◆ SpookStack

bE b7c To: Ottawa From: San Diego Re: 265A-NY-280350 °, 04/11/2002 investigation revealed that numerous individuals used the seized compute) to perform a myriad of functions, including checking email. - Special agent[ _____dadvised that based on discussion with agents working Domestic an nternational Terrorism, the alleged terrorists involved in the attacks on the World Trade Center Towers and Pentagon collaborated and communicated with a network of individuals and organizations to facilitate their attacks. It is believed that they usec the Internet, including email accounts to communicate with associates. FBI analysis of the business records and email activity obtained in the investigation to date indicates that some of the 19 suspected hijackers used the internet to further their criminal conduct. For example, at least 12 of the suspected hijackers purchased airline anc other tickets over the internet using email and giving email addresses as contact and confirmation points for their reservations. The tickets for the hijacked flights that were purchased using email addresses were all purchased between August 25 and August 29, 2001, further indicating that the hijackers had closély, and secretly, communicated to coordinate thei1 scheme. Upon reviewing the contents of ne recoveren! MN Hotmail account | | aacate of the 1Tscoverea an email dated 01/18/2001, rae) that contained Statements relating to possible terrorist activities. The communication contained, in part, the following statements: "before, our plan was to go to the U.S, we would have a few people ready to plant bombs in very important buildings" The communication specifies as targets; the White House, NASA, the UN Headquarters and the Canadian Parliament Building, among others. It goes on to say that "All this sounds impossible, but anything is possible". The author finally directs the recipients of the email to respond to the ee a tell him what they think of the plan. A 2703(d) Court Order was served on MSN Hotmail for records relating to the account The results showed that the account was accessed From a number o addresses. MSN Hotmail keer a record of every login to a Hotmail account and what IP address was usec for that login. An IP address is a unique number assigned to each computer on the Internet. The physical equivalent would be a telephone number with country and area code. The subscriber records can be obtaine for an IP address just as with a telephone number. The following IP addresses were used to access the