◆ SpookStack

(U) (U) (U) (0) a To: DELIVERING DIVISION] From: [DRAFTING DIVISION} Re: } {CASE FILE NUMBER, 00/00/2007) : G-3 ears based on informati im the Ec] [FULL/ PRELIMINARY] Investigation Instituted: (S)} [00/00/2007] Reference: % [CASE FILE NUMBER SERIAL XXX] Enclosure(s): (U) Enclosed for [DELIVERING DIVISION or OFFICE OF ORIGIN, depending on whether service is personal or through restricted delivery service or fax] is an NSL dated [00/00/2006], addressed to [COMPANY POC NAME], [TITLE, {if available)], {COMPANY NAME], [COMPANY ADDRESS - NO P.O. BOX], [CITY, STATE - NO ZIP CODE if using personal service], requesting the names, addresses, lengths of service, and electronic transactional records for the [e~mail/IP] address holder(s) listed. Details: A [FULL/PRELIMINARY] [FOREIGN COUNTERINTELLIGENCE/ INTERNATIONAL” TERRORISM} investigation of subject, a [U-.S. PERSON/NON-U.S. PERSON), was authorized in accordance with the Attorney General Guidelines because [Give a full explanation of the justification for opening and maintaining the investigation on the subject. Barebones facts will not suffice and will cause the request to be rejected for legal insufficiency]. These electronic communications transactional records are being requested to [Pally state the relevance of the requested records to the investigation]. Os, This electronic communication documents the [APPROVING OFFICIAL’ ¢] proval and certification of the enclosed NSL. For mandatory reporting purposes, the enclosed NSL seeks electronic communication transactional records on [NUMBER OF] [e-mail/IP address(as)] from {ISP #1]; (NUMBER OF] [e-mail/IP address(es)} from {ISP #2], etc. {In the case of multiple addresses to the same ISP, if you know how many different persons attach to those addresses, please state. Provide the USP status of all the persons about whom the requests are seeking information, including the subject of the investigation. In other words, do your best to give as much information as you can, for congressional reporting purposes. ] (U} Arrangements should be made with the electronic communications service provider to provide the records [personally to an employee of the DELIVERING division OR through use of a delivery servica or secure fax to OFFICE OF ORIGIN) within [NUMBER OF] business days of receipt of this request. The electronic communications service provider should neither send the records through routine mail service nor utilize the name of the subject of the request in any telephone calls to the FBI. ae 2