3587080982063727 310410214827503 APPLE IPMONE8 12455 06/10/20 22:43:16 17:45 3532 1324 ins 3587080982063727 310410214827503 APPLE IPMONE8 12456 06/10/20 23:05:46 5:35 6671 5979 ins 3587080982063727 310410214827503 APPLE IPMONE8 12457 06/10/20 23:11:25 2:26 6667 5982 ins 3587080982063727 310410214827503 APPLE IPMONE8 12458 06/10/20 23:13:51 0:33 4856 1464 ins 3587080982063727 310410214827503 APPLE IPMONE8 12459 06/10/20 23:14:24 1:30 2752 1324 ins 3587080982063727 310410214827503 APPLE IPMONE8 12460 06/10/20 23:15:54 60:00 14016 4948 ins 3587080982063727 310410214827503 APPLE IPMONE8 12461 06/10/20 23:42:35 18:08 52130 43565ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12462 06/11/20 00:00:42 2:03 288 48ruftgonpho 3587080982063727 310410214827503 APPLE IPMONE8 no 12463 06/11/20 00:00:43 2:03 48 Oruftgonpho 3587080982063727 310410214827503 APPLE IPMONE8 no 12464 06/11/20 00:02:46 60:00 35541 16641ruftgonpho 3587080982063727 310410214827503 APPLE IPMONE8 no 12465 06/11/20 00:15:54 60:00 26560 17852 ins 3587080982063727 310410214827503 APPLE IPMONE8 12466 06/11/20 00:50:18 0:29 1749 13796 ins 3587080982063727 310410214827503 APPLE IPMONE8 12467 06/11/20 01:00:11 44:46 7656873 9341811 ins 3587080982063727 310410214827503 APPLE IPMONE8 12468 06/11/20 01:02:46 60:00 19543 7341 ructgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12469 06/11/20 01:15:54 60:00 11496 4784 ins 3587080982063727 310410214827503 APPLE IPMONE8 12470 06/11/20 02:02:46 60:00 2218 2198 ructgonpho 3587080982063727 310410214827503 APPLE IPMONE8 no 12471 06/11/20 02:15:54 60:00 10828 4220 ins 3587080982063727 310410214827503 APPLE IPMONE8 12472 06/11/20 03:02:46 5:40 225 210ruftgonpho 3587080982063727 310410214827503 APPLE IPMONE8 no 12473 06/11/20 03:08:26 60:00 42848 32453 ructgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12474 06/11/20 03:15:54 60:00 8728 3772 ins 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 505 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003149 The information contained her is not for general distribution. NsTntikE EF-EAJVII7225 EFTA01251749 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in •-_-/ %" ‘"Ii. ...° AT&T OTC. Run pato: 06/17/2020 Run Time: Data Osage For: giglIIIIIII Item Conn. Conn. Originating ET Bytes Bytes Apn INZI IMSI MAKE MODEL Date Time Number Up Dn (OTC) 12475 06/11/20 04:08:26 60:00 5798 8080 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12476 06/11/20 04:15:54 60:00 13568 4876 ins 3587080982063727 310410214827503 APPLE !PHONES 12477 06/11/20 05:08:26 60:00 1005 979 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12478 06/11/20 05:15:54 60:00 8388 2788 imp 3587080982063727 310410214827503 APPLE 'PHONES 12479 06/11/20 06:08:26 60:00 450 420 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12480 06/11/20 06:15:54 31:28 5072 1572 imp 3587080982063727 310410214827503 APPLE 'PHONES 12481 06/11/20 06:47:22 0:57 148724 1536 imp 3587080982063727 310410214827503 APPLE 'PHONES 12482 06/11/20 06:47:22 0:57 2968 1448 imp 3587080982063727 310410214827503 APPLE 'PHONES 12483 06/11/20 06:48:19 60:00 10256 4344 ins 3587080982063727 310410214827503 APPLE 'PHONES 12484 06/11/20 07:08:26 60:00 225 210 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12485 06/11/20 07:48:19 60:00 8496 3004 imp 3587080982063727 310410214827503 APPLE 'PHONES 12486 06/11/20 08:08:26 60:00 225 210 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12487 06/11/20 08:48:19 60:00 11904 4396 imp 3587080982063727 310410214827503 APPLE 'PHONES 12488 06/11/20 09:08:26 60:00 398 315 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12489 06/11/20 09:48:19 60:00 7080 2772 imp 3587080982063727 310410214827503 APPLE 'PHONES 12490 06/11/20 10:08:26 60:00 277 315 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12491 06/11/20 10:48:19 60:00 10596 4096 imp 3587080982063727 310410214827503 APPLE 'PHONES 12492 06/11/20 11:08:26 37:36 329 367 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12493 06/11/20 11:46:01 0:34 5390 7804 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12494 06/11/20 11:46:02 0:34 7804 5102 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12495 06/11/20 11:46:36 60:00 14045 47524 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12496 06/11/20 11:48:19 15:20 0 0 imp 3587080982063727 310410214827503 APPLE !PHONES 12497 06/11/20 12:08:15 37:27 8454 6286 imp 3587080982063727 310410214827503 APPLE !PHONES 12498 06/11/20 12:45:42 0:17 2768 1324 imp 3587080982063727 310410214827503 APPLE 'PHONES 12499 06/11/20 12:45:42 0:17 2704 1324 imp 3587080982063727 310410214827503 APPLE !PHONES 12500 06/11/20 12:45:59 10:11 4964 1696 imp 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 506 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained her is PsiTniliAL not for general distribution. SDNYGM00003150 EFTAJVII7226 EFTA01251750 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Date: 06/17/2020 Run Time: 1S:57:08 Data Usage Tor: Item Conn. Conn. Originating BT Bytes Bytes Apn INTI INBI tali= HOD= Date Time Number Up Dn (OTC) 12501 06/11/20 12:46:36 60:00 2177046 2642670 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 12502 06/11/20 12:56:20 3:14 11347 6482 ims 3587080982063727 310410214827503 APPLE !PROMS 12503 06/11/20 12:59:34 0:45 2768 1324 ims 3587080982063727 310410214827503 APPLE !PROMS 12504 06/11/20 12:59:34 0:45 2704 1324 ims 3587080982063727 310410214827503 APPLE IPRONZ8 12505 06/11/20 13:00:19 48:00 7064 2880 ims 3587080982063727 310410214827503 APPLE !PROMS 12506 06/11/20 13:46:36 3:00 3006 1187 nxtgenpho 3587080982063727 310410214827503 APPLE !PROMS no 12507 06/11/20 13:48:19 1:17 7684 6376 ins 3587080982063727 310410214827503 APPLE !PHONES 12508 06/11/20 13:48:19 1:17 7620 6376 ins 3587080982063727 310410214827503 APPLE IPRONE8 12509 06/11/20 13:51:27 3:56 356279 1131640 nxtgenpho 3587080982063727 310410214827503 APPLE IPRONE8 no 12510 06/11/20 13:51:30 3:53 8905 7072 ins 3587080982063727 310410214827503 APPLE !PHONES 12511 06/11/20 13:55:22 2:03 288 48ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 12512 06/11/20 13:55:23 2:04 48 Oruftgenpho 3587080982063727 310410214827503 APPLE !PRONGS no 12513 06/11/20 13:56:00 1:25 6476 7421 ins 3587080982063727 310410214827503 APPLE !PHONES 12514 06/11/20 13:56:01 1:26 7421 6124 ins 3587080982063727 310410214827503 APPLE IPRONE8 12515 06/11/20 13:57:27 33:22 8993 10526ruftgenpho 3587080982063727 310410214827503 APPLE IPRONE8 no 12516 06/11/20 13:58:27 7:45 6689 6000 ins 3587080982063727 310410214827503 APPLE IPRONE8 12517 06/11/20 14:06:12 60:00 24096 13980 ins 3587080982063727 310410214827503 APPLE IPRONE8 12518 06/11/20 14:11:50 0:42 7780 14713 ins 3587080982063727 310410214827503 APPLE !PHONES 12519 06/11/20 14:30:49 60:00 87380 60369ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 12520 06/11/20 15:06:12 60:00 7296 3020 ins 3587080982063727 310410214827503 APPLE !PRONGS 12521 06/11/20 15:30:49 60:00 27822 17667 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 12522 06/11/20 16:06:12 0:03 0 0 ins 3587080982063727 310410214827503 APPLE IPRONE8 12523 06/11/20 16:06:14 2:19 14560 1320 ins 3587080982063727 310410214827503 APPLE IPRONE8 12524 06/11/20 16:06:15 2:18 2428 1232 ins 3587080982063727 310410214827503 APPLE !PHONES 12525 06/11/20 16:08:33 60:00 14032 4856 ins 3587080982063727 310410214827503 APPLE !PHONES 12526 06/11/20 16:30:49 60:00 196129 15494ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 12527 06/11/20 17:08:33 29:08 3424 1340 ins 3587080982063727 310410214827503 APPLE !PHONES 12528 06/11/20 17:30:49 60:00 240325 293154ruftgenpho 3587080982063727 310410214827503 APPLE IPRONE8 no 12529 06/11/20 17:37:41 60:00 5240 2680 ins 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 507 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003151 The information contained her is NsTroliAL not for general distribution. EF-EAJVII7227 EFTA01251751 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in c• `-'s,, „,# AT&T OTC. Run Data: 06/17/2020 Run Time: Data Usage For: Item Conn. Conn. Originating LT Bytes Byte. Apn IND I INSI MARL NICOLL Data Time Number Up Dn (OTC) 12530 06/11/20 17:37:41 60:00 29252 2768 ins 3587080982063727 310410214827503 APPLE 'PHONES 12531 06/11/20 18:30:49 42:56 89878 1231264nxtganpho 3587080982063727 310410214827503 APPLE 'PHONES no 12532 06/11/20 18:37:41 36:04 8051 6072 ins 3587080982063727 310410214827503 APPLE 'PHONES 12533 06/11/20 18:37:41 36:04 8051 6072 ins 3587080982063727 310410214827503 APPLE 'PHONES 12534 06/11/20 19:13:45 0:26 108 0 ins 3587080982063727 310410214827503 APPLE 'PHONES 12535 06/11/20 19:13:45 0:26 108 0 imp 3587080982063727 310410214827503 APPLE 'PHONES 12536 06/11/20 19:13:45 0:26 5235 4253 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 12537 06/11/20 19:14:11 18:47 0 0 imp 3587080982063727 310410214827503 APPLE 'PHONES 12538 06/11/20 19:14:11 18:47 0 0 imp 3587080982063727 310410214827503 APPLE 'PHONES 12539 06/11/20 19:14:11 18:47 3483 7942 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 12540 06/11/20 19:32:58 7:25 14721 23899ruftganpho 3587080982063727 310410214827503 APPLE 'PHONES no 12541 06/11/20 19:33:01 6:18 8813 6157 ins 3587080982063727 310410214827503 APPLE 'PHONES 12542 06/11/20 19:39:19 0:30 3424 1324 imp 3587080982063727 310410214827503 APPLE 'PHONES 12543 06/11/20 19:39:49 0:34 2644 1324 ins 3587080982063727 310410214827503 APPLE 'PHONES 12544 06/11/20 19:40:22 0:59 7221 7262 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 12545 06/11/20 19:40:23 0:58 6472 7381 ins 3587080982063727 310410214827503 APPLE 'PHONES 12546 06/11/20 19:40:23 0:59 7262 6933 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 12547 06/11/20 19:40:24 0:58 7381 6120 imp 3587080982063727 310410214827503 APPLE 'PHONES 12548 06/11/20 19:41:22 60:00 10384 23896ruftganpho 3587080982063727 310410214827503 APPLE 'PHONES no 12549 06/11/20 19:41:24 1:07 6673 5982 ins 3587080982063727 310410214827503 APPLE 'PHONES 12550 06/11/20 19:42:31 60:00 12120 4484 imp 3587080982063727 310410214827503 APPLE 'PHONES 12551 06/11/20 20:41:22 60:00 1676 6285 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 12552 06/11/20 20:42:31 60:00 8604 3052 imp 3587080982063727 310410214827503 APPLE 'PHONES 12553 06/11/20 21:41:22 11:14 0 0 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 12554 06/11/20 21:42:31 60:00 10252 3284 imp 3587080982063727 310410214827503 APPLE 'PHONES 12555 06/11/20 21:52:35 8:42 5161 6314 nxtgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 12556 06/11/20 21:52:36 8:42 6314 4777ruftganpho 3587080982063727 310410214827503 APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 508 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003152 The information contained hereCtoNelt NTnilikk not for general distribution. EFTA 00117228 EFTA01251752 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in tr '`s ao AT&T s OTC. Run Data: 06/17/2020 Run Time: 1S:47:09 Data Usage For: Item Conn. Conn. Originating ET Bytes Byte. Apn INZI IMSI MARL MODEL Data Time Number DP Dn (UTC) 12557 06/11/20 22:01:18 4:07 280 581 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12558 06/11/20 22:05:24 7:07 5065 6314 nxtgonpho 3587080982063727 310410214827503 APPLE !PRONGS no 12559 06/11/20 22:05:25 7:07 6314 4777 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12560 06/11/20 22:12:32 60:00 16116 15319 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12561 06/11/20 22:42:31 42:11 15099 8175 ims 3587080982063727 310410214827503 APPLE IPH01428 12562 06/11/20 23:12:32 20:12 0 Oruftgonpho 3587080982063727 310410214827503 APPLE IPH01428 no 12563 06/11/20 23:28:10 10:00 8530 6336 ims 3587080982063727 310410214827503 APPLE !PHONES 12564 06/11/20 23:38:09 60:00 86182 67593 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12565 06/11/20 23:38:10 0:02 0 0 ims 3587080982063727 310410214827503 APPLE !PHONES 12566 06/11/20 23:38:10 0:02 0 0 ims 3587080982063727 310410214827503 APPLE !PHONES 12567 06/11/20 23:38:18 60:00 70734 44647 ims -1 310410214827503 12568 06/11/20 23:57:41 0:10 1431 23774 ims -1 310410214827503 12569 06/12/20 00:35:14 0:43 5016 17038 I. -1 310410214827503 12570 06/12/20 00:36:09 0:33 6174 18269 ims -1 310410214827503 12571 06/12/20 00:38:09 60:00 4533 1101 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12572 06/12/20 00:38:18 60:00 10252 3624 ims -1 310410214827503 12573 06/12/20 01:38:09 60:00 99995 29061 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12574 06/12/20 01:38:18 60:00 8836 3284 ims -1 310410214827503 12575 06/12/20 02:38:09 47:00 5160 1217 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12576 06/12/20 02:38:18 60:00 10272 4036 ims -1 310410214827503 12577 06/12/20 03:25:09 60:00 7539 6634 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12578 06/12/20 03:38:18 60:00 10252 3284 ims -1 310410214827503 12579 06/12/20 04:25:09 60:00 578 630 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12580 06/12/20 04:38:18 60:00 15108 4924 ims -1 310410214827503 12581 06/12/20 05:25:09 60:00 225 210 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12582 06/12/20 05:38:18 60:00 8604 3052 ims -1 310410214827503 12583 06/12/20 06:25:09 60:00 514 525 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 509 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003153 The information contained hereCteNelt NaTileikE not for general distribution. EFTA 00117229 EFTA01251753 MOBILITY 4110, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in i..... "'einm‘S %. ,00 AT&T UTC. Run Data: 06/17/2020 Run Time: Data Usage Tor: Item Conn. Conn. originating ET Bytes Byte. Apn IKEI INSI MARL MODEL Data Time Number Up Dn (UTC) 12584 06/12/20 06:38:18 60:00 13476 4424 imo -1 310410214827503 12585 06/12/20 07:25:09 60:00 692 997 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12586 06/12/20 07:38:18 60:00 7064 2788 imo -1 310410214827503 12587 06/12/20 08:25:09 60:00 289 315 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12588 06/12/20 08:38:18 60:00 10036 3176 imo -1 310410214827503 12589 06/12/20 09:25:09 60:00 225 210ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 12590 06/12/20 09:38:18 60:00 11812 4536 imp -1 310410214827503 12591 06/12/20 10:25:09 60:00 341 419ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 12592 06/12/20 10:38:18 60:00 14892 4656 imp -1 310410214827503 12593 06/12/20 11:25:09 60:00 3042 262ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 12594 06/12/20 11:38:18 60:00 7172 2788 imp -1 310410214827503 12595 06/12/20 12:25:09 60:00 1340 2849 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12596 06/12/20 12:38:18 60:00 8496 2928 imp -1 310410214827503 12597 06/12/20 13:25:09 60:00 12800 15836ruagonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12598 06/12/20 13:38:18 60:00 22736 11832 imp -1 310410214827503 12599 06/12/20 13:40:43 0:52 84685 100813 imp -1 310410214827503 12600 06/12/20 13:41:48 0:02 0 0 imp -1 310410214827503 12601 06/12/20 14:25:09 60:00 115408 81206ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12602 06/12/20 14:38:18 4:52 4964 1696 imp 3587080982063727 310410214827503 APPLE !PHONES 12603 06/12/20 14:43:10 1:54 18932 1340 imp 3587080982063727 310410214827503 APPLE 'PHONES 12604 06/12/20 14:43:10 1:54 2704 1340 imp 3587080982063727 310410214827503 APPLE 'PHONES 12605 06/12/20 14:45:04 4:28 3424 1340 imp 3587080982063727 310410214827503 APPLE 'PHONES 12606 06/12/20 14:49:32 1:32 4092 2356 imp 3587080982063727 310410214827503 APPLE 'PHONES 12607 06/12/20 14:49:32 1:32 4028 2356 imp 3587080982063727 310410214827503 APPLE 'PHONES 12608 06/12/20 14:51:04 60:00 22640 7008 imp 3587080982063727 310410214827503 APPLE 'PHONES 12609 06/12/20 15:25:09 8:48 304 232ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12610 06/12/20 15:33:57 60:00 6756 5122ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12611 06/12/20 15:51:04 60:00 81148 44160 imp 3587080982063727 310410214827503 APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 510 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNCGM00003154 The information contained her is PsiTifikE not for general distribution. EFTA 00/17230 EFTA01251754 MOBILITY 41011, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in ...,,,,sf `•—s" -"e AT&T OTC. Run Data: 06/17/2020 Run Time: Data Osage For: NM= Item corm. Conn. Originating ET Bytes Byte. Apn INEI IMS1 MAL MODEL Date Timo Number Up Dn (UPC) 12612 06/12/20 16:33:57 60:00 109675 86611 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 12613 06/12/20 16:43:35 0:22 0 44448 imo 3587080982063727 310410214827503 APPLE !PRONGS 12614 06/12/20 16:44:44 0:05 0 2786 imp 3587080982063727 310410214827503 APPLE !PHONES 12615 06/12/20 16:46:27 0:39 9591 15521 imp 3587080982063727 310410214827503 APPLE DRONES 12616 06/12/20 16:47:08 0:01 0 0 imp 3587080982063727 310410214827503 APPLE DRONES 12617 06/12/20 16:47:21 0:40 7107 21103 imp 3587080982063727 310410214827503 APPLE DRONES 12618 06/12/20 16:48:08 0:19 0 312 imp 3587080982063727 310410214827503 APPLE DRONES 12619 06/12/20 16:49:38 0:57 83844 70722 imp 3587080982063727 310410214827503 APPLE DRONES 12620 06/12/20 16:51:04 21:41 3532 1340 imp 3587080982063727 310410214827503 APPLE DRONES 12621 06/12/20 17:12:45 0:50 69840 1588 imp 3587080982063727 310410214827503 APPLE DRONES 12622 06/12/20 17:12:45 0:50 4244 1588 imp 3587080982063727 310410214827503 APPLE DRONES 12623 06/12/20 17:13:35 60:00 10380 4128 imp 3587080982063727 310410214827503 APPLE DRONES 12624 06/12/20 17:33:57 60:00 763 735ruagenpho 3587080982063727 310410214827503 APPLE DRONES no 12625 06/12/20 18:13:35 60:00 7280 2928 imp 3587080982063727 310410214827503 APPLE DRONES 12626 06/12/20 18:33:57 60:00 346 210ruagenpho 3587080982063727 310410214827503 APPLE DRONES no 12627 06/12/20 19:13:35 60:00 11364 3424 imp 3587080982063727 310410214827503 APPLE !PHONES 12628 06/12/20 19:33:57 60:00 462 420ruagenpho 3587080982063727 310410214827503 APPLE !PHONES no 12629 06/12/20 20:13:35 33:36 10596 4536 imp 3587080982063727 310410214827503 APPLE !PHONES 12630 06/12/20 20:33:57 60:00 5265859 5141147ruagenpho 3587080982063727 310410214827503 APPLE !PHONES no 12631 06/12/20 20:47:11 0:58 7673 6480 imp 3587080982063727 310410214827503 APPLE !PHONES 12632 06/12/20 20:47:11 0:58 6753 6480 imp 3587080982063727 310410214827503 APPLE DRONES 12633 06/12/20 20:48:09 0:20 3424 1340 imp 3587080982063727 310410214827503 APPLE DRONES 12634 06/12/20 20:48:29 14:58 69600 1448 imp 3587080982063727 310410214827503 APPLE DRONES 12635 06/12/20 20:48:29 14:58 3904 1448 imp 3587080982063727 310410214827503 APPLE DRONES 12636 06/12/20 21:03:27 1:32 3424 1448 imp 3587080982063727 310410214827503 APPLE DRONES 12637 06/12/20 21:04:58 16:51 90124 1464 imp 3587080982063727 310410214827503 APPLE DRONES 12638 06/12/20 21:04:59 16:50 3328 1464 imp 3587080982063727 310410214827503 APPLE DRONES 12639 06/12/20 21:21:49 60:00 12028 4392 imp 3587080982063727 310410214827503 APPLE DRONES 12640 06/12/20 21:33:57 60:00 3797 4371ruagenpho 3587080982063727 310410214827503 APPLE !PHONES no 12641 06/12/20 22:21:49 60:00 8728 3052 imp 3587080982063727 310410214827503 APPLE !PHONES 12642 06/12/20 22:33:57 60:00 41210 25146ruagenpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 511 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003155 The information contained her is NTifikE not for general distribution. EFTA 00117231 EFTA01251755 MOBILITY 411111i 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in tt ‘a°ed galt AT&T arc. Run Date: 06/17/2020 Run Time: Data Osage For: iiiiiIIIII Item Conn. Conn. Originating ET Bytes Byte. Apn INLI INSI MARL MODEL Date Time Number Up Dn (OTC) 12643 06/12/20 23:21:49 60:00 12044 4392 imp 3587080982063727 310410214827503 APPLE IPHONES 12644 06/12/20 23:33:57 60:00 571 420 nxtgenpho 3587080982063727 310410214827503 APPLE IPHONES no 12645 06/13/20 00:21:49 60:00 10036 3176 ins 3587080982063727 310410214827503 APPLE 1PHONES 12646 06/13/20 00:33:57 60:00 4302 4942ruagenpho 3587080982063727 310410214827503 APPLE 1PHONES no 12647 06/13/20 01:21:49 60:00 10952 4876 ins 3587080982063727 310410214827503 APPLE 1PHONES 12648 06/13/20 01:33:57 60:00 3240 5960ruagenpho 3587080982063727 310410214827503 APPLE 1PHONES no 12649 06/13/20 02:21:49 60:00 8496 3160 ins 3587080982063727 310410214827503 APPLE 1PHONES 12650 06/13/20 02:33:57 60:00 623 525ruagenpho 3587080982063727 310410214827503 APPLE 1PHONES no 12651 06/13/20 03:21:49 60:00 14424 4532 ins 3587080982063727 310410214827503 APPLE 1PHONES 12652 06/13/20 03:33:57 60:00 346 210ruagenpho 3587080982063727 310410214827503 APPLE 1PHONES no 12653 06/13/20 04:21:49 60:00 8604 3036 ins 3587080982063727 310410214827503 APPLE 1PHONES 12654 06/13/20 04:33:57 48:11 346 210ruagenpho 3587080982063727 310410214827503 APPLE 1PHONES no 12655 06/13/20 05:21:49 60:00 7188 2912 ins 3587080982063727 310410214827503 APPLE 1PHONES 12656 06/13/20 05:22:07 1:36 5064 6298ruagenpho 3587080982063727 310410214827503 APPLE 1PHONES no 12657 06/13/20 05:22:08 1:36 6298 4776ruagenpho 3587080982063727 310410214827503 APPLE 1PHONES no 12658 06/13/20 05:23:44 60:00 18806 19522ruagenpho 3587080982063727 310410214827503 APPLE !PHONES no 12659 06/13/20 06:21:49 60:00 7064 2804 ins 3587080982063727 310410214827503 APPLE !PHONES 12660 06/13/20 06:23:44 60:00 3733 944ruagenpho 3587080982063727 310410214827503 APPLE 1PHONES no 12661 06/13/20 07:21:49 60:00 14160 5768 ins 3587080982063727 310410214827503 APPLE 1PHONES 12662 06/13/20 07:23:44 60:00 398 315ruftgenpho 3587080982063727 310410214827503 APPLE 1PHONES no 12663 06/13/20 08:21:49 60:00 8388 2928 ins 3587080982063727 310410214827503 APPLE 1PHONES 12664 06/13/20 08:23:44 60:00 277 315ruagenpho 3587080982063727 310410214827503 APPLE 1PHONES no 12665 06/13/20 09:21:49 60:00 8388 2928 ins 3587080982063727 310410214827503 APPLE 1PHONES 12666 06/13/20 09:23:44 60:00 734 1106ruagenpho 3587080982063727 310410214827503 APPLE 1PHONES no 12667 06/13/20 10:21:49 60:00 14892 4780 ins 3587080982063727 310410214827503 APPLE 1PHONES 12668 06/13/20 10:23:44 60:00 277 315ruagenpho 3587080982063727 310410214827503 APPLE 1PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 512 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003156 The information contained her is not for general distribution. EFTA 00117232 EFTA01251756 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run pato: 06/17/2020 Run Time: 10:57:09 Data Osage for: Item Conn. Conn. originating ET Bytes Byte. Apn INSI MARL MODEL Date Time Number Up Dn (OTC) 12669 06/13/20 11:21:49 60:00 8944 3036 ims 3587080982063727 310410214827503 APPLE IPHONZ8 12670 06/13/20 11:23:44 60:00 225 210 nxtgonpho 3587080982063727 310410214827503 APPLE 110HONZ8 no 12671 06/13/20 12:21:49 60:00 12028 4660 ins 3587080982063727 310410214827503 APPLE INIONE8 12672 06/13/20 12:23:44 60:00 277 262ruagonpho 3587080982063727 310410214827503 APPLE INIONE8 no 12673 06/13/20 13:21:49 3:46 0 0 ins 3587080982063727 310410214827503 APPLE INIONE8 12674 06/13/20 13:23:44 60:00 10720 21297ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 12675 06/13/20 13:26:11 0:58 6687 5962 ins 3587080982063727 310410214827503 APPLE INIONE8 12676 06/13/20 13:27:09 60:00 12368 4560 ins 3587080982063727 310410214827503 APPLE INIONE8 12677 06/13/20 14:23:44 60:00 7873 3970ruagonpho 3587080982063727 310410214827503 APPLE INIONE8 no 12678 06/13/20 14:27:09 60:00 6848 2756 ins 3587080982063727 310410214827503 APPLE INIONE8 12679 06/13/20 15:23:44 60:00 538 4628ruagonpho 3587080982063727 310410214827503 APPLE INIONE8 no 12680 06/13/20 15:27:09 60:00 8604 3004 ins 3587080982063727 310410214827503 APPLE !PHONES 12681 06/13/20 16:23:44 60:00 3528 4497ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 12682 06/13/20 16:27:09 60:00 8496 2896 ins 3587080982063727 310410214827503 APPLE !PHONES 12683 06/13/20 17:23:44 60:00 329 367 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12684 06/13/20 17:27:09 60:00 7048 2648 ins 3587080982063727 310410214827503 APPLE INIONE8 12685 06/13/20 18:23:44 60:00 173 105ruagonpho 3587080982063727 310410214827503 APPLE INIONE8 no 12686 06/13/20 18:27:09 60:00 17100 6292 ins 3587080982063727 310410214827503 APPLE INIONE8 12687 06/13/20 19:23:44 60:00 5114 7043ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 12688 06/13/20 19:27:09 60:00 8480 2896 ins 3587080982063727 310410214827503 APPLE !PHONES 12689 06/13/20 20:23:44 60:00 173 105ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 12690 06/13/20 20:27:09 60:00 8496 2896 ins 3587080982063727 310410214827503 APPLE !PHONES 12691 06/13/20 21:23:44 60:00 4941 4307ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 12692 06/13/20 21:27:09 60:00 13568 4792 ins 3587080982063727 310410214827503 APPLE !PHONES 12693 06/13/20 22:23:44 60:00 1316 4573ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 12694 06/13/20 22:27:09 60:00 7188 2880 ins 3587080982063727 310410214827503 APPLE !PHONES 12695 06/13/20 23:23:44 60:00 217948 136037ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 513 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003157 The information contained hereCtoNelt NsTroliAL not for general distribution. EFTA 00117233 EFTA01251757 MOBILITY 411111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in AT&T OTC. Run Data: 06/17/2020 Run Time: 10:57:09 Data Osage For: Item Conn. Conn. Originating ET Bytes Byte. Apn IND I INSI MARL MODEL Date Time Number Up Dn (OTC) 12696 06/13/20 23:27:09 60:00 10456 4256 imp 3587080982063727 310410214827503 APPLE !PROMS 12697 06/14/20 00:23:44 60:00 173 105nxtgonpho 3587080982063727 310410214827503 APPLE !PROMS no 12698 06/14/20 00:27:09 60:00 6848 2648 imp 3587080982063727 310410214827503 APPLE !PHONES 12699 06/14/20 01:23:44 60:00 173 105nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12700 06/14/20 01:27:09 60:00 14876 4608 imp 3587080982063727 310410214827503 APPLE IPROME8 12701 06/14/20 02:23:44 60:00 536 297ruftgonpho 3587080982063727 310410214827503 APPLE IPROME8 no 12702 06/14/20 02:27:09 60:00 9788 3128 imp 3587080982063727 310410214827503 APPLE IPROME8 12703 06/14/20 03:23:44 60:00 173 157ruftgonpho 3587080982063727 310410214827503 APPLE IPROME8 no 12704 06/14/20 03:27:09 60:00 10036 3144 imp 3587080982063727 310410214827503 APPLE IPROME8 12705 06/14/20 04:23:44 60:00 346 210ruftgonpho 3587080982063727 310410214827503 APPLE IPROME8 no 12706 06/14/20 04:27:09 60:00 13676 4768 imp 3587080982063727 310410214827503 APPLE IPROME8 12707 06/14/20 05:23:44 60:00 173 105ruftgonpho 3587080982063727 310410214827503 APPLE IPROME8 no 12708 06/14/20 05:27:09 60:00 13444 4576 imp 3587080982063727 310410214827503 APPLE IPROME8 12709 06/14/20 06:23:44 60:00 173 105ruftgonpho 3587080982063727 310410214827503 APPLE IPROME8 no 12710 06/14/20 06:27:09 60:00 8372 2896 imp 3587080982063727 310410214827503 APPLE !PHONES 12711 06/14/20 07:23:44 60:00 173 105ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12712 06/14/20 07:27:09 60:00 8512 3772 imp 3587080982063727 310410214827503 APPLE IPROME8 12713 06/14/20 08:23:44 60:00 4732 3765 nxtgonpho 3587080982063727 310410214827503 APPLE IPROME8 no 12714 06/14/20 08:27:09 60:00 10020 3252 imp 3587080982063727 310410214827503 APPLE IPROME8 12715 06/14/20 09:23:44 60:00 173 105ruftgonpho 3587080982063727 310410214827503 APPLE IPROME8 no 12716 06/14/20 09:27:09 60:00 13536 4860 imp 3587080982063727 310410214827503 APPLE IPROME8 12717 06/14/20 10:23:44 60:00 173 105ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12718 06/14/20 10:27:09 60:00 12012 4220 imp 3587080982063727 310410214827503 APPLE !PHONES 12719 06/14/20 11:23:44 60:00 9404 1691 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12720 06/14/20 11:27:09 60:00 8480 2896 imp 3587080982063727 310410214827503 APPLE IPROME8 12721 06/14/20 12:23:44 60:00 538 4260ruftgonpho 3587080982063727 310410214827503 APPLE IPROME8 no 12722 06/14/20 12:27:09 60:00 8372 2896 imp 3587080982063727 310410214827503 APPLE IPROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 514 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003158 The information contained her is NTifikE not for general distribution. EFTA 00117234 EFTA01251758 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in tr '`s ao AT&T s OTC. Run Dato: 06/17/2020 Run Timo: Data Usage for: Item Conn. Conn. Originating ET Bytes Byte. Apn INCI IMBI MARE MODEL Date Time Number Up Dn (UTC) 12723 06/14/20 13:23:44 60:00 173 105 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12724 06/14/20 13:27:09 60:00 8388 2896 ims 3587080982063727 310410214827503 APPLE !PHONES 12725 06/14/20 14:23:44 60:00 173 105ruagonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12726 06/14/20 14:27:09 60:00 18516 6324 ims 3587080982063727 310410214827503 APPLE 'PHONES 12727 06/14/20 15:23:44 60:00 1145 5273 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12728 06/14/20 15:27:09 60:00 10128 3268 ims 3587080982063727 310410214827503 APPLE 'PHONES 12729 06/14/20 16:23:44 60:00 434 1516 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12730 06/14/20 16:27:09 60:00 9928 3144 ims 3587080982063727 310410214827503 APPLE !PHONES 12731 06/14/20 17:23:44 60:00 830 530ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12732 06/14/20 17:27:09 15:49 3548 2200 ims 3587080982063727 310410214827503 APPLE 'PHONES 12733 06/14/20 17:42:58 1:08 7480 4448 ims 3587080982063727 310410214827503 APPLE 'PHONES 12734 06/14/20 17:44:06 60:00 13692 4592 ims 3587080982063727 310410214827503 APPLE 'PHONES 12735 06/14/20 18:23:44 60:00 173 157 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12736 06/14/20 18:44:06 60:00 10144 3160 ims 3587080982063727 310410214827503 APPLE !PHONES 12737 06/14/20 19:23:44 60:00 173 105 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12738 06/14/20 19:44:06 60:00 8372 2896 ims 3587080982063727 310410214827503 APPLE 'PHONES 12739 06/14/20 20:23:44 60:00 173 105ruagonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12740 06/14/20 20:44:06 60:00 13768 5108 ims 3587080982063727 310410214827503 APPLE 'PHONES 12741 06/14/20 21:23:44 49:24 10693 835ruagonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12742 06/14/20 21:44:06 60:00 13552 4468 ims 3587080982063727 310410214827503 APPLE 'PHONES 12743 06/14/20 22:13:08 60:00 17878 16048 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12744 06/14/20 22:44:06 60:00 9928 3144 ims 3587080982063727 310410214827503 APPLE 'PHONES 12745 06/14/20 23:13:08 60:00 446 700 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12746 06/14/20 23:44:06 60:00 10036 3144 ims 3587080982063727 310410214827503 APPLE 'PHONES 12747 06/15/20 00:13:08 60:00 173 105ruagonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12748 06/15/20 00:44:06 60:00 8604 3112 ims 3587080982063727 310410214827503 APPLE !PHONES 12749 06/15/20 01:13:08 60:00 14998 10416ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 515 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00003159 The information contained heraleoNftli NTroliAL not for general distribution. EFTA 00117235 EFTA01251759 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00nm to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ....,,,•AT&T ••-s`' arc. Run Date: 06/17/2020 Run Time: Data Osage Tor: Item Conn. Conn. Originating ET Bytes • Bytes Apn INEI IMSI MARL MODEL Date Time Number UP Dn (DSC) 12750 06/15/20 01:44:06 60:00 11904 4504 Imo 3587080982063727 310410214827503 APPLE !PHONES 12751 06/15/20 02:13:08 60:00 1334 1155 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 12752 06/15/20 02:44:06 60:00 13568 4468 ins 3587080982063727 310410214827503 APPLE !PHONES 12753 06/15/20 03:13:08 60:00 924 840ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 12754 06/15/20 03:44:06 60:00 7172 2772 ins 3587080982063727 310410214827503 APPLE !PHONES 12755 06/15/20 04:13:08 60:00 865 525 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12756 06/15/20 04:44:06 60:00 10036 3144 ins 3587080982063727 310410214827503 APPLE !PHONES 12757 06/15/20 05:13:08 60:00 635 525ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 12758 06/15/20 05:44:06 60:00 6956 2648 ins 3587080982063727 310410214827503 APPLE !PHONES 12759 06/15/20 06:13:08 60:00 1292 886ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 12760 06/15/20 06:44:06 60:00 15360 6076 ins 3587080982063727 310410214827503 APPLE !PHONES 12761 06/15/20 07:13:08 60:00 981 787ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 12762 06/15/20 07:44:06 60:00 7388 2756 ins 3587080982063727 310410214827503 APPLE !PHONES 12763 06/15/20 08:13:08 60:00 808 630ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 12764 06/15/20 08:44:06 60:00 10036 3252 ins 3587080982063727 310410214827503 APPLE !PHONES 12765 06/15/20 09:13:08 60:00 583 484ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 12766 06/15/20 09:44:06 50:37 6848 2648 ins 3587080982063727 310410214827503 APPLE !PHONES 12767 06/15/20 10:13:08 60:00 635 577ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 12768 06/15/20 10:34:43 0:02 0 0 ins 3587080982063727 310410214827503 APPLE !PHONES 12769 06/15/20 10:34:43 0:02 0 0 ins 3587080982063727 310410214827503 APPLE !PHONES 12770 06/15/20 10:34:51 56:51 16081 7902 ins 3587080982063727 310410214827503 APPLE !PHONES 12771 06/15/20 11:13:08 44:54 23897 84578ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 12772 06/15/20 11:31:42 4:48 7052 2556 ins 3587080982063727 310410214827503 APPLE !PHONES 12773 06/15/20 11:31:42 4:48 6988 2556 ins 3587080982063727 310410214827503 APPLE !PHONES 12774 06/15/20 11:36:30 60:00 13568 4732 ins 3587080982063727 310410214827503 APPLE !PHONES 12775 06/15/20 11:58:01 2:03 288 48ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 12776 06/15/20 11:58:02 2:03 48 Oruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 516 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003160 The information contained hereCtoNyFti not for general distribution. EFTA 00117236 EFTA01251760 MOBILITY 411., 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .....,„•AT&T ••-s" " arc. Run Date: 06/17/2020 Run Time: 16:57:09 Data Osage For: Item Conn. Conn. Originating ET Byta• Bytom Apn INTI INSI MAKE NODEL Date Time Number Up On (OTC) 12777 06/15/20 12:00:05 20:25 6294 4744 nxtgonpho 3587080982063727 310410214827503 APPLE 1PHONE8 no 12778 06/15/20 12:20:30 60:00 10495 5873 nxtgonpho 3587080982063727 310410214827503 APPLE 1PHONE8 no 12779 06/15/20 12:36:30 60:00 8620 3052 imo 3587080982063727 310410214827503 APPLE 1PHONE8 12780 06/15/20 13:20:30 60:00 5167 12292 nxtgonpho 3587080982063727 310410214827503 APPLE 1PHONE8 no 12781 06/15/20 13:36:30 53:44 10036 3284 imo 3587080982063727 310410214827503 APPLE 1PHONE8 12782 06/15/20 14:20:30 8:02 486 4491 nxtgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 12783 06/15/20 14:28:31 2:07 23299 6302 nxtgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 12784 06/15/20 14:28:32 2:08 6302 23011 nxtgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 12785 06/15/20 14:29:56 0:21 6316 6669 imo 3587080982063727 310410214827503 APPLE IPHOME8 12786 06/15/20 14:29:57 0:21 6669 5964 imo 3587080982063727 310410214827503 APPLE IPHOME8 12787 06/15/20 14:30:14 0:04 2566 1212 imp -1 310410214827503 12788 06/15/20 14:30:17 0:21 6360 6677 imp 3587080982063727 310410214827503 APPLE IPHOME8 12789 06/15/20 14:30:18 0:22 6677 6096 ims 3587080982063727 310410214827503 APPLE IPHOME8 12790 06/15/20 14:30:40 30:01 82656 65503 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12791 06/15/20 14:30:41 10:16 6673 5924 ins 3587080982063727 310410214827503 APPLE !PHONES 12792 06/15/20 14:40:57 2:07 3532 1340 ins 3587080982063727 310410214827503 APPLE !PHONES 12793 06/15/20 14:43:04 0:34 3376 1464 ins 3587080982063727 310410214827503 APPLE IPHOME8 12794 06/15/20 14:43:38 31:25 10036 3176 ins 3587080982063727 310410214827503 APPLE IPHOME8 12795 06/15/20 15:00:41 40:12 253101 604319 nxtgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 12796 06/15/20 15:15:04 25:49 6673 5964 imo 3587080982063727 310410214827503 APPLE !PHONES 12797 06/15/20 15:40:52 7:05 139044 35440 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12798 06/15/20 15:40:53 7:05 35440 143679 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12799 06/15/20 15:40:54 7:03 6227 6781 imo 3587080982063727 310410214827503 APPLE IPHOME8 12800 06/15/20 15:40:55 7:03 6673 5963 ins 3587080982063727 310410214827503 APPLE IPHOME8 12801 06/15/20 15:47:58 21:01 52525 117594 nxtgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no 12802 06/15/20 15:48:01 20:58 6675 5980 ins 3587080982063727 310410214827503 APPLE IPHOME8 12803 06/15/20 16:08:59 22:22 137050 148078 nxtgonpho 3587080982063727 310410214827503 APPLE IPHOME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 517 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003161 The information contained her is NTroliAL not for general distribution. EFTA 00117237 EFTA01251761 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in ...,00 /14 ' ‘"Ii. 11. AT&T OTC. Run Date: 06/17/2020 Run Time: 10:57:09 Data Osage for: Item Conn. Conn. originating ET Bytes Bytes Apn INZI INSI MARL NICOLL Date Time Number Up Dn (OTC) 12804 06/15/20 16:09:05 0:00 0 0 ins 3587080982063727 310410214827503 APPLE !PHONES 12805 06/15/20 16:09:13 12:38 7085 5956 ins 3587080982063727 310410214827503 APPLE !PHONES 12806 06/15/20 16:21:51 0:52 5536 1696 ins 3587080982063727 310410214827503 APPLE 'PHONES 12807 06/15/20 16:22:43 2:41 3376 1464 ins 3587080982063727 310410214827503 APPLE 'PHONES 12808 06/15/20 16:25:24 60:00 20268 9392 ins 3587080982063727 310410214827503 APPLE 'PHONES 12809 06/15/20 16:31:20 1:51 5169 6230 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12810 06/15/20 16:31:21 1:51 6230 4881ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12811 06/15/20 16:33:12 60:00 7950 6460ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 12812 06/15/20 17:25:24 60:00 8496 2928 was 3587080982063727 310410214827503 APPLE !PHONES 12813 06/15/20 17:33:12 60:00 11387 1675 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12814 06/15/20 18:25:24 39:31 3424 1340 was 3587080982063727 310410214827503 APPLE 'PHONES 12815 06/15/20 18:33:12 60:00 76302 177440 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12816 06/15/20 19:04:54 45:11 11099 8572 ins 3587080982063727 310410214827503 APPLE !PHONES 12817 06/15/20 19:04:55 45:10 11099 8484 ins 3587080982063727 310410214827503 APPLE 'PHONES 12818 06/15/20 19:33:12 60:00 63045 307869 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12819 06/15/20 19:50:05 3:08 3640 1432 ins 3587080982063727 310410214827503 APPLE 'PHONES 12820 06/15/20 19:53:13 2:51 2644 1428 ins 3587080982063727 310410214827503 APPLE 'PHONES 12821 06/15/20 19:53:13 2:51 2644 1340 ins 3587080982063727 310410214827503 APPLE 'PHONES 12822 06/15/20 19:56:04 60:00 10272 4004 ins 3587080982063727 310410214827503 APPLE 'PHONES 12823 06/15/20 20:33:12 28:26 31735 20682ruagonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12824 06/15/20 20:56:04 60:00 10036 3300 ins 3587080982063727 310410214827503 APPLE 'PHONES 12825 06/15/20 21:01:38 2:03 5060 6228ruagonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12826 06/15/20 21:01:39 2:03 6228 4772ruagonpho 3587080982063727 310410214827503 APPLE 'PHONES no 12827 06/15/20 21:03:42 60:00 16986 13506ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 12828 06/15/20 21:56:04 60:00 8620 3160 ins 3587080982063727 310410214827503 APPLE !PHONES 12829 06/15/20 22:03:42 60:00 50958 11825ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 12830 06/15/20 22:56:04 60:00 6956 2896 ins 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 518 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003162 The information contained her is NeTifikE not for general distribution. EFTA 00117238 EFTA01251762 MOBILITY 41111, 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in AT&T UTC. Run Date: 06/17/2020 Run Time: 1S:57:09 Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes( Apn INEI IM3I ten NOD= Date Time Number Up Dn (UTC) 12831 06/15/20 23:03:42 8:50 0 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12832 06/15/20 23:12:31 2:38 5065 6282 nxtgonpho 3587080982063727 310410214827503 APPLE !PROMS no 12833 06/15/20 23:12:32 2:39 6282 4777 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12834 06/15/20 23:15:10 1:02 280 581 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12835 06/15/20 23:16:11 2:04 288 48ruagonpho 3587080982063727 310410214827503 APPLE IPRONE8 no 12836 06/15/20 23:16:13 2:03 48 Ormagonpho 3587080982063727 310410214827503 APPLE !PHONES no 12837 06/15/20 23:18:16 60:00 16495 14181ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12838 06/15/20 23:56:04 60:00 17100 6124 imp 3587080982063727 310410214827503 APPLE !PHONES 12839 06/16/20 00:18:16 25:51 42120 24512ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 12840 06/16/20 00:44:07 60:00 28133 1467Ormagonpho 3587080982063727 310410214827503 APPLE !PHONES no 12841 06/16/20 00:56:04 60:00 7064 2680 imp 3587080982063727 310410214827503 APPLE DRONES 12842 06/16/20 01:44:07 60:00 10042 7545 nxtgonpho 3587080982063727 310410214827503 APPLE DRONES no 12843 06/16/20 01:56:04 60:00 10036 3068 imp 3587080982063727 310410214827503 APPLE DRONES 12844 06/16/20 02:44:07 60:00 3561 6127 ructgonpho 3587080982063727 310410214827503 APPLE DRONES no 12845 06/16/20 02:56:04 47:12 8604 3052 imp 3587080982063727 310410214827503 APPLE !PHONES 12846 06/16/20 03:44:07 60:00 924 84Ormagonpho 3587080982063727 310410214827503 APPLE !PHONES no 12847 06/16/20 03:48:35 60:00 11908 7693 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 519 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003163 The information contained her is NsTroliAL not for general distribution. EFTA 00117239 EFTA01251763 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in AT&T arc. Run Date: 06/17/2020 Run Time: SMS Usage For: Item Conn. Conn. Originating Terminating IMEI INS, Dose HMS Type Feature Date Time Number Member (OTC) 1 03/10/20 16:52:03 310410214827503 MIST Wi-Fi 2 03/12/20 12:39:52 310410214827503 MIST Wi-Fi 3 03/12/20 12:40:46 310410214827503 SNSO Wi-Fi 4 03/12/20 12:41:34 310410214827503 MIST Wi-Fi 5 03/12/20 12:41:56 310410214827503 SNSO Wi-Fi 6 03/12/20 12:44:28 310410214827503 MIST Wi-Fi 7 03/12/20 18:15:16 310410214827503 MIST Wi-Fi 8 03/14/20 15:41:47 310410214827503 MIST Wi-Fi 9 03/14/20 20:17:27 310410214827503 MOO Wi-Fi 10 03/14/20 20:18:17 310410214827503 MOO Wi-Fi 11 03/14/20 22:40:00 310410214827503 MIST 12 03/14/20 22:40:04 310410214827503 MIST 13 03/14/20 23:58:23 310410214827503 MIST 14 03/14/20 23:59:49 310410214827503 MIST 15 03/15/20 00:01:14 310410214827503 MIST 16 03/15/20 00:02:40 310410214827503 MIST 17 03/15/20 00:05:03 310410214827503 MIST 18 03/15/20 00:07:02 3587080982063726 310410214827503 MIST APPLE 'PHONES 19 03/18/20 11:53:14 310410214827503 MOO 20 03/25/20 18:30:28 310410214827503 MIST Wi-Fi 21 04/16/20 22:16:33 310410214827503 MIST 22 04/21/20 03:12:24 310410214827503 MIST 23 04/21/20 03:12:29 310410214827503 MIST 24 04/21/20 03:17:59 3587080982063726 310410214827503 MIST APPLE 'PHONES 25 04/21/20 03:19:42 3587080982063726 310410214827503 MIST APPLE 'PHONES 26 04/21/20 03:19:42 3587080982063726 310410214827503 MIST APPLE 'PHONES 27 05/05/20 22:15:25 310410214827503 SNSO Wi-Fi 28 05/06/20 09:12:43 310410214827503 MST Wi-Fi 29 05/09/20 17:20:58 310410214827503 MST Wi-Fi 30 05/14/20 09:08:02 310410214827503 SNST Wi-Fi AT&T Proprietary Page 1 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00003164 CONFIDENTIAL EFTA 00117240 EFTA01251764 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T'S records are stored and provided in tr `'s ad as AT&T OTC. Run Date: 06/17/2020 Run Time: SM3 Usage For: Item Conn. Conn. Originating Terminating 1MEI IM81 Dese HMS Type Feature Date Time Number Number (OTC) 31 05/14/20 09:08:04 310410214827503 SMST Wi-Fi 32 05/14/20 09:08:06 310410214827503 SMST Wi-Fi 33 05/15/20 06:20:40 310410214827503 SMS0 34 06/08/20 15:49:48 310410214827503 SMST Wi-Fi 35 06/15/20 17:15:46 310410214827503 SMS0 Wi-Fi 36 06/15/20 17:16:39 310410214827503 SMST Wi-Fi AT&T Proprietary Page 2 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00003165 CONFIDENTIAL EFTA 00117241 EFTA01251765