# CyberTipline Report 54391248

Priority Level: 3

(Additional information required to determine possible risk)

Received by NCMEC on 08-30-2019 00:12:00 UTC

All dates are displayed as MM-DD-YYYY

Except for times provided in Additional Information sections, all time zones are displayed in UTC

## Executive Summary

The following is a brief overview of information contained in this CyberTipline report:

Incident Type: Child Sex Trafficking

NCMEC Incident Type is based on NCMEC's review of the report OR a "Hash Match" of one or more uploaded files. NCMEC may not have viewed all uploaded files submitted by the reporting ESP.

The National Center for Missing & Exploited Children (NCMEC) was incorporated in 1984 by child advocates as a private, non-profit 501(c)(3) organization to serve as a national clearinghouse and resource center for families, victims, private organizations, law enforcement, and the public on missing and sexually exploited child issues. To further our mission to help find missing children, reduce child sexual exploitation, and prevent future victimization, NCMEC operates the CyberTipline and Child Victim Identification Program. NCMEC makes information submitted to the CyberTipline and Child Victim Identification Program available to law enforcement and also uses this information to help identify trends and create child safety and prevention messages. As a clearinghouse, NCMEC also works with Electronic Service Providers, law enforcement and the public in a combined effort to reduce online child sexual abuse images. NCMEC performs its programs of work pursuant to its own private mission and independent business operations. NCMEC does not act in the capacity of or under the direction or control of the government or law enforcement agencies. NCMEC does not investigate and cannot verify the accuracy of the information submitted by reporting parties.

EFTA00147669

CyberTipline Report 54391248 |

## Contents

<table border="1"><tr><td colspan="2">Section A: Reported Information</td><td>1</td></tr><tr><td></td><td>Reporting Person</td><td>1</td></tr><tr><td></td><td>Incident Information</td><td>1</td></tr><tr><td></td><td>Other</td><td>1</td></tr><tr><td></td><td>Child Victim</td><td>1</td></tr><tr><td></td><td>User or Person Being Reported</td><td>1</td></tr><tr><td></td><td>Additional Information Submitted by the Reporting Person</td><td>2</td></tr><tr><td colspan="2">Section B: Automated Information Added by NCMEC Systems</td><td>3</td></tr><tr><td></td><td>Explanation of Automated Information(in alphabetical order)</td><td>3</td></tr><tr><td colspan="2">Section C: Additional Information Provided by NCMEC</td><td>4</td></tr><tr><td></td><td>NCMEC Note #1</td><td>4</td></tr><tr><td></td><td>NCMEC Note #2</td><td>4</td></tr><tr><td></td><td>NCMEC Note #3</td><td>5</td></tr><tr><td></td><td>NCMEC Note #4</td><td>10</td></tr><tr><td></td><td>NCMEC Note #5</td><td>10</td></tr><tr><td></td><td>Supplemental Files</td><td>10</td></tr><tr><td colspan="2">Section D: Law Enforcement Contact Information</td><td>11</td></tr><tr><td></td><td>_CSTT_FBI(Alexandria)</td><td>11</td></tr></table>

This Report is provided solely for informational purposes pursuant to NCMEC's nonprofit mission. Please treat all information in this Report as confidential.

EFTA00147670

CyberTipline Report 54391248

1

## Section A: Reported Information

The following information was submitted to the CyberTipline by the Reporting Person or Reporting ESP. The information appearing in Section A is information received in the original submission. The reporting of information in Section A, other than the "Incident Type" and "Incident Time," is voluntary and undertaken at the initiative of the Reporting Person or Reporting ESP.

## Reporting Person

## Submitter:

IP Address:

Received by NCMEC on 08-30-2019 00:12:00 UTC

## Incident Information

| Incident Type: | Child Sex Trafficking |

| :--- | :--- |

| Incident Time: | Not provided |

| :--- | :--- |

## Other

Additional Information:

I believe that of South Bend, In who is being investigated for theft currently (her ex husband is in jail currently for taking millions from elderly) also was involved with Epstein in sex trafficking and that is how she got all of her other money. She reported this to someone and is blackmailing them to keep quiet. She travels around internationally to deal cocaine sex traffic and to launder money. I believe several people possibly even FBI agents police are have been paid off by her to keep quiet in the local community. She is guilty of cyber bullying, has a ton of alias's. google her name on my life. She is born in she is I have a list of aliass for her. She has a history of horrible sex abuse history growing up. She is responsible for at least aa half dozen sex traffic violations, and can lead you to more. She also can lead you to from FBI Americas most Wanted. She is believed to be traveling with him. I do not have specifics on time of incident but I can give you names of people to talk to who can and give you paperwork of her alias's etc...

## Child Victim

## Relationship to Reporter:

Dont have but can give you person who can

## User or Person Being Reported

Relationship to Reporter:

acquaintance

Name:

<table><thead><tr><th>Address:</th><th>Washington DC</th><th>Not sure DC US</th></tr></thead></table>

Approximate Age:

Occupation:

Profile URL:

Self Employed Chicago IL is on Linkden

This Report is provided solely for informational purposes pursuant to NCMEC's nonprofit mission. Please treat all information in this Report as confidential.

EFTA00147671

CyberTipline Report 54391248

2

Additional Information:

When on Instagram goes by approx dob Goes by regular name on Linkden. She will lead you to FBI most wanted . She has traveled with him several times. I can provide several alias's she has used. Found them on internet my life search, real easy. She is set for trial coming up soon for her husbands enditment of taking millions of dollars from elderly is pleading not guilty which is bullshit she cooked the books! Paid off half the town. Please call me for more information . My name is

I will not talk to to South Bend IN FBI because half of the town is paid off by her, and she doesn't live here anymore. Everyone here turns a blind eye. I don't trust FBI guy either.

Linkden goes by her normal name has an employer listed in chicago. She buys everyone off she is rich. Where did she get all of her millions?? Story is about a ring she found. Its really sex trafficking. She took her own sister out of school in elkhart iN to travel out of states with her???? I have so much more to say. Please call me . I Will not speak to local FBI in South Bend. Has to be someone else from a specialist team. They will just blow me off. has to be from Washington special operations.

## Additional Information Submitted by the Reporting Person

Please call me for more details.She is crafty and dangerous and very manipulative. She has bought out the entire law enforcement/FBI here in town of South Bend Indiana. Someone from outside of here needs to look at this! It is serious... She never stays in one place very long she runs internationally... for her sex trade...and other businesses.

This concludes Section A. All of the information in this section was submitted electronically to the CyberTipline by the Reporting Person, NCMEC Call Center or Reporting ESP. The information appearing in Section A is information received in the original submission. The reporting of information in Section A, other than the "Incident Type" and "Incident Time," is voluntary and undertaken at the initiative of the Reporting Person or Reporting ESP.

This Report is provided solely for informational purposes pursuant to NCMEC's nonprofit mission. Please treat all information in this Report as confidential.

EFTA00147672

CyberTipline Report 54391248

3

## Section B: Automated Information Added by NCMEC Systems

Upon receipt of a CyberTipline report, NCMEC Systems may conduct automated processes on the information submitted in Section A. The information found in Section B of this CyberTipline Report has been automatically generated by NCMEC Systems. If the CyberTipline Report was submitted by a member of the public, Section B will be blank.

## Explanation of Automated Information (in alphabetical order)

Geo-Lookup: When a Reporting ESP voluntarily reports an IP address for the "User or Person Being Reported," NCMEC Systems will geographically resolve the IP address via a publicly-available online query. The results of this lookup are displayed.

Geolocation data is approximate and may not display a user's exact location. Please be aware that the geolocation information provided is not exact but is providing a reliable estimate of location based on IP address(es) voluntarily provided by the reporting ESP.

This concludes Section B

This Report is provided solely for informational purposes pursuant to NCMEC's nonprofit mission. Please treat all information in this Report as confidential.

EFTA00147673

CyberTipline Report 54391248

4

## Section C: Additional Information Provided by NCMEC

Section C contains information collected by NCMEC staff based on the information electronically submitted by the Reporting Person, NCMEC Call Center or Reporting ESP. Section C may contain a variety of additional information, including data gathered from queries on publicly-available, open-source websites. Any queries conducted by NCMEC staff will be documented and any query results will be saved to the electronic filing system when possible. The CyberTipline cannot confirm the accuracy of information found in public records or whether the results are affiliated with any parties relating to this report.

NCMEC Priority Level: 3 (Additional information required to determine possible risk)

NCMEC Classification*: Child Sex Trafficking

International Country: United States

NCMEC Date Processed: 08-30-2019 15:50:59 UTC

Made Available to Law Enforcement by NCMEC: Yes

NCMEC Classification is based on NCMEC's review of the report OR a "Hash Match" of one or more uploaded files. NCMEC may not have viewed all uploaded files submitted by the reporting ESP.

## NCMEC Note #1



CSTT-DLM 08-30-2019 15:10:27 UTC



This CyberTipline Report was processed by the Child Sex Trafficking Team (CSTT) in the Case Analysis Division. Should you have any questions regarding this report, or need any technical assistance pertaining to child sex trafficking, please contact us at CSTTreporting@ncmec.org.

Any open source and/or public record searches conducted by NCMEC will be documented within this report and saved to the electronic filing system. The NCMEC cannot confirm the accuracy of information found in public records or whether the results are associated with any of the parties affiliated with this report.

Please note, the reporting party's narrative appears to be disjointed and difficult to understand; therefore, I will only conduct deconfliction on relevant terms listed within the narrative, at this time. If you would like additional searches on the information listed within the narrative, please e-mail CSTTreporting@ncmec.org with this request.

## NCMEC Note #2



CSTT-DLM 08-30-2019 15:27:58 UTC


At this time, I will conduct deconfliction searches on the reported information.

I searched for previous reports known to the Exploited Child Division and other NCMEC Databases (Sex Offender Tracking Team, Missing Children's Database and Attempted Abductions) on the following terms with relevant results:





This Report is provided solely for informational purposes pursuant to NCMEC's nonprofit mission. Please treat all information in this Report as confidential.

EFTA00147674

CyberTipline Report 54391248

5

NCMEC has received multiple reports regarding "Jeffrey Epstein" from various sources, which, based on the information within each specific report, have been sent to multiple law enforcement agencies. None of the previous reports regarding this individual appear to have been from the same reporting party, or appear to be related to the specific allegations within the current report.

## NCMEC Note #3



CSTT-DLM 08-30-2019 15:36:21 UTC



At this time I will conduct searches on the reporting party.

I searched for previous reports known to the Exploited Child Division and other NCMEC Databases (Sex Offender Tracking Team, Missing Children's Database and Attempted Abductions) on the following terms but did not locate any results at this time.



WHOIS lookup for

IP and Network lookup information:

Address lookup

addresses

## Network Whois record



Queried whois.arin.net with "n ! NET-73-50-0-01 "...



| NetRange: | 73.50.0.0 - 73.51.255.255 |

| :--- | :--- |

| CIDR: | 73.50.0.0/15 |

| :--- | :--- |

| NetName: | CHICAGO-CPE-6 |

| :--- | :--- |

NetHandle: NET-73-50-0-0-1

| Parent: | CABLE-1 (NET-73-0-0-0-1) |

| :--- | :--- |

---

| NetType: | Reassigned |

| :--- | :--- |

Customer: Comcast IP Services, L.L.C. (C04780382)

| RegDate: | 2013-11-26 |

| :--- | :--- |



Ref: https://rdap.arin.net/registry/ip/73.50.0.0



| Updated: | 2013-11-26 |

| :--- | :--- |

CustName: Comcast IP Services, L.L.C.

Address:

This Report is provided solely for informational purposes pursuant to NCMEC's nonprofit mission. Please treat all information in this Report as confidential.

EFTA00147675

CyberTipline Report 54391248

6



City: Mount Laurel





StateProv: NJ





PostalCode: 08054



Country: US

| RegDate: | 2013-11-25 |

| :--- | :--- |

| Updated: | 2016-08-31 |

| :--- | :--- |



Ref: https://rdap.arin.net/registry/entity/C04780382



| OrgTechHandle: IC161-ARIN |

| :--- | :--- |

This markdown representation preserves the original layout of the document, including headings, paragraphs, and table formulas.

| OrgTechName: | Comcast Cable Communications Inc |

| :--- | :--- |

OrgTechPhone:

| OrgTechEmail: | CNIPEO-Ip-registration@cable.comcast.com |

| :--- | :--- |

| OrgTechRef: | https://rdap.arin.net/registry/entity/IC161-ARIN |

| :--- | :--- |



OrgAbuseHandle: NAPO-ARIN



OrgAbuseName: Network Abuse and Policy Observance



OrgAbusePhone:





OrgAbuseEmail: abuse@comcast.net



| OrgAbuseRef: | https://rdap.arin.net/registry/entity/NAPO-ARIN |

| :--- | :--- |

## DNS records

## name class type data time to live



hsd1.iil.comcast.net IN NS dns104.comcast.net 7200s (02:00:00)





hsd1.il.comcast.net IN NS dns105.comcast.net 7200s (02:00:00)





hsd1.il.comcast.net IN NS dns103.comcast.net 7200s (02:00:00)





hsd1.iil.comcast.net IN NS dns102.comcast.net 7200s (02:00:00)





hsd1.iil.comcast.net IN NS dns101.comcast.net 7200s (02:00:00)





hsd1.il.comcast.net IN SOA server: dns101.comcast.net email: dnsadmin@comcast.net serial: 15462301 refresh: 7200



<table><thead><tr><th>retry:</th><td>3600</td><td>expire:</td><td>604800</td><td>minimum ttl:</td><td>7200</td><td>7200s</td><td>(02:00:00)</td></tr></thead></table>

comcast.net IN A 69.252.80.75 30s (00:00:30)

comcast.net IN RRSIG type covered: A (1) algorithm: RSA/SHA-1 (5) labels: 2 original ttl: 30 (00:00:30) signature

<table><tr><td>expiration:</td><td>2019-09-01</td><td>17:41:53Z</td><td>signature inception:</td><td>2019-08-25</td><td>14:36:53Z</td><td>key tag:</td><td>26550</td><td>signer's name:</td><td>comcast.net</td></tr><tr><td>signature:</td><td></td><td></td><td></td><td></td><td></td><td></td><td></td><td></td><td></td></tr></table>

| 1024 bits) | 7C16AA8B895C6B0799E0F379A9C4D5C5 |

| :--- | :--- |

B2F0E3155808E97C15D0C20B343DBFFA

9256A346B1DF142C717CCB44B9305380

331A86B7BDAA614B32F27B1401015F13

A98AC4ECCCFA91979EABF9930E3CD3D9

B898AD80D9614D3D0C69E25A5E72D308



738BE328AEADEE02232BCA22D8B8F30E



| FF129B32B50BBA333EE23214EA9EA5C3 | 30s (00:00:30) |

| :--- | :--- |



comcast.net IN MX preference: 5 exchange: mx2.comcast.net 7200s (02:00:00)





comcast.net IN MX preference: 5 exchange: mx1.comcast.net 7200s (02:00:00)



comcast.net IN RRSIG type covered: MX (15) algorithm: RSA/SHA-1 (5) labels: 2 original ttl: 7200 (02:00:00) signature

<table border="1"><tr><td>expiration:</td><td>2019-09-01</td><td>17:41:53Z</td><td>signature inception:</td><td>2019-08-25</td><td>14:36:53Z</td><td>key tag:</td><td>26550</td><td>signer&#x27;s name:</td><td>comcast.net</td></tr><tr><td>signature:</td><td></td><td></td><td></td><td></td><td></td><td></td><td></td><td></td><td></td></tr></table>

| 1024 bits | 431383DEA86A5D9DBDF152E531B39925 |

| :--- | :--- |



7B4E69C43995827AD1B87600CB292220



E592F9C133854EE77B535EA18D8308C9

A514C7EBAC97B0FD914C2F40980434A1



5A2DE8A5178DE4DE8812D389AFD97098



AEBBBBCE48C6C7E830CEA01F8C5E9187



8C921222C5A15A79007A80AE044E413



This Report is provided solely for informational purposes pursuant to NCMEC's nonprofit mission. Please treat all information in this Report as confidential.

EFTA00147676

CyberTipline Report 54391248

7

| 419647CA7AD111617070DD4BB2DE4F09 | 7200s (02:00:00) |

| :--- | :--- |



comcast.net IN NS dns102.comcast.net 7200s (02:00:00)





comcast.net IN NS dns101.comcast.net 7200s (02:00:00)





comcast.net IN NS dns103.comcast.net 7200s (02:00:00)





comcast.net IN NS dns104.comcast.net 7200s (02:00:00)





comcast.net IN NS dns105.comcast.net 7200s (02:00:00)



comcast.net IN RRSIG type covered: NS (2) algorithm: RSA/SHA-1 (5) labels: 2 original ttl: 7200 (02:00:00) signature

<table border="1"><tr><td>expiration:</td><td>2019-09-01</td><td>17:41:53Z</td><td>signature inception:</td><td>2019-08-25</td><td>14:36:53Z</td><td>key tag:</td><td>26550</td><td>signer&#x27;s name:</td><td>comcast.net signature:</td></tr></table>

| 1024 bits | A98949B6D1E1AA543BFABEEE5FB95275 |

| :--- | :--- |



6EAC1154CDB5ED6C0A30968231EE039B



A69B4E70AE9D1D38F6189BC7C6ED1F0C

35C5BD19712712412274F542F1679E7A

CED478277CC2EB89E63C937A17FA834E

812FD9346F320F167CE28F587F4D14AE

F2C914AB4C7EED63AEA77DA963F681B0

<table><tr><td>357297CA124E083BB8A1FB090DFDDCA5</td><td>7200s (02:00:00)</td></tr></table>



comcast.net IN NSEC next domain name: 4gmobile.comcast.net record types: A NS SOA MX TXT RRSIG NSEC DNSKEY

3600s (01:00:00)



comcast.net IN RRSIG type covered: NSEC (47) algorithm: RSA/SHA-1 (5) labels: 2 original ttl: 3600 (01:00:00) signature

<table><tr><td>expiration:</td><td>2019-09-01</td><td>17:41:53Z</td><td>signature inception:</td><td>2019-08-25</td><td>14:36:53Z</td><td>key tag:</td><td>26550</td><td>signer's name:</td><td>comcast.net</td></tr></table>

signature:

| 1024 bits | 95AD624BDF26939F323F132936E43C0E |

| :--- | :--- |



6DC4C4719BEB64EF1483560CFB35AE71



C666828C3497F946FBF4225ED1655CC8

9999B5AA6181AFB4E6CE7999E9EFAE40

F64B122A0FB62896FEAC896AC529EBB1

ABE65AEB419B0832EA0C1145BE6C251E

961EE0679B1D3E016A981D5F7ACC54C4

| 4ECFDAB31F34DE901B9282F598A990EC | 3600s (01:00:00) |

| :--- | :--- |



comcast.net IN TXT v=spf1 ip4:69.252.207.32/28 ip4:96.114.154.160/28 include:_spfv6.comcast.net include:_spf.mdp.comcast.net



(02:00:00)



?all 7200s (02:00:00)



comcast.net IN RRSIG type covered: TXT (16) algorithm: RSA/SHA-1 (5) labels: 2 original ttl: 7200 (02:00:00) signature

<table border="1"><tr><td>expiration:</td><td>2019-09-01</td><td>17:41:53Z</td><td>signature inception:</td><td>2019-08-25</td><td>14:36:53Z</td><td>key tag:</td><td>26550</td><td>signer&#x27;s name:</td><td>comcast.net signature:</td></tr></table>

| 1024 bits | 6DC4D33552DAB2BF8D103A06540AAB09 |

| :--- | :--- |

907CC8ABEB66FECD5B568663C69BB60D

86A2B501D7F858CE17E3F723AB3B60EE



72651A1ABDAFEE92170BA05E76BE2D8E





02C3448B48307FD4F51292287C9FDB19



FAE7B2AA2D919366899D1FC240F9720A

89B6EC8EDEDF270940B74B0B2EE35B5A

| **3DE53A58C8C702E950AAFCDE1961221E** | **7200s** (02:00:00) |

| :--- | :--- |

Note: The table is just a representation of the text. It should be formatted as a Markdown table with two columns: header and content.

comcast.net IN DNSKEY flags: SecureEntryPoint, ZoneKey (257) protocol: 3 algorithm: RSA/SHA-1 (5) public key:

| 2080 bits | 03010001C753C17B8A204454A0468E1C |

| :--- | :--- |



211A7CF0A01D6F03ABC39FB433C3D6C6



14DF4834FDAE1F26F345EFE6E041BC1C

# 42C02507ED58DF49742982F918506FBA



F3390AB5A201CEB61921C6DC86E5CA6



796E2C248F58483131A50C6D230F48F7



AE3889924DDD0E4CA02AF57C16CC0426



8F57EFE0966ED7F858A817AA777FD897



2C9620CAE17BA316CC36EDE5A95E51D9



This Report is provided solely for informational purposes pursuant to NCMEC's nonprofit mission. Please treat all information in this Report as confidential.

EFTA00147677

CyberTipline Report 54391248

8

B794AE41BD0DD6398C6B31125F060962

D19771EE6F8B8A4186513D3948024259

313F179DBDA7A54F984AC583F79481F8



BE306B28CCD013B3B3A01E253AC25585



BBC31755595330BA9F8DB0F165AF8C10

D8DD38A53AFB02F497BB0CE0F7C90960

726890F343CCE339277D027BE803F162



BAE8C131 3600s (01:00:00)



comcast.net IN DNSKEY flags: ZoneKey (256) protocol: 3 algorithm: RSA/SHA-1 (5) public key:

| 1056 bits | 03010001B10EF4ED3E3726F315281D68 |

| :--- | :--- |

F84B4C5990C298A5973DC3955D109F6F5



000488C57ED2A377F97C328E77388AD4



ED70BCD564EC488F1142A690A9C71B58



3A0FDDA7DB74B474C49C3A6AE204B03A





3A909ED9692A0508079294C4CFBDD1C0



95C15B1CBD73178FC7CDA6A838BDE9B0

A7DE31EDBFDA3EEC68438A425C483DAE

| 51E66831 | 3600s | (01:00:00) |

| :--- | :--- | :--- |



comcast.net IN RRSIG type covered: DNSKEY (48) algorithm: RSA/SHA-1 (5) labels: 2 original ttl: 3600 (01:00:00)



<table><tr><td>signature expiration:</td><td>2019-09-01 17:41:53Z</td><td>signature inception:</td><td>2019-08-25 14:36:53Z</td><td>key tag:</td><td>26550</td><td>signer's name:</td></tr></table>

comcast.net signature:

| 1024 bits | 2EAE30221CA27F8A7FFEC7BC4239E7FA |

| :--- | :--- |



FE35E57B137A8EC0AA2E5253B2FA8B96



FFACADFE469260F97CE35E0CD48BB341

E09EB2C8622F8BB614A54A8ECCE145EB

F9E573826E5D74CC7A4CC67A9AB2E79B



BE0C71B9F501C44655513826F228E58E



86FAFC2CE4D0AD7EBE7D7D81524FB34F

E9A8D281F42873A4A18B9D98BFCAFC78 3600s (01:00:00)



comcast.net IN RRSIG type covered: DNSKEY (48) algorithm: RSA/SHA-1 (5) labels: 2 original ttl: 3600 (01:00:00)



<table><tr><td>signature expiration:</td><td>2019-12-02 14:41:53Z</td><td>signature inception:</td><td>2019-08-04 10:41:53Z</td><td>key tag:</td><td>40909</td><td>signer's name:</td></tr></table>

comcast.net signature:

| 2048 bits | 497BB6CE1D982CCD760BC44114FC055C |

| :--- | :--- |

---

B06A32F53A010691D0FE9FA14E9E9AE5

7B39FD055B70ECF19500D1007758EEC9

D017996D48D04223F6D41AAD6162D6F9

3520E4A10C5C012F4AECA86E9425631A

3D2F653C6E8E6E541112A6724D98844D

C971A115221FFC11EECC4FBB8C96AA5C



DC6D08565D6693F5E9A44A4DE48D6264





26BB188E1DB2FB2846DE88B0C9B0A159



CC137D4FB773E01F1975B0CAB96C32A1

BDEB3E4D38E5028EB398ED193F7A7442



63875F1EF4EE84B4E7730C3AE577A4D9



4322BE7586B6A8363C533B46CBC2D79F

C6D1F46D736F606517730E941A435DF4

14EB92DF1EBC7B6BF20CCEC16E8330A4

| | |

| :--- | :--- |

| BC6D0E48D40EE4E946F8B27994267078 | 3600s (01:00:00) |



comcast.net IN SOA server: dns101.comcast.net email: domregtech@comcastonline.com serial: 2008239515 refresh: 7200

ext: 3600 expire: 1209600 minimum ttl: 3600 7200s (02:00:00)



<table><thead><tr><th>retry:</th><td>3600</td><td>expire:</td><td>1209600</td><td>minimum ttl:</td><td>3600</td><td>7200s</td><td>(02:00:00)</td></tr></thead></table>

comcast.net IN RRSIG type covered: SOA (6) algorithm: RSA/SHA-1 (5) labels: 2 original ttl: 7200 (02:00:00) signature

<table border="1"><tr><td>expiration:2019-09-01 17:41:53Z</td><td>signature inception:2019-08-25 14:36:53Z</td><td>key tag:26550</td><td>signer&#x27;s name:comcast.net</td></tr></table>

This Report is provided solely for informational purposes pursuant to NCMEC's nonprofit mission. Please treat all information in this Report as confidential.

EFTA00147678

CyberTipline Report 54391248

9

<table><thead><tr><th>(1024 bits)</th><th>AB489B31633B72BA28A79F6AE66FE726</th></tr></thead><tbody><tr><td>28AC56C1899717563CD66A94AD5A0B84</td><td></td></tr><tr><td>4592C75CB69624F168EC18F074F7B40F</td><td></td></tr><tr><td>75B9168B83D0F93232C1DD71DAA4CA8C</td><td></td></tr><tr><td>E37FCE3C2BCD7BB95CFEA51F73E7888A</td><td></td></tr><tr><td>540D91AF50A63AF736F2B6B52DEFDE51</td><td></td></tr><tr><td>B812B673EC32EF1E930AC760D72AA85D</td><td></td></tr><tr><td>6C308F2974FBE597C64734347D43AF95</td><td>7200s (02:00:00)</td></tr><tr><td>189.119.50.73.in-addr.arpa IN PTR</td><td>3600s (01:00:00)</td></tr><tr><td>189.119.50.73.in-addr.arpa IN PTR</td><td>3600s (01:00:00)</td></tr><tr><td>119.50.73.in-addr.arpa IN NS dns101.comcast.net 7200s (02:00:00)</td><td></td></tr><tr><td>119.50.73.in-addr.arpa IN NS dns102.comcast.net 7200s (02:00:00)</td><td></td></tr><tr><td>119.50.73.in-addr.arpa IN NS dns103.comcast.net 7200s (02:00:00)</td><td></td></tr><tr><td>119.50.73.in-addr.arpa IN NS dns104.comcast.net 7200s (02:00:00)</td><td></td></tr><tr><td>119.50.73.in-addr.arpa IN NS dns105.comcast.net 7200s (02:00:00)</td><td></td></tr><tr><td>119.50.73.in-addr.arpa IN SOA server: dns101.comcast.net email: dnsadmin@comcast.net serial: 539 refresh: 7200 retry:</td><td></td></tr><tr><td>3600 expire: 604800 minimum ttl: 7200 7200s (02:00:00)</td><td></td></tr></tbody></table>

## Traceroute

<table border="1"><tr><td colspan="6">Tracing route to domain name</td></tr><tr><td>1</td><td>1</td><td>0</td><td>0</td><td>208.101.16.73</td><td>outbound.hexillion.com</td></tr><tr><td>2</td><td>0</td><td>0</td><td>0</td><td>66.228.118.157</td><td>ae11.dar02.sr01.dal01.networklayer.com</td></tr><tr><td>3</td><td>$\cdot$</td><td>$\cdot$</td><td>7</td><td>169.53.16.183</td><td>b7.10.35a9.ip4.static.sl-reverse.com</td></tr><tr><td>4</td><td>0</td><td>0</td><td>0</td><td>50.97.17.59</td><td>ae34.bbr02.eq01.dal03.networklayer.com</td></tr><tr><td>5</td><td>0</td><td>0</td><td>1</td><td>66.208.233.5</td><td>be-112-pe03.1950stemmons.tx.ibone.comcast.net</td></tr><tr><td>6</td><td>2</td><td>1</td><td>2</td><td>68.86.85.193</td><td>be-12495-cr02.dallas.tx.ibone.comcast.net</td></tr><tr><td>7</td><td>18</td><td>17</td><td>17</td><td>68.86.84.229</td><td>be-12124-cr02.1601milehigh.co.ibone.comcast.net</td></tr><tr><td>8</td><td>29</td><td>29</td><td>29</td><td>68.86.85.169</td><td>be-10521-cr02.350ecermak.il.ibone.comcast.net</td></tr><tr><td>9</td><td>31</td><td>32</td><td>32</td><td>68.86.91.166</td><td>be-7922-ar01.area4.il.chicago.comcast.net</td></tr><tr><td>10</td><td>32</td><td>32</td><td>32</td><td>162.151.144.102</td><td></td></tr><tr><td>11</td><td>32</td><td>32</td><td>32</td><td>96.110.154.46</td><td></td></tr><tr><td>12</td><td>48</td><td>45</td><td>42</td><td></td><td></td></tr></table>

Trace complete

Maxmind Geographic Results:

<table border="1"><tr><td>Country: US</td></tr><tr><td>Region: IN</td></tr><tr><td>City: Osceola</td></tr><tr><td>Postal Code: 46561</td></tr><tr><td>Latitude: 41.6695</td></tr><tr><td>Longitude: -86.087</td></tr><tr><td>Metropolitan Code: South Bend-Elkhart</td></tr><tr><td>ISP: Comcast Cable</td></tr><tr><td>Organization: Comcast Cable</td></tr><tr><td>Types: residential</td></tr></table>

Google Geographic Results:

Country: US

This Report is provided solely for informational purposes pursuant to NCMEC's nonprofit mission. Please treat all information in this Report as confidential.

EFTA00147679

CyberTipline Report 54391248

10

| Description | Value |

| :--- | :--- |

| Postal Code: 49112 | |

| Latitude: 41.7821811 | |

| Longitude: -86.0427626 | |

| Area: 54.3049 sq. km. (20.9673 sq. miles) | |

## NCMEC Note #4



CSTT-DLM 08-30-2019 15:38:08 UTC



Due to the sensitive nature of this report I have contacted CSTT management.

## NCMEC Note #5



CSTT-DLM 08-30-2019 15:46:13 UTC



The following Point of Contact has been sent a copy of this CyberTipline report:

Federal Bureau of Investigation

NCMEC Phone:

Work Cell Phone:

FBI E-mail Address:



cc: FBIInnocenceLost@ic.fbi.gov



## Supplemental Files

CT54391248.pdf

The following is a list of supplemental files saved to the report by NCMEC

## This concludes Section C

If you need further information regarding the contents of this Report, please contact the Child Sex Trafficking Team at csttreporting@ncmec.org.

This Report is provided solely for informational purposes pursuant to NCMEC's nonprofit mission. Please treat all information in this Report as confidential.

EFTA00147680

CyberTipline Report 54391248

11

## Section D: Law Enforcement Contact Information

The report was made available to the Law Enforcement Agency listed below.



_CSTT_FBI (Alexandria)


Investigator:

<table><tr><td>Assigned Officer:</td></tr><tr><td>Title:</td></tr><tr><td>City/State:</td></tr><tr><td>Country:</td></tr><tr><td>Phone Number:</td></tr><tr><td>Email Address:</td></tr></table>

Access VPN

Supervisory Special Agent

Alexandria, VA

United States

Time/Date was made available: 08-30-2019 15:47:00 UTC

This concludes Section D

This concludes CyberTipline Report 54391248

This Report is provided solely for informational purposes pursuant to NCMEC's nonprofit mission. Please treat all information in this Report as confidential.

EFTA00147681