◆ SpookStack

(U) (U} (mW) SESKET To: [DELIVERING DIVISION] From: [DRAFTING DIVISION] Re: 0d [CASE FILE NUMBER, 00/00/2007) necessary, transmits the NSL for delivery to the electronic communications service provider. U} . (Sf Derived : G- Declassify : 0-25 years based on in ation in the EC] FULL/ PRELIMINARY Investigation Instituted: NS) [00/00/2007] Reference: is {CASE FILE NUMBER Serial Xxx] Enclosures: (U) Enclosed for [DELIVERING DIVISION or OFFICE OF ORIGIN, depending on whether service is personal or through a restricted delivery service or fax] is an NSL dated [00/00/2006], addressed to [COMPANY POC NAME], [TITLE (if available)], [COMPANY NAME], [COMPANY ADDRESS - NO P.O. BOX], [CITY, STATE - NO ZIP CODE if using personal service], requesting the name, address, and length of service for the e-maiji address holder(s) listed. Details: ~ 4) A [FULL/PRELIMINARY] [INTERNATIONAL/ FOREIGN COUNTERINTELLIGENCE] investigation of the subject, a [USPER/NON- USPER], was authorized in accordance with the Attorney General Guidelines because [Give a full explanation of the justification for opening and maintaining an investigation of the subject; barebones facts will not suffice and will cause the request to be rejected for lack of legal sufficiency]. This electronic subscriber information is being requested to [Fully state the relevance of the requested records to the investigation]. (U} This electronic communication documents the (APPROVING OFFICIAL’s] approval and certification of the enclosed NSL. For mandatory reporting purposes, the enclosed NSL seeks subscriber information on {NUMBER OF] [e-mail/IP address(es) ) from [ISP #1]; [NUMBER OF] [e-mail/IP address(es)] from [ISP #2], etc, {U) Arrangements should be made with the electronic communication service provider to provide the records {personally to an employee of the DELIVERING division OR through use of a delivery service or secure fax to OFFICE OF ORIGIN] within [NUMBER OF] business days of receipt of this request. The electronic communication service provider should neither send the SEQKET 2