EFTA00129101.pdf

CENTERFORM MISSING & EXPLOITED C H I L D R E N' CyberTipline Report 8365 8616 Priority Level: 3 (Additional information required to determ ne possible risk) Received by NCMEC on 12-15-2020 23:52:05 U TC All dates are displayed as MM-DD-WYY Except for times provided in Additional Information sections, all time zones are displayed in UTC Executive Summary The following is a brief overview of information contained in this CyberTipline report: Incident Type: Chil I Sex Trafficking NCMEC incident Typ p is based on NCMEC's review of the report OR a 'Hash Match' of one or more upl aded files. NCMEC may not have viewed all uploaded files submit ed by the reporting ESP. The National Center for Missing & Exploited Children (NCMEC) was incorporated in 1984 by child advocates as a private, non-profit 501(c)(3) orgy to serve as a national clearinghouse and resource center for fam lies, victims, private organizations, law enforcement, and he public on missing and sexually exploited child issues. To further our rt Ission to help find missing children, reduce child sexual exploitation, and prevent future victimization, NCMEC operates the CyberTipfir e and Child Victim Identification Program. NCMEC makes ' nformation submitted to the CyberTipline and Child Victim Identification Program available to law enforcement and also uses this inf mation to help identify trends and create child safety and prevention messages. As a clearinghouse, NCMEC also works with ElecIronic Service Providers, law enforcement and the public in a combined effort to reduce online child sexual abuse images. NCMEC performs its programs of work pursuant to its own private mission and independent business operations. NCMEC does not act in he capacity of or under the direction or control of the government or law r nforcement agencies. NCMEC does not investigate and cannot verify the accuracy of the information submitter by reporting parties. EFTA00129101  CyberTipline Report 83658616 I i Contents Section A: Reported Information 1 Reporting Person Incident Information 1 Other Section B: Automated Information Added by NCMEC Systems 2 Explanation of Automated Information (in alphabetical order) 2 Section C: Additional Information Provided by NCMEC 3 NCMEC Note #1 3 NCMEC Note #2 3 NCMEC Note #3 3 NCMEC Note #4 6 Supplemental Files 6 Section Law Enforcement Contact Information 8 _CSTT_Fl3I (Alexandria) 8 This Report is provided solely for informational purposes pursuant to NC EC's nonprofit mission. Please treat all information in this Report as confider) EFTA00129102  CyberTipline Report 8365861611 Section A: Reported Information The following information was submitted to the CyberTipline by the Reporting Person or Reporting ESP. The information appearing in Section A is information received in the original submission. The reporting of information in Section A, other than the 'Incident Type' and 'Incident Time," is voluntary and undertaken at the initiative of the Reporting Person or Reporting ESP. Reporting Person Submitter. Kathryn Phone: IP Address: Received by on 2-15-2020 23:52:05 UTC Incident Information Incident Type: Child Sex Trafficking Incident Time: 12-15-2020 23:49:00 UTC Other Additional Information: Epsteins private group is still active and Jennifer Dee young is the ringleader. Who is Destiny in Tampa, FL, This concludes Section A. All of the information in this section was submitted electronically to the CyberTipline by the Reporting Person, NCMEC Call Center or Reporting ESP. The information appearing in Section A is information received in the original submission. The reporting of information in Section A, other than the "Incident Type' and "Incident Time," is voluntary and undertaken at the initiative of the Reporting Person or Reporting ESP. This Report is provided solely for informational purposes pursuant to NC1 EC's nonprofit mission Please Veal all information in this Report as conflden le EFTA00129103  CyberTipline Report 83658616 12 Section B: Automated Information Added by NCMEI Systems Upon receipt of a CyberTipline report, NCMEC Systems may conduct automated processes on the information submitted in Section A. The information found in Section B of this CyberTipline Report has been automatically generated by NCMEC Systems. If the CyberTipline Report was submitted by a member of the public, Section B will be blank. Explanation of Automated Information (in alphabelcal order) Geo-Looicup: Whe la Reporting ESP voluntarily reports an IP address for the 'Suspect," NCMEC Systems will geographically resolve the IP address via a publicly-available online query. The results of this lookup are displayed. Geolocafion data i ; approximate and may not display a user's exact location. Please be awa e that the geolocation information provided is not exact but is iroviding a reliable estimate of location based on IP address(es) voluntaril provided by the reporting ESP. This concludes Section B This Report is proWield solely for informational purposes pursuant to NCMEC's nonprofit mission. Please treat all information in this Report as confidential. EFTA00129104  KISS az rxPLCntD CyberTipline Report 83658616 13 Section C: Additional Information Provided by NCM C Section C contains information collected by NCMEC staff based on the information electronically submitted by the Reporting Person, NCMEC Call Center or Reporting ESP. Section C may contain a variety of additional information, including data gathered from queries on publicly-available, open-source websites. Any queries conducted by NCMEC staff will be documented and any query results will be saved to the electronic filing system when possible. The CyberTipline cannot confirm the accuracy of information found in public records or whether the results are affiliated with any parties relating to this report NCMEC Priority Le 3 (Additional information required to di termine possible risk) NCMEC Classification': Child Sex Trafficking NCMEC Date Processed: 12-17-2020 21:57:07 UTC Made Available to Law Enforcement by NCMEC: Yes NCMEC Classdicaaoi is based on NCMEC's review of the report OR a -Hash Match- of one or more uploaded files. NCMEC may not have viewed all uploaded files submit ed by the reporting ESP. NCMEC Note #1 CSTT-SEF 12-17- 020 21:35:13 UTC This CyberTipline Report was processed by the Child Sex Trafficking Team (CSTT) in the Case Analysis Division. Should you have any questions regarding this report, or need any technical assistance pertaining to child sex trafficking, please contact us at org. Any open source and/or public record searches conducted by NCMEC will be documented within this report and saved to the electronic filing system. The NCMEC cannot confirm the accuracy of information found in public records or whether the results are associated with any of the parties affiliated with this report. Please note, the re porting party's narrative appears to be disjointed and difficult to understan therefore, I will only conduct deconfliction on re want terms listed within the narrative, at this time. If you would like additic nal searches on the information listed within the narrative please e-mail org with this request. NCMEC Note #2 CSTT-SEF 12-17-2020 21:38:56 UTC At this time I will conduct searches on the reported information. I searched for previous reports known to the Exploited Child Division and other NCMEC Databases (Sex Offender Tracking Team, Missing Children's Database and Attempted Abductions) on the following terms: I did not locate any results at this time. NCMEC Note #3 This Report is provided solely for informational purposes pursuant to NCMEC's nonprofit mission. Please treat all information in this Report as confidential. EFTA00129105  t ti CyberTipline Report 83658616 14 CSTT-SEF 12-17-2020 21:41:09 UTC At this time I will conduct searches on the reporting party. I searched for previous reports known to the Exploited Child Division and other NCMEC Databases (Sex Offender Tracking Team, Missing Children's Database and Attempted Abductions) on the following terms: "Kathryn Dee" I did not locate any results at this time. WHOIS lookup for :WHOIS lookup for IP and Network lookup information: Address lookup canonical name 120 . sub-174-228-8 myww.com aliases addresses Network Whois record Queried whois.arin.net with NetRange: CIDR . NetName: WIRELESSDATANETWORK NetHandle: NET-174-192-0-0-1 Parent: NET174 (NET-174-0-0-0-0) NetType: Direct Allocation OriginAS: Organization: Calico Partnership DBA Verizon Wireless (CLLC) RegDate: 2008-12-16 Updated: 2012-03-02 Ref: https://rdap.arin.neffregistryfip/174.192.0.0 OrgName: Cellco Partnership DBA Verizon Wireless Orgld: CLLC Address: 180 Washington Valley Road City: Bedminster This Report is provided solely for Informational purposes pursuant to NefifEtts nonprofit mission. Please treat all information in this Report as confldencial. EFTA00129106  CyberTipline Report 8365861615 StateProv: NJ PostalCode: 07039 County: US RegDate: 2001-10-01 Updated: 2017-10-12 Ref. https://rdap.arin.netiregistrytentity/CLLC OrgAbuseHandle: ABUSE716-ARIN OrgAbuseName: Abuse OrgAbusePhone: +1-908-306-7000 OrgAbuseEmail: [email protected] OrgAbuseRef: Mtps://rdap.arin.nel/registry/entity/ABUSE716-ARIN OrgTechHandle: NDBM-ARIN OrgTechName: NDBM OrgTechPhone: +1-908-306-7000 OrgTechEmail: [email protected] OrgTechRef: https://rdap.arin.nethegistry/entity/NDBM-ARIN DNS records name class type data time to live 120.sub-174-228-8.myvzw.com IN A 7200s (02:00:00) sub-174-228-8.myrzw.com IN NS nsl.vzwdomain.com 7200s (02:00:00) sub-174-228-8.myyzw.com IN NS ns2.yzwdomain.com 7200s (02:00:00) sub-174-228-8.mraw.com IN SOA server njbbintdnslv.local email: vzw.net.dnsr•.-verizonwireless.com serial: 2009012822 refresh: 86400 retry: 7200 expire: 1209600 minimum ttl: 900 7200s (02:00:00) myvzw.com IN NS ns1.vzwdomain.com 7200s (02:00:00) myvzw.com IN NS ns2.vzwdomain.com 7200s (02:00:00) myvzw.com IN A 207.68.174.238 7200s (02:00:00) myvzw.com IN SOA server njbbintdns1v.local email: vzw.neldns verizornvireless.corn serial: 2012104588 refresh: 43200 retry: 7200 expire: 1209600 minimum ttl: 10800 7200s (02:00:00) 120.8.228.174.in-addr.ama IN PTR 120.sub-174-228-8.myvzw.com 1446s (00:24:06) 228.174.in-addr.arpa IN NS ns2.vzwdomain.com 7200s (02:00:00) 228.174.in-addr.arpa IN NS nstvzwdomain.com 7200s (02:00:00) 228.174.in-addr.arpa IN SOA server: njbbinWns1v.local email: vzw.net.dnsigverizonvelreless.com serial: 281 refresh: 86400 retry: 7200 expire: 1209600 minimum ttl: 900 7200s (02:00:00) Traceroute Tracing route to 120.sub-174.228-8.myvzw.com hop It rtt rtt ip address fully qualified domain name 1 2 1 1 169.254.158.58 2 1 1 0 169.48.118.156 ae103.ppr01.dal13.netwoddayer.com 3 0 0 0 169.48.118.136 88.76.30a9.ip4.static.sl-reverse.com 4 • 3 169.45.18.88 ae17.cbs01.eq01.dal03.networldayer.com 5 1 1 1 50.97.17.53 ae33.bbr0l.egOl.da103.networklayer.com 6 1 1 1 64.125.192.21 ae9.er2.dfw2.us.zip.zayo.corn 7 1 1 1 64.125.27.104 ae24.cs2.d1w2.us.zip.zayo.com 8 9 1 1 1 64.125.14.253 zayo.vdms.er2.ord7.us.zip.zayo.com 10 ' • • 11 • • • 12 41 39 40 69.82.18.181 181.sub-69-82-18.myv-zw.com 13 This Report is provided solely for informational purposes pursuant to NCMECs nonprofit mission. Please treat all information in this Report as confidential. EFTA00129107  k4 CyberTipline Report 83658616 l 6 14 • • 15 • • 16 • • Trace aborted Maxmind Geographic Results: Country: US Region: City: Postal Code: =I Latitude: Longitude: Metropolitan Code: ISP: Venzon Wireless Organization: Verizon Wireless Types: cellular Google Geographic Results: Country: US Latitude Longitude Area: 170.554.7969 sq. km. (65.851.5755 sq. miles) mop•ti WgigffiitmEC Note #4 CSTT-SEF 12-17-2020 21:41:20 UTC The following Point of Contact has been sent a copy of this CyberTipline report: FBI: Federal Bureau of Investigation Emei Desk Cell: cc: [email protected] Questions regarding Innocence Lost and national intelligence may be addressed to Supplemental Files The following is a list of supplemental files saved to the report by NCMEC CTT83658616.pdf This Report Is provided solely for informational purposes pursuant to NCA4EC's nonprofit mission. Please treat all information in this Report as confidential. EFTA00129108  CyberTipline Report 83658616 17 This concludes Section C If you need further Information regarding the contents of this Report. please contact the ChM Sex Traffiddng Team at This Report is provided solely for informational purposes pursuant to NC C's nonprofit mission. Please treat ell information in this Report as confiderel. EFTA00129109  CyberTipline Report 83658616 18 Section D: Law Enforcement Contact Information The report was made available to the Law Enforcement Agency fisted below. _CSTT_FB1 (Alexandria) Investigator Assigned Officer Title: City/State: Alexandria. VA Country: t Initori %fabric Email Address: Time/Date was made available: 12-17-2020 21:55:00 UTC This concludes Section D This concludes CyberTipline Report 83858816 This Report Is provided solely for informational purposes pursuant to NCMtCs nonprofit mission. Please treat all information in this Report as confidenti1. EFTA00129110