◆ SpookStack

To execute captioned Lead assignment, New York Division obtained the Internet logs for the US Senate as well as other victims, including NBC Neus, CBS Hens and American Media (parent of National Enquirer Hagazine) amongst others. These logs contain the Internet Protocol (IP) addresses of Internet users that have viewed the webpages which contain the postal mailing address information for the respective victim entities. These IP addresses vere captured and stored within an intelligence database to search for possible correlations. Writer created and currently maintains this database, which consists of x | distinct IP addresses and over 10.4 million Internet log re With respect to the Internet pages for Senators Daschle and Leahy, it was discovered by the New York Division that other Internet sites, specifically Congress.Org and Visi.Com, maintain Internet pages for Nenbers of Congress, including Senators Daschle and Leahy. These pages include biographical information as well as address/contact ‘nfornation. The address information Listed is identical to the address text written upon the envelopes that contained the Anthrax spores. As a result, the Internet logs for both organizations were obtained and entered within this database as well. tlunerous searches were performed Upon this captured data to determine any correlations. It should be noted during the course of this analysis that Internet Service Providers such as Anflmie Online and the At Home networks use an extensive network of Proxy and Web caching services for which it was not possible to obtain logs. yith exhaustive analysis, New York Division yas not able to find any potential subjects. However, this database and the search tools associated with it have been extensively developed. This database stands ready to assist Washington Field and other FBI field divisions with possible subjects who have known IP address information. Lead assignments with known IP address information may be forwarded to the New York Division for verification as to yhether or not a person of interest has visited Internet pages ~--+ Working Copy **"* Page