SUNDANCE VACATIONS, INC.

IN THE COURT OF COMMON

PLEAS OF LUZERNE COUNTY
Plaintiff,

NO. 12-CV-8006

v.

ALBERT WHITEHEAD,

Defendant.
C3

.'~
¦

1?
PLAINTIFF'S EMERGENCY PETITION
FOR CONTEMPT SANCTIONS AND FOR
ORDER COMPELING COMPLIANCE WITH
OCTOBER 23, 2012 AMENDED ORDER

Plaintiff Sundance Vacations, Inc. ("Sundance Vacations"), by and
through its undersigned counsel, presents this emergency petition for relief arising
from Defendant Albert Whitehead's continuing violation of this Court's October
23, 2012 Amended Order and states the following in support thereof:

1.

Sundance Vacations initiated this action on April 25, 20 12

alleging, inter alia, that Mr. Whitehead breached his obligations under the February
6, 2007 Settlement Agreement by posting defamatory remarks concerning
Sundance Vacations on various internet sites and by posting disparaging messages

-

i

' ¦ .,
1 J

concerning Sundance Vacations on a Facebook page titled "Boycott Sundance

Vacations" (hereinafter "the 'Boycott' page"). (Compl. tl 9-12.) Sundance
Vacations also asserted a claim against Mr. Whitehead for tortious interference

with its contractual relationships. (Id HH 13-19.)

2.

On September 21, 2012, Sundance Vacations filed a Petition for

Preliminary Injunction seeking to enjoin Mr. Whitehead from existing and future

breaches of the Settlement Agreement and specifically to compel the removal of
the "Boycott" page.

3.

At the preliminary injunction hearing on October 19, 2012, Mr.

Whitehead, through his counsel, admitted that he administered and posted
messages on the "Boycott" page using the false name "John Flannagan." (See Tr.
of Proceedings on October 19, 2012 at 7, 11.3-4; id at 7, 11.15-16.) (The transcript
of the October 19, 2012 proceeding is attached hereto as Exhibit "A.") Unable to
deny or defend against the allegation that he administered and posted disparaging
messages on the "Boycott" page in violation of the Settlement Agreement, Mr.
Whitehead conceded to entry of the request for a preliminary injunction. (Id at 4,
11.18-19.)

4.

By Order dated October 23, 2012, this Court preliminarily

enjoined Mr. Whitehead from existing and future breaches of the Settlement

Agreement. (A true and correct copy of the October 23, 2012 Amended Order is
attached hereto as Exhibit "B.") In addition, the Court Ordered that "all posts and

activity concerning Sundance Vacations, Inc. in any manner made by Defendant
Albert Whitehead posing as 'John Flannagan' or using any other pseudonym on
Facebook or any other platform shall be removed immediately,"

(See Order at 1 .)

The Court further directed Mr. Whitehead to cooperate with Sundance Vacations

Inc. in directing Facebook to remove the 'Boycott Sundance Vacations' page."
(Id at 2.)

5.

Mr, Whitehead has refused and continues to refuse to comply

with the October 23, 2012 Amended Order,1

1 The undersigned counsel for Sundance Vacations contacted Mr. Whitehead's
counsel on October 24, 2012 to request confirmation that Mr. Whitehead removed
all posts and activity that he made concerning Sundance Vacations on Facebook or
any other platform and that he directed Facebook to remove the "Boycott" page.
(A true and correct copy of the October 24, 2012 letter to Mr. Whitehead's counsel
is attached hereto as Exhibit "C") Mr. Whitehead's counsel did not respond to the
letter. In a second attempt to secure Mr. Whitehead's compliance with the October
23, 2012 Amended Order, the undersigned counsel for Sundance Vacations wrote
to Mr. Whitehead's counsel on November 1, 2012 to request that Mr. Whitehead

direct Facebook to remove the "Boycott" page consistent with the Court's Order.
(A true and correct copy of the November 1, 2012 letter to Mr. Whitehead's
counsel is attached hereto as Exhibit "D.") Again, no response was received.

6.

Mr. Whitehead has not directed Facebook to remove the

"Boycott" page and the page remains active. Nor has he removed posts that he
made on other internet sites.

7.

Since the Order was entered on October 23, 2012, discovery

revealed that Mr. Whitehead posted disparaging remarks concerning Sundance
Vacations on other internet sites. Specifically, Mr. Whitehead posted disparaging
messages concerning Sundance Vacations under the display name "Dolores" on

http://sundancevacationsccp.blogspot.com. http ://naskiewicz2 .bio gspot. com, and
http://sundancevactionsmanipulation.blogspot.com using an AOL email address,
TrubbIinparadise@aol.com. associated with his home. (Copies of the records

produced by AOL and Google in response to requests for information relating to
Mr. Whitehead's email and internet activity are attached hereto as Exhibits "E" and
"F," respectively.) None of the postings made by Mr. Whitehead using the
pseudonym "Dolores" have been removed.

8.

This activity forms the basis for Sundance Vacations' Petition

for Contempt Sanctions which was filed on December 11, 2012. A Rule To Show
Cause was issued on that date scheduling a hearing on the Petition for Contempt
Sanctions for January 22, 2013 at 9:30 a.m.

9.

After the Petition for Contempt Sanctions was filed, Sundance

Vacations received records from Facebook in response to the subpoena duces
tecum which was served on October 24, 2012, (A true and correct copy of the
subpoena served on Facebook is attached hereto as Exhibit "G.") The subpoena
compelled Facebook to produce, inter alia, records identifying the administrators
of the "Boycott" page and the internet protocol ("IP") addresses relating to activity
on the "Boycott" page. The responsive records that were produced by Facebook
on December 13, 2012 (copies are attached as Exhibit "H") confirm that Mr.

Whitehead continued to administer the "Boycott" page using the name "Mary
Smith" after the Court entered the October 23, 2012 Order preliminarily enjoining

him from, inter alia, posting disparaging messages concerning Sundance Vacations
and requiring him to cooperate in securing the removal of the "Boycott" page.

Specifically, the Facebook production establishes that the "Boycott" administrator
using the email address marvsmith4 1 58@hotmail.com logged onto the "Boycott"
page from the Internet Protocol address ("IP address") assigned by Verizon to Mr.
Whitehead's home — 72.78.191.60 — beginning on October 17, 2012 and
continuing until at least November 16, 2012 (the cutoff date established by
Facebook for the production). (Compare Facebook log in logs attached as Exhibit

"H" with response to subpoena served on Verizon which is attached to Sundance
Vacations' Petition for Contempt Sanctions as Exhibit "I.")

10.

Even more troubling, Mr. Whitehead continued to administer

the "Boycott" page under the name "Mary Smith" after he moved for a judgment
of liability against himself based on the false premise that he had stopped posting
on the "Boycott" page and was not aware of the name of the current administrator
of the page. (See Def.'s Mot. for J. of Liability H 3, 7, 7; see also Affidavit of
Albert Whitehead (attached to Def.'s Mot. for J. of Liability as Exhibit "B") fflf 57.) (A copy of Mr. Whitehead's Motion for Judgment of Liability (with attached
Affidavit) is attached hereto as Exhibit "J.") In fact, Mr. Whitehead logged in as
the administrator of the "Boycott" page as "Mary Smith" on October 26, 2012 —

the same day that he signed the Affidavit under penalty of perjury swearing that he
had no ability to control the "Boycott" page. (See Exhibit "H.")

1 1.

Mr. Whitehead has intentionally and willfully violated this

Court's October 23, 2012 Amended Order.

12.

Given the substantial, ongoing and irreparable harm caused by

Mr. Whitehead's contemptuous acts — the same irreparable harm that prompted

the preliminary injunction imposed on October 23, 2012 — Sundance Vacations
respectfully requests an expedited hearing on the instant Petition for Contempt
Sanctions.

WHEREFORE, Sundance Vacations respectfully requests that this

Court enter an order: (1) declaring that Mr. Whitehead is in contempt of this
Court's October 23, 2012 Amended Order; (2) requiring Mr. Whitehead to pay a

daily file of $500.00 for each day that he remains in violation of the Court's
October 23, 2012 Amended Order or, in the alternative, that he be confined to the

Luzerne County Jail until he fully complies with the Court's October 23, 2012
Amended Order; (3) requiring Mr. Whitehead to reimburse Sundance Vacations
for the attorneys' fees and costs incurred in seeking to compel his compliance with

the Court's October 23, 2012 Amended Order; and (4) such other and further relief

as the Court deems appropriate in the circumstances.

Respectfully submitted,

l>\\J)(UXi-Daniel T. Brier
Donna A. Walsh

Attorneys for Plaintiff,
Sundance Vacations, Inc.
Myers, Brier & Kelly, LLP

425 Spruce Street, Suite 200
Scranton, PA 18503
(570)342-6100
Date: December 20, 2012

VERIFICATION

I, John Dowd, President and CEO of Sundance Vacations, Inc.,

hereby certify that the facts contained in the foregoing Petition for Contempt
Sanctions are true and correct to the best of my knowledge, information and belief
and are made subject to the penalties of 18 Pa. C.S.A. § 4904 relating to unsworn
falsification to authorities.

John Dowd

Date:

¦H

l^Jio

/S~

IN THE COURT OF COMMON PLEAS
OF LUZERNE COUNTY, PENNSYLVANIA

SUNDANCE VACATIONS, INC. ,

CIVIL ACTION - LAW

Plaintiff

vs
ALBERT WHITEHEAD,
Defendant

NO. 8006-C of 2012

TRANSCRIPT OF PROCEEDINGS

BEFORE:

THE HONORABLE FRED A. PIERANTONI, III
Luzerne County Courthouse
200 North River Street
Wllkes-Barre, Pennsylvania 18711
Comenclng Friday, October 19, 2012

APPEARANCES:

ON BEHALF OF THE PLAINTIFF:
DONNA WALSH, ESQ.

-- ON BEHALF OF THE DEFENDANT:
HATTHB/ J. CARMODY, ESQ.

tore sheets

COPY

Page2to2of2

'rTHE COURT: We're here on Sundance Vacations,

i

1
2

Inc. versus Albert Whitehead, number 8006 dvll of

2012. PlalntiffSundance Vacations filed a

3

petition for preliminary injunction.

4
5
6
7

comply with the terms of the agreement, ratifying
the terms of the agreement, enjoining him from
further breaches, and most importantly, compelling
him to take down, to discontinue, to remove the

0

unlawful posts that he, himself, made and the ones

9

he encouraged other people to make.

HS. WALSH: We did. Your Honor.
THE COURT: Let me have you state your names
of record.

MS. WALSH: Donna Walsh, Your Honor, on behalf
of the Pialntlffe Sundance Vacations, Inc.
MR. CARMODY: Matt Carmody on behalf of the

10

Defendant Albert Whitehead.

11

THE COURT: I understand there may be some

We would ask for an order compelling him to

Based on these changed events since the time
we filed our petition, we prepared a revised

12

proposed order which I would like to hand up to the

potential resolution to some Issues this morning;

13

Court.

Is that correct?

14

MS. WALSH: That's right. Your Honor. If I

19

could briefly give the background.
THE COURT: Go right ahead, please.

16

THE COURT: I will take It under consideration
for review and hear from Attorney Carmody.

MR. CARMODY: This Is the original order that

September 20, 2012 asking for an injunction to

17
IB
19

was attached with the petition that was tiled on
September 20th. Defendant Albert Whitehead, we
concede the Injunction. We ask the Court to sign
the original order that was attached to the

MS. WALSH: We filed our petition back on

compel the Defendant, Albert Whitehead, to comply

20

with the terms of the settlement agreement that was

21

petition. We told Plaintiffs counsel early

reached back in 2007. We specifically asked in our

22
23

yesterday that Plaintiff [sic] was not contesting
it, the Plaintiff [sic] was not going to be

24
25

present, he was not opposing it, he was not going
to present evidence/witnesses in opposition. So

wherefore clause of our petition for an order,
again, enjoining him from further breaches,

&

up. He's not here today. He's offered nothing to
rebut or to refute these factual allegations.

compelling him to discontinue the page on Facebook

that he's been administering in violation of the

1

with that, we respectfully request the Court to

settlement agreement. That is a page called

2

sign the order that was attached .

Boycott Sundance Vacations which Is dedicated to

3
4
8
6
7
8
9
10
11

believe. Is redundant to the rules. It references
the 2007 settlement agreement In federal court,
again, redundant. All the language Is referenced
— of the settlement agreement Is referenced In the

by administering, moderating, creating, endorsing

12

original order.

Inducing others to post on this page called Boycott

13
14
18
18
17

The original order says that the Defendant has
to comply with the 2007 agreement. So now to have
a new order regurgitating all that stuff Is
redundant. In addition to all that, there is also
the statements of the elements of a preliminary

the purpose of encouraging people not to do
business with my client

Mr. Whitehead had agreed in 2007 that he would
not do that, he would not post any messages

anywhere In any public forum that would disparage
my dlent. He also agreed he wouldn't encourage,

assist or coerce or Induce others to post messages.
He's been violating that agreement for years

Sundance Vacations. We sought In our injunction
papers and order enjoining him from further

breaches and preventing him from doing It again and
also compelling him to take down this unlawful
page.

Since that time. Judge, there has been no
answer filed to our petition.

So under Rule

206.7(a} all of the factual allegations In our
petition should be deemed admitted.

Since that time we tried to take Mr.

Whitehead's deposition. We noticed his deposition
for October 10th in my office. He failed to show
resheets

At 9:00 last night I received a revised order
which I didn't receive until I came Into work this
morning. In that order, which Is quite extensive,
It details the Rules of Civil Procedure on
omissions of not answering petitions which, I

18

injunction. It goes without saying that If you

19

sign this original order the Injunction Is granted

20
21
22
23
24
25

and the Plaintiff has met their burden of proving
the elements of the PC - or of an injunction. But
to state that In this order I think Is unnecessary.
But in addition to that. It goes beyond the
scope of the petition. Paragraph 4 of this new
order lists a dozen, 15, 1 don't know, a dozen

COPY

PafleZtoSoflS

6
names or so new pseudonyms that they're alleging
the Defendant had on the Internet Nowhere In the

1
2

petition, nowhere In the brief In support of the
petition Is any reference to any of these names.
The only name they mention Is John Rannagan and
that's what the original petition asks for, all

3
4
5

6

posts made by John Flannagan and other pseudonyms
to be taken down and removed.

orders sanctions. This is beyond the scope of an
Inunction hearing. If he's in violation of the

8

injunction then the Plaintiff has every right to
come back to you and say they're in violation and
here Is the appropriate sanctions we think you

9

should apply.

7

I dont want to present this as evidence
because it's a copy of my Facebook page but I went
on the Sundance website and I went from present day

Mr. Whitehead in a position where now he's
responsible for the actions of third parties.
This petition - in addition to that, it

10

This revised order « again, Judge we told

11

oounsel yesterday morning that we're not

to November 2011 and there's not one post of John

12

Flannagan.

13

contesting, that we were conceding it, and we ask
you to sign it. Now, in addition to that, lefs

THE COURT: Any opposition, counsel, to my
review of that document?

14

try to dump some more stuff on It since we are not

18

going to be opposing It and that's what we're here
for today.

MS. WALSH: I have not seen it.
THE COURT: Take a moment.
MR. CARMODY: If you remove a name from
Facebook ~ I'm not sure If you are aware of how it

19

works — if a person made various posts on other

20

pages throughout the years but if you remove that
account not only does the account remove, the name
removes but every single post that that person ever

22

16

17

16

21

23
24

put down is also deleted. So we're looking at two
years worth of Facebook messages and there is not

28

one John Flannagan,

MS. WALSH: May I respond? Respectfully,
we've been discussing a proposed order, I'm sure
Mr. Carmody wouldn't dispute this, since Monday of
this week. So to say, yes, the first time he saw

this draft of the order was yesterday but we've
submitted a draft -•

MR. CARMODY: It was today.
MS. WALSH: -- similar to this earlier this
week and we've been in negotiations. Respeetftiliy,

1

we need a strong order to prevent this from

2

settlement agreement and now he's in compliance
with this proposed order that was attached to the

3
4
8

happening again. We reached an agreement In 2007
where he promised he wouldn't post messages under
foke names. He, by not answering, by not refuting
the allegations In this petition admits he's done

6

Just that.

September petition.

7

In addition to that, this new revised order
that was sent at the 11th hour talks about Mr.

6

preliminary injunction that he used fake names and

9

pseudonyms to post on Facebook. We seek In the
wherefore clause of our petition an order
compelling him to discontinue the page which

MS. WALSH: No objection.

MR. CARMODY: John Flannagan has been removed
from Facebook. He's in compliance with the 2007

Whitehead having to go on various other websites
and do various certain things. It's beyond the
scope of the petition. Paragraph 7 of his revised
complaint accuses for the first time in the
petition that he created this Facebook page.

10
11
12

13
14

We allege In Paragraph 7 of our petition for

Includes his posts under fake names. That*s the
relief we sought on September 20th. Ifs the
relief that he hasn't filed any opposition to.

My dlent admits that he was an administrator,
that there were postings, and he has since removed
those In compliance with the settlement agreement

16

Respectfully, Judge, ifs the relief that we're
entitled to under the settlement agreement from

17

2007.

In compliance with the original order. Now they're
saying that he created it and now he's obligated —

18
19

THE COURT: The original order that was
prepared does call for no more posing as John

this new order is now obligating him to take down a

20

page which he does not have the authority to or the
power to do so. In addition, it's asking ~ it's

21

Rannlngan or using any other pseudonym on Facebook
or any other platform shall be removed immediately,

15

22

correct?

ordering him to tell third parties what to do and
to get third parties to act In a certain manner.

23
24

MS. WALSH: Thafs right. But our petition,
our wherefore clause does ask speeiflcaily for an

Ifs ridiculous. It's Impossible. You can't put

25

order, and I have my copy here which I can hand up

3fr6sheets

COPY

P»ge6to9ofi5

10

12

to the Court, which does ask for an order

1

that we're here for today is a breach of ~ or to

compelling the Immediate discontinuance of the page

2

enforce the 2007 settlement agreement Thafswhat

and the removal of ad offending posts on the page.

3

this case is about, this hearing is about

And the reason why they're all offending, if he

4
5

Now that we conceded, that we are asking you
to enforce the order, they're trying to pile all

agreed back in 2007 he wouldn't encourage other

people to do this. He's now conceded that he was

6

this defamatory stuff on and all this additional

John Flannagan, the administrator.

7

stuff and all this additional work and

And you can see, Your Honor, from the sample
Facebook posts that you have there that the

administrator of this page encourages people daily

8

requirements. Plaintiff's counsel said that

9

they're not requiring him to do anything. The

10
11

to Join the page, to like the page, to complain

language says Mr. Whitehead shall not interfere
with the efforts of Sundance to remove the
offending posts and shall cooperate with Sundance

about Sundance Vacations. He, as administrator,

12

has been violating his oontractible obligations by

13

encouraging people to post messages like that.

14

and directing Facebook to remove the Boycott
Sundance Vacations page and directing third parties

Those messages should come down under the agreement

15

to remove all other offending stuff.

pursuant to the wherefore dause in our petition

16

because he's not here today opposing that relief.

17

He had a chance under Rule 206 to file an
answer, he dldnt Our factual allegations should

So if there's a person In Tennessee by their
order he would be In violation of this order if he
told somebody in Tallahassee or somewhere in

19

be deemed admitted. The order should be broad

20

Tennessee or anywhere in the country If they didn't
remove their posts. It's putting a ridiculous

16

enough to compel him to take those unlawful posts

21

burden on the Defendant.

down. Your Honor, respectfully, we need a strong

22

sanction here to make sure we're not back here

23

24

We are not even contesting this case. We are
not even here today for - this Is beyond the scope
of the injunction » but Mr. Whitehead is seeking a

26

Judgment. He wants to put an end to this. Every

again asking for this same relief.

This gentleman doesn't have the same respect

1 5

11

13

1

day It's petitions, it's filings, ifs nonstop

2

for the agreement that he signed and the rules of
this Court and we need a strong sanction to make

2

flood of legal papers. He's 71 year old. He lives

3

sure that he doesn't tomorrow go online and post

3

in Philadelphia. He has pretty significant

4

under a different name Just to get around this. So

4

physical injuries. He Just had two surgeries in

5

we're not back here two months from now asking for
the same relief because he's using a different

5
6

the last year. He's In the process of recuperating
physically. That was part of, I think, why he

7

dldnt want to participate in the deposition.

8

But this guy doesnt want this headache. This
guy wants to be left alone and ifs Just constant

name.

We would like a strong order to send the

message to him that he has to comply with this

16
1

obligation and he has to take the things down.

10

We're not asking him to compel third parties to do

11

He's done everything at this point to comply. And
every concern, every — anything they're worried

2

anything that's outside of his ability. We're

12

about on that other side the original petition

3

asking him to take down the posts that he made and

13

attached to the injunction on September 20th it

4

the posts that he encouraged other people to make.

14

protects ail that, you know, no defamatory

5

Thafs within his ability. He's certainly capable

18

comments, no on Facebook, no posting this, no going

6

of doing that

16

8

February 2007 settlement agreement.

18

on additional names outside of a John Flannagan or
somebody else. The original order protects that.
This new order that we got at the last minute It

0

order thafs broad enough that includes these

19

adds stuff thafs beyond the scope of the petition.

factual findings, that ratifies and reaffirms the

20

It requires the Defendant to do stuff thafs

settlement agreement and that compels him to do

21

impossible and it's litigating issues that are not

what he promised to do and also Imposes sanctions

22

before the Court today.

in the event that he doesn't.

23

7

|3

Your Honor, we're entitled to that under the

|4

4

0

re sheets

But we need an

17

THE COURT: Mr. Carmody, any final response?

24

MR.CARMODY: The essence of this petition

25
COPY

THE COURT: Anything else that I havent
already heard?

MS. WALSH: Just very briefly. Mr. Carmody
Page 10 to 13 or 15

1*referenced Paragraph 7 of the proposed order.
|2 That's exactly what we are asking for In the
$ wherefore clause of our petition. That's the
relief we're seeking, that's the relief we're
4
entitled to.
5
THE COURT: Mr. Carmody?
e
MR. CARMODY: That's It, Your Honor.
7
THE COURT: I commend both counsel for
8
eloquent and excellent presentations. I will rule
9
today.
0
1

2

(Whereupon, the hearing concluded.)

3

4
5
6
7

e
8
: o

|1
12

23

£

5 tTSsheets

COPY

Page 14 to M of is

15

CBRTITICATB

I

HEREBY

CERTIFY

evidence

are

notes

testimony

of

of

the

correct

above

that

contained

cause,

transcript

fully

taken
and

the

and

by me
that

proceedings

in

this

and

accurately
the
is

in

the

proceedings
a

true

and

thereof.

a-yv'

Allison M. Ross, RPR
!
Official Court Reporter

6fcr 6 sheets

COPV

Page 15 to 15 of 15

OCT. -23' 12(TUE) 11:32

P. 002

SUNDANCE VACATIONS, INC., :

IN THE COURT OF COMMON PLEAS OF
LUZERNE COUNTY

PlaintifiT
va

ALBERT WHITEHBAJ),
Defendant

CIVIL ACTION- LAW
NO.

12-CIV-8006
-W—

AMENDED ORDER

re

-"•;?£.. ¦

AND NOW, this 23rd day of October, 2012, at /J.&> B.m„ upon
consideration of Plaintiff Sundance Vacations, Inc's Petition for Preliminary
Injunction and supporting memorandum as well as testimony/argument introduced
at the hearing this date,

IT IS HEREBY ORDERED that Defendant Albert Whitehead is enjoined

from existing and future breaches of tbe Settlement Agreement dated February 6,
2007 pending further Order of Court Further, all posts and acttvtty eonceniing
Sundance Vacations, Inc. in any manner made hy Defendant Albert Whitehead
posing as ••John Flannagan" or using any other pseudonym on Facebook or any

other platform shall bo removed immediately.

m.ziyjum] 11:32

p. 003

Further, Defendant Albert Whitehead shall not interfere with the efforts of
Snndanee Vacations Inc. to remove the posts and shall cooperate with Sundance
Vacations Inc. in directing Facebouk to remove the "Boycott Sundance Vacations"
page.

Security shall be entered in the amount of $100.00 (one hundred dollan) in
Accordance with Fa.R.Civ. P. 1S31(b)
The Protbonotary is directed to forward a copy of this order to all parties

pursuant to Pa. ILC.P. 236.

BY THE Cj

Exhibit C

m b k

myers brler&kelly..
' ATTORNEYS
AT IAW

October 24, 2012
VIA TELECOPY & FIRST-CLASS MAIL

Matthew J. Cannody, Esquire
Elliott Greenleaf & Dean
-39-PubKc-Square
Suite 1000
Wilkes-Baire, PA 18701

Re:

Sundance VacwTions. Inc. v. Albert Whitehead -No. 12.CV-8006

Dear Matt:

Enclosed please find a receipt from the Luzerne County Prothonotaiy which

verifies that the required $100.00 security was posted in accordance with the October 23, 201 2
Amended Order. The Order is now valid and caiforceable. Accordingly, I ask that you provide
confirmation that Mr. Whitehead has removed all posts and activity that he made concerning
Sundance Vacations, Inc. on Facebook or any other platform. Please also provide written
confirmation that Mr. Whitehead has directed Facebook to remove the "Boycott Sundance
Vacations" page as required by the October 23, 2012 Amended Older. Please provide the
requested written confirmation immediately.
As you know, my client continues to monitor activity on the "Boycott" page. If
Mr. Whitehead fails to comply with the October 23, 2012 Amended Order, we intend to seek
appropriate contempt remedies.
Please do not hesitate to contact me if you have any questions.
Sincerely,

Donna A. Walsh
DAW:rcs
Enclosure

00065218

425 Spajce Street | Suite 200 | P.O. Box 551 | Scranton. PA 18501-0551 | p {570)342-6100 | f (570) 342-6147 | www.mbWow.com

7

Luzerne County Civil Records

-

Receipt #:

2012-5-04756

Date:

10/23/2012 3:34:10 PM

-

[Duplicate Copy]
FILING 201 2-08006-0074: Poundage
SUNDANCE VACATIONS INC vs. WHITEHEAD. ALBERT
Check #12582

$100.00

Total

$100.00

-

--

Total Fees:
Total Payments: - -

$100 00

-• —

$100.00
--$moo-

***Thank You*

-o

c.y'

m b k

myers brier&kelly.
'attorneys at LAW

November 1,2012
VIA TELECOPY & FIRST-CLASS MAIL

Matthew J. Carmody, Esquire
Elliott Greenleaf & Dean

39 Public Square
Suite 1000

Wilkes-Baire, PA 18701
Re:

Sundance Vacations. Inc. v. Albert Whitehead - No.l2-CV-8Q06

Dear Matt:

As you know, the Amended Order dated October 23, 2012 requires Mr.
Whitehead to "cooperate with Sundance Vacations Inc. in directing Facebook to remove the
'Boycott Sundance Vacations' page." Despite my request dated October 24, 2012 (attached), you
have foiled to provide confirmation that Mr. Whitehead has done anything to comply with this
directive or the other directives in the Amended Order. Accordingly, I am enclosing a draft letter
to Facebook on behalf of Mr. Whitehead. I request that you send the letter to Facebook
immediately as required by the October 23, 2012 Amended Order of Court If you refuse to send
the letter, we will consider this a violation of the Court's Order and will seek appropriate
remedies against your client for contempt
Please do not hesitate to contact me if you have any questions.

Sincerely,

Donna A. Walsh

'

^^:2-

DAWacs
Enclosure

00065747

425 Spruce Street | Suite 200 | P.O. Box 551 | Scranton, PA 18501-0551 | p (570) 342-6100 | f (570) 342-6147 | www.mbklaw.com

'

m b k

myers brler&kellyw
' ATTOBNEYS AT LAW 1

October 24, 2012
VIA TELECOPY & FIRST-CLASS MAIL

Matthew J. Carmody, Esquire
Elliott Oreenleaf & Dean
¦ -39-PubHc-Sqiiare

Suite 1000
Wilkes-Banc, PA 18701

Re:

Smftm Ytrettto. Ing. v. Aftqrt Whitghff^ - Np.12-CV-8W»

Dear Matt:

Enclosed please find a receipt from the Luzerne County Prothonotary which
verifies that die required $100.00 security was posted in accordance with the October 23, 2012
Amended Order. The Order is now valid and oiforceable. Accordingly, I ask tiiat you provide
confinnation that Mr Whitehead has removed aU posts and activfy
Sundance Vacations, Inc. on Facebook or any other platform. Please also provide written
confirmation that Mr. Whitehead has directed Facebook to remove the "Boycott Sundance
Vacations" page as required by die October 23, 2012 Amended Order. Please provide the
requested written confirmation immediately.

As you know, my client continues to monitor activity on the "Boycotr page. If
Mr. Whitehead foils to conq)ly with the October 23, 2012 Amended Order, we intoid to seek
appropriate contempt remedies.

Please do not hesitate to contact me ifyou have any questions.
Sincerely,

Donna A. Walsh
DAWacs
Enclosure

0006J2I>

425 Spiuce Street | SuHe200 | P.O.BcwSSl | Scronton. PA 18501-0551 ( p (570) 342-4100 | f (570)342-4147 | www.mbktaw.com

November 1, 2012
VIA UPS OVERNIGHT DELIVERY

Theodore W. Ullyot, Esquire
VP, General Counsel and Secretary
Facebook, Inc.
Legal Department
1601 Willow Road

Menlo Park, CA 94025
Re: Sundance Vacations. Inc. v. Albert Whitehead -No. 12-CIV-8006

Dear Mr. Ullyot:

This office represents Defendant Albert Whitehead in the above-referenced matter
which is pending in the Court of Common Pleas of Luzeme County, Pennsylvania. Enclosed is a
copy of an Amended Order issued on October 23, 2012 in this matter. Pursuant to the Amended
Order, I am writing on behalf of Mr. Whitehead to demand that Facebooktake immediate action
to remove the "Boycott Sundance Vacations" page appearing on your platform. Mr. Whitehead

admits that he administered the page using the false name "John Flannagan" and that he did so in
violation of contractual obligations imposed by the Settlement Agreement that he signed on
February 6, 2007 and therefore requests that the "Boycott" page be removed as required by the
October 23, 2012 Amended Older of Court Kindly take immediate action to remove the
"Boycott" page in accordance with the Amended Order.

Please do not hesitate to contact me if you have any questions.
Sincerely,

Matthew J. Carmody
cc: iptgtfb.com (via electronic mail)
Donna A. Walsh, Esquire (via electronic & first-class mail)

IN THE COURT OF COMMON PLEAS
OF LUZERNE COUNTY

SUNDANCE VACATIONS, INC.,
Plaintiff,

CASENO.12-CV-8006
v.

ALBERT WHITEHEAD,
Defendant.

NOTICE

TO;

Custodian of Records, AOL Inc.
22000 AOL Way
Sterling, Virginia 20166

You are required to complete the following Certificate of Compliance
when producing documents or things pursuant to the Subpoena.

CERTIFICATE OF COMPLIANCE WITH SUBPOENA TO PRODU
CE
DOCUMENTS OR THINGS

ir^oJro- m^Tovj

am authorized to make this certification

as a Custodian of Records for AOL Inc. I hereby certify that, to the best
ofmy
knowledge, information and belief, all documents or things required to
be

produced pursuant to the Subpoena issued on AuflUse ?-?-. 2jo\7- (date of
Subpoena) have been produced,

Date:

M&wn-

CUSTODIAN OF RECORDS FOR AOL INC.

(kfe A.^j^
By

m to and subscribed before me this

day of/^/M'r. 2012

flMm^
Notary Public

My Commission expires:

/

/o

n

^£\ zfD'XDl'^)

cnssmuiAOE
NotvyPuMo
CannnomwaniolVttfRta
HyOonnMDnBqteaJknniDa

"DOCUMENTS ^QMESTED"

1.
Any and all documents containing subscriber data and/or
information, internet protocol (IP) address(es) and/or activity reports that refer or
relate to Albert Whitehead, Kathleen Whitehead, Rose Whitehead, William

Whitehead, and/or any Individual residing at 842 North 27th Street, Philadelphia,
PA 19130, including, but not limited to, for each of the foregoing Individuals, all
account applications, subscriber records, billing information, billing records,
access logs, activity logs, time stamps and records of session times and durations.
Account Information for
o Johnf08081 (screen name has been deleted)
o

Novnog

o

phllapa312

o

deserie

o

nogamesno

o thesia

o

all9130

Ip Sessions for
o AI19130
o

Deserie

o

Nogamesno

o

Novnog

o

Phiapa312

o Thesia
Ip UAS sessions for
o

Deserie

o

Nogamesno

o

Novnog

o Phllapa312
o thesia

2.
Any and all documents containing subscriber data and/or
information, Internet protocol (IP) address(es) and/or activity reports that refer or

relate to the email address JohnF08081@aol.com. including, but not limited to, ail
account applications, subscriber records, billing information, billing records,
access logs, activity logs, time stamps, records of session times and durations and
all records identifying the owner and/or subscriber using this e-mail address.

Client IP Sessions for JohnfOSOBl

UAS Data for JohnfOSOBl

3.
Any and all documents identifying the aliases, screen names
and/or email addresses associated with any of the individuals referenced in
Paragraphs 1 or 2.

Account information for

o JohnfOSOBl (screen name has been deleted)
o

Novnog

o

philapa312

o

deserie

o

nogamesno

o thesia
o

all9130

4.
Any and all documents that contain traffic information
relating to the JohnF08081@aol.com account, including, but not limited to, mail
traffic logs and records Identifying the sender, recipient and time stamp of
messages to and from the account (but excluding email content)."
N/A. No email was returned for the deleted screen name, JohnF0808l.

Account Information for johnfD8081

Account Information for johnf08081
Screen Names
NoV NoG

0873675978

PhilaPa312

0595822734

Deserie

0864406624

NoGamesNo

0245434301

Thesia

0733123118

AL19130

0355035776

Dyce0961

0061926271 (DELETED)

Trubblinparadise

0107817894 (DELETED)

AWORDTOTHEWISE

01 13417480 (DELETED)

SweetyForSpoilin

01 14305970 (DELETED)

PfflLA PA 19130

0133729004 (DELETED)

Danella

0152680979 (DELETED)

al9128

0159673989 (DELETED)

JILL 199999

0230755682 (DELETED)

Jaded by games

0285493004 (DELETED)

LindleyRednick

0349161951 (DELETED)

Albert Whitehead

0477717067 (DELETED)

BEWARE SUNDANCE 0526593736 (DELETED)
John08081

0528572984 (DELETED)

The Litigators

0589152013 (DELETED)

NO FABULATION

0660796499 (DELETED)

LydiaMedany

0723085349 (DELETED)

Ellen Moylan

0756586785 (DELETED)

Sundance Vac

0760551349 (DELETED)

JILL19999

0905217114 (DELETED)

MARIA STORCH

0963954714 (DELETED)

JohnFOSOSl

1070440919 (DELETED)

Address Information
_-

... — -—

..-

Name

ALBERT WHITEHEAD|

Street

842 N 27th st

City

Philadelphia

State/Zip

PA 19130

Country Code

US

Evening Phone 2152351308

Daytime Phone 2152351308

ile:///Jl/200340/iohn«)8081.acct_details.htinl[ll/7/2012 5:26:48 PM]

Account Information for johnft)8081

|| Service

J|AOL

Status Information
Account Status ??ACTIVE**

Member Since

96-06-30 13:20:23 edt

Account Type

NORMAL

|BID Country

us

Ie^//Jl/200340/gohnfl)8081.acct_detaiIs.htniI[n/7/2012 5:26:48 PM]

Client IF Sessions for JohniDSOSl
Start
Time (UTC) t

End
Time

(UTC)

^

Signon
ID

Session ID

User
Guest
Version Subversion
Group Session

Master
Account

Network
Address

¦

Dialed
IP
From DAHA

20120906 20120906
6
14:29:09 14:51:48

5048b3351a7091b903 643993 Normal 0

4343

19

873675978 72.78.191.60 null

null

20120906 20120906
6
14:54:18 14:56:50

5048b91ala90456003644813 Normal

0

4343

19

873675978 72.78.191.60 null

null

20120906 20120906
6
15:0322 15*4:27

5048bb3aladfl)c6703644d3a Normal 0

4343

19

873675978 72.78.191.60 null

null

20120906 20120906 ,
17:23:04 1724:49 0

5048dbf803bft)afe00fl8c29

Normal 0

4343

19

873675978 72.78.191.60 null

null

20120906 20120906 ,
19:31:24 1952:45 b

5048fa0clafD43O03654e5e

Noimal 0

4343

19

873675978 72.78.191.60 null

null

20120907 20120907 ,
11:14:13 11:14:47 0

5049d7051 a906c3 1 03707e08 Normal 0

4343

19

873675978 72.78.191.60 null

null

5049d8501 a7672ec03654c96 Normal 0

4343

19

873675978 72.78.191.60 null

null

4343

19

873675978 72.78.191.60 null

null

20120907 20120907 „

|l 1:19:44 11:19:45 8
120120907

20120907 ,

11:19:55

1U1:37 0

|j 5049d85b023f959(»0133bf3

le;///J|/20034O/jotanfDt081.ip_KBiaai.hliiil[l 1/7/2012 S:26:4S PM]

Normal 0

UAS Data for johnfflSOSl
Event Time

(UTC)
2012-09-06

14:35:36
2012-09-07

11:21:03

Session ID

IP Address

5048b4b80000a7770aabcc68 64.12.116.77

Service Name

Event
Type

Event
Action

sns.mailsvc.aol.com TGS

OK

5049d89fD000a8bl0826f55c 205.188.116.7 sns.mailsvc.aol.com TGS

OK

ile:///Jl/200340/johiifD8081 .ip_uas.htnil[l 1/7/201 2 5:26:49 PM]

Account Information foraI19130

Account Information for all9130
Screen Names
NoV NoG

0873675978

PhilaPa312

0595822734

Deserie

0864406624

NoGamesNo

0245434301

Thesia

0733123118

AL19130

0355035776

Dyce0961

0061926271 (DELETED)

Trubblinparadise

0107817894 (DELETED)

AWORDTOTHEW1SE

0113417480 (DELETED)

SweetyForSpoilin

0114305970 (DELETED)

PHILA PA 19130

0133729004 (DELETED)

Danella

0152680979 (DELETED)

al9128

0159673989 (DELETED)

JILL 199999

0230755682 (DELETED)

Jaded by games

0285493004 (DELETED)

LindleyRednick

0349161951 (DELETED)

Albert Whitehead

0477717067 (DELETED)

BEWARE SUNDANCE 0526593736 (DELETED)

John08081

0528572984 (DELETED)

The Litigators

0589152013 (DELETED)

NO FABULATION

0660796499 (DELETED)

LydiaMedany

0723085349 (DELETED)

Ellen Moylan

0756586785 (DELETED)

Sundance Vac

0760551349 (DELETED)

JILL19999

0905217114 (DELETED)

MARIA STORCH

0963954714 (DELETED)

JohnF08081

1070440919 (DELETED)

Address Information
Name

ALBERT WHITEHEAD

Street

842 N 27th st

|City

Philadelphia

[State/Zip

PA 19130

Country Code

US

Evening Phone; 2152351308

Daytime Phone 2152351308

i

1

!iH

ile:///;|/200340%2010-08/Producdon/all9130.acct_detaiIs.html[l 1/8/2012 1:48:27 PM]

Account Information forall9130

Ij Service

JJAOL

Status Information
Account Status ""ACTIVE**

_j

Member Since

96-06-30 13:20:23 edt

Account Type

NORMAL

BID Country

us

ile:///J|/200340%2010-08/pFoduction/all9130.8cct_details.html[1 1/8/2012 1:48:27 PM]

Client IP Sessions for all9130
Session D)

(UTQ | (UTQ

JSSS1 IJJSSS1 6

^

User
Guest
Version Subversion
Group Session

||501943b30fec7dl000922dad Normal 0

ley//J|/200340K20ia-08/Productioii/>J19I30.ip_feuioi».hlinl[l 1/8/2012 1:48:27 PM]

4343

19

Master
Account

Network
Address

Dialed
IP
From DAHA

873675978 72.78.191.60 null

null

Account Information for deserie

Account Information for deserie
Screen Names
NoVNoG

0873675978

PhiIaPa312

0595822734

Deserie

0864406624

NoGamesNo

0245434301

Thesia

0733123118

AL19130

0355035776

Dyce0961

0061926271 (DELETED)

Trubblinparadise

0107817894 (DELETED)

AWORDTOTHEW1SE

0113417480 (DELETED)

SweetyForSpollin

0114305970 (DELETED)

PHILA PA 19130

0133729004 (DELETED)

Danella

0152680979 (DELETED)

al9128

0159673989 (DELETED)

JILL 199999

0230755682 (DELETED)

Jaded by games

0285493004 (DELETED)

LindleyRednick

0349161951 (DELETED)

Albert Whitehead

0477717067 (DELETED)

BEWARE SUNDANCE 0526593736 (DELETED)
John08081

0528572984 (DELETED)

The Litigators

0589152013 (DELETED)

NO FABULATION

0660796499 (DELETED)

LydiaMedany

0723085349 (DELETED)

Ellen Moylan

0756586785 (DELETED)

Sundance Vac

0760551349 (DELETED)

JILL 19999

0905217114 (DELETED)

MARIA STORCH

0963954714 (DELETED)

JohnF08081

1070440919 (DELETED)

Address Information
Name

ALBERT WHITEHEAD

Street

842 N 27th st

City

Philadelphia

State/Zip

PA 19130

Country Code

US

Evening Phone 2152351308

Daytime Phone 2152351308

ile^/J|/200340%2010-08/Productioii/descrie,acct_detaUs.htinl[l 1/8/2012 1 :48:27 PM]

Account Information for deserie

IService

j|AOL

. . .., I

Status Information
Account Status **ACTIVE**
Member Since

96-06-30 13:20:23 edt

Account Type

NORMAL

BID Country

us

ile:///Jf|/200340%2010-08/Pn)duction/deserie.acct_details.htinl[l 1/8/2012 1:48:27 PM]

Client IP Sessions for deserie
Start

End

Time
(UTQ

Time
(UTC)

20120906 20120906

Signon

ID

Session ED

User
Gnest
Version Subversion
Group Session

Master
Account

Network

Address

Dialed
IP
From DAHA

6

504898I903feb6b900ed352a Nonnal 0

4343

19

873675978 72.78.191,60 null

null

20120906 20120906
6
14:22:03 14:24*5

S048bl8blaa9082503643S46 Normal 0

4343

19

873675978 72.78.191.60 null

null

20120906 20120906
6
14:51:48 14:54:18

5048b8841aad24fl036446c2 Nonnal 0

4343

19

873675978 72.78.191.60 null

null

1233:29

12:3537

ile^//Jl/20CO4O%2010-(»/Pro<tactioii/de«erie.ip_ieMion»,litiiil[l 1/8/20 12 1:«:27 PM]

UAS Data for deserie
Event Time (UTC)

Session ID

IP Address

Service Name

Event Type

Event Action

2012-07-14 20:25:33

null

2.50.141.10

mail/smtp

AS

FAIL

2012-07-17 02:09:53

null

189.215.250.35

mail/smtp

AS

FAIL

2012-07-23 06:44:15

null

89.45.225.132

mail/smtp

AS

FAIL

2012-08-2410:13:06

null

117.201.97.253

mail/smtp

AS

FAIL

Je:///J|/20O340%2010-08/Production/deserie.ip_uas.htinl[l 1/8/2012 1:48:27 PM]

Account Information for nogamesno

Account Informaition for nogamesno
Screen Names
NoVNoG

0873675978

PhilaPa312

0595822734

Deserie

0864406624

NoGamesNo

0245434301

Thesia

0733123118

AL19130

0355035776

Dyce0961

0061926271 (DELETED)

Trubblinparadise

0107817894 (DELETED)

AWORDTOTHEWISE

0113417480 (DELETED)

SweetyForSpoilin

0114305970 (DELETED)

PfflLA PA 19130

0133729004 PELETED)

Danella

0152680979 (DELETED)

al9l28

0159673989 (DELETED)

JILL 199999

0230755682 (DELETED)

Jaded by games

0285493004 (DELETED)

LindleyRednick

0349161951 (DELETED)

Albert Whitehead

0477717067 (DELETED)

BEWARE SUNDANCE 0526593736 (DELETED)
John08081

0528572984 pELETED)

The Litigators

0589152013 pELETED)

NO TABULATION

0660796499 pELETED)

LydiaMedany

0723085349 PELETED)

Ellen Moylan

0756586785 pELETED)

Sundance Vac

0760551349 PELETED)

JILL19999

0905217114 PELETED)

MARIA STORCH

0963954714 PELETED)

JohnF08081

1070440919 PELETED)

Address Information
Name

ALBERT WHITEHEAD!

Street

842 N 27th st

City

Philadelphia

State/Zip

PA 19130

Country Code

US

|

Evening Phone 2152351308
Daytime Phone 2152351308
1

]e:///J|/200340%2010-08/Production/nogamesno.acct_details.html[l 1/8/2012 1:48:28 PM]

Account Information for nogamesno

1 1 Service

jJAOL

Status Information
Account Status ??ACTIVE^*
Member Since

96-06-30 13:20:23 edt

Account Type

NORMAL

BID Country

us

ile^/J|/200340%2010-08/Produc(ion/nogamesno.acct_details.html[l 1/8/2012 1:48:28 PM]

Client IP Sessions for
Start
Time
(UTQ

End
Time
(UTC)

l8'^0-

20120715 20120713
13:47:34 13:48:02

Session ID

User

|J5002c9f60ffef45flK)56f266

h

I Guest

Group Session

nogamesno

Master
Account

Version Subversion

Network
Address

Dialed
IP
From DAHA

Normal 0

4343

19

873675978 72.78.191.60 null

null

2012072C 20120720
6
12:55:30 13:01:59

500955421a5c293aO7c6fl8c

Normal

0

4343

i9

873675978 72.78.191.60 null

null

20120720 20120720
6
22:03:31 22:03:53

5009d5b30ffl)6934006b828e Normal

0

J 4343

19

873675978 72.78.191.60 null

null

6

501005910379071400622fd9 Normal 0

4343

19

873675978 72.78.191.60 null

null

20120730 20120730 ,
11:09:00 11:0924 0

50166b4cla01716102Bc95cc Normal 0

4343

19

873675978 72.78.191.60 null

null

20120827 20120827 ,
15:48:53 15:49:11 0

503b96e31ald80el0334d23d Normal 0

4343

19

873675978 72.78.191.60 null

null

20120906 20120906
6
12:18:39 12:33:29

5048949f0312b7efl)0«12(1cd

Normal 0

4343

19

873675978 72.78.191,60 null

null

20120906 20120906
6
14:24:05 14:25:57

5048b20Slaa8d35c0364369d Normal 0

4343

19

873675978 72.78.191.60 null

null

20121002 20121002
6
19:49:07 19:49:49

506b45330f(9fd61014afa03c Normal 0

4343

19

873675978 72.78.191.60 null

null

20121016 20121016
6
21:5333

507dd0cl02e2de83006b7d90 Normal 0

4343

19

873675978 72.78.191.60 null

null

20121016 20121016
6
22-2\-22 22:24:02

507ddde20f?3447o0163cl63 Normal

r- 4343

19

873675978 72.78.191.60 null

null

20120725 20120725
14:41:21

20121016
22:46:58

14:41:44

2012101711

6

507de3e2030a9a4«01573c21

Normal 0

4343

19

873675978 72.78.191.60 null

null

20121017 20121018
S
08:00:00 07:59:59

5O7dc3e2030a9a4a0 1 573c2 1

Normal 0

4343

19

873675978 72.78.191.60 null

null

Normal 0

4343

"

873675978 72.78.191.60 null

null

07:59:59 ||

20121018 20121018 ,
5
08:00:00 12:51:09

507de3e2030a9a4a01 573(2 1

1

k7//^/20034(»UOI(M>8/Pro<luctii>ii/hagaiiw>iia.ip_Hlsioat.had[ll/8/20I2 1:48:28 PM]

1

1

li

UAS Data for nogamesno
Event Time

Session ID

(UTC)

IP Address

Service

Event

Name

Type

Event
Action

2012-07-23
23:12:22

null

190.231.255.90 mail/smtp

AS

FAIT,

2012-08-19
11:16:14

null

31.181.152.132 mail/smtp

AS

FAIT,

2012-09-06

12:32:16
2012-09-06
12:32:58
2012-09-06
12:33:12
2012-10-07

15:16:19
2012-10-07
15:16:19

504897d00000ac980ad5fl 7b 205.188.116.8

help.aol.com TGS

OK

null

72.78.191.60

bill.aol.com

AS

FAIL

null

72.78.191.60

bill.aol.com

AS

FATT,

null

176.102.7.16

mail/smtp

AS

FATT,

null

176.102.7.16

mail/smtp

AS

FAIL

ilei'//J|/200340%2010-08/Producdon/nogamesiio.ip_uas.html[U/8/2012 1:48:28 PM]

Account Information fbrnovnog

Account Information for novnog
Screen Names
NoV NoG

0873675978

PhilaPa312

0595822734

Deserie

0864406624

NoGamesNo

0245434301

Thesia

0733123118

AL19130

0355035776

Dyce0961

0061926271 (DELETED)

Trubblinparadise

0107817894 (DELETED)

AWORDTOTHEWISE

0113417480 (DELETED)

SweetyForSpoilin

0114305970 (DELETED)

PHILA PA 19130

0133729004 (DELETED)

Danella

0152680979 pELETED)

al9128

0159673989 (DELETED)

JILL 199999

0230755682 (DELETED)

Jaded by games

0285493004 (DELETED)

LindleyRedmck

0349161951 (DELETED)

Albert Whitehead

0477717067 (DELETED)

BEWARE SUNDANCE 0526593736 (DELETED)
John08081

0528572984 (DELETED)

The Litigators

0589152013 (DELETED)

NO FABULATION

0660796499 (DELETED)

LydiaMedany

0723085349 (DELETED)

Ellen Moylan

0756586785 (DELETED)

Sundance Vac

0760551349 (DELETED)

JILL 19999

0905217114 (DELETED)

MARIA STORCH

0963954714 (DELETED)

JohnF08081

1070440919 (DELETED)

Address Information
Name

ALBERT WHITEHEAD

Street

842 N 27th st

City

Philadelphia

State/Zip

PA 19130

Country Code

US

Evening Phone 2152351308

Daytime Phone 2152351308
--

-

ile:///Jl/200340%2010-08/Pro<taction/novnog.acct_details.html[1 1/8/2012 1:48:28 PM]

Account Information for novnog

fl Service

AOL

Status Information
Account Status "ACTIVE**
Member Since

96-06-30 13:20:23 edt

Account Type

NORMAL

BE) Country

us

le:///J|/200340%2010-08/Producdon/novnog.acct_details.htnil[l 1/8/2012 1:48:28 PM]

Client IP Sessions for novnog
Start
Time
(UTQ

¦

End
Time
(UTC)

^l

Session ID

User
Guest
Version Subversion
Group Session

Master
Account

Network
Address

Dialed
IP
From DAHA

20120827 20120827
15:50:24
15:5227

6

jJ503b9740037ffb3600oef2a7

Normal 0

4343

19

873675978 72.78.191.60 null

null

20120827 20120827
17:34:54 17:41:55

6

jJ503bafbe0f9891ea00e97605

Normal 0

4343

19

873675978 72.78.191.60 null

null

20120828 20120828
6
13:15:55 13:1621

503oc48b03d28ed6O0cb4856 Normal 0

4343

19

873675978 72.78.191.60 null

null

20120906 20120906
6
12:12:00 12:15:30

504893 1003a362c600ed2ael Normal 0

4343

19

873675978 72.78.191.60 null

null

20120906 20120906
6
1425:57 14:29:09

50485275 Ia06ddad036437a9 Normal 0

4343

19

873675978 72.78.191.60 null

null

5049d7271at74106e03707e3a Noimal 0

4343

19

873675978 72.78.191.60 null

null

5049d7d81ae3907703654bb5 Normal 0

4343

19

873675978 72.78.191.60 null

null

5049d8cl 024dl 746001 33c96 Normal 0

4343

19

873675978 72.78.191.60 null

null

4343

19

873675978 72.78.191.60 null

null

20120907 20120907 ,

11:14:47 11:16:14 0
20120907 20120907 ,

11:17:44 11:19:44 0
20120907 20120907 ,

1121:37 11:22:57 0
20120913 20120913 ,

12:10:02

12:11:45 j6

5051cdla0f9b0360011900ee Normal

le7//I|/20034OK20l0-O8/Pnidiictioii/novnog.ip_feuioiu.btml[n/8/20l2 1:4«:28 PM]

.'-

UAS Data for novnog
Event Time
(UTC)
2012-08-27

15:51:16
2012-08-27
17:35:09

2012-08-27
17:35:25

Session ID

IP Address

Service
Name

Event
Type

Event
Action

503b97740000ac9b07d4ec4b 205.188.116.8

help.aoI.coin TGS

OK

503bafcd0000a790076 1 eObe

205.188.116.8

heIp.aol.com TGS

OK

503bafcd0000a7900761e0be

72.78.191.60

bill.aol.com

OK

AS

2012-09-06
12:12:28

5048932c0000ac22034a595d 64.12.116.8

help.aol.com TGS

OK

2012-09-06
12:12:28

5048932c0000ac22034a595d 64.12.116.8

help.aol.com TGS

OK

5048932c0000ac22034a595d 72.78.191.60

bUl.aol.com

OK

5048932c0000ac22034a595d 64.12.116.203

help.aol.com TGS

OK

14:27:15

5048b2c30000aal90346b88b 205.188.116.8

help.aol.com TGS

OK

2012-09-06
14:27:15

5048b2c30000aal90346b88b 205.188.116.8

help.aol.com TGS

OK

5048b2c30000aa 1 90346b88b 72.78.191.60

bill.aol.com

AS

OK

null

bill.aol.com

AS

FAIL

5048b2c30000aal90346b88b 205.188.116.139 bilI.aol.com

TGS

OK

5048b2c30000aal 90346b88b 72.78.191.60

biIl.aol.com

TGS

OK

5049d73a0000aa390ae7e85 1

205.188.116.8

help.aol.com TGS

OK

2012-09-07
11:15:23

5049d73a0000aa390ae7e85 1

72.78.191.60

bill.aol.com

OK

2012-09-07
11:18:45

5049d8 1 50000a8890b3c3d3b 205.188.116.8

help.aol.com TGS

OK

5049d8 1 50000a8890b3c3d3b 72.78.191.60

bill.aoI.com

OK

5049d8dl0000a8b00351dl82 205.188.116.8

heIp.aol.com TGS

OK

5049d8dl0000a8b00351dl82 72.78.191.60

bill.aol.com

AS

OK

505 1 Cd420000a8af0b3dab45

bill.aol.com

TGS

OK

2012-09-06

12:12:50
2012-09-06

12:14:35
2012-09-06

2012-09-06

14:27:51
2012-09-06
14:27:54
2012-09-06

14:28:06
2012-09-06
14:28:06
2012-09-07
11:15:06

2012-09-07
11:19:09
2012-09-07

11:21:53
2012-09-07
11:22:05
2012-09-13
12:10:42

ile:///J|/200340%2010-08/Production/novnog.ip_uas.htinl[ll/8/2012 1:48:29 PM]

72.78.191.60

64.12.116.12

AS

AS

AS

Account Information for philapa312

Account Information for philapa312
Screen Names
NoV NoG

0873675978

PbilaPa312

0595822734

Deserie

0864406624

NoGamesNo

0245434301

Thesia

0733123118

AL19130

0355035776

Dyce0961

0061926271 (DELETED)

Trubblinparadise

0107817894 (DELETED)

AWORDTOTHEWISE

0113417480 PELETED)

SweetyForSpoilin

0114305970 (DELETED)

PHILA PA 19130

0133729004 PELETED)

Danella

0152680979 PELETED)

al9128

0159673989 PELETED)

JILL 199999

0230755682 PELETED)

Jaded by games

0285493004 PELETED)

LindleyRednick

0349161951 PELETED)

Albert Whitehead

0477717067 PELETED)

BEWARE SUNDANCE 0526593736 PELETED)

John08081

0528572984 PELETED)

The Litigators

0589152013 PELETED)

NO FABULATION

0660796499 PELETED)

LydiaMedany

0723085349 PELETED)

Ellen Moylan

0756586785 PELETED)

Sundance Vac

0760551349 PELETED)

JILL 19999

0905217114 PELETED)

MARIA STORCH

0963954714 PELETED)

JohnF08081

1070440919 PELETED)

Address Information
Name

ALBERT WHITEHEAD

Street

842 N 27th st

City

Philadelphia

State/Zip

PA 19130

Country Code

US

Evening Phone 2152351308
Daytime Phone 2152351308

ile:///J|/200340%2010-08/Production/philapa312.acct_details.htinl[ll/8/2012 1:48:29 PM]

Account Information for pbilapa3 12

f| Service

||AOL

Status Information
Account Status ??ACTIVE**
Member Since

96-06-30 13:20:23 edt

Account Type

NORMAL

BID Country

us

le.7//J|/200340%20I0-08/Production/phiIapa312.acct_detajls.htnU[l 1/8/2012 1:48:29 PM]

Client IP Sessions for philapa312
Start
Time
(UTC)

End
Time
(UTQ

20120714 20120714

Sign on

ID

Session ID

User
Guest
Version Subversion
Group; Session

Master
Account

Network
Address

Dialed
IP
From DAHA

6

500150230f95739b0054b63e Normal 0

4343

19

873675978 72.78.191.60 null

null

20120730 20120730
6
11:09:24 11:17:48

50166b641a50382502ec95fe Normal 0

4343

19

873675978 72.78.191.60 null

null

20120806 20120806
1 10:55:20 11:02:29 6

501fa2980fl9ec0e00a6982f Noimal 0

4343

19

873675978 72.78.191.60 null

nuU

506b2bf802f99117004al08 Nonnal 0

4343

19

873675978 72.78.191.60 null

null

10:55:31

10:56:32

20121002 20121002

18:01:28

18:12:02

LJ

ley///|/200340K20IO-OS/Pr(xfaiction/|ilul*pa312.ip_Knioiu litinl(ll/g/2012 1:4S:2»PM]

I

UAS Data for philapa312
Event Time

(UTC)
2012-07-08

Session ID

IP Address

4ff97bld0000aa43033b74c0

72.78.191.60

4f&cl8a0000aa3804664969

Service Name
sns,webmail .aol . com

Event Event
Type Action

AS

OK

205.188.116.145 bill.aol.com

TGS

OK

4ffacld40000aa37045c27ba

72.78.191.60

sns.webmail.aol.com

AS

OK

4ffac2450000aa3c06f820e9

72.78.191.60

sns.webmail.aol.com

AS

OK

4ffac2eb0000ac2 1 077d9ed7

205.188.116.145 bill.aol.com

TGS

OK

4fiac3670000ac9706c0a547

72.78.191.60

sns.webmail.aol.com

AS

OK

4ffac40a0000a78e086f3508

72.78.191.60

sns.webmail.aol.com

AS

OK

4ffacb8fl)000a78c07d588be

72.78.191.60

sns.webmail.aol.com

AS

OK

4f&c40a0000a78e086f3508

72.78.191.60

help.aol.com

TGS

OK

4ffac40a0000a78e086f3508

72.78.191.60

sns.webmail.aol.com

TGS

OK

4ffac40a0000a78e086f3508

72.78.191.60

sns.webmail.aol.com

TGS

OK

4ffaf7bd0000ac9b04e70 1 b2

72.78.191.60

sns.webmail .aol.com

AS

OK

2012-07-09
15:31:39

4ffaf95b0000ac9a06e5a350

72.78.191.60

sns.webmail.aol.com

AS

OK

2012-07-09
15:41:19

4ffafb9fD000ac8fl)6e8906b

72.78.191.60

sns.webmail.aol.com

AS

OK

4ffafb9fl)000ac8fl)6e8906b

72.78.191.60

help.aol.com

TGS

OK

4flEbO 1 al 0000ac9b04e7b36a

64.12.116.13

bill.aol.com

TGS

OK

4ffl)026c0000a88a0824fac0

72,78.191.60

sns.webmail.aol.com

AS

OK

4ffi;l 8ad0000ac92046bb5fl

72.78.191.60

sns.webmail.aol.com

AS

OK

4ffl>026c0000a88a0824fac0

72.78.191.60

TGS

OK

4ffb026c0000a88a0824fac0

72.78.191.60

TGS

OK

12:20:45

2012-07-09

11:33:30
2012-07-09
11:34:44

2012-07-09
11:36:37
2012-07-09
11:39:23
2012-07-09

11:41:27
2012-07-09

11:44:10
2012-07-09
12:16:15
2012-07-09
13:22:14
2012-07-09

15:18:47

2012-07-09
15:22:20
2012-07-09

15:24:45

2012-07-09
16:05:06

2012-07-09
16:06:57
2012-07-09

16:10:20
2012-07-10
11:57:33
2012-07-10

12:07:31
2012-07-10
12:07:33

ile.///J|/200340%2010-08/Produetion/phiIi?)a312.ip_uas.htinl[l 1/8/2012 1:48:29 PM]

api-

saab.login.aol.com
apisaab.login.aol.com

2012-07-10
12:07:39

2012-07-10
12:07:44
2012-07-10

12:08:06
2012-07-10

12:09:09
2012-07-10

4ffb026c0000a88a0824fac0

72.78.191.60

4ffb026c0000a88a0824fac0

72.78.191.60

4ffb026c0000a88a0824fac0

72.78.191.60

4ffb026c0000a88a0824fac0

72.78.191.60

4ffl)026c0000a88a0824fac0

72.78.191.60

2012-07-10
12:10:35

4ffl)026c0000a88a0824fec0

72.78.191.60

2012-07-10
12:11:18

4fifb026c0000a88a0824fec0

72.78.191.60

2012-07-10
12:11:29

4ffb026c0000a88a0824fac0

72.78.191.60

12:10:06

2012-07-10

12:11:43

4flEb026cOO00a88a0824facO

apisaab.login,aol.com

OK

TGS

OK

TGS

OK

TGS

OK

TGS

OK

TGS

OK

TGS

OK

TGS

OK

TGS

OK

api-

saab.login.aol.cotn
apisaab.login.aol.com
api-

saab.login.aol.com
apisaab.login.aol.com

api-

saab.login.aol.com
api-

saab.login.aol.com
api-

saab.logm.aol.com
api-

72.78.191.60

saab.login.aol.com

2012-07-10
20:40:56

4flEb026c0OO0a88aO824fec0

72.78.191.60

sns.webmail.aol.com

TGS

OK

2012-07-10
23:56:38

4ffccl 360000aal7075940eb

72.78.191.60

sns.webmail.aol.com

AS

OK

4ffcc 1 360000aal 7O75940eb

72.78.191.60

sns.webmail.aol.com

TGS

OK

2012-07-11
10:25:45

4frd54a90000ac950492560 1

72.78.191.60

sns.webmail.aol.com

AS

OK

2012-07-11
17:28:22

4flfdb7b6O0O0a794O7ccdefe

72.78.191.60

sns.webmail.aol.com

AS

OK

4ffea5490000a8afl)785d07f

72.78.191.60

sns.webmail.aol.com

AS

OK

4ttttd5 1 0000a77807c4a423

72.78.191.60

sns.webmail.aol.com

AS

OK

5000028c0000a79305 1 f6654

72.78.191.60

sns.webmaiUol.com

AS

OK

19:30:50

5000776a0000ac9a00 1 03b74 72.78.191.60

sns.webmail.aol .com

AS

OK

2012-07-13
21:45:47

5000970b0000aal707899061 72.78.191.60

sns.webmail.aol.com

AS

OK

TGS

OK

2012-07-10
23:58:51

2012-07-12
10:22:01
2012-07-13
10:49:53
2012-07-13
11:12:12
2012-07-13

2012-07-14

10:56:01
2012-07-14
16:04:45

500 1 504 1 00O0aa39O7aaO5c5

205.188.116.145 bill.aol.com

5000970b0OO0aa 1 70789906 1 72.78.191.60

apisaab.login.aol.com

TGS

OK

5000970b00O0aal7O7899061 72.78.191.60

apisaab.login.aol.com

TGS

OK

.

i012-07-14

16:05:06
r

TGS

i

le^//J|/200340%201 0-08/Production/philapa3 12.ip_uas.html[l 1/8/201 2 1 .-48:29 PM]

i

¦¦

i

1

2012-07-14

api-

5000970b0000aal707899061 72.78.191.60

OK

apisaab.login.aol.com

TGS

OK

5000970b0000aal 707899061 72.78.191.60

apisaab.login.aol.com

TGS

OK

5000970b0000aal707899061 72.78.191.60

api-

TGS

OK

5002a4e20000ac9a0026c643

72.78.191.60

sns.webmail.aol.com

AS

OK

5003f2700000a79100354883 72.78.191.60

sns.webmail.aol.com

AS

OK

2012-07-16
11:25:05

5003fel 10000ac95{)4e2f553

72.78.191.60

sns.webmail.aol.com

AS

OK

2012-07-16
17:38:57

5003fel 10000ac9504e2f553

72.78.191.60

sns.webmail.aol.com

TGS

OK

2012-07-17
01:26:51

5004bf5a0000a889082df60b

72.78.191.60

sns.webmail.aol.com

AS

OK

2012-07-17
10:41:32

5005415c0000aa41089a97db 72.78.191.60

sns.webmail.aol.com

AS

OK

2012-07-17
11:05:13

500546e90000a78b04a9e990 72.78.191.60

sns.webmail.aol.com

AS

OK

2012-07-18
10:37:12

50069 1 d70000aa4207bba208 72.78.191.60

sns.webmail.aol.com

AS

OK

13:24:26

5006b9090000a8b0005cdd99 72.78.191.60

sns.webmail.aol.com

AS

OK

2012-07-18
17:35:41

5006b9090000a8b0005cdd99 72,78.191.60

sns.webmail.aol.com

TGS

OK

2012-07-19
21:28:23

50087bf70000aal80077138d 72.78.191.60

sns.webmail.aol.com

AS

OK

500939170000ac8d03f68615 72.78.191.60

sns.webmail.aol.com

AS

OK

500a988b0000acld07cl42dc

72.78.191.60

sns.webmail.aol.com

AS

OK

500bdbfd0000aa38053fd3e2

72.78.191.60

oar-artifact

AS

FAIL

500bdcl40000aa39082cfDd5

72.78.191.60

sns.webmail.aol.com

TGS

OK

500bdc 1 40000ac I fD880f59a

72.78.191.60

client_sso

TGS

OK

SOObdcl 40000aa39082cfDd5

72.78.191.60

sns_sso

TGS

OK

500d27al0000a78e095248fd

72.78.191.60

sns.webmail.aol.com

AS

OK

¦ 2012-07-14

! 16:06:15
2012-07-14

16:06:38
2012-07-14

16:07:08
2012-07-15

11:09:22
2012-07-16
10:52:32

2012-07-18

2012-07-20
10:55:19
2012-07-21

11:54:51

2012-07-22
10:54:53
2012-07-22
10:55:16
2012-07-22
10:55:16
2012-07-22
10:55:16

2012-07-23
10:29:53
r

5000970b0000aal707899061 72.78.191.60

TGS

[ 16:05:58

-

¦¦

l

Ie:///J|^00340%2010-08/Producdon^hjl^>a312.ip_uas.html[l 1/8/2012 1:48:29 PM]

saab.login.aol.com

saab.login.aol.com

"

1

2012-07-23
10:31:44
2012-07-23
11:04:24

2012-07-23
11:56:07
2012-07-23

12:32:56
2012-07-23
13:34:07
2012-07-24
10:40:35

2012-07-24
12:53:22
2012-07-24
12:53:36
2012-07-24

12:53:55

2012-07-24
12:54:19
2012-07-24

12:54:34
2012-07-24

72.78.191.60

sns.webmail.aol.com

AS

OK

500d2fb70000ac8900acla90

72.78.191.60

sns.webmail.aol.com

AS

OK

500d3bd70000ac99098f62d0 72.78.191.60

sns.webmail.aol.com

AS

OK

500d447 1 0000ac98080e5 1 8 1

72.78.191.60

sns.webmail.aol.com

AS

OK

500d52cfl)000a8bl0580ceb6

72.78.191.60

sns.webmail.aol.com

AS

OK

500e7ba30000a8bl059014ae 72.78.191.60

sns.webmail.aol.com

AS

OK

TGS

OK

72.78.191.60

5OOd52cfDO00a8blO58Oceb6

72.78.191.60

apisaab.login.aol.com

TGS

OK

500d52cf0000a8bl 0580ceb6

72.78.191.60

apisaab.login.aol.com

TGS

OK

500d52cfl)000a8bl 0580ceb6

72.78.191.60

apisaab.login.aol.com

TGS

OK

500d52cfl)000a8b 1 0580ceb6

72.78.191.60

TGS

OK

saab.login.aol.com

api-

saab.login.aol.com

72.78.191.60

apisaab.login.aol.com

TGS

OK

2012-07-24
12:55:51

500d52cfDOOOa8b 1 05 80ceb6

72.78.191.60

apisaab.login.aol.com

TGS

OK

2012-07-26
11:02:42

501 123d20000ac8900el3645 72.78.191.60

sns.webmail.aol.com

AS

OK

2012-07-26
11:21:43

501 123d20000ac8900el3645 72.78.191.60

sns.webmail.aol.com

TGS

OK

TGS

OK

2012-07-26

api-

501 123d20000ac8900el3645 72.78.191.60

13:22:21
2012-07-26
13:22:39
2012-07-26
13:23:46
2012-07-26

saab.login.aol.com

501 123d20000ac8900el3645 72.78.191.60

apisaab.login.aol.com

TGS

OK

501 123d20000ac8900el3645 72.78.191.60

apisaab.logm.aol.com

TGS

OK

TGS

OK

TGS

OK

TGS

OK

TGS

OK

api-

501 123d20000ac8900el3645 72.78.191.60

13:25:05
2012-07-26
13:25:32

saab.login.aol.com
api-

501 123d20000ac8900el3645 72.78.191.60

2012-07-26

saab.login.aol.com
api-

501 123d20000ac8900el3645 72.78.191.60

13:25:51
2012-07-26
13:26:44

saab.login.aol.com
api-

501 123d200O0ac8900el3645 72.78.191.60
-

u

I

le:///J|/200340%2010-08/Production/phUapa312.ip_uas.htinl[l 1/8/2012 1:48:29 PM]

j

api-

500d52cfDOOOa8bl0580ceb6

500d52cfD000a8bl0580ceb6

12:55:37

r

500d28100000a8b30854f0b5

saab.login.aol.com
i

l

'

"i

2012-07-26

501 123d20000ac8900el3645 72.78.191.60

apisaab.logm.aol.com

TGS

OK

501 123d20000ac8900el3645 72.78.191.60

apisaab.logm.aol.com

TGS

OK

50 1 1 f04 1 OOOOaa 1 a086427c2

72.78.191.60

sns.webmail.aol.com

AS

OK

5011fl)410000aala086427c2

72.78.191.60

sns.webmail.aol.com

TGS

OK

5012a0340000a7930608ca04 72.78.191.60

sns.webmail.aol.com

AS

OK

2012-07-29
18:04:15

50157blfD000ac8a01119e23

72.78.191.60

sns.webmail .aol.com

AS

OK

2012-07-30
10:41:26

501664d60000aa42087b7907 72.78.191.60

sns.webmail.aol.com

AS

OK

2012-07-30
10:46:59

501664d60000aa42087b7907 72.78.191.60

sns.webmail.aol.com

TGS

OK

2012-07-30
11:44:36

501664d60000aa42087b7907 72.78.191.60

sns.webmail.aol.com

TGS

OK

2012-07-30
12:31:39

50167eab0000aa3e086e3cdd

72.78.191,60

sns.webmail.aol.com

AS

OK

50 167eabO000aa3e086e3(x1d

72.78.191.60

apisaab.login.aol.com

TGS

OK

50 1 67eabO000aa3e086e3cdd

72.78.191.60

TGS

OK

TGS

OK

TGS

OK

13:27:20
2012-07-26
13:27:40

2012-07-27
01:34:57
2012-07-27

12:59:27
2012-07-27

14:05:40

2012-07-30
12:52:41
2012-07-30

12:53:37

2012-07-30

api-

saab.login.aol.com

501 67eab0000aa3e086e3cdd 72.78.191.60

apisaab.login.aol.com

50 1 67eab0000aa3e086e3cdd

72.78,191.60

api-

2012-07-30
12:54:47

50167eab0000aa3e086e3cdd

72.78.191.60

apisaab.login.aol.com

TGS

OK

2012-07-30
12:54:48

50167eab0000aa3e086e3cdd

72.78.191.60

apisaab.login.aol.com

TGS

OK

501 67eab0000aa3e086e3cdd

72.78.191.60

TGS

OK

50 167eabO00Oaa3eO86e3cdd

72.78.191.60

TGS

OK

5O167eab0OO0aa3e086e3cdd

72.78.191.60

TGS

OK

50 1 67eab0000aa3e086e3cdd

72.78.191.60

apisaab.login,aol.com

TGS

OK

SO 1 67eab0000aa3e086e3cdd

72.78.191.60

apisaab.login.aol.com

TGS

OK

501 67eab0000aa3e086e3cdd

72.78.191.60

TGS

OK

12:53:55

2012-07-30
12:54:20

2012-07-30

12:55:25
2012-07-30

12:56:53
2012-07-30

12:57:22
2012-07-30
12:57:46

2012-07-30
12:59:45

2012-07-30
13:00:56
r-''

¦

ir

le:///J|/200340%2010-08fl,roduction^hilapa312.ip_uas.html[l 1/8/2012 1:48:29 PM]

saab.login.aol.com

api-

saab.login.aol.com
apisaab.login.aol.com
apisaab.login.aol.com

api-

saab.login.aol.com

¦

1

2012-07-30
13:01:13

2012-07-30
13:01:27
2012-07-30

50 1 67eab0000aa3e086e3cdd

72.78.191.60

50 1 67eab0000aa3e086e3cdd

72.78.191.60

apisaab.login.aol.com
api-

saab.login.aol.com

TGS

OK

TGS

OK

50167eab0000aa3e086e3cdd

72,78.191.60

apisaab.login.aol.com

TGS

OK

50167eab0000aa3e086e3cdd

72.78.191.60

apisaab.login.aol.com

TGS

OK

2012-07-30
13:02:28

50 167eab0000aa3e086e3cdd

72.78.191.60

apisaab.login.aol.com

TGS

OK

2012-07-30
13:03:05

50 167eab0000aa3e086e3cdd

72.78.191.60

apisaab.login.aol.com

TGS

OK

2012-07-30
13:03:14

501 67eab0000aa3e086e3cdd

72.78.191.60

apisaab.login.aol.com

TGS

OK

501 67eab0000aa3e086e3cdd

72.78.191.60

apisaab.login.aol.com

TGS

OK

50167eab0000aa3e086e3cdd

72.78.191.60

apisaab.login.aol.com

TGS

OK

50 1 67eab0000aa3e086e3cdd

72.78.191.60

apisaab.login.aol.com

TGS

OK

50 1 67eab0000aa3e086e3cdd

72.78.191.60

apisaab.login.aol.com

TGS

OK

50 1 67eab0000aa3e086e3cdd

72.78.191.60

apisaab.logm.aol.com

TGS

OK

50167eab0000aa3e086e3cdd

72.78.191.60

apisaab.login.aol.com

TGS

OK

501 67eab0000aa3e086e3cdd

72.78.191.60

apisaab.login.aol.com

TGS

OK

50 167eab0000aa3e086e3cdd

72.78.191.60

apisaab.login.aol.com

TGS

OK

50167eab0000aa3e086e3cdd

72.78.191.60

apisaab.login.aol.com

TGS

OK

50 1 67eab0000aa3e086e3cdd

72.78.191.60

apisaab.login.aol.com

TGS

OK

2012-07-31
11:45:20

501 67eab0000aa3e086e3cdd

72.78.191.60

apisaab.login.aol.com

TGS

OK

2012-07-31
11:46:17

501 67e^b0000aa3e086e3cdd

72.78.191.60

apisaab.login.aol.com

TGS

OK

2012-07-31
11:46:22

50 1 67eab0000aa3e086e3cdd

72.78.191.60

apisaab.login.aol.com

TGS

OK

2012-07-31
13:19:44

50 1 67eab0000aa3e086e3cdd

72.78.191.60

apisaab.login.aol.com

TGS

OK

2012-07-31
13:19:49

50 1 67eab0000aa3e086e3cdd

72.78.191.60

wp\saab.login.aol.com

TGS

OK

13:01:44
2012-07-30

13:02:08

2012-07-30
13:03:17
2012-07-30
13:03:20
2012-07-30

13:03:40
2012-07-30
13:04:00

2012-07-30

| 13:06:41
2012-07-31
11:42:34
2012-07-31

11:42:51
2012-07-31
11:43:25
2012-07-31

11:43:35
2012-07-31
11:44:03

J

i

ile:///J|/200340%2010-08/I>roduction/philapa312.ip_uas.html[l 1/8/2012 1 :48:29 PM]

I

I

1

2012-07-31

501 67eab0000aa3e086e3cdd

72.78.191.60

501bf5ab0000a77809201 la7

72.78.191.60

501bf7050000aa4001649761

api-

TGS

OK

oar-artifect

AS

FAIL

72.78.191.60

oar-artifect

AS

FAIT,

501bf7180000a88b093c81f8

72.78.191.60

sns_sso

TGS

OK

2012-08-03
16.06:48

501bf71 80000a88f08f7dd52

72.78.191.60

client_sso

TGS

OK

2012-08-03
16:06:48

501bf7180000a88b093c81f8

72.78.191.60

sns.webmail.aol.com

TGS

OK

2012-08-03
19:15:07

501bf7180O00a88b093c81f8

72.78.191.60

sns.webmail.aol.com

TGS

OK

501d08d00000ac2101732796 72.78.191.60

sns.webmail.aol.com

AS

OK

2012-08-04
14:17:38

501d08d00000ac2101732796 72.78.191.60

sns.webmail.aol.com

TGS

OK

2012-08-05
13:08:45

501d08d00000ac2101732796 72.78.191.60

apisaab.login.aol.com

TGS

OK

501d08d00000ac2101 732796 72.78.191.60

api-

TGS

OK

TGS

OK

TGS

OK

TGS

OK

TGS

OK

TGS

OK

TGS

OK

TGS

OK

TGS

OK

TGS

OK

TGS

OK

TGS

OK

13:23:11
2012-08-03
16:04:59
2012-08-03
16:06:29
2012-08-03

16:06:48

2012-08-04

11:34:41

2012-08-05

13:08:49
2012-08-05
13:09:32
2012-08-05

13:09:45
2012-08-05

13:10:37
2012-08-05
13:11:08

2012-08-05
13:11:45

2012-08-05

13:12:47
2012-08-05
13:18:18
2012-08-05
13:18:51

2012-08-05
13:18:59
2012-08-05

13:19:56
2012-08-05

saab.login.aol.com

501 d08dO0O00ac2 1 0 1 732796 72.78.191.60

apisaab.login.aol.com

50 1 d08d00000ac2 1 0 1 732796 72.78.191.60

api-

501d08d00000ac21 01 732796 72.78.191.60

api-

501d08d00000ac2101732796 72.78.191.60

api-

501d08d00000ac2101732796 72.78.191.60

api-

501d08d00OO0ac21 01 732796 72.78.191.60

api-

501d08d00000ac2 101 732796 72.78.191.60

api-

501d08d000O0ac2101732796 72.78.191.60

apisaab.login.aol.com

50 Id08d00000ac2 1 0 1 732796 72.78.191.60

api-

501d08d000O0ac2 1 0 1 732796 72.78.191.60

apisaab.login.aol.com

50 1 d08d00000ac2 1 0 1 732796 72.78.191.60

13:20:24

saab.login.aol.coni

II

le;///J|/200340%2010-08/Production/|Aiiapa312.ip_uasJitml[l 1/8/2012 1:48:29 PM]

saab.login.aol.com

saab.login.aol.com
saab.login.aol.com
saab.login.aol.com

saab.login.aol.com
saab.login.aol.com

saab.login.aol.com

api-

saab.login.aol.com
i

I

1

| 2012-08-05
2012-08-05

api-

501d08dO00O0ac2101732796 72.78.191.60

13:21:14

2012-08-05

saab.login.aol.com

TGS

OK

TGS

OK

50 Id08d00000ac2 1 01732796 72.78.191.60

apisaab.login.aol.com

TGS

OK

501d08d00000ac2101732796 72.78.191.60

apisaab.login.aol.com

TGS

OK

50 Id08d00000ac2 1 0 1 732796 72.78.191.60

apisaab.login.aol.com

TGS

OK

501d08d00000ac2101732796 72.78.191.60

apisaab.login.aol.com

TGS

OK

501d08d00000ac2101732796 72.78.191.60

apisaab.login.aol.com

TGS

OK

501d08d00000ac2101732796 72.78.191.60

apisaab.login.aol.com

TGS

OK

501d08d00000ac2101732796 72.78.191.60

api-

TGS

OK

501d08dOOOO0ac21 01732796 72.78.191.60

apisaab.login.aol.com

TGS

OK

2012-08-05
13:26:30

501d08d00000ac21O1732796 72.78.191.60

apisaab.login.aol.com

TGS

OK

2012-08-05
13:26:36

501 d08d00000ac2 1 0 1 732796 72.78.191.60

apisaab.login.aol.com

TGS

OK

2012-08-05
15:28:50

501e91320000a8ac017bcca6

72.78.191.60

sns.webmailaol.com

AS

OK

501 d08d00000ac2 1 01 732796 72.78.191.60

sns.webmail.aol.com

TGS

OK

501 fa2420000ac20093cG60

72.78.191.60

sns.webmail.aol.com

AS

OK

501 fa2420000ac20093cf360

72.78.191.60

sns.webmail.aol.com

TGS

OK

2012-08-06
14:01:22

501 fce3 1 0000a88e044ddfb3

72.78.191.60

sns.webmail.aol.com

AS

OK

2012-08-06
14:22:21

501fd31d0000ac9401906540

72.78.191.60

sns.webmail.aol.com

AS

OK

2012-08-06
16:58:56

501£f7d00000ac2201 8be963

72.78.191.60

sns.webmail.aol.com

AS

OK

50 1 ff7d00000ac220 1 8be963

72.78.191.60

sns.webmailaol.com

TGS

OK

502252440000a78c09b66afl

72.78.191.60

sns.webmailaol.com

AS

OK

5023a7c70000aalc0667b0al

72.78.191.60

sns.webmailaol.com

AS

OK

13:22:00
2012-08-05
13:22:18
2012-08-05
13:22:33

2012-08-05

13:23:12

2012-08-05
13:24:10
2012-08-05

13:26:10
2012-08-05
13:26:13
2012-08-05

13:26:15

2012-08-05

16:05:50
2012-08-06
10:53:54
2012-08-06
11:03:35

2012-08-07
04:05:55

2012-08-08

11:49:25
2012-08-09
12:06:31
r

apisaab.login.aol.com

501d08d00000ac2101732796 72.78.191.60

13:21:01

I

^ — * —.—„

——

)

le:///Jl/200340%2010-08/Production/phiiapa312.ip_uas.htnil[l 1/8/2012 1 :48;29 PM]

saab.login.aol.com

—i

,

2012-08-09

5023a83b0000a88eO47d526a 72.78.191.60

sns.webmail.aol.com

AS

OK

5023f4910000aal709322f9d

72.78.191.60

sns.webmail.aol .com

AS

OK

50240b470000ac97089c8eG

72.78.191.60

sns.webmail.aol.com

AS

OK

50240b470000ac97089c8ef3

72.78.191.60

sns.webmail.aol.com

TGS

OK

50240b470000ac97089c8eG

72.78.191.60

sns.webmail.aol.com

TGS

OK

5025 lb2aO00OaclfD9b00768

72.78.191.60

sns.webmail.aol.com

AS

OK

502567970000ac920665b089 72.78.191.60

sns.webmail.aol.com

AS

OK

5026444c0000aala094b9908 72.78.191.60

sns.webmail.aol.com

AS

OK

502644bb0000a88c09c7c5fd

72.78.191.60

sns.webmail.aol .com

AS

OK

502644bb0000a88c09c7c5fd

72.78.191.60

sns.webmail.aol.com

TGS

OK

502a33650000aa3fD95 1 0e3 9

72.78.191.60

sns.webmail.aol.com

AS

OK

502644bb0000a88c09c7c5fd

72.78.191.60

sns.webmail.aol.com

TGS

OK

502a8fl)90000a88fl)994d837

72.78.191.60

sns.webmail.aol.com

AS

OK

502b82afD000a888098c3bla

72.78.191.60

sns.webmail.aol.com

AS

OK

502b8cdd0000aa3a0208 ld8c 72.78.191.60

sns.webmail.aol.com

AS

OK

12:08:27

2012-08-09
17:34:10
2012-08-09

19:11:03

2012-08-09
19:36:57
2012-08-10

01:24:20
2012-08-10

14:31:08
2012-08-10
19:57:13
2012-08-11
11:38:52
2012-08-11
11:40:43
2012-08-13

17:11:23
2012-08-14
11:15:49
2012-08-14

17:05:12
2012-08-14

17:46:49
2012-08-15

11:06:23
2012-08-15
11:49:49

-

2012-08-16
11:26:18

502cd8da0000ac9809915c04 72.78.191.60

sns.webmail.aol.com

AS

OK

2012-08-16
11:51:31

502cdec30000a8b202179ece

72.78.191.60

sns.webmail.aol.com

AS

OK

2012-08-16
12:35:46

502cdec30000a8b202 1 79ece

72.78.191.60

sns.webmail.aol.com

TGS

OK

2012-08-18
00:35:27

502ee34fD000ac8d05bl 36al

72.78.191.60

sns.webmail.aol.com

AS

OK

502ee34fD000ac8d05bl36al

72.78.191.60

help.aol.com

TGS

OK

502£82d20000ac9809b5b284

72.78.191.60

sns.webmail.aol.com

AS

OK

2012-08-18

00:37:33
2012-08-18
11:56:02
2012-08-20

5032296c0000a88809d2bbcf 72.78.191.60

12:11:55
n

|

¦¦¦ i

le:///J)/200340%20I0-08/Production/philapa312.ip_uas.htinlIl 1/8/2012 1 :48:29 PM]

account.login.aol .com AS

FAIT,
i

1

2012-08-20
12:13:35
2012-08-20
13:08:04
2012-08-20
13:13:28

2012-08-20
13:14:24
2012-08-20
13:30:45
2012-08-20
13:31:04
2012-08-20
13:32:20

2012-08-20
13:42:36

2012-08-20
13:47:00

2012-08-20
13:54:33
2012-08-20
16:44:44
2012-08-20
17:12:23
2012-08-21
12:09:50
2012-08-21

12:13:05
2012-08-21

12:13:13
2012-08-21
12:13:41
2012-08-21

12:14:05
2012-08-21
12:15:31
2012-08-21

12:16:03
2012-08-21
12:16:57
2012-08-21

12:17:50

2012-08-21
20:36:51
r

-

5O3229efDO00ac 1 d0987 1 93 1

72.78.191.60

sns.webinail.aol.coni

5032369d0000a78e0af80532

72.78.191.60

account.login.aol.com AS

FAIL

503229ef0000acld09871931

72.78.191.60

help.aol.cora

TGS

OK

503229efDO00acldO9871931

72.78.191.60

get.aol.com

TGS

OK

50323 bcaOOOOaal b065b8a83

72.78.191.60

sns.webraail.aol.com

AS

OK

50323bca0000aalb065b8a83 72.78.191,60

help.aol.com

TGS

OK

503229efD000acld09871 93 1

bill.aol.com

AS

OK

50323ecb0000aal90250c74b 72.78.191.60

sns.webmail.aol.com

AS

OK

50323fd40000ac91025b720a 72.78.191.60

sns.webmail.aol.cora

AS

OK

50323ecb0000aal90250c74b 72.78.191.60

help.aol.com

TGS

OK

50323ecb0000aal90250c74b 72.78.191.60

sns.webmail.aol .com

TGS

OK

50326ff70000ac8b09ac7ad8

72.78.191.60

sns.webmail.aol.cora

AS

OK

50337a8e0000ac880bf9fe93

72.78.191.60

sns.webmail.aol.com

AS

OK

50337a8e0000ac880bf9fa93

72.78.191.60

apisaab.login.aol.com

TGS

OK

50337a8e0000ac880bf9fa93

72.78.191.60

apisaab.login.aol.cora

TGS

OK

50337a8e0000ac880bf9fa93

72.78.191.60

apisaab.login.aol.cora

TGS

OK

50337a8e0000ac880bf9fa93

72.78.191.60

TGS

OK

50337a8e0000ac880bf9fa93

72.78.191.60

apisaab.login.aol.com

TGS

OK

5033 7a8e0000ac880bf9fa93

72.78.191.60

apisaab.login.aol.cora

TGS

OK

50337a8e0000ac880bf9fa93

72.78.191.60

apisaab.login.aol.cora

TGS

OK

50337a8e0000ac880bf9fa93

72.78.191.60

apisaab.login.aol.com

TGS

OK

5033n630000a78b06dl28e0

72.78.191.60

sns.webraail.aol.com

AS

OK

72.78.191.60

ii

Ie:///J|/200340%2010-08/Production/philapa312.ip_uas.htinI[n/8/2012 1:48:29 PM]

AS

api-

saab.login.aol.cora

I

OK

2012-08-21

5034 143a0000ac8e0269df26 72.78.191.60

sns.webmail.aol.com

AS

OK

5034 143a0000ac8e0269df26

72.78.191.60

sns.webmail.aol.com

TGS

OK

5034 1 43a0000ac8e0269dC6

72.78.191.60

apisaab.login.aol.com

5034143a0000ac8e0269df26

72.78.191.60

2012-08-22
15:35:53

5034 1 43a0000ac8e0269df?,6

72.78.191.60

2012-08-22
15:36:08

5034 143a0000ac8e0269df26 72.78.191.60

api-

2012-08-22
15:36:23

5034143a0000ac8e0269df26

72.78.191.60

5034143a0000ac8e0269d£26

23:05:30

2012-08-22
00:13:57

1

2012-08-22
15:34:51
2012-08-22
15:35:35

2012-08-22
15:36:50

2012-08-22
15:37:14

2012-08-22

15:37:31
2012-08-22

15:39:50
2012-08-22
15:42:27
2012-08-22

TGS

OK

TGS

OK

TGS

OK

TGS

OK

apisaab.login.aol.com

TGS

OK

72.78.191.60

apisaab.login.aol.com

TGS

OK

5034143a0000ac8e0269df26

72.78.191.60

apisaab.login.aol.com

TGS

OK

5034143a0000ac8e0269df26

72.78.191.60

TGS

OK

5034 1 43a0000ac8e0269df26

72.78.191.60

TGS

OK

5034143a0000ac8e0269df26

72.78.191.60

TGS

OK

TGS

OK

5034143a0000ac8e0269df26

15:42:40
2012-08-22
19:53:39

2012-08-22
20:08:00

72.78.191.60

2012-08-23
12:03:38
2012-08-23

12:03:38
)

saab.login.aol.com
apisaab.login.aol.com
api-

saab.login.aol.com
api-

saab.login.aol.cora

503538cl0000aalb0681ec3a 72.78.191.60

sns.webmail.aol.com

TGS

OK

TGS

OK

TGS

OK

TGS

OK

TGS

OK

503538cl0000aalb0681ec3a 72.78.191.60

2012-08-23
11:59:32

api-

OK

503538cl0000aalb0681ec3a 72.78.191.60

11:48:38

saab.login.aol.com

AS

2012-08-22
23:03:33

2012-08-23

apisaab.login.aol.com

sns.webmail.aol.com

503538cl0000aalb0681ec3a 72.78.191.60

2012-08-22

saab.login.aol.com

503538cl0000aalb0681ec3a 72.78.191.60

2012-08-22
23:03:06

23:03:44

api-

api-

saab.login.aol.com
api-

saab.login.aol.com
api-

saab.login.aol.com

503538cl0O00aalb0681ec3a 72.78.191.60

sns.webmail.aol.com

5036 Iaec0000aa3a027d447f

72.78.191.60

account.login.aol.com AS

FAIL

5036 1c 1 90000a7780a3fb39b

72.78.191.60

client_sso

AS

OK

5036 1 c 1 a0000a78a0a90fefd

72.78.191.60

sns.webmail.aol.com

TGS

OK

i

Ie:///J|/200340%2010-08/Production^hilapa312.ip_uas.html[l 1/8/2012 1:48:29 PM]

— ' ¦

i

n

2012-08-23

50361 Cla0000a78a0a90fefd

TGS

OK

5036 1 c5O0OO0a7930795cc63 72.78.191.60

sns.webmail.aol.coni

AS

OK

5036 1 ca50000a88e054683 1 9 72.78.191,60

sns.webmaiLaol.com

AS

OK

2012-08-23
12:24:56

503621 170000a88d0acld4aa 72.78.191.60

sns.webmail.aol.coni

AS

OK

2012-08-23
17:35:43

503669e50000ac 1 fl)a6ddd30

72.78.191.60

sns.webmail.aol.com

AS

OK

503774770000ac900293d888 72.78.191.60

sns.webmail.aol.com

AS

OK

2012-08-25
12:48:56

5038c9b80000a78cOaafDe23

72.78.191.60

sns.webmail.aol .com

AS

OK

2012-08-26
11:43:43

503774770000ac900293d888 72.78.191.60

sns.webmaiLaol.com

TGS

OK

503aa5500000a7770al 279f2

72.78.191.60

sns.webmail.aol.com

AS

OK

503b63320000aclfl)a9de385

72.78.191.60

sns.webmail.aol.com

AS

OK

503b6cc 1 0000aa36O2bOb5f2

72.78.191.60

sns.webmail.aol.com

AS

OK

2012-08-28
12:02:19

503cb34b0000a7770a288cc5

72.78.191.60

sns.webmail.aol.com

AS

OK

2012-08-28
12:16:36

503cb34b0000a7770a288cc5

72.78.191.60

TGS

OK

503cb34b0000a7770a288cc5

72.78.191.60

TGS

OK

TGS

OK

TGS

OK

TGS

OK

TGS

OK

TGS

OK

TGS

OK

2012-08-23
12:04:33
2012-08-23

12:05:58

2012-08-24
12:32:56

2012-08-26
22:38:10

2012-08-27
12:08:19
2012-08-27

12:49:07

2012-08-28
12:17:38
2012-08-28
12:17:50

api-

saab.login.aol.com
api-

saab.login.aol.com
api-

503cb34b0000a7770a288cc5 72.78.191.60

2012-08-28

saab.login.aol.com
api-

503cb34b0000a7770a288cc5 72.78.191.60

12:18:07
2012-08-28
12:18:30

503cb34b0000a7770a288cc5

72.78.191.60

2012-08-28
12:20:33

503cb34b0000a7770a288cc5

72.78.191.60

503cb34b0000a7770a288cc5

72.78,191.60

503cb34b0000a7770a288cc5

72.78.191.60

2012-08-28

12:20:35
2012-08-28
12:20:37

saab.login.aol.com
apisaab.login.aol.com
api-

saab.login.aol.com
api-

saab.login.aol.com
apisaab.login.aol.com

' ¦

2012-08-28
12:20:43
2012-08-28
12:20:58
i

72.78.191.60

sns_sso

12:03:38

503cb34b0000a7770a288cc5

72.78.191.60

503cb34b0000a7770a288cc5

72.78.191.60

i

ley'//Jl/200340%201(W»8/Production/philfl)a312.ip_uas.html[l 1/8/2012 1:48:29 PM]

apisaab.login.aol.com
api-

saab.login.aol.com
i

I

¦——

TGS

OK

TGS

OK
I

1

2012-08-28
12:21:15

503cb34b0000a7770a288cc5

2012-08-28
12:39:35

503cb34b0000a7770a288cc5

72.78.191.60

2012-08-28
12:39:38

503cb34b0000a7770a288cc5

TGS

OK

apisaab.login.aol.com

TGS

OK

72.78.191.60

apisaab.login.aol.com

TGS

OK

503cb34b0000a7770a288cc5 72.78.191.60

apisaab.login.aol.com

TGS

OK

503cb34b0000a7770a288cc5 72.78.191.60

api-

TGS

OK

503cb34b0000a7770a288cc5 72.78.191.60

apisaab.login.aol.coni

TGS

OK

503cb34b0000a7770a288cc5 72.78.191.60

apisaab.login.aol.com

TGS

OK

503cb34b0000a7770a288cc5

72.78.191.60

apisaab.login.aol.com

TGS

OK

503cb34b0000a7770a288cc5 72.78.191.60

apisaab.login.aol.com

TGS

OK

503cb34b0000a7770a288cc5

72.78.191.60

apisaab.login.aol.com

TGS

OK

503cb34b0000a7770a288cc5

72.78.191.60

apisaab.login.aol.com

TGS

OK

503cb34b0000a7770a288cc5 72.78.191.60

apisaab.login.aol.com

TGS

OK

503cb34b0000a7770a288cc5

72.78.191.60

apisaab.login.aol.com

TGS

OK

503cb34b0000a7770a288cc5

72.78.191.60

apisaab.login.aol.com

TGS

OK

503cb34b0000a7770a288cc5 72.78.191.60

apisaab.login.aol.com

TGS

OK

TGS

OK

2012-08-28
12:39:57
2012-08-28
12:40:48
2012-08-28

12:41:02
2012-08-28
12:41:32

2012-08-28
12:42:12

j

2012-08-28
12:44:47
2012-08-28
12:45:52

2012-08-28
12:46:18
2012-08-28
12:47:57

2012-08-28
12:48:37
2012-08-28
12:48:49

2012-08-28
12:48:56
2012-08-28

503cb34b0000a7770a288cc5

12:49:00

2012-08-28
12:49:41
2012-08-28

12:50:08

2012-08-28
12:50:38
2012-08-28

15:32:11
2012-08-28

20:08:46
2012-08-29

12:12:28

!r

ir

api-

72.78.191.60

saab.login.aol.com

saab.login.aol.coin

api-

72.78.191.60

saab.login.aol.com

503cb34b0000a7770a288cc5

72.78.191.60

apisaab.login.aol.com

TGS

OK

503cb34b0000a7770a288cc5

72.78.191.60

apisaab.login.aol.com

TGS

OK

503cb34b0000a7770a288cc5

72.78.191.60

apisaab.login.aol.com

TGS

OK

503ce47b0000ac9207629d3f 72.78.191.60

sns.webmail.aol.com

AS

OK

503d254e0000a88a00da6884 72.78.191.60

sns.webmail ,aol.com

AS

OK

503eO72c0OO0aal 902d4c50f

sns.webmail.aol.com

AS

OK

72.78.191.60
i

iIey'//Jl/200340%2010-O8/Pro*iction/i*il^>a3 12.ip_uas.htinl[l 1/8/2012 1 :48:29 PM]

¦¦

ii

I—:

1

2012-08-29

5O3e6fb8O000ac93066a5233

72.78.191.60

sns.webniail .aol.com

AS

OK

503fa9540000a88b0ac56f7a

72.78.191.60

sns.webmail.aol.com

AS

OK

503fa9540000a88b0ac56f7a

72.78.191.60

TGS

OK

503fa954O000a88b0ac56f7a

72.78.191.60

TGS

OK

2012-08-31
12:31:30

503fa954OO0Oa88bOac56f7a

72.78.191.60

TGS

OK

2012-08-31
12:31:58

503fa9540000a88b0ac56f7a

72.78.191.60

TGS

OK

503fe9540000a88b0ac56f7a

72.78.191.60

TGS

OK

503fa9540000a88b0ac56f7a

72.78.191.60

TGS

OK

503fe954000Oa88b0ac56f7a

72.78.191.60

TGS

OK

TGS

OK

TGS

OK

TGS

OK

TGS

OK

TGS

OK

TGS

OK

19:38:32

2012-08-30
17:56:37

2012-08-31
12:31:12

2012-08-31
12:31:20

2012-08-31

12:32:21
2012-08-31
12:32:31

_j

2012-08-31
12:33:12
2012-08-31

12:33:34
2012-08-31
12:33:49
2012-08-31

12:37:34

2012-08-31
12:37:48
2012-08-31

12:38:40
2012-08-31
12:39:01
2012-08-31
13:17:29
2012-09-05
12:23:39

2012-09-05
12:36:42
2012-09-06
13:28:28

api-

saab.login.aol.com
api-

saab.login.aol.com
api-

saab.login.aol.com
api-

saab.login.aol.com
api-

saab.login.aol.com
apisaab.login.aol.com
api-

saab.login.aol.com
api-

503fa9540000a88b0ac56f7a

72.78.191.60

503fa9540000a88b0ac56f7a

72.78.191.60

503fe9540000a88b0ac56f7a

72.78.191.60

503fa9540000a88b0ac56f7a

72.78.191.60

503fa9540000a88b0ac56f7a

72.78.191.60

503fa9540000a88b0ac56f7a

72.78.191.60

5040b9690000aal 70a6bc2fl)

72.78.191.60

sns.webmail.aol.com

AS

OK

5047444b0000ac980ac4ced6

72.78.191.60

sns.webmail.aol.com

AS

OK

5047475a0000a78f0ble9bl7

72.78.191.60

sns.webmail.aol.com

AS

OK

5O47475a00O0a78fDbl e9b 1 7

72.78.191.60

help.aol.com

TGS

OK

saab.login.aol.com
apisaab.login.aol.com
api-

saab.login.aol.cora
apisaab.login.aol.com
api-

saab.login.aol.com
api-

saab.login.aol.com

2012-09-07
12:18:13

5049e6050000ac940368382c 72.78.191.60

sns.webmail.aol.cora

AS

OK

2012-09-08
13:09:04

504b436d0000a7770ac83efe

sns.webmail.aol.com

AS

OK

2012-09-10
12:03:33

504dd71 50000a88e0640300a 72.78.191.60

sns.webmail.aol.com

AS

OK

¦¦

72.78.191.60

i

Ie:///J|/200340%2010-08/P«)duction/phil«)a3I2.ip_uasJitnil[n/8/2012 1:48:29 PM]

,

!

i

i

¦¦

~i

2012-09-11
16:17:56

504b436d0000a7770ac83efe

2012-09-11
16:18:13

504b436d0000a7770ac83efe

72.78.191.60

2012-09-11
16:18:43

504b436d0000a7770ac83efe

72.78.191.60

2012-09-11
16:19:05

504b436d0000a7770ac83efe

72.78.191.60

2012-09-11

72.78.191.60

api-

saab.login.aol.com
api-

saab.login.aol.com
api-

saab.login.aol.com
api-

saab.login.aol.com
apisaab.login.aol.com

TGS

OK

TGS

OK

TGS

OK

TGS

OK

TGS

OK

TGS

OK

504b436d0000a7770ac83efe

72.78.191.60

504b436d0000a7770ac83efe

72.78.191.60

2012-09-12
12:40:00

505082a00000aala0b0f7277

72.78.191.60

sns.webmail.aol.com

AS

OK

2012-09-13
23:18:50

5O5269da0OO0aa3aO3bO3O33

72.78.191.60

sns.webmail.aol.com

AS

OK

5053922d0000a78a0bd020ff

72.78.191.60

account.login.aol.com AS

FAIT,

505392b30000aa390b53c363 72.78.191.60

sns.webmail.aol.com

TGS

OK

505392b30000a79308d6c9d3 72.78.191.60

client_sso

AS

OK

505392b30000aa390b53c363 72.78.191.60

sns_sso

TGS

OK

505392b30000aa390b53c363 72.78.191.60

help.aol.com

TGS

OK

505527e 1 0000aa3c0b0f6129

72.78.191.60

sns.webmail.aol.com

AS

OK

505da9e50000ac8e042e363 1

72.78.191.60

sns.webmail.aol.com

AS

OK

2012-09-23
11:27:07

505eO0a0000a7910435e98c

72.78.191.60

sns.webmail .aol.com

AS

OK

2012-09-25
11:30:08

506195c00000ac890462e2b9 72.78.191.60

sns.webmail.aol.com

AS

OK

2012-09-26
20:41:33

5063687d0000a78d09ae6177 72.78.191.60

.sns.webmail.aol.com

AS

OK

2012-09-27
17:37:43

50648ee70000a8b30c2b6e78

72.78.191.60

sns.webmail.aol.com

AS

OK

2012-09-29
14:55:44

50670bfD0000a88a02a6381 7

72.78.191.60

sns.webmail .aol.com

AS

OK

2012-09-30
19:43:32

5068aOe20000a790095094cl

72.78.191.60

sns.webmail.aol.com

AS

OK

506ad97d0000aa3d094 14604 72.78.191.60

sns.webmail.aol.com

AS

OK

16:19:30
2012-09-11

16:20:59

2012-09-14
20:23:38
2012-09-14
20:25:23
2012-09-14

20:25:23
2012-09-14
20:25:23
2012-09-14
20:25:44

2012-09-16
01:14:09
2012-09-22

12:07:02

2012-10-02
12:09:34
-

-

¦¦ ¦ r

ile;///J|/200340%2010-08/Pro<hiction/philiipa312.ip_uas.html[l 1/8/2012 1 :48:29 PM]

api-

saab.login.aol.com

1

¦ i

2012-10-04
21:02:55
2012-10-06

18:39:39
2012-10-06

22:49:07

506df97fD000a79404e5d2bd

72.78.191.60

sns.webmail.aol.com

AS

OK

50707aeb0000a88e07c 1 ecdl

72.78.191.60

sns.webmail.aol,com

AS

OK

5070b5620000a7940501al 13 72.78.191.60

sns.webmail.aol.com

AS

OK

TGS

OK

2012-10-07
22:14:34

5070b5620000a7940501al 13 72.78.191.60

2012-10-07
23:44:20

null

2.50.135.131

mail/smtp

AS

FAIL

2012-10-07
23:44:20

null

2.50.135.131

mail/smtp

AS

FAIL

2012-10-12
00:28:49

50776441 0000aa3a05426b30 72.78.191.60

sns.webmail.aol.com

AS

OK

2012-10-14
11:36:56

507aa3d80000ac93099739c6 72.78.191.60

sns.webmail.aol.com

AS

OK

507d47e30000a791 057e7fcf

72.78.191.60

sns.webmail.aol.com

AS

OK

5O8O857fD00Oaa3e0cffb3d9

72.78.191.60

sns.webmail .aol.com

AS

OK

2012-10-19
12:44:51

508 14b430000ac9405d020db 72.78.191.60

sns.webraail.aol.com

AS

OK

2012-10-19
17:02:34

508 1 87aa0000a78b0a626a54 72.78.191.60

sns.webmailaol .com

AS

OK

508590 1 8O000ac960a683 1 6a 72.78.191.60

sns.webmail.aol.com

AS

OK

2012-10-22
18:34:07

50859 1 9fD000ac 1 bOdfl 2673

72.78.191.60

sns.webmail.aol.com

AS

OK

2012-10-23
11:49:55

508684630000a8890dcc2Od

72.78.191.60

sns.webmail.aol.com

AS

OK

5087ccGOO00ac9O06O0d209

72.78.191.60

sns.webmail.aol.com

AS

OK

508a68db0000ac8b0e22cl 93

72.78.191.60

sns.webmail.aol.com

AS

OK

508a68db0000ac8b0e22c 1 93

72.78.191.60

TGS

OK

508a68db0000ac8b0e22cl93

72.78.191.60

sns.webmail.aol.com

TGS

OK

2012-10-27
16:28:50

508c0bc20000aa390ecb3b35

72.78.191.60

sns.webmail.aol.com

AS

OK

2012-10-30
22:07:09

50904f8d0000a88c0e540d07

72.78.191.60

sns.webmail.aol.com

AS

OK

5090f2800000a8adOb8f8b7e

72.78.191.60

sns.webmail.aol.com

AS

OK

2012-10-16
11:41:24

2012-10-18
22:41:03

2012-10-22

18:27:36

2012-10-24

11:11:46
2012-10-26

10:41:31
2012-10-26
13:49:52

2012-10-26
23:29:50

2012-10-31
09:42:24

¦-

le:///Jl/200340%2010-08/I,roducdoii/philapa3 12.ip_uasJitml[l 1/8/201 2 I ;48:29 PM]

api-

saab.login.aol.com

api-

saab.login.aol.com

f*

1

12012-10-31

1 15:34:08

509 1 44f00000ac8f0d82cb8a

72.78.191.60

sns.webtnail.aol.coin

AS

OK

2012-10-31
» 16:53:28

509157880000a7780e23d696 72.78.191.60

sns.webmail.aol.com

AS

OK

50924b500000aa410ec6a0d4 72.78.191.60

sns.webmail .aol .com

AS

OK

50924b500000aa4 1 0ec6a0d4

72.78.191.60

sns.webmai l.aol .com

TGS

OK

509430e70000aal906806774 72.78.191.60

sns.webmail.aol.cora

AS

OK

5097a4d00000a8b2069 laa54 72.78.191.60

sns.webmail.aol.com

AS

OK

2012-11-01
10:13:36
2012-11-02

11:08:25
2012-11-02

20:45:27
2012-11-05
11:36:49

!:///J|/200340%2010-08/Productioii/phiIapa312.ip_uas.html[l 1/8/2012 1:48:29 PM]

Account Information for tfaesia

Account Information for thesia
Screen Names
NoV NoG

0873675978

PhilaPa312

0595822734

Deserie

0864406624

NoGamesNo

0245434301

Thesia

0733123118

AL19130

0355035776

Dyce0961

0061926271 PELETED)

Trubblinparadise

0107817894 (DELETED)

AWORDTOTHDEW1SE

0113417480 PELETED)

SweetyForSpoilin

01 14305970 PELETED)

PHILA PA 19130

0133729004 PELETED)

Danella

0152680979 PELETED)

al9128

0159673989 PELETED)

JILL 199999

0230755682 PELETED)

Jaded by games

0285493004 pELETED)

LindleyRednick

0349161951 PELETED)

Albert Whitehead

0477717067 PELETED)

BEWARE SUNDANCE 0526593736 PELETED)
John08081

0528572984 PELETED)

The Litigators

0589152013 pELETED)

NO FABULATION

0660796499 PELETED)

LydiaMedany

0723085349 pELETED)

Ellen Moylan

0756586785 PELETED)

Sundance Vac

0760551349 PELETED)

J1LL19999

0905217114 pELETED)

MARIA STORCH

0963954714 PELETED)

JohnF08081

1070440919 PELETED)

Address Information
Name

ALBERT WHITEHBAD

Street

842 N 27th st

City

Philadelphia

State/Zip

PA 19130

Country Code

US

Evening Phone 2152351308

Daytime Phonel 2 1 5235 1 308

i

j|

1

ite^7/J|/200340%2010-O8/Production/ttiesia.acct_details.html[l 1/8/201 2 1:48:31 PM]

Account Information for thesia

' I Service

||AOL

Status Information
Account Status * •ACTIVE**

Member Since

96-06-30 13:20:23 edt

Account Type JlNORMAL
BIDCountiy

us

le:///J|/200340%2010-08/Production/fliesia.acet_details.htinl[l 1/8/2012 1:48:31 PM]

Client IP Sessions for thesia
Start |
End
Time
Time
(UTC)
(UTC)

S^noi

ED

20120713 20120715
6
13:48:02 13:48:44

Session ID

5002cal20f4cbdb2005ef2aa

User
Guest
Version Subversion
Group Session

Normal 0

4343

Master
Account

Network
Address

Dialed
IP
From DAHA

19

873675978 72.78.191.60 null

null

¦

20120716 20120716
6
11:50:40 11:51:07

5004001 10fl0da0c005a0bfb

Notmal 0

4343

19

873675978 72.78.191.60 null

null

20120717 20120717
6
12:38:02 1238:33

5O055caa033a3c730O478eOf Nonnal 0

4343

19

873675978 72.78.191.60 null

null

20120720 20120720
6
12:54:47 12:55:30

500955171 ac2697102c6fee5

Normal 0

4343

19

873675978 72.78.191.60 null

null

20120801 20120801
6
14:57:14 1500:56

50 1943ca0f33e05000922el b

Nonnal 0

4343

19

873675978 72.78.191.60 null

null

20120805 20120805
6
22:37;39 22:38:18

501ef5b30f2807f2003al366

Nonnal 0

4343

19

873675978 72.78.191.60 null

null

20120806 20120806
6
10:54:55 10:55:20

501fe27fDf39700100a697ef

Nonnal 0

4343

19

873675978 72.78.191.60 null

null

20120820 20120820
6
14:32:07 1433:06

50324a670f46o4cfD0d247fD

Nonnal 0

4343

19

873675978 72.78.191.60 null

null

20120824 20120824
6
11:4705 11:47:46

503769b903 1 56al e00cf3 603 Normal 0

4343

19

873675978 72.78.191.60 null

null

20120826 20120826
5
22:36:18 22:37:32

503aa4e20f474b0c00ec3ab0

4343

19

873675978 72.78.191.60 null

null

20120827 20120827 ,
15:49:11 15:5000

503b96f71ab086c80354d284 Nonnal

4343

19

873675978 72.78.191,60 null

Nonnal 0

o

null

20120906 20120906 ,
12:15:30 12:1839 °

504893e20301df8d00ed2c6f Normal 0

4343

19

873675978 72.78.191.60 null

null

20120906 20120906 ,
14:56:50 15:0322 0

5048b9b21al2054103644981 Normal 0

4343

19

873675978 72.78.191.60 null

null

5O5Icd81OfD659abO11902fd

4343

19

873675978 72.78.191.60 null

null

4343 1 19

873675978 72.78.191.60 null

20120913 :J0120913 ,
12:11:45

12:16:42 "
n

20121002 : J0121002 ,
18:01:01

8:0128 0

Nonnal 0

h.

506b2bdd02803e09004aa098 Nonnal 0

By//J|/200340%20I0-08/Pro<toeliOB/tliiiia.ip_»e«iioniJitinl[ll/8«012 l:4«:3I PM]

^j|

UAS Data for thesia
Event Time

Session ID

(UTC)

2012-07-25
17:29:11

null

IP Address

2.187.26.100

Service Name

Event Evenr
Type Action

mail/smtp

AS

FATT,

2012-08-01
14:58:07

501 943ffD000a793065713f6 205.188.112.3

apisaab.login.aol.com

TGS

OK

2012-08-01
14:58:07

501943ff0000a793065713f6

205.188.112.3

apisaab.login.aol.com

TGS

OK

2012-08-16
15:06:17

null

178.121.87.185 mail/smtp

AS

FATT,

TGS

OK

TGS

OK

2012-09-13
12:13:12

2012-09-13
12:13:12

2012-09-13
12:13:54

2012-09-13
12:15:41

505 Icdd80000ac8b0b032ee2 64.12.112.37
505 1 Cdd80000ac8b0b032ee2 64.12.112.37

api-

saab.login.aol.com
api-

saab.login.aol.com

505 1 Cdd80000ac8b0b032ee2 64.12.116.8

help.aol.com

TGS

OK

505 1 Cdd80000ac8b0b032ee2 64.12.116.9

sns.mailsvc.aol.com TGS

OK

ile:///JT/200340%2010-08/Production/lhesiB.ip_uas.htinl[l 1/8/2012 1:48:32 PM]

Google Inc.
1600 Amphitheatre Parkway
Mountain View, California 94043

i -„r(l{ ^
X_i" V^

1 H iK-""
^SL !L\^
{^J

Fbk: 650.887 1673
90ogle-legal-supoort@9oog(e.com
' www.google.com

November 6, 2012
Via Email and Express Courier
dwalsh@mbklaw.com

Donna M. Walsh
Myers, Brier & Kelly, LLP
425 Spruce St, Ste 200
Scranton, Pennsylvania 18S02
570-342-6100

Re: Sundance Vacations, Inc v. Albert Whitehead, Superior Court of California,
County of Santa Clara, 112CV233932 (Internal Ref. No. 271483)

Dear Donna M. Walsh:

Pursuant to the Subpoena issued in the above-referenced matter, we have conducted a
diligent search for documents and information accessible on Google's systems that are responsive
to your request. Our response is made in accordance with state and federal law, including die

Electronic Communications Privacy Act. See 18 U.S.C. § 2701 et seq. By this response, Google
does not waive any objection to further proceedings in this matter.

We understand that you have requested customer information regarding the user accounts
specified in the Subpoena, which includes the following information: (1) Subscriber information
for the Blogger accounts SUNDANCEVACAnONSCCP.BLOGSPOT.COM,
NASKIEWICZ23LOGSPOT.COM, EMUELLE1 .BLOGSPOT.COM,
SUNDANCEVACAnONSMANIPULAnON.BLOGSPOT.COM.

To the extent any document provided herein contains information exceeding the scope of
your request, protected from disclosure or otherwise not subject to production, if at all, we have
redacted such information or removed such data fields.
Finally, Google requests reimbursement in the amount of $125 for reasonable costs
incurred in processing your request. Please forward your payment to Google Custodian of
Records, at the address above and please write the Internal Reference Number (271483) on your
check. The federal tax ID number for Google is 77-0493581.

Very truly yours,

Andrew Chung
Legal Investigations Support

Google Inc.

A

1600 Amphitheatre Parkway

i"

.•^

sj

N^^JJ V-^

Mountain View, California 94043

-Vi^
(£_jy

Fax: 650.887 1673

google-legal-support@google.com

www.google.com

CERTIFICATE OF AUTHENTICITY
I, Andrew Chung, certify:

1. 1 am a Custodian of Records for Google Inc. ("Google"), located in Mountain View, California.
I am authorized to submit this Certificate ofAuthenticity on behalfof Google in response to a
Subpoena dated October 12, 2012 (Google Inc. Internal Reference No. 271483) in the matter of
Sundance Vacations, Inc v. Albert Whitehead. I have personal knowledge of the following facts
and could testify competently thereto if called as a witness.

2. The documents contained in Exhibit A and attached hereto are true and correct copies of

records pertaining to the blogs SUNDANCEVACAnONSCCP.BLOGSPOT.COM,
NASKIEWICZ2.BLOGSPOT.COM, EMUELLEl.BLOGSPOT.COM,

SUNDANCEVACATIONSMANIPULATION.BLOGSPOT.COM.

3. The documents attached hereto reflect records made and retained by Google. The records were
made at or near the time the data was acquired, entered, or transmitted to or from Google; the
records were kept in the course of a regularly conducted activity of Google; and the making of the
records were a regular practice of that activity.

I declare under penalty of perjury under the laws of the State of California that the foregoing is
true and correct.
DATED: November 6, 2012

Andrew Chung, Custodian of Records for Google Inc.

Google Inc.

Fax- 650.887 1673

1600 Amphitheatre Parkway
Mountain View, California 94043

google-legal-suppo rt@900gle.com
www.google.conn

EXHIBIT A

URL; http://sundancevacationsccp.blogspot.com/
Owner;

User Key: 695618005525
Username: johnf712@hotmail.com
Display Name: Dolores

Email: TrubbIinparadise@aol.com
Date created: 2009-02-05X14:40: 16.596Z

Google Confidential and Proprietary
10f4

URL; http://naskiewicz2.blogspot.com/
Owner;

User Key: 695618005525
Usemame: johnf71 2@hotniail.com
Display Name: Dolores
Email: TmbbIinparadise@aol.com
Date created: 2009-02-05X14:40: 16.596Z

Google Confidential and Proprietary
2 of 4

URL; http://emuellel.blogspot.coni/
Owner;
User Key: 244659942151
Usemame: emuellel @gmail.com
Display Name: Eric Mueller
Email: emuellel@gmail.com

Google Confidential and Proprietary
3of4

URL;http://sundancevacationsmanipulation.blogspot.con]/
Owner;

User Key: 695618005525
Usemame; johnf712@hotmail.com
Display Name; Dolores
Email: TrubbIinparadise@aol.com
Date created: 2009-02-05714:40: 16.596Z

Google Confidential and Proprietary
4oM

Exhibit G

SUBP-035
1 ATTORNEV OR PARTY WITHOUT ATTORNEY (Namo. S/a/» Bar nunilwr. antl address):

FOR COURT USE ONLY

LDonna M. Walsh, Esq. (PA SBN 74833)
[Myers, Brier & Kelly, LLP
425 Spruce St, Ste. 200, Scranton, PA 18502
FAX NO.:

TELEPHONE NO,: (5 70) 342-6 100
E-MAIL ADDRESS;

attorney for (,**»): Plaintiff SUNDANCE VACATIONS, INC.

!

Court for county In which dlscovBry Is to be conducted: SAN MATEO

SUPERIOR COURT OF CALIFORNIA, COUNTY OF SAN MATEO
biKhtr address.- 400 County Center
MAILING ADDRESS:

aTY.STATH.ANOBPCOOE: Redwood Ci

CA 94053

BRANCHNAME: Main Courthouse
Court in which action is pending: COURT OF COMMON PLEAS

Name of Court: LUZERNE COUNTY, COMMONWEALTH OF PA
street address: 200 No. River Rd.
MAILING ADDRESS;

CTY.STATE.ANDZIPCODE Wilkes.B

pA I8701

COUNTRY: USA

PLAINTIFF/PETITIONER: SUNDANCE VACATIONS, INC.
DEFENDANT/RESPONDENT: ALBERT WHITEHEAD
CASE NUMQER (of BcBon pendns outsMa Calffiimla):

SUBPOENA FOR PRODUCTION OF BUSINESS RECORDS
IN ACTION PENDING OUTSIDE CALIFORNIA

12-CVr8006

THE PEOPLE OF THE STATE OF CALIFORNIA, TO (name, address, and telephone number of deponent, If known):

CUSTODIAN OF RECORDS FOR FACEBOOK, INC., 1601 Willow Rd., Menlo Park, CA 94025
1. YOU ARE ORDERED TO PRODUCE THE BUSINESS RECORDS described in Item 3, as follows:

To (name of deposition officer): Tony Klein, Notary Public
On (date): November 26, 2012

Atfl/me); 10:00 AM

Location ^address;; 1601 Willow Rd., Menlo Park, CA 94025
Do not release the requested records to the deposition officer prior to the date and time stated above.

I by delivering a true, legible, and durable copy of the business records described In item 3, enclosed in a sealed inner

a. I

wrapper with the title and number of the action, name of witness, and date of subpoena clearly written on it The inner
wrapper shall then be enclosed in an outer envelope or wrapper, sealed, and mailed to the deposition officer at the
address in item 1 .
b. I y I by delivering a true, legible, and durable copy of the business records described in item 3 to the deposition officer at the

witness's address, on receipt of payment in cash or by check of the reasonable costs of preparing the copy, as determined
under Evidence Code section 1563(b).

I by making the original business records described in item 3 available for inspection at your business address by the

c. I

attorney's representative and permitting copying at your business address under reasonable conditions during normal

business hours.
2. TTie records are to be produced by the date and time shown in item 1 (but not sooner than 20 days after the issuance of the
deposition subpoena, or 15 days after service, whichever date is later). Reasonable costs of locating records, making them
available or copying them, and postage, if any, are recoverable as set forth in Evidence Code section 1563(b). The records must be
accompanied by an affidavit of the custodian or other qualified witness pursuant to Evidence Code section 1561.
3. The records to be produced are described as follows (if electronically stored information is demanded, the form or forms In which
each type of information Is to be produced may be specified):

See attachment to PA Subpoena, Attachment 3
I x I

Continued on Attachment 3 (use form MC-025).

4. Attorneys of record in this action or parties without attorneys are (name, address, telephone number, and name of party
represented):

Matthew J. Carmody, Esq., Elliott Greenleaf & Dean, 39 Public Sq., Ste 1000, Wilkes-Batrc,
I

I

Continued on Attachment 4 (use form MC-025).

Form Adopted for Mandatory Usa
Judicial Caunc9 of CaUfonHa

SUBP-03!i (Row. Jsnunty 1. 20123

SUBPOENA FOR PRODUCTION OF BUSINESS RECORDS
IN ACTION PENDING OUTSIDE CALIFORNIA

Pag<1 , ^ 2
Code of CM Pmceduns, §$ 2029.100-3029,900,

2020.410-2020.440;
Sovemmenl Coda, $ 08097.1
"ttw.courts.ca.goir

SUBP-035
CASE NUMBER (of action pendng aubide Culifania):

puaintiff/petitioner; SUNDANCE VACATIONS, INC.

_

DEFENDANT/RESPONDENT: ALBERT WHITEHEAD
Code of Civil
5. If you have been served with this subpoena as a custodian of consumer or employee records under
or agreement of
order
court
a
you,
on
served
been
has
objection
an
or
quash
to
motion
a
Procedure section 1985.6 and
to produce
the parties, witnesses, and consumer or employee affected must be obtained before you are required
consumer or employee records.
6. r~~l Other terms or provisions from out-of-state subpoena, if any (specify):

See attached PA Subpoena

I Continued on Attachment 6 fuse form MO025).

I

ALSO BE LIABLE
DISOBEDIENCE OF THIS SUBPOENA MAY BE PUNISHED AS CONTEMPT BY THIS COURT. YOU WILL
FOR THE SUM OF $500 AND ALL DAMAGES RESULTING FROM YOUR FAILUR^TQ OBEY.
.„

(SIQNi

of re

ISSUINQ SUBPOENA)

^//tPROOF OF SERVICE OF SUBPOENA FOR

PRODUCTION OF BUSINESS RECORDS

..,. :&£
1.

delivering a copy
I served this Subpoena for Production of Business Records In Action Pending Outside California by personally
to the person served as follows:
a. Person served (name):
b. Address where served
d. Time of delivery:

c. Date of delivery:

e. Witness fees and mileage both ways (check one):

$

(1)1

I were paid. Amount:

(2) |

I were not paid.

(3) |

I were tendered to the witness's public entity employer as required by Government Code section 68097.2. The

amount tendered was (specify):

$
$

f. Fee for service:
I received this subpoena for service on (date):

] I also served a completed Proofof Service of Notice to Consumer or Employee and Objection (form SUBP-025)

3. I

by personally delivering a copy to the person served as described In 1 above.

4.

Person serving:

a. I
b. j
c. i

I Not a registered California process server
j Califomla sheriff or marshal
I Registered California process server
Employee or independent contractor of a registered California process server

d. I

I

e. I
f. I

I Exempt from registration under Business and Professions Code section 22350(b)
I Registered professional photocopier

9- I

I

h.

Exempt from registration under Business and Professions Code section 22451

Name, address, telephone number, and, if applicable, county of registration and number

I declare under penalty of perjury under the laws of the State of
California that the foregoing is true and correct.

(For California sheriff or marshal use only)
I certity that the foregoing Is true and correct.
Date:

Date:

(SIGNATURE)

SUBP-03S [ [Rev. January 1, 201211

SUBPOENA FOR PRODUCTION OF BUSINESS RECORDS
IN ACTION PENDING OUTSIDE CALIFORNIA

(SfQNATUREl
Page Z of 2

Attachment 3

Is 4039

Commonwealth ofPennsylvania
oi

12-CV-8006

vs.

AT.RF.RTWHTTFHF.An

SUBPOENA TO PRODUCE DOCUMENTS OF THINGS
FOR DISCOVERY PURSUANT TO RULE 4009.22

Custodian of Records, Facebook, Inc.; 1601 Willow Road; Merdo Park, CA 94025
TO;

(Name of Person or Entity)

.

court to produce the
Within twetrty*^©) oaysafter service of this subpoena, you are ordered by the

following documents or things:

See Addendum attached hereto as Exhibit "A51, as well as the attached

(pacific
Certificate of Compliance. The subpoena is returnable on Qctobatll , 201 2 @ 10:00 am

November 26, 2012 Wjj/

standard time).

Facebook Inc.; 1601 Willow Road; Menlo Park, CA 94025
at

(Address)

requested by this subpoena,
You may deliver or mail legible copies of the documents or produce things

address listed above. You
together with the certificate of compliance, to the party making this request at the
the things sought
have the right to seek in advance the reasonable cost of preparing the copies or producing
twenty (20) days after
If you fail to produce the documents or things required by this subpoena within

to comply with it.
its service, the part)' serving this subpoena may seek a court order compelling you
This subpoena was issued at the request of the following person:

¦Doima A-.-Walsh^ Esquire
Attorney's Name

BYTHE.COpRl^

> rv-':

By
(Prothonotary)

74833
Identification Number

Myers, Brier & Kelly, LLP, 425 Spruce
Street, Swte 200, Scranton, PA 1 Rm
Address

(570) 342-6100

DATE:

TelephongNumber

Plaintiff Sundance

Seal of the Court

Attorney for

00052669

Vacations, Inc.

EXHIBIT MAM
Custodian of Records, Facebook, Inc.

DEFIWmON

but is not limited to, any
As used here, the term "document" includes,
, whether prmtedy.recorded, produced
writing, graphic matteror other tangible thing
hand, including, but not limited to,
by any other process, or written or produced by
ronic messages, metadata,
letters, reports, other written communications, elect
dence, telegrams, memoranda,
electronic records, electronic files, correspon
analyses, lab reports, projections, work
summaries, records or itineraries, forecasts,
graphs, statistical statements,
papers, photographs, tape recordings, models,
brochures, summaries of negotiations,
notebooks, charts, plans, drawings, artwork,
communications, routing slips or the
press releases, intra-office or inter-company
inal comments appearing on any
like, promotional or advertising materials, marg
aging, purchase orders, contracts,
document, invoices, shipping papers, labels, pack
eetings, minutes or records of
printed publications, minutes or records ofm
of policy, lists of person attending
conferences, agendas, expressions or statement
of investigations, opinions or
meetings or conferences, reports and summaries
records, sounds recordings, motion .
reports of consultants, studies, evaluations,
fs, photographs, films, computer input
pictures, models, sketches, video tapes, proo
records, whether recorded on volatile
or output, recordings on disk or tape, archive
, by magnetic or electronic
or nonvolatile media, hard disks or floppy disks
ed or in hard copy, or any other
impulse, e-mail messages whether or not print
writing including draft and revisions.
BOCUMENTS REQUESTED

1.

or identify the
Any and all documents that refer or relate to

) and timestamps for activity on the
originating internet protocol (IP) address(es
Vacations"
Facebook page titled "Boycott Sundance

Sundancerhttp://www.facebook.com/#!/pages/Boycott-

{00053256}

1

all documents that refer or relate to or
Vacations/l 72805 1 72735470) and any and
ding, but not limited to, for each of
identify the administrators) of this page^ inclu

lists, account applications, subscriber
the foregoing individuals, all administrator

billing records, administrator
information, user profiles, billing information,
rds of session times and durations.
records, access records, activity logs and reco

2.

to or contain
Any and all documents that refer or relate

log or

Vacations" page, including, but not
activity information for the "Boycott Sundance
net protocol (IP) address(es) associated
limited to, documents identifying the inter
to the page and time stamps showing the
with persons administering and/or posting
.
date and time of all activity on the page

3.

e to or contain
Any and all documents that refer or relat

rs)
subscriber information for the administrato

of the "Boycott Sundance

to, for all such individuals, all account
Vacations" page, including but not limited
records, login information and page set
information, user profiles, account creation
up records.

4.

to or contain
Any and all documents that refer or relate

profiles relating to John Flannagan
subscriber and/or user information and/or
a Monteleone
and/or JohnF0808 1 @aol.com and/or Elain
onteleone).
rhttp://www.facebook.coin/#!/elaina.m

{00053256}

2

SUBP-030
1 ATTORNEY OR PARTY WITHOUT ATTORNEY INmo, Sola Barattnftor, ««« mfdressj.-

(PA SBN 74833)

Laonna A. Walsh, Esq.

[Myers, Brier & Kelly, LLP
425 Spruce St., Ste. 200, Scranton,
TELEPHONENO; (570)

FOR COURT USE ONLY

PA 18502
FAXND.fOptorm.-

342-6100

E-MAIL ADDRESS <Qp(/o/)a9:

attorney FOR (Atanii.,1: Plaintiff

SUNDANCE VACATIONS,

INC.

Court for county in which discovmy Is to be conducted: SAN MATEO

EMD0RSE0 FILED

SUPERIOR COURT OF CAUFORNIA, COUNTY OF SAW MATEO
street address: 400 County Center

SAW i\MT£0 COUNTY

MAIUNS ADDRESS:
crrv and zip code: Reciwood

city/

CA

94063

OCT 2 4 Z012

BRANCH NAME; Main COUrthOUSe

1

\ Court In which action ts pending: COURT OF COMMON PLEAS
Name of Court: LUZERNE COUNTY,

COMMONWEALTH OF PENNSYLVANIA

Oiori', of ihti Subflilor QoUfJ

street address: 200 North River St.
MARJNG ADDRESS;

criY,sTATE,ANDZi(>coDE:wilkes-Barre,

Pennsylvania 1B701

COUNTRY: USA
CAUR3RNIA CASE NUMBER (If any asdgneil by court)

PLAINTIFF/PETITIONER: SUNDANCE VACATIONS,

INC.

i DEFENDANT/RESPONDENT; ALBERT WHITEHEAD
CASE NUMBER (of adlon ponding oubdda Calitemio):

APPLICATION FOR DISCOVERY SUBPOENA
IN ACTION PENDING OUTSIDE CALIFORNIA

INC.

t. Appiicant Cname;.- SUNDANCE VACATIONS,

fTl Plaintiff

|

I Petitioner

I

12-CV-8006

I Defendant

Is (oheck one):

I

I Respondent

I Other fspecflyj;

I

in the above action.

2. Applicant requests that this court issue a subpoena for discovery under Code of Civil Procedure sections 2029.100 - 2029.900
to (name and address of deponent or person In control of properly):

Facebook,

Inc.,

1601 Willow Road,

3. Attached is (chec/c onej: ( / I the original

I

Menlo Park,

CA 94025

of the document from the court in which the action

| a true and correct copy

is pending that requires the person in 2 to (check all that apply);

a, |

I attend and give testimony at a deposition;

b, njT]
c, |

|

produce and permit Inspection and copying of designated materials, Information, or tangible things in the possession,
custody, or control of the deponent;
permit the inspection of premises under the control of Ihe deponent.

4. Applicant submits with this application a proposed subpoena that Includes terms identical to those in the document from the

out-of-state court. (Code of Civil Procedure section 2029,300(d).)
I declare under penalty of petjury under the laws of the State of California that the foregoing is true and correct.

Date: October 23/ 2012
Donna A. Walsh, Esq.
(TYPE OR PRWT NAME)

fe>

fay^iU

(SIGNATURE OF ATTORNEY OR PARTY WITHOUT ATTORNEY)

Note: This application must be accompanied by the fee specified in Government Code section 70626.
A discovery subpoena must be personally served on the deponent in compliance with California law, Including
Code of Civil Procedure section 1985,
FoimAtfopled forMandolixyUM

Judicial CouncO of CalfomlB
8U8P-030 [NowJonwuy 1,2010]

APPLICATION FOR DISCOVERY SUBPOENA
IN ACTION PENDING OUTSIDE CALIFORNIA

Codu of CM Piocedim SS 2029.10l>-900

mnv.courM'o.casw

la 4039

oj renn

County of Luzerne
SIMDAIJCE VAr.ATTONS, TNC.

12-CV-8006

vs,

ATBRRTWHTTTRHKAD

SUBPOENA TO PRODUCE DOCUMENTS OF THINGS
FOR DISCOVERY PURSUANT TO RULE 4009.22

Custodian of Records, Facebook, Inc.; 1601 Willow Road; Menlo Park, CA 94025

TO;

(Name of Person or Entity)

after service of this subpoena, you are ordered by the court to produce the
. Within twenty-^) day^ai
following documents or things:

See Addendum attached hereto as Exhibit "A", as well as the attached
JfiiS® 10:00 am (pacific

Certificate of Compliance. The subpoena is returnable on !

November 26, 2012 ^W

standard time).

Facebook Inc.; 1601 Willow Road; Menlo Park, CA 94025
at

(Address)

You may deliver or mail legible copies of the documents or produce things requested by this subpoena,
together with the certificate of compliance, to the party making this request at the address listed above. You

have the right to seek in advance the reasonable cost of preparing the copies or producing the things sought.
If you fail to produce the documents or things required by this subpoena within twenty (20) days after
its service, the party serving this subpoena may seek a court order compelling you to comply with it.
This subpoena was issued at the request of the following person:

-Donna A. WatBht Bsqirire

BYTHECPPR^
By

^

:¦ --^ ^v

(Protbonotary)

Attoraey'sName

74833
Identification Number

Myers, Brier & Kelly, LLP, 425 Spruce
Street, Suite 200, Scraoton, PA 1 85113 .
Address

DATE:

(570)342-6100
Tfelephone Number

Seal of the Court

Auomeyfor

000S2669

Plaintiff Sundance
Vacations, Inc.

EXHIBIT C<AW
Custodian of Records^ Facebook, Inc.

DEFINITION

d to, any
As used here, the term "document" includes, but is not limite
printed,,recorded, produced
writing, graphic matter or other tangible thing, whether
ing, but not limited to,
by any other process, or written or produced by hand, includ
messages, metadata,
letters, reports, other written communications, electronic
ams, memoranda,
electronic records, electronic files, correspondence, telegr
reports, projections, work
summaries, records or itineraries, forecasts, analyses, lab
statistical statements,
papers, photographs, tape recordings, models, graphs,
summaries of negotiations,
notebooks, charts, plans, drawings, artwork, brochures,
tions, routing slips or the
press releases, intra-office or inter-company communica
ents appearing on any
like, promotional or advertising materials, marginal comm
purchase orders, contracts,
document, invoices, shipping papers, labels, packaging,
minutes or records of
printed publications, minutes or records ofmeetings,
, lists of person attending
conferences, agendas, expressions or statement of policy
investigations, opinions or
meetings or conferences, reports and summaries of
sounds recordings, motion,
reports of consultants, studies, evaluations, records,
graphs, films, computer input
pictures, models, sketches, video tapes, proofs, photo
whether recorded on volatile
or output, recordings on disk or tape, archive records,
etic or electronic
or nonvolatile media, hard disks or floppy disks, by magn
hard copy, or any other
impulse, e-mail messages whether or not printed or m

writing including draft and revisions.

DOC0MENTS REQUESTED

I.

ify the
Any and all documents that refer or relate to or ident

tamps for activity on the
originating internet protocol (DP) address(es) and times
Facebook page titled "Boycott Sundance Vacations"
ce(http://www.facebQok.com/#!/pages/Boycott-Sundan

{00053256}

1

or relate to or
Vacations/1 72805 1 72735470") and any and all documents that refer

for each of
identify the administrators) of this page, including, but not limited to,
subscriber
the foregoing individuals, all administrator lists, account applications,
information, user profiles, billing information, billing records, administrator
durations,
records, access records, activity logs and records of session times and

2.

Any and all documents that refer or relate to or contain log or

ng, but not
activity information for the "Boycott Sundance Vacadons'' page, includi
associated
limited to, documents identifying the internet protocol (IP) address(es)
showing the
with persons administermg and/or posting to the page and time stamps
date and time of all activity on the page.

3.

Any and all documents that refer or relate to or contain

ce
subscriber information for the administrator(s) of the "Boycott Sundan
uals, all account
Vacations" page, including but not limited to, for all such individ
and page set
Information, user profiles, account creation records, login information
up records.

4.

Any and all documents that refer or relate to or contain

Flannagan
subscriber and/or user information and/or profiles relating to John
and/or JohnF0808 1 (5),aol.com and/or Elaina Monteleone
(http^/A\fww.facebook.com/#!/elama.monteleone).

{00053256}

2

Attorney or Party without Attorney:

-

For Court Use Only

Telephone No:

Ref. No. or File No.:

Attorneyfor: Plaintiff
Insert name ofCourt, and Judicial District and Branch Court:

SAN MATEO COUNTY SUPERIOR COURT

Plaintiff: SUNDANCE VACATIONS, INC.
Defendant: ALBERT WHITEHEAD

PROOF OF SERVICE

Hearing Date:

Time:

Mon, Nov. 26, 2012

Dept/Div:

10:00AM

Case Number:

12-CV-8006

/. At the time ofservice I was at least 18 years ofage and not a party to this action.
2. I served copies of the SUBPOENA FOR PRODUCTION OF BUSINESS RECORDS
IN ACTION PENDING OUTSIDE

CALIFORNIA; ATTACHMENT 3; DECLARATION OF CUSTODIAN OF RECORDS (BLANK).

3. a. Party served:
b. Person served:

CUSTODIAN OF RECORDS FOR FACEBOOK, INC.
Nai Saeteum, person authorized by the Agent to accept service for the Party in item
3. a..

4. Address where the party was served:

CSC-LA WYERS INCORPORATING SERVICE
27 10 Gateway Oaks Drive
Suite 150 North
Sacramento, CA 95833

5. 1 served the party:

a. by personal service. I personally delivered the documents listed in item 2 to
the parly or person authorized to receive service of
process for the party (1) on: Thu., Oct. 25. 2012 (2) at: 2:27PM
b. I received this subpenafor service on:
Thursday, October 25, 20 1 2

6. Witness fees were offered or demanded, and paid:

$15.00

7. Person Wio Served Papers:

Recoverable Cost Per CCP 1 033,5Ca)(4)(B)

a. Tyler DiMaria

The Feefor Service was:

b. Attorney Service of San Francisco
4104 24th Street

I am: (3) registered California process server
0) Independent Contractor
(ii) Registration No.:
2006-06

PMB #393
San Francisco, CA 941 14

fiii) County:

c. 415 495-4221

(iv) Expiration Date:

8. I declare under penalty ofperjury under the laws ofthe State of California that
thefop

Sacramento
Thu, Feb. 13, 2014

d correct

Date: Frl, Oct 26, 2012

Judicial Council Form , „„_
Rule 2.150.(a)&(b) Rev January I, 2007

PROOF OF SERVICE

assf.65186

Exhibit H

Target 1423887846 (Generated 2012-11-16 16:55:45 UTC)
Date Range Creation to 2012-11-16 16:55:45 UTC
Account End
Active true
Date

Credit Cards

Emails fran.wilson.37@facebook.com
fwilsonuext@comcast.net

Logins

ip 70.192.128.165
Time 2012-10-11 10:37:41 UTC

Site WWW
ip 166.137,99.17
Time 2012-10-11 00:04:35 UTC
Site WAP
ip 166.137.99.17
Time 2012-10-11 00:04:35 UTC
Site WAP
Ip 76.124.171.226
Time 2012-09-17 13:34:19 UTC
Site WWW
Ip 76.124.171.226

Time 2012-08-20 02:27:03 UTC
Site WWW
Ip 76.124.171.226

Time 2012-07-29 16:27:52 UTC
Site WWW
Ip 76.124.171.226

Time 2012-07-13 11:12:53 UTC
Site WWW
Ip 76.124.171.226
Time 2012-07-11 01:56:02 UTC
Site WWW

Ip 76.124,171.226
Time 2012-07-02 19:28:48 UTC
Site WWW
Ip 70,192.130.102

Time 2012-06-25 18:26:01 UTC
Site WWW
Ip 76.124.171.226

Time 2012-06-19 11:25:18 UTC
Site WWW
Ip 166.147,101.157

Time 2012-06-18 21:50:07 UTC
Site WAP
Ip 166.147,101.157
Time 2012-06-18 21:50:07 UTC
Site WAP

CONFIDENTIAL

Facebook 000001

Ip 76.124.171.226
Time 2012-06-18 17:38:57 UTC
Site WWW
Ip 76.124.171.226
Time 2012-06-18 09:45:34 UTC
Site WWW

Ip 76.124.171.226
Time 2012-06-17 19:14:14 UTC
Site WWW

Ip 76.124.171.226
Time 2012-06-10 23:28:00 UTC
Site WWW
Ip 76.124.171.226
Time 2012-06-07 11:04:13 UTC
Site WWW
Ip 68.81.85.173
Time 2012-06-02 19:58:04 UTC
Site WWW

Ip 76.124.171.226
Time 2012-05-27 11:24:55 UTC
Site WWW
Ip 166.147.108.127
Time 2012-04-14 13:27:29 UTC
Site WAP
Ip 166.147.108.127

Time 2012-04-14 13:27:29 UTC
Site WAP
Ip 76.124.171.226
Time 2012-04-07 00:01:29 UTC
Site WWW
Ip 76.124.171.226
Time 2012-04-06 10:55:35 UTC
Site WWW

Ip 76.124.171.226
Time 2012-04-01 23:16:59 UTC
Site WWW
Ip 76.124.171.226
Time 2012-03-26 13:42:56 UTC
Site WWW

Ip 76.124.171.226
Time 2012-03-19 22:51:34 UTC
Site WWW
Ip 166.147.108.93
Time 2012-03-13 23:05:32 UTC
Site WAP
Ip 166.147.108.93

Time 2012-03-13 23:05:32 UTC
Site WAP
Ip 76.124.171.226
Time 2012-02-19 18:32:29 UTC

CONFIDENTIAL

Facebook 000002

Site WWW
Ip 76.124.171.226

Time 2012-02-19 18:00:23 UTC
Site WWW
Ip 76.124.171.226
Time 2012-02-19 14:42:31 UTC
Site WWW
Ip 76.124.171.226
Time 2012-02-19 14:40:30 UTC
Site WWW
Ip 76.124.171.226
Time 2012-02-12 03:27:14 UTC
Site WAP

Ip 76.124.171.226
Time 2012-02-12 03:27:14 UTC
Site WAP
Ip 76.124.171.226
Time 2012-02-07 01:06:26 UTC
Site WWW
Ip 76.124.171.226
Time 2012-02-05 04:02:34 UTC
Site WWW
Ip 76.124.171.226
Time 2012-01-24 01:47:28 UTC
Site WWW

Ip 76.124.171.226
Time 2012-01-24 01:39:51 UTC
Site WWW
Ip 76.124.171.226
Time 2012-01-24 00:40:56 UTC
Site WWW

Ip 76.124.171.226
Time 2012-01-22 15:22:22 UTC
Site WWW
Ip 76.124.171.226
Time 2012-01-22 02:45:24 UTC

Ip 76.124.171.226
Time 2012-01-10 11:53:52 UTC
Site WWW
Ip 76.124.171.226
Time 2012-01-09 20:48:09 UTC
Site WWW
Ip 76.124.171.226

Time 2012-01-09 03:45:28 UTC
Site WWW
Ip 76.124.171.226
Time 2012-01-08 11:52:04 UTC
Site WWW
Ip 76.124.171.226

CONFIDENTIAL

Facebook 000003

Time 2011-12-30 21:14:39 UTC
Site WAP
Ip 76.124.171.226
Time 2011-12-30 21:14:39 UTC
Site WAP

Ip 76.124.171.226
Time 2011-12-20 12:02:03 UTC
Site WWW
Ip 76.124.171.226
Time 2011-12-12 23:44:33 UTC
Site WWW
Ip 76.124.171.226
Time 2011-12-01 16:56:56 UTC
Site WWW

Ip 76.124.171.226
Time 2011-11-23 19:11:47 UTC
Site WWW
Ip 76.124.171.226
Time 2011-11-19 19:31:01 UTC
Site WWW
Ip 76.124.171.226
Time 2011-11-19 18:48:31 UTC
Site WWW
Ip 76.124.171.226
Time 2011-11-17 11:33:01 UTC
Site WWW
Ip 76.124.171.226
Time 2011-11-14 14:52:24 UTC
Site WWW

Ip 76.124.171.226
Time 2011-11-11 02:44:44 UTC
Site WWW
Ip 198.228.192.240
Time 2011-11-08 23:51:08 UTC
Site WAP

Ip 198.228.192.240
Time 2011-11-08 23:51:08 UTC
Site WAP
Ip 76.124.171.226
Time 2011-11-01 01:32:17 UTC
Site WWW
Ip 76.124.171.226
Time 2011-10-31 14:36:12 UTC
Site WWW
Ip 76.124.171.226
Time 2011-10-31 10:54:36 UTC
Site WWW

Ip 76.124.171.226
Time 2011-10-26 19:45:13 UTC

CONFIDENTIAL

Facebook 000004

Ip 76.124.171.226

Time 2011-10-11 14:07:32 UTC
Site WWW
Ip 76.124.171.226
Time 2011-10-11 13:58:54 UTC
Site WWW
Ip 76.124.171.226
Time 2011-10-11 13:51:06 UTC
Site WWW
Ip 76.124.171.226

Time 2011-10-11 12:32:40 UTC
Site WWW
Ip 76.124.171.226

Time 2011-10-01 13:13:04 UTC
Site WWW

Ip 76.124.171.226

Time 2011-10-01 01:22:10 UTC
Site WWW
Ip 76.124.171.226

Time 2011-10-01 01:17:43 UTC
Site WWW
Ip 76.124.171.226

Time 2011-09-28 20:20:37 UTC
Site WWW
Ip 76.124.171.226
Time 2011-09-21 17:26:17 UTC
Site WWW
Ip 76.124.171.226

Time 2011-09-19 18:21:43 UTC
Site WWW

Ip 76.124.171.226
Time 2011-09-16 20:35:33 UTC
Site WWW
Ip 76.124.171.226

Time 2011-09-16 20:31:56 UTC
Site WWW
Ip 76.124.171.226
Time 2011-08-09 00:07:07 UTC
Site WAP

Ip 76.124.171.226
Time 2011-08-09 00:07:07 UTC
Site WAP
Ip 76.124.171.226

Time 2011-07-14 16:51:11 UTC
Site WWW
Ip 198.228.193.160

Time 2011-07-08 01:15:03 UTC
Site WWW
Ip 174.57.246.96
Time 2011-06-30 12:56:14 UTC

CONFIDENTIAL

Facebook 000005

Site WWW
Ip 174.57.246.96
Time 2011-06-29 20:29:01 UTC
Site WWW

Ip 174.57.246.96
Time 2011-06-29 20:24:47 UTC
Site WWW
Ip 166.137.140.141

Time 2011-06-29 15:49:28 UTC
Site WWW
Ip 174.57.246.96
Time 2011-06-26 20:57:45 UTC
Site WWW
Ip 166.137.142.60
Time 2011-06-13 01:37:46 UTC
Site WWW

Ip 76.124.171.226
Time 2011-05-31 12:22:34 UTC
Site WWW
Ip 76.124.171.226
Time 2011-05-24 15:47:43 UTC
Site WWW
ip 76.124.171.226
Time 2011-05-02 03:08:17 UTC
Site WAP

Ip 76.124.171.226
Time 2011-05-02 03:08:17 UTC
Site WAP
Ip 76.124.171.226
Time 2011-04-26 17:58:04 UTC
Site WWW
ip 76.124.171.226
Time 2011-04-22 12:43:16 UTC
Site WWW
Ip 76.124.171.226
Time 2011-04-22 12:42:33 UTC
Site WWW
Ip 76.124.171.226
Time 2011-04-20 15:39:41 UTC
Site WWW

Logouts

Ip 76.124.171.226
Time 2012-09-16 13:34:26 UTC
Site WWW
Ip 76.124.171.226

Time 2012-08-14 00:22:50 UTC
Site WWW
ip 76.124.171.226
Time 2012-07-26 18:04:18 UTC

CONFIDENTIAL

Facebook 000006

Site WWW

ip 76,124.171.226
Time 2012-07-02 21:46:10 UTC
Site WWW
Ip 69.141.10.8
Time 2012-06-26 19:36:02 UTC
Site WWW
ip 76.124.171.226
Time 2012-06-23 19:48:47 UTC
Site WWW
ip 76.124.171.226
Time 2012-06-17 20:45:03 UTC
Site WWW
Ip 76.124.171.226
Time 2012-06-11 19:39:34 UTC
Site WWW
Ip 76.124.171.226
Time 2012-05-25 23:47:14 UTC
Site WWW
Ip 76.124.171.226
Time 2012-04-06 14:57:15 UTC
Site WWW

Ip 76.124.171.226
Time 2012-04-05 15:53:14 UTC
Site WWW
Ip 76.124.171.226
Time 2012-04-01 20:15:44 UTC
Site WWW
Ip 76.124.171.226
Time 2012-03-24 20:51:48 UTC
Site WWW
Ip 76.124.171.226
Time 2012-03-18 13:36:13 UTC
Site WWW
Ip 76.124.171.226
Time 2012-02-19 02:16:18 UTC
Site WWW
Ip 76.124.171.226
Time 2012-02-04 14:17:30 UTC
Site WWW
Ip 76.124.171.226
Time 2012-01-21 23:19:11 UTC
Site WWW

Ip 76.124.171.226
Time 2012-01-08 02:42:51 UTC
Site WWW
Ip 76.124.171.226
Time 2011-11-29 22:17:53 UTC
Site WWW

CONFIDENTIAL

Facebook 000007

Ip 76.124.171.226
Time 2011-11-23 17:18:55 UTC
Site WWW
Ip 76.124.171.226
Time 2011-10-29 23:18:19 UTC
Site WWW

Ip 76.124.171.226
Time 2011-10-01 02:22:08 UTC
Site WWW
Ip 76.124.171.226
Time 2011-09-29 18:51:15 UTC
Site WWW
Ip 76.124.171.226
Time 2011-09-22 19:32:02 UTC
Site WWW
Ip 76.124.171.226
Time 2011-09-17 02:49:43 UTC
Site WWW
Ip 76,124.171.226
Time 2011-08-30 20:03:18 UTC
Site WWW
Ip 76.124.171.226
Time 2011-07-11 22:36:33 UTC
Site WWW
Ip 76.124.171.226
Time 2011-06-19 21:09:59 UTC
Site WWW
Ip 76.124.171.226
Time 2011-04-17 01:31:42 UTC
Site WWW

Name

First Fran
Middle
Last Wilson

Phone
Numbers

Registration 2009-04-17 17:42:10 UTC
Date

Vanity fran.wilson.37

CONFIDENTIAL

Facebook 000008

Target 100004587031604 (Generated 2012-11-16 16:55:28 UTC)
Date Range Creation to 2012-11-16 16:55:28 UTC
Account End
Active true
Date

Credit Cards

Emails marysmithl2079@yahoo.com

Logins

Ip 75.151.131.165
Time 2012-11-10 13:25:54 UTC
Site WWW
Ip 68.80.252.37
Time 2012-11-09 17:33:58 UTC
Site WWW
Ip 173.15.170.141
Time 2012-11-08 17:54:59 UTC
Site WWW
Ip 76.124.165.5
Time 2012-11-08 00:52:43 UTC
Site WWW
Ip 68.80.252.37
Time 2012-11-07 19:47:17 UTC
Site WWW
Ip 76.124.165.5
Time 2012-11-06 20:17:24 UTC
Ip 76.124.165.5
Time 2012-11-04 18:46:08 UTC
Ip 198.228.193.78
Time 2012-11-02 21:43:59 UTC
Site WAP
Ip 76.124.165.5
Time 2012-11-02 03:55:16 UTC
Site WWW
Ip 76.124.165.5
Time 2012-11-02 03:53:21 UTC
Site WWW
Ip 67.208.164.82
Time 2012-11-01 23:37:15 UTC
Site WAP

Ip 68.80.252.37
Time 2012-11-01 20:44:27 UTC
Site WWW
Ip 68.80.252.37
Time 2012-10-31 18:17:09 UTC
Site WWW

Ip 76.124.165.5
Time 2012-10-31 01:59:37 UTC
Site WWW

CONFIDENTIAL

Facebook 000001

Ip 76.124.165.5
Time 2012-10-30 22:05:54 UTC
Site WWW
Ip 76.124.165.5
Time 2012-10-28 02:35:09 UTC
Site WWW
Ip 76.124.165.5
Time 2012-10-27 02:58:15 UTC
Site WWW
Ip 67.208.164.82
Time 2012-10-25 22:02:33 UTC
Site WWW

Ip 173,15.170.141
Time 2012-10-25 16:27:04 UTC
Site WWW
Ip 76.124.165.5
Time 2012-10-25 05:00:24 UTC
Site WWW
Ip 76.124.165.5
Time 2012-10-25 04:40:06 UTC
Site WWW

Logouts

Ip 75.151.131.165
Time 2012-11-10 13:15:18 UTC
Site WWW
Ip 68.80.252.37

Time 2012-11-09 21:33:06 UTC
Site WWW
Ip 68.80.252.37
Time 2012-11-08 16:27:58 UTC
Site WWW
Ip 76.124.165.5
Time 2012-11-08 00:41:18 UTC
Site WWW
Ip 68.80.252.37
Time 2012-11-07 19:46:09 UTC
Site WWW

Ip 198.228.200.161
Time 2012-11-02 12:34:35 UTC
Site WWW
Ip 68.80.252.37
Time 2012-11-01 20:43:50 UTC
Site WWW
Ip 68.80.252.37
Time 2012-10-31 16:52:13 UTC
Site WWW
Ip 76.124.165.5
Time 2012-10-30 15:47:19 UTC
Site WWW

CONFIDENTIAL

Facebook 000002

Ip 76.124.165.5
Time 2012-10-28 02:34:04 UTC
Site WWW

Ip 76.124.165.5
Time 2012-10-26 00:04:57 UTC
Site WWW
Ip 76.124.165.5
Time 2012-10-25 05:01:25 UTC
Site WWW
Ip 76.124.165.5
Time 2012-10-25 04:53:54 UTC
Site WWW

Name

First Mary
Middle
Last Smith

Phone
Numbers

Registration 2012-10-25 04:39:58 UTC
Date

Vanity

CONFIDENTIAL

Facebook 000003

Target 100004197933147 (Generated 2012-11-16 16:55:40 UTC)
Date Range Creation to 2012-11-16 16:55:40 UTC
Account End
Active true
Date

Credit Cards

Emails marysmith4158@hotmaii.com

Logins

Ip 72.78.191.60
Time 2012-11-16 12:11:33 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-15 18:50:07 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-15 11:54:50 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-15 00:44:26 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-14 21:21:41 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-14 12:21:06 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-13 21:32:16 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-13 20:37:24 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-13 14:23:05 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-13 13:13:53 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-12 18:52:41 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-12 12:21:30 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-11 21:18:32 UTC
Site WWW

ip 72.78.191.60

CONFIDENTIAL

Facebook 000001

Time 2012-11-11 13:16:49 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-10 22:01:31 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-10 12:03:31 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-09 21:21:46 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-09 18:34:48 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-09 12:21:06 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-08 22:03:42 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-08 20:11:52 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-08 16:49:34 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-08 11:43:56 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-07 17:06:49 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-07 11:43:29 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-06 22:07:10 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-06 21:33:01 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-06 20:18:00 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-06 17:05:03 UTC
Site WWW
Ip 72.78.191.60

Time 2012-11-06 12:03:49 UTC
Site WWW

CONFIDENTIAL

Facebook 000002

Ip 72.78.191.60

Time 2012-11-06 01:17:26 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-05 21:33:03 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-05 20:53:23 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-05 16:06:21 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-05 11:30:21 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-05 02:31:16 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-04 10:46:57 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-03 21:06:07 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-03 01:13:48 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-02 20:44:23 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-02 18:16:37 UTC
Site WWW
Ip 72.78.191.60

Time 2012-11-02 11:11:55 UTC
Site WWW
Ip 72.78.191.60

Time 2012-11-01 20:09:13 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-01 18:10:33 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-31 16:48:36 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-31 15:32:56 UTC
Site WWW

Ip 72.78.191.60
Time 2012-10-31 11:19:12 UTC

CONFIDENTIAL

Facebook 000003

Site WWW
Ip 72.78,191.60
Time 2012-10-31 10:36:53 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-31 01:28:23 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-31 00:26:38 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-31 00:24:20 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-30 23:37:19 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-30 23:33:12 UTC
Site WWW

Ip 72.78.191.60
Time 2012-10-30 22:00:00 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-28 16:51:48 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-28 11:48:50 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-27 21:03:46 UTC
Site WWW

Ip 72.78.191.60
Time 2012-10-27 16:13:40 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-27 12:01:41 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-27 05:38:43 UTC
Site WWW
Ip 72.78.191,60
Time 2012-10-26 20:57:19 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-26 15:29:09 UTC
Site WWW

Ip 72.78.191.60
Time 2012-10-26 10:45:02 UTC
Site WWW

CONFIDENTIAL

Facebook 000004

Ip 72.78,191.60
Time 2012-10-25 17:42:42 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-25 11:36:27 UTC
Site WWW

Ip 72.78.191.60
Time 2012-10-24 20:44:01 UTC
Site WWW

Ip 72.78.191.60
Time 2012-10-24 17:21:47 UTC
Site WWW

Ip 72.78.191.60
Time 2012-10-24 11:15:45 UTC
Site WWW
Ip 72.78.191.60

Time 2012-10-23 23:05:20 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-23 11:54:07 UTC
Site WWW

Ip 72.78.191.60
Time 2012-10-22 18:32:10 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-22 18:17:05 UTC
Site WWW
Ip 72.78.191,60
Time 2012-10-22 11:25:15 UTC
Site WWW
Ip 72.78.191,60
Time 2012-10-21 21:26:59 UTC
Site WWW
Ip 72.78,191.60
Time 2012-10-21 17:15:07 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-21 12:06:57 UTC
Site WWW
Ip 72.78,191,60
Time 2012-10-20 16:41:16 UTC
Site WWW
Ip 72,78,191.60
Time 2012-10-20 11:31:56 UTC
Site WWW
Ip 72.78.191,60

Time 2012-10-19 17:01:20 UTC
Site WWW
Ip 72,78.191,60
Time 2012-10-19 12:44:22 UTC

CONFIDENTIAL

Facebook 000005

Site WWW
Ip 72.78.191.60
Time 2012-10-19 10:53:07 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-18 22:40:13 UTC
Site WWW

Ip 72.78.191.60
Time 2012-10-18 20:35:58 UTC
Site WWW

Ip 72.78.191.60
Time 2012-10-18 17:56:23 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-18 11:43:49 UTC
Site WWW

Ip 72.78.191.60
Time 2012-10-17 20:40:00 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-17 19:02:59 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-17 11:46:29 UTC
Site WWW

Logouts

Ip 72.78.191.60

Time 2012-11-16 01:48:02 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-15 16:44:28 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-15 03:53:32 UTC
Site WWW
Ip 72.78.191.60

Time 2012-11-15 00:43:29 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-14 17:28:00 UTC
Site WWW
Ip 72.78.191.60

Time 2012-11-14 01:27:42 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-13 21:01:05 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-13 17:49:06 UTC

CONFIDENTIAL

Facebook 000006

Site WWW

Ip 72.78.191.60
Time 2012-11-13 14:08:24 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-13 03:30:40 UTC
Site WWW
Ip 72,78.191.60
Time 2012-11-12 16:52:43 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-12 05:33:22 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-11 20:19:55 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-11 02:07:09 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-10 20:10:09 UTC
Site WWW
Ip 72.78.191.60

Time 2012-11-10 02:41:51 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-09 20:54:32 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-09 16:48:06 UTC
Site WWW
Ip 72.78.191.60

Time 2012-11-08 20:32:50 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-08 16:50:01 UTC
Site WWW
Ip 72.78.191.60

Time 2012-11-08 16:27:31 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-08 02:08:04 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-07 14:55:16 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-07 01:41:57 UTC
Site WWW

CONFIDENTIAL

Facebook 000007

Ip 72.78.191.60
Time 2012-11-06 21:34:23 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-06 20:37:38 UTC
Site WWW
ip 72.78,191.60
Time 2012-11-06 18:38:29 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-06 15:19:09 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-06 03:49:37 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-05 23:20:02 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-05 21:03:43 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-05 17:08:01 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-05 14:06:33 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-05 03:00:59 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-04 18:53:26 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-04 00:37:22 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-03 19:59:24 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-03 01:12:37 UTC
Site WWW

Ip 72.78.191.60
Time 2012-11-02 19:50:16 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-02 16:05:26 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-02 01:30:25 UTC

CONFIDENTIAL

Facebook 000008

Site WWW

Ip 72.78.191.60
Time 2012-11-01 20:02:44 UTC
Site WWW
Ip 72.78.191.60
Time 2012-11-01 13:23:28 UTC
Site WWW

Ip 72.78.191.60

Time 2012-10-31 15:37:01 UTC
Site WWW
ip 72.78.191.60
Time 2012-10-31 12:37:51 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-28 16:11:02 UTC
Site WWW

Ip 72.78.191.60
Time 2012-10-28 01:19:56 UTC
Site WWW
ip 72.78.191.60
Time 2012-10-27 18:48:10 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-27 05:42:00 UTC
Site WWW

Ip 72.78.191.60
Time 2012-10-27 02:26:11 UTC
Site WWW

Ip 72.78.191.60
Time 2012-10-26 16:32:40 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-26 14:03:23 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-26 01:45:12 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-25 15:46:30 UTC
Site WWW
Ip 72.78.191.60

Time 2012-10-25 01:47:47 UTC
Site WWW

Ip 72.78.191.60
Time 2012-10-24 20:01:03 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-24 15:48:44 UTC
Site WWW

CONFIDENTIAL

Facebook 000009

ip 72.78.191.60
Time 2012-10-23 23:50:47 UTC
Site WWW
Ip 72.78.191.60

Time 2012-10-23 17:19:58 UTC
Site WWW

ip 72.78.191.60
Time 2012-10-23 01:18:03 UTC
Site WWW
ip 72.78.191.60
Time 2012-10-22 15:23:05 UTC
Site WWW

Ip 72.78.191.60
Time 2012-10-22 01:45:23 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-21 17:25:24 UTC
Site WWW

Ip 72.78.191.60
Time 2012-10-21 16:37:23 UTC
Site WWW
Ip 72.78.191.60

Time 2012-10-21 02:24:53 UTC
Site WWW
Ip 72.78.191.60

Time 2012-10-20 16:00:24 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-20 02:12:49 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-19 15:38:00 UTC
Site WWW

Ip 72.78.191.60
Time 2012-10-19 02:11:51 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-18 19:53:59 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-18 15:38:20 UTC
Site WWW
Ip 72.78.191.60
Time 2012-10-18 03:42:33 UTC
Site WWW

Ip 72.78.191.60
Time 2012-10-17 20:00:34 UTC
Site WWW
Ip 72.78.191.60

Time 2012-10-17 17:31:04 UTC

CONFIDENTIAL

Facebook 000010

Site WWW

Name

First Mary
Middle
Last Smith

Phone +12153013140 Cell Verified on 2012-08-14 15:02:55 UTC
Numbers

Registration 2012-08-13 14:33:45 UTC
Date

Vanity

CONFIDENTIAL

Facebook 00001 1

Target 100003675500958 (Generated 2012-11-16 16:55:36 UTC)
Date Range Creation to 2012-11-16 16:55:36 UTC
Account End
Active true
Date

Credit Cards

Emails nancy.vosicka.3@facebook.com
nv0379@centurylink.net

Logins

ip 76.5.57.193
Time 2012-10-25 21:51:58 UTC
Site WWW
ip 76.5.57.193
Time 2012-10-25 01:10:39 UTC
Site WWW

Ip 76.5.57.193
Time 2012-10-25 00:32:14 UTC
Site WWW
Ip 76.5.57.193
Time 2012-10-21 20:28:42 UTC
Site WWW
Ip 76.5.62.167
Time 2012-10-14 22:33:44 UTC
Site WWW
ip 76.5.62.167
Time 2012-10-09 00:11:47 UTC
Site WWW

Ip 76.5.62.167
Time 2012-10-06 23:03:31 UTC
Site WWW
Ip 76.5.62,167
Time 2012-10-05 00:51:11 UTC
Site WWW

Ip 76.5.60.219
Time 2012-10-04 10:18:59 UTC
Site WWW

Ip 76.5.60.219
Time 2012-09-26 00:06:20 UTC
Site WWW
Ip 76.5.61.77
Time 2012-09-17 23:44:06 UTC
Site WWW

Ip 76.5.63.18
Time 2012-09-17 02:09:59 UTC
Site WWW
Ip 76.5.63.18
Time 2012-09-13 00:29:32 UTC
Site WWW

CONFIDENTIAL

Facebook 000001

Ip 76.5.63,18
Time 2012-09-08 22:09:21 UTC
Site WWW

ip 76.5.62.68
Time 2012-08-30 02:26:49 UTC
Site WWW
Ip 76.5.62.68
Time 2012-08-30 02:07:39 UTC
Site WWW
ip 76.5.62.68
Time 2012-08-29 16:39:14 UTC
Site WWW

Ip 76.5.62.68
Time 2012-08-29 08:52:35 UTC
Site WWW
Ip 76.5.62.68
Time 2012-08-29 08:52:34 UTC
Site WWW
Ip 76.5.61,174
Time 2012-08-18 20:08:19 UTC
Site WWW
Ip 76.5.61.174

Time 2012-08-18 20:07:16 UTC
Site WWW
Ip 76.5.60.161
Time 2012-08-16 22:26:11 UTC
Site WWW
Ip 76.5.60.161

Time 2012-08-16 11:50:43 UTC
Site WWW
Ip 76.5.60.161
Time 2012-08-15 21:11:15 UTC
Site WWW
Ip 98.110.46.167
Time 2012-08-10 19:22:05 UTC
Ip 98.110.46.167
Time 2012-08-10 13:54:56 UTC
Site WWW
Ip 98.110.46.167

Time 2012-08-10 02:55:36 UTC
Site WWW
Ip 98,110.46.167
Time 2012-08-10 01:57:41 UTC
Site WWW
Ip 98.110,46.167
Time 2012-08-09 09:59:53 UTC
Site WWW
Ip 98.110.46.167

Time 2012-08-08 12:28:45 UTC
Site WWW

CONFIDENTIAL

Facebook 000002

Ip 98,110.46.167
Time 2012-08-08 12:26:51 UTC
Site WWW
Ip 98.110.46.167
Time 2012-08-07 20:00:34 UTC
Site WWW
Ip 98.110.46.167
Time 2012-08-06 23:44:52 UTC
Site WWW
Ip 76.5.57.221

Time 2012-08-04 00:26:32 UTC
Site WWW
Ip 76.5.57.221
Time 2012-08-03 15:35:12 UTC
Site WWW

Ip 76.5.62.233
Time 2012-07-22 18:44:36 UTC
Site WWW
Ip 76.5.62.233
Time 2012-07-22 12:11:20 UTC
Site WWW
Ip 76.5.62.233
Time 2012-07-21 20:36:31 UTC
Site WWW

Logouts

Ip 76.5.57.221
Time 2012-08-03 15:35:11 UTC
Site WWW
Ip 76.5.57.221
Time 2012-08-03 15:35:10 UTC
Site WWW
Ip 76.5.57.221
Time 2012-08-03 15:35:10 UTC
Site WWW
Ip 76.5.57.221
Time 2012-08-03 15:35:10 UTC
Site WWW
Ip 76.5.57.221
Time 2012-08-03 15:35:10 UTC
Site WWW
Ip 76.5.57.221

Time 2012-08-03 15:35:10 UTC
Site WWW
Ip 76.5.57.221

Time 2012-08-03 15:35:10 UTC
Site WWW
Ip 76.5.57.221

Time 2012-08-03 15:35:10 UTC
Site WWW

CONFIDENTIAL

Facebook 000003

Name

First Nancy
Middle
Last Vosicka

Phone
Numbers

Registration 2012-04-03 17:30:02 UTC
Date

Vanity nancy.vosicka.3

CONFIDENTIAL

Facebook 000004

Target 100001696518765 (Generated 2012-11-16 16:55:51 UTC)
Date Range Creation to 2012-11-16 16:55:51 UTC
Account End
Active true
Date

Credit Cards

Emails mark.adorno.7@facebook.com
markadorno@gmail.com

Logins

Ip 64.121.241.121
Time 2012-11-15 21:54:11 UTC
Site WWW
Ip 64.121.241.121
Time 2012-11-14 21:36:20 UTC
Site WWW
Ip 64.121.241.121
Time 2012-11-14 02:15:54 UTC
Site WWW
Ip 64.121.241.121
Time 2012-11-12 18:02:34 UTC
Site WWW

Ip 64.121.241.121
Time 2012-11-09 21:16:34 UTC
Site WWW
Ip 64.121.241.121
Time 2012-11-08 02:43:09 UTC
Site WWW
Ip 64.121.241.121
Time 2012-11-07 20:44:30 UTC
Site WWW

Ip 64.121.241.121
Time 2012-11-07 20:41:10 UTC
Site WWW
Ip 64.121.241.121
Time 2012-11-06 03:27:45 UTC
Site WWW

Ip 64.121.241.121
Time 2012-11-05 19:56:56 UTC
Site WWW
Ip 64.121.241.121
Time 2012-11-05 15:39:47 UTC
Site WWW

Ip 64.121.241.121
Time 2012-11-03 19:31:41 UTC
Site WWW
Ip 64.121.241.121
Time 2012-11-02 19:49:14 UTC
Site WWW

CONFIDENTIAL

Facebook 000001

Ip 64.121.241.121

Time 2012-11-02 01:51:44 UTC
Site WWW
ip 64.121.241.121
Time 2012-11-01 19:32:21 UTC
Site WWW

Ip 64.121.241.121
Time 2012-11-01 01:05:31 UTC
Site WWW
ip 64.121.241.121
Time 2012-10-31 00:29:03 UTC
Site WWW

Ip 64.121.241.121
Time 2012-10-30 22:31:03 UTC
Site WWW
Ip 64.121.241.121
Time 2012-10-29 11:40:12 UTC
Site WWW
Ip 64.121.241.121
Time 2012-10-25 20:56:58 UTC
Site WWW
ip 64.121.241.121
Time 2012-10-24 22:01:30 UTC
Site WWW
Ip 64.121.241.121
Time 2012-10-21 13:09:24 UTC
Site WWW

Ip 64.121.241.121
Time 2012-10-19 01:46:24 UTC
Site WWW

Ip 64.121.241.121
Time 2012-10-17 22:42:55 UTC
Site WWW
Ip 64.121.241.121
Time 2012-10-17 19:49:42 UTC
Site WWW
Ip 64.121.241.121
Time 2012-10-16 08:57:00 UTC
Site WWW

Ip 64.121.241.121
Time 2012-10-16 01:08:48 UTC
Site WWW
Ip 64.121.241.121
Time 2012-10-15 19:18:35 UTC
Site WWW
Ip 64.121.241.121
Time 2012-10-12 02:15:18 UTC
Site WWW
Ip 64.121.241.121
Time 2012-10-11 19:32:05 UTC

CONFIDENTIAL

Facebook 000002

Site WWW
Ip 64.121.241.121
Time 2012-10-10 19:51:55 UTC
Site WWW

ip 64.121.241.121
Time 2012-10-09 20:00:45 UTC
Site WWW
Ip 64.121.241.121
Time 2012-10-08 17:58:33 UTC
Site WWW
Ip 64.121.241.121
Time 2012-10-08 14:07:24 UTC
Site WWW
Ip 64.121.241.121
Time 2012-10-04 23:50:03 UTC
Site WWW
Ip 64.121.241.121
Time 2012-10-04 00:12:15 UTC
Site WWW
Ip 64.121.241.121
Time 2012-10-03 19:18:51 UTC
Site WWW

Ip 64.121,241.121
Time 2012-10-03 00:03:03 UTC
Site WWW
Ip 64.121.241.121
Time 2012-10-01 15:28:11 UTC
Site WWW
Ip 64.121.241.121

Time 2012-09-28 01:10:05 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-27 00:48:27 UTC
Site WWW

Ip 64.121.241.121
Time 2012-09-25 19:00:58 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-24 19:39:00 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-24 14:57:29 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-23 16:41:40 UTC
Site WWW

Ip 76.124.165.5
Time 2012-09-23 15:34:31 UTC
Site WWW

CONFIDENTIAL

Facebook 000003

ip 76.124.165.5

Time 2012-09-22 14:27:40 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-20 01:11:34 UTC
Site WWW

Ip 64.121.241.121
Time 2012-09-18 19:27:53 UTC
Site WWW
Ip 64.121.241.121

Time 2012-09-18 00:19:55 UTC
Site WWW
Ip 76.124.165.5
Time 2012-09-16 13:36:51 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-15 19:08:24 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-14 19:30:36 UTC
Site WWW

Ip 64.121.241.121
Time 2012-09-13 19:35:06 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-13 02:18:50 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-12 20:00:10 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-10 19:28:42 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-10 11:20:20 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-09 18:08:45 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-07 19:25:08 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-05 19:42:11 UTC
Site WWW
Ip 64.121.241.121

Time 2012-09-05 01:29:29 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-03 11:36:10 UTC

CONFIDENTIAL

Facebook 000004

Site WWW
Ip 64.121.241.121
Time 2012-08-31 01:44:58 UTC
Site WWW
ip 64,121.241.121
Time 2012-08-30 19:02:40 UTC
Site WWW
ip 64.121.241.121

Time 2012-08-30 01:18:00 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-30 00:54:46 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-29 23:48:09 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-29 20:04:40 UTC
Site WWW
Ip 64.121.241.121

Time 2012-08-29 19:34:22 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-28 19:50:05 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-27 15:14:56 UTC
Site WWW
Ip 64.121.241.121

Time 2012-08-25 15:14:33 UTC
Site WWW
Ip 64.121.241.121

Time 2012-08-24 23:26:04 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-20 16:40:05 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-19 16:10:49 UTC
Site WWW
Ip 64.121.241.121

Time 2012-08-17 19:42:31 UTC
Site WWW
Ip 64.121.241.121

Time 2012-08-17 01:40:50 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-16 19:14:57 UTC
Site WWW

CONFIDENTIAL

Facebook 000005

Ip 64.121.241.121
Time 2012-08-16 00:11:02 UTC
Site WWW
ip 64.121.241.121
Time 2012-08-14 19:36:34 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-14 02:04:30 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-13 15:52:42 UTC

Site WWW
Ip 64.121.241.121
Time 2012-08-11 19:47:41 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-10 20:25:21 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-10 01:28:21 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-09 19:11:06 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-08 21:56:55 UTC
Site WWW

Ip 64.121.241.121
Time 2012-08-07 19:28:19 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-07 01:40:28 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-06 19:05:30 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-05 21:19:23 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-05 14:35:35 UTC
Site WWW
Ip 76.124.165.5
Time 2012-08-05 13:07:29 UTC
Site WWW
Ip 64.121.241.121

Time 2012-08-04 21:11:50 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-03 19:52:21 UTC

CONFIDENTIAL

Facebook 000006

Site WWW
Ip 64.121.241.121
Time 2012-08-02 01:07:00 UTC
Site WWW
ip 64.121.241.121
Time 2012-08-01 19:41:03 UTC
Site WWW

ip 64.121.241.121
Time 2012-07-31 19:24:46 UTC
Site WWW
ip 64.121.241.121
Time 2012-07-31 02:03:27 UTC
Site WWW
Ip 64.121.241.121
Time 2012-07-30 23:56:29 UTC
Site WWW
Ip 64.121.241.121
Time 2012-07-30 16:05:35 UTC
Site WWW
Ip 64.121.241.121
Time 2012-07-29 22:03:08 UTC
Site WWW
Ip 64.121.241.121
Time 2012-07-28 22:24:23 UTC
Site WWW
Ip 64.121.241.121
Time 2012-07-20 19:52:31 UTC
Site WWW
Ip 64.121.241.121
Time 2012-07-20 03:09:06 UTC
Site WWW
Ip 64.121.241.121
Time 2012-07-19 19:22:40 UTC
Site WWW
Ip 64,121.241.121

Time 2012-07-18 01:14:39 UTC
Site WWW

Logouts

Ip 64.121.241.121
Time 2012-11-14 21:44:12 UTC
Site WWW
Ip 64.121.241.121
Time 2012-11-14 02:26:59 UTC
Site WWW
Ip 64.121.241.121
Time 2012-11-13 20:27:26 UTC
Site WWW
Ip 64.121.241.121
Time 2012-11-12 18:23:54 UTC

CONFIDENTIAL

Facebook 000007

Site WWW

ip 64.121.241.121
Time 2012-11-09 21:24:15 UTC
Site WWW
Ip 64.121.241.121
Time 2012-11-08 02:48:55 UTC
Site WWW
Ip 64.121.241.121
Time 2012-11-07 21:00:53 UTC
Site WWW
Ip 64.121.241.121
Time 2012-11-06 03:31:03 UTC
Site WWW

Ip 64.121.241.121
Time 2012-11-05 20:00:09 UTC
Site WWW
Ip 64.121.241.121
Time 2012-11-05 15:46:01 UTC
Site WWW
Ip 64.121.241.121
Time 2012-11-03 19:35:12 UTC
Site WWW

Ip 64,121.241.121
Time 2012-11-02 19:53:51 UTC
Site WWW

Ip 64,121.241.121
Time 2012-11-02 01:59:58 UTC
Site WWW
Ip 64.121.241.121
Time 2012-11-01 19:40:32 UTC
Site WWW
Ip 64.121.241.121
Time 2012-11-01 01:14:41 UTC
Site WWW
Ip 64.121.241.121
Time 2012-10-30 22:51:19 UTC
Site WWW

Ip 64.121.241.121
Time 2012-10-29 11:54:46 UTC
Site WWW
Ip 64.121.241.121
Time 2012-10-25 21:07:21 UTC
Site WWW
Ip 64.121.241.121
Time 2012-10-24 22:13:07 UTC
Site WWW
Ip 64.121.241.121
Time 2012-10-21 13:14:33 UTC
Site WWW

CONFIDENTIAL

Facebook 000008

ip 64.121.241.121
Time 2012-10-19 01:56:16 UTC
Site WWW
ip 64.121.241.121

Time 2012-10-17 22:45:17 UTC
Site WWW
ip 64.121.241.121
Time 2012-10-17 19:56:42 UTC
Site WWW
Ip 64.121.241.121
Time 2012-10-16 09:03:21 UTC
Site WWW

Ip 64.121.241.121
Time 2012-10-15 19:36:50 UTC
Site WWW
Ip 64.121.241.121

Time 2012-10-12 02:18:10 UTC
Site WWW
Ip 64.121.241.121

Time 2012-10-11 19:37:49 UTC
Site WWW
Ip 64.121.241.121
Time 2012-10-10 20:15:25 UTC
Site WWW
Ip 64,121.241.121
Time 2012-10-09 20:08:34 UTC
Site WWW
Ip 64.121.241.121
Time 2012-10-08 18:02:38 UTC
Site WWW
Ip 64.121.241.121
Time 2012-10-08 14:20:12 UTC
Site WWW
Ip 64.121.241.121
Time 2012-10-04 23:59:30 UTC
Site WWW
Ip 64.121.241.121
Time 2012-10-04 00:23:50 UTC
Site WWW

Ip 64.121.241.121
Time 2012-10-03 19:22:24 UTC
Site WWW
Ip 64.121.241.121
Time 2012-10-01 15:42:53 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-28 01:14:45 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-27 00:56:51 UTC

CONFIDENTIAL

Facebook 000009

Site WWW
Ip 64.121.241.121
Time 2012-09-25 19:07:23 UTC
Site WWW
Ip 64,121.241.121
Time 2012-09-24 19:41:54 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-24 15:05:48 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-23 16:44:54 UTC
Site WWW
Ip 76.124.165.5
Time 2012-09-22 14:40:06 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-20 01:21:21 UTC
Site WWW
ip 64.121.241.121
Time 2012-09-18 19:34:59 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-18 00:34:47 UTC
Site WWW

Ip 76.124.165.5
Time 2012-09-16 13:41:08 UTC
Site WWW

Ip 64.121.241.121
Time 2012-09-15 19:14:38 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-14 19:40:29 UTC
Site WWW

Ip 64.121.241.121
Time 2012-09-13 19:41:18 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-13 02:35:01 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-12 20:18:50 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-10 19:31:31 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-10 11:24:21 UTC
Site WWW

CONFIDENTIAL

Facebook 000010

Ip 64.121.241.121
Time 2012-09-09 18:15:50 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-07 19:34:08 UTC
Site WWW
ip 64.121.241.121
Time 2012-09-05 19:48:42 UTC
Site WWW
Ip 64.121.241.121

Time 2012-09-05 01:48:42 UTC
Site WWW
Ip 64.121.241.121
Time 2012-09-03 11:46:28 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-31 01:53:08 UTC
Site WWW
ip 64.121.241.121
Time 2012-08-30 19:08:13 UTC
Site WWW
Ip 64.121.241.121

Time 2012-08-30 01:25:54 UTC
Site WWW
Ip 64.121.241.121

Time 2012-08-30 00:57:27 UTC
Site WWW

Ip 64.121.241.121
Time 2012-08-29 23:54:35 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-29 20:05:50 UTC
Site WWW
ip 64.121.241.121
Time 2012-08-29 19:58:14 UTC
Site WWW

Ip 64.121.241.121
Time 2012-08-28 19:59:10 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-27 15:22:20 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-25 15:27:24 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-24 23:31:51 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-20 16:51:28 UTC

CONFIDENTIAL

Facebook 00001 1

Site WWW
ip 64.121.241.121

Time 2012-08-19 16:19:30 UTC
Site WWW

Ip 64.121.241.121
Time 2012-08-17 19:48:35 UTC
Site WWW
ip 64.121.241.121

Time 2012-08-17 01:48:20 UTC
Site WWW
ip 64.121.241.121
Time 2012-08-16 19:18:48 UTC
Site WWW
Ip 64.121.241.121

Time 2012-08-16 00:17:46 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-14 19:49:24 UTC
Site WWW
Ip 64.121.241.121

Time 2012-08-14 02:08:57 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-13 16:02:09 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-11 19:51:23 UTC
Site WWW

Ip 64.121.241.121
Time 2012-08-10 20:45:13 UTC
Site WWW
Ip 64.121.241.121

Time 2012-08-10 01:33:38 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-09 19:18:40 UTC
Site WWW

Ip 64.121.241.121
Time 2012-08-08 22:01:42 UTC
Site WWW
Ip 64.121.241.121

Time 2012-08-06 19:11:05 UTC
Site WWW
ip 64.121.241.121
Time 2012-08-05 21:27:11 UTC
Site WWW
Ip 64.121.241.121
Time 2012-08-05 14:38:51 UTC
Site WWW

CONFIDENTIAL

Facebook 000012

ip 76.124.165.5
Time 2012-08-05 13:09:30 UTC
Site WWW
ip 64.121.241.121
Time 2012-08-04 21:24:11 UTC
Site WWW
ip 64.121.241.121
Time 2012-08-03 20:03:30 UTC
Site WWW
ip 64.121.241.121
Time 2012-08-02 01:10:09 UTC

Site WWW
ip 64.121.241.121
Time 2012-08-01 19:48:16 UTC
Site WWW
ip 64.121.241.121

Time 2012-07-31 19:29:22 UTC
Site WWW
ip 64.121.241.121
Time 2012-07-31 02:08:36 UTC
Site WWW
ip 64.121.241.121
Time 2012-07-31 00:04:04 UTC
Site WWW
ip 64.121.241.121
Time 2012-07-29 22:16:26 UTC
Site WWW
ip 64.121.241.121

Time 2012-07-28 22:37:00 UTC
Site WWW
ip 64.121.241.121
Time 2012-07-20 19:57:13 UTC
Site WWW
ip 64.121.241.121
Time 2012-07-20 03:11:58 UTC
Site WWW
ip 64.121.241.121
Time 2012-07-18 01:16:29 UTC
Site WWW

Name

First Mark
Middle
Last Adorno

Phone
Numbers

Registration 2010-10-20 00:39:28 UTC
Date

CONFIDENTIAL

Facebook 000013

Vanity mark.adorno.7

CONFIDENTIAL

Facebook 000014

Exhibit I

veriTon
AugUSt 1,2012

Le^^mpllanoe
2701 S. Johnson St
SanAngelo,TX 76904
Voice: 888-483-2600
Fax 325-949-691 6

Verizon Case #12275571

Re: Subpoena Per Court of Common Pleas Lnzerne County, PA Myers, Brier & Kelly LLP
Attorneys for the Plaintiff Sundance Vacations Inc. vs. Albert Whitehead
Signed 7/12/2012

Business Records Affidavit
I, Christine Gardener, being duly sworn, deposes and says: I am the custodian of records for
Verizon, and in that capacity, I certify that the attached records are true and accurate copies of the
records created from the infonnation maintained by Verizon in the actual cowse of business,
It is Verizon's ordinary practice to maintain such records, and that said records were made
contemporaneously with the transaction and events stated therein, or within a reasonable time
thereafter.

I have provided Donna A Walsh, Esquire, the subscriber records as requested to include IP
Address, Session Logs for name, address, account number and type, account creation date,
corresponding telephone number and user ID and user name for die subscribers named on the
response document,

ExecutolonAusnst 1,2012

// /

i

M

J

Chrisiinc Gardener, Consullant Net Ops

August 1, 2012

L8aal Compllanc
TXD01S13
2701 8. Johnson St.

Verizon Case #12275571

San Angalo, TX 78904
Volea; 888-483-2600
Fax 325-949^918

Re: Subpoena Per Court of Common Pleas Luzerne County, PA Myers, Brier & Kelly LLP
Attorneys for the Plaintiff Sundance Vacations Inc. vs. Albert Whitehead
Signed 7/130012

IP Session logs are rellected in GMT
IP Address: 68.163.49.135

Start Hole: 2011-08-21 21:12:04Z Stop Time: 2011-08-25 13:48:38Z
IF Address: 68.16333047

Start Ttoie: 2011-09-13 10:46:112 Stop Time: 2011-09-21 21:35:382
VOL Account Number: 0063909960386
Account Creation Date; 04/24/2006
Customer Name: Kathy Whitehead
Account Address: 842 N 27th St
Philadelphia, PA 191301832

Daytime TN: 2152321236
Payment Method: LECBilling (included on local telephone bill)
DSL/2152321236 Deactivated
Service End Date: 03/1^/2012
VOL User ID: vzetbdnx

VOL Account Number: 0118739285494
Account Creation Date: 12/19/2011
Customer Name:

Albert Whitehead

Account Address: 842 N 27 ST
Philaddphia, PA 19130

Daytime TN: 2152351308
Evening TN: 2152058160
Payment Method: Invoice

VZ FIOS Consumer Internet Plan/ Active
VOL User ID: vzel98ekin

veriZSD
August 1, 2012

Legal Compllanca
TXD01B13

Z701S. Johnson St
San Angola, TX 78904
Voice: 888-483-2600
Fax 325-949-6916

Verizon Case #12275571

Re: Subpoena Per Court of Common Pleas Luzerne County, PA Myers, Brier & Kelly LLP
Attorneys for the Plaintiff Sundance Vacations Inc. vs. Albert Whitehead
Signed 7/12/2012

IP Session logs are reflected te GMT

VZID Session List for Kathy Whitehead
Start Date : 2011-09-22 0O:0O;00Z
Stop Date : 2012-03-19 00:00:002
User ID : vzetbdnx
Total Sessions : 89

»»aaaasw<isasKHSf

I

Start Time

I

Stop Time

^Baaaaaiajtaaaaaaaataaasaiaaaj BasaasKasKaBaasajsuB

Duration

paaaa:aa»ffiHaaa»»a;a»aa

User ID

IPAddress

I

1 2012-02-15 18;31:44Z j 2012-03-19 09:50:222 32dl5hl5m33s| vzetbdnx] 70.110.201.252

i|saKiK!«Ka^jKS!saa.-sasaaKSS!4 affisassassi^KSjafflSKSssasaaaassK

1 2012-02-10 21:07:25Z | 2012-02-15 18:31;34Z
BaassaaaasiaasaaBaaaaaaasasaS aasaaaaaa<aa!aaaaa;aaaB!aa!aa

saaaaaasBaaasissaasa^ iaassasaasaaa! BBssaaaiaaiaaasaaKaaa

4d 21h 23m 45s I vzeflxinx ' 70. 1 10.203.30
aaauaaaBiaaaaaKuaaaal ansasaaaaassas aaaasssasaaaasaaaaaasfi

I 2012-02-05 14:12:292 j 2012-02-10 21:07:162^ 5deh54ra20s

| vzetbdnx j 68.163.44.121

'

12012-01-29 12: 15:492 1 2012-02-05 14: 12:202 1 7dlh 55m 54s

| vzetbdnx! 70.110.195.10

I

|2012-01-29 01;43:312

i vzetbdnx i 151.199.254.194

12012-01-28 12:17:032

1 2012-01-28 07:42:572
2012-01-28 04:13:182

2012-01-29 12:15:402 1 Od lOh 32m 7s

2012-01-29 01:43:222 j Od 13h 26m 16s | vzMbdnx| 70.lia215.159 j
2012-01-28 12:16:542 y Od 4h 33m 56s

I vzetbdnx || 70.110.191.12

|

2012-01-28 07:42:482Tod 3h 29m 29s j vzetbdnx | 68. 163.47.21 1

iuia^iaaaMUuaa^aaiuiaua;aaua4>i»wa^aiitaaiaaui^^

12012-01-18 20:28:552

2012^)1-28 04:13:092 f 9d Tli 43m 25s

[j vzetbdnx | 151.199^53.95

I 2012-01-15 12: 15:55Z

2012-01-18 20:28:472 1 3d 8h 12m 35s

I vzetbdnx 70.110.197.76

I 2012-01-15 10: 13:27Z

2012-01-15 12:15:462 1 Od 2h 2m 18s

I 2012-01-1508:37:422

2012-01-15 10:13:182 1 Od Ih 35m 36s "] vzetbdnx |i 151.199.251.176

1 sanreaaaaasaaaaaaaaaHiaasa:

2012-01-13 12:18:092

2012-01-15 08:37:322 1 Od 44h 19m 13s j vzetbdnx j 70.1 10.195.160

ia»«aaBBaaaaafttsaaa»aa»3«»^lsa«a>wmn»»aaaa^
2012-01-1120:37:452

tbdnx | 70.110.223.51
I vzetbdnx

2012-01-13 12:18:012 f Od 39h 40m 7s

assaasaaaaaiasBaaaass!! 1

| vzetbdnx] 70.110.223.67 J

SaitXUUHMMtJMMSaiUUXIi*

ir

mw^vwiHrmnn.

fin.wiii.»«~muK.«»»«»a«i^mM

ij 2012-01-07 12: 16:06Z || 2012-01-1 1 20:37:36Z 1 4d 8h 21m i

vzctbdnx

1 2012-01-07 01;12:25Z |! 2012-01-07 12:15:56Z § Od 1 Ih 3m 29s

vzetbdnxji 68.163.47.57

151.197.27.203

|

uuu;smuaatu

2012-01-06 12: 16:03Z jj 2012-01-07 0lTl2: l6zfod 12h 56m 10s

vzettidnx

71,242.92.98

tuuiuuuuuwuut;

2012-01-06 03:36;27Z | 2012-01-06 12:15:53Z I Od 81i 39ra 25s

vzetbdnxj 71.242.88.182

1 2012-01-04 12:16:03Z 1 2012-01-06 03l36:18Z i Od 39h 20m 6s

vzetbdnxji 68.163.49.223

r

UiUUKC

J, 2012-01^)4 11:38:53Z I 2012-01-04 12:15:54Z | Od CUi 37m Is

2012-01-04 1 1:38:43Z fod Oh 42m 36s

! 2012-01-04 10:56:07Z ;

|

71.242.89.216

vzetbdnx

fflxoxasKsaasasra

vzetbdnx

| 2012-01-04 06:59;24Z 2012-01-04 ia55:58Z i Od 3h 56m 33s

68. 163.58 J247

vzetbdnx \\ 70.110.194.145

>Baa»a!iaK!aaMa«>KBB»nBWB^^ awaimTOiaBW«taw«aaiBwa»awa| maakasraaKnamaaaoss:
asnum

! 2012-01-03 23:56:03Z

2012-01-04 06:59:15Z|0d7h 3m lis

^

Is^esisaaaisaBoiaaaasaaall

1

xtiYfft^AKmtntQyittRn

vzetbdnx |! 68.163.54.116
..}l.

1 2012-01-03 22:49:00Z | 2012-01-03 23:55:53Z | Od Ih 6m 53s

vzetbdnx I 72.81.124.90

1 2012-01-03 22:12:58Z | 2012-01-03 22:48:51Z | Od Oh 35m 53s

vzetbdnx. 68.163.58.12

| 2012-01-02 12:15:42Z 1 2012-01-03 22:12:492

vzetbdnx | 70.110.221.71

0d33h57m0s

2012-01-02 05:05:58Z 2012-01-02 12:15:33z| Od 7h 9m 34s
2012-0 1-02 03: 14:55zl| 2012-01-02 05:05:48Z f Od Ih 50m 54s
u

vzetbdnx I 70.110.212.50

r 72.81.12:
127.149

vzetbdnx

:.

i 2012-01-02 02:29;24Z

|

I vzetbdnx1
Ij 70.110.200.190

2012-01-02 03:14;46Z | Od Oh 45m 21s

utuUmttt* tui maim n tutiiUiKUKuu ittu

" 2012-01-02 02:29:152 i Od Oh 28m248

2012-01-02 a2:00:51Z

vzetbdnx p 151.199.247.195 '

r

J 2012-01-02 00:57:472

" vzetbdnx! 70.110.191.64

2012-01-02 02:00:412 ij Od Ih 2m 54s

ilUUUUlUWIUIt^ WUMUKlUKllUOUUHiUUlW^]

\ 2011-12-3012:15:422 2012-01-02 00:57:39Z | Od 601 41m 43s | vzeftdnx I 70.110.190.141
tjassassaisssaaKasBaKiaasaaisasJ

ai^aisaiErftSK«tt^*K

saassaass&asaaaasax^^

2011-12-2923:45:5521 201 1-12-30 12:15:33Z i Od 12h 29m 35s I

vzetbdnx! 70.110.193.41

2011-12-28 12:15:55Z j 2011-12-29 23:45:46Z 1 0d35h 29m 44s [

vzetbdnx j 68.163.50.17

2011-12-28 01:12: 15Z

12011-12-26 12:17-A7Z

201 1-12-28 12: 15:46Z i Od 1 Ih 3m 288 Fvzetbdnx 68.163.51.231
ii....:

{

201 1-12-28 01:12;06Z | Od 36h 54m 10s | vzetbdnx i 70.110.199.206 j

2011-12-23 12:16:54Zi 201 1 -12-26 12: 17:38z| 3d CBi OtaMs
I 2011-12-23 00:41:52Z

^ vzetbdnx 151.197.27.32
2011-12-23 12:16;45z|0d Uh 34m 50s (vzetbdnx 68.163.45.228
2011-12-23 00:41:42Z I Od 12h 23m 35s f vzetbdnx 70.110.204^9 I
2011-12-22 12:17:56Z f Od 18h 7m 51s i vzetbdnx i 70.110.217.80
1 ¦¦i!i!!K!i:t;!!!iJ;i;

2011-12-22 12:18:05Z

$ 2011-12-21 18:10:022

2011-12-21 12:16:512 j 201 1-12-21 18:09:532 ^ Od 5h 53m Os

I vzetbdnx | 70.110.190.158

;;tt«aHaj;aH«i«K»u;uaC^«;Hi;

2011-12-21 03:56:442

2011-12-21

12:16:42z| 0d8hl9m56s

ij vzetbdnx

.iikuuuicuu;:

70.110,219.62

uuu:CfUUu:;uuuuu::uuu:ua

2011-12-2103:44:252

2011-12-21 03:56:352 1 Od Oh 12m 9s

vzetbdnx I

70.110.212.35

JUUagUUMUUUKaUUtKUUWUUUtU

2011-12-20 12:15:422
2011-12-20 11:07:542

201 1-12-21 03:44:162 |0d 15h 28m 31s | vzefednx

72.81.120.190

201 1-12-20 12:15:332 f Od Ih 7m 39s

70.110.214.31 J

iyTOWisi!a»is«BmiaiiB«B8S5S«a!

2011-12-2004:17:392

| vzetbdnx

fita&cs&xx&stisxitisssix:

201 1-12-20 11:07:452 0 Od 6h 50m 4s

12011-12-16 12:15:522 2011-12-20 04:17:30Z | 3d l6h 1m 19s
::<«wim«u:utuumuucj

I vzetbdnx jl 68.163.60.215
vzetbdnx

68.163.46.160

j.

2011-12-16 00:48:422 Ij 2011-12-16 12:15:432 1 Od 1 Ih 26m58s
2011-12-1212:17:362
2011-12-11 12:15:532

1 2011-12-11 07:47:532

vzetbdnx

70.110.223.16

201 1-12-16 00:48:332 f 3d 12h 3(ta 38s I vzetbdnx

70.110.204.81

201 1-12-12 12:17:272 i Od 24h 1m 28s

70.110.218.128 I

r

201 1-12-11 12; 15:442 1 Od 4h 27m 50s

1 2011-12-11 05:42;06Z

vzetbdnx

| vzetbdnx

70.110.211.99

vzetbdnx

2011-12-1012:15:472

201 1-12-11 05:41:582 i Od 17h 26m 6s

vzetbdnx || 68.163.53.40

2011-12-10 11:07:442

2011-12-10 12:15:382 f Od Ih 7m 54s

vzetbdnx

45m 49s

J

72.81.127.242 1

201 1-12-11 07:47:442 1 Od 2h 5in 38s

u;;:wu;uuu:

|2011-12-1006:21:46Z 1| 2011-12-1011:07:352

.,

70.110.213.230 i

vzettxlnxl 68.163.49.90

""I

ttBamiiBaaa

2011-12-10 06:21:372

i 2011-12-09 12:17:382

33m lis

vzeAdnx

68.163.57.138

201 1-12-10 00:48:162 1 Od 12h 30m 35s | vzetbdnx I

68.163.50.192 |

2011-11-08 11:47:312 |j 2011-12-09 12:17:2921 31d Oh 27m lis I

vzetbdnx

70.110.209.22

2011-11-02 15:39:142 f 2011-1 1-08 11:47:222 1 5d20h 7m 36s

vzetbdnx

72.81.126.195

r

;

2011-10-27 11:15:542 pOl 1-11-02 15:21:112 1 6d4h4m44s

if vzetbdnx

68.163.48.3

2011-10-27 10:31:482 1 201 1-10-27 11:15:452 1 Od Oh 43m 56s

I vzetbdnx I

72.81.123.223

2011-10-27 09:24:302

201 1-10-27 10:31:392 1 Od Ih 7m 9s

SmK!u«u1«iKI1«;«K1«ua,«1K«aa

i vzetbdnx I 68.163.58.189

^J:.,

itWUMliiWtiWWH liWmimii'ji t IU11K t-jIHii Hit

2011-10-27 08:08:132

. 2011-10-27 09:24:212 1 Od Ih 16m 8s

| vzetbdnx |j 72.81.126.110

2011-10-2623:45:212

| 201 1-10-27 08:08:032 | Od 8h 22m 40s

\ vzctbdux

2011-10-23 11:17:312

il

{UlKUUUtULIUIUUUtUlUUItUIt

71.242.87.39

2011-10-26 23:45:122 j 3dl2h27m22s f vzetbdnx '

68.163.49.13

201 1-10-23 11: 17:222 Od 24h 1m 17s

68.163.48.54

aa:ssssaaassaaiasa3aa8a!'.a»aS waaassaaaasaaaaaiasasS iaantataaaata^i:ttaaaaaaanaaaasaaa

2011-10-2211:15:592

l, vzetbdnx

ai

2011-10-22 10:22:302

^aaanaaaaaauKanaai

2011-10-22 11:15:502 Od(Bi53m20s

I vzetbdnx

70.110.206.7

a:aaa2aaaaaaaaaaaa(auaatas^j n£auaaasaa«iH«wM«tMi»»v
<
saaaaasfjjsaaiasaaaaas

2011-10-2111:15:422

201 1-10-22 10:22:212 1 Od 23h 6m 34s

BaaaaKSaaaaaaasasiaasij vzetbdnx I 70.110.201.216

i 2011-10-21 09:39:122

201 1-10-21 11:15:332 | Od Ih 36m 21s

| vzetbdnx I 70.110.206.24

tr

201 1-10-21 05:46: 142 i| 201 1-10-21 09:39:032 | Od 3h 52m 49s
I 2011-10-20 23:33:242i| 2011-10-21 05:46:052 f Od 6h 12m40s

I vzetbdnx

151.197.5.120

% vzetbdnx] 151.199.252.91
ar,;i;;m!iim;H-,!i;»v.aaK;aJ

12011-10-2023:00:502

201 1-10-20 23:33: 152 1 Od Oh 32m 24s

N vzetbdnx

68.163.45.154

tfXiK-.nniiiillilllsizJ':

|2011-10-17 11:16:00Z

2011-10-20 23:00:412 I 3d llh 44m22s i vzetbdnx

68.163.59^51

i!^;-,i.v!ri!i;,.iiiimi!mm;"j;;Kifiii;iiiiiiB«ai;iBiK!

12011-10-17 06:47:062

2011-10-17 Il:15:512i0d4h28ra45s
Kus««uiu;aimuu:mguawwa;m;:«K;««u;

I vzetbdnx

70.110.197.235

uu:

iii^a

2011-10-15 11:15:5021 201 1-10-17 06:46:562 1 0d43h 30m 57s i| vzetbdnx

70.110.208.165 I

201 1-10-15 11:15:412 1 Od 7h 52m 36s

| vzeftdnx 72.81.124.107

2011-10-15 01:38:322' 2011-10-15 03:22:542 j Odlh 44m 21s

| vzetbdnx 151.197.27.41

2011-10-15 03:23:032

tjWStt^tewwftttttWWftWH^

2011-10-1418:15:252

issrjaiMiiSiftwSwfftaa^

201 1-10-15 01:38:232 i0d7h 22m 56s

'ttXGiitsixtXBCisiS^^Xi&f&is^^

12011-10-1211:15:442
aaaaiaaaav

I vzetbdnx 70.110.204.254
Laaaaasassaa

201 1-10-14 18:15:162 y Od 54h 59m 20s ^ vzetbdnx

»naaaa»aaa»a«4i»«aaa»aaa«aa:

| 2011-10-1209:23:492

aiKUSr»wiysi!!iwgrt!^^

t\A Ih
11. 51m46s
CI
^^.
2011-10-12 11:15:352r |S Od

70.110.216.245
u

MvfflnCTayttYftCTttwffly

._-.VJ
Ilii vzetbdnx
!I 151.197.5.184

|

¦c4^:^.J.«aK^.-»<..»r...-M-:rn

«

„r.,.,„WJMW,

""^^r"""""""^:

12011-10-1201:34:112

2011-10-12 09:23:402 1 Od 7h 49m 27s

I vzetbdnx

12011-10-11 11:16:562

2011-10-1201:34:022 f Od 14h 17m 3s

vzetbdnx

151.199.248.19 I

\ 2011-10-11 09:51:532

2011-10-11 11:16:462 1

vzetbdnx

68.163.60.246

0dlh24m53s

70.110.198.237

iuu«u»uuu:u:!u

2011-10-08 11:16:492

112011-10-08 11:14:462
2011-10-01 11:15:352

2011-10-1109:511452

2d22h34m40s

2011-10-08 11:16:402 1 0d0hlm53s
201 1-IO-OS 11:14:372

6d23h58m24s

vzetbdnx

70.110.221.194

|vzetbdnx|| 71.242.86.105

vzetbdnxil

^K!maa^K6!!^asasKasaaaas!sas^^

70.110.199.204

[2011-09-28 16:16:062'

2011-10-0111:15:2621 2dl8h59m5s

2011-09-22 16:36:142

2011-09-2816:15:572| 5d23h39mns

vzetbdnxl 151.197^.250

2011-09-21 21:36:492

2011-09-2216;36:052| Od 18h 59m 12s

vzetbdnx

imaiaiim»B»iii»iBt»ig«wffiiBwai)rf.

ii vzetbdnx
vz
j; 70.110.206J229 f

151.197.27.236

YZID Session List for Albert Whitehead
Start Date : 2011-12-15 00:00:002
Stop Date : 2012-07-30 00:00:002
User ED : V2el98ekm
Total Sessions : 3

ssxs&ataia^jxsiassiassass^^

\Y

Start Time

Stop Time

Duration

IPAddress |

Ki«»sss«a:Baaas»K|

2012-06-1906:28:552'

I 44d6h(tan43s

xlxxa

72.78.191.60 I

2012-03-04 13:20:472

2012-06-19 05:46:302 1 I06dl2hlm30s

108.36.71.163 1

2011-12-21 17:36:14Z

2012-03-04 11:41:402 Ii 73d 18h 5ra26s

108.16.120.35

Exhibit J

IN THE

SUNDANCE VACATIONS,

COMMONWEALTH

OF

INC.,

PENNSYLVANIA

IN THE
OF

COURT

LUZERNE

OF

COMMON PLEAS

COUNTY

Plaintiff,
CIVIL ACTION

-

LAW

vs

T-3

,: •¦.•¦5

ALBERT WHITEHEAD,

Defendant .

DEFENDANT'S

No.

MOTION

8006-CV-2012

r-5

FOR JUDGMENT

^?
^

ON LIABILITY AGAINST HIM

&

Unable
affect

to

the

defend

conduct

regarding

protected

Defendant

Albert

Court

that

Plaintiff

retired

senior

to

his

forego

.See

page

right
as

Defendant

Affidavit
to

direct

Facebook

stop

is

of

the

not

do

generally

unable

settlement

own

their

or

parties,

this

He

is

in

to

favor

and

travel,

on

alleged

Court.

has

agreed

person's

from

another

Facebook

to

direct

protected

Plaintiff,
defamation

page,

third

speech

knowing
or

of

against

an

another

this

unable

rights

from

to

Honorable

District

agreement

control

anything.
immune

third

enforce

States

statements

hereto.

exercising
to

United

to

Facebook

action

to

efforts

and

("Plaintiff")

action

citizen

by

moves

this

Inc.

the

make

does

Facebook

in

this

to

attached

parties

Facebook

part

parties

("Defendant"),

brought

in

a

on

entered

agreement

Plaintiff's

third

made

Vacations,

Plaintiff

Defendant,

court.

speech

be

against

unknown

Whitehead

Sundance

settlement

Facebook

of

judgment

Defendant.

himself

or

that

tortious

interference

person

who

owns

criticisms
against

of

Mr.

designed

for

posting web pages,

has

not

the

and

is

the

Facebook

page

Plaintiff.

Whitehead,

sued

Facebook

allegedly

Further prosecution

knowing

to punish him outside

of

these

the

facts,

permissible

the

publishing'

of

is

or

this

claim

abusive

purposes

of

and

legal

process .

In support

1.

United

parties
States

Pennsylvania.

person's

Facebook

On

Defendant

(the

District

or

On

or

about

May

about

a

claims

2007

filed

in

District

of

lost

with

statements

6,

Agreement")

lawsuit

Eastern

interference

against

February

Settlement

the

Plaintiff

14,

June

any posting

contemporaneous

resolve

the

for

follows:

complaint

previous

2012,

business

contractual

made

Defendant,

to Plaintiff's

to

retained

Court

as

on

another

page.

undersigned

he

a

Defendant's

filed a Response/Rebuttal
3.

Action

from

tortious

from

filed a

breached

"Federal

stemming

alleged

arising

2.

Plaintiff

Additionally,

from

relations

Defendant demonstrates

2012,

that

agreement

the

damages

25,

alleging

settlement

the

this Motion,

On April

Defendant

between

of

this

25,

2012,

matter
with

undersigned

as

this

counsel,

revocation

to

his

lawyer

revocation

of

the

settlement

in

the

pro

se,

Complaint.
Defendant

the

retained

Defendant

matter.

believed

federal

without

acting

stopped

Defendant,

this

lawsuit

knowing

has

that

his

before

written

served
his

the

as

a

former

lawyer may not

have

forwarded

that

revocation

to

the

Plaintiff's

counsel .

4.

On

preliminary
Federal
time,
two

21,

2012,

injunction" in

Action

this

Settlement

Defendant

was

Plaintiff

Court

filed

seeking

Agreement

against

complying1

with

fully

a

petition

enforcement
Defendant.

the

Agreement

of

for

the

By

this

for

over

months .
5.

On

Plaintiff's
conceded
21,

September

19,

preliminary

to

2012,

October

the

entry

2012,

after

injunction
of

this

Honorable

This

Court

oral

petition

the

injunction

Court

granted

and

argument

after

submitted

Plaintiff's

on

Defendant

on

September

petition

for

injunction.

5.

but

added

with
the

language

Sundance
"Boycott

Sundance

7. Defendant,

Facebook

Affidavit

8.
equitable
and

a

to

do

this

claims

against

"tortious

2

in

Defendant

directing
page."

attached hereto

time.

cannot

act.

hereto

as

Defendant

interference"

claim

Exhibit

to

October

remove

23,

2012

"A") .

unknown

third

October

parties

25,

2012

"B" ) .

requests

this

cooperate

Facebook

Defendant's

Exhibit

in

as

"shall

(See

direct

(See

Defendant

entered

Defendant.

that

Vacations"

any

be

injunction conceded by Defendant

Inc.

however,

attached

At

directing

Vacations,

Amended Order at p.

or

entered an

action

is

that
in

without

which

judgment

on

all

favor

of

Plaintiff

funds

to

challenge

cannot,

as

a

matter

of

Pennsylvania

law,

be

refused

to purchase

of

posting

any

controlled by a

9.

As

interference
Defendant

this

absent

or services
by

proof

that

any

from Plaintiff

Defendant

on

a

as

to

Plaintiff's
await

proof

end this

Defendant

Honorable

action in favor of

a result

Facebook

Court

claim
of

such

pursuit

Albert

damages

damage

for

before

tortious

the

judgment

respectfully

on

and against Defendant.

John G.

E>^an

Matthew

J.

Elliott

Greenleaf

39

Public

.
2,

2 012

y

//

Carmody

Square,

Wilkes-Barre,
(570)

Court.

requests

liability

i.M'eyy

November

page

of him.

Whitehead

grants

Plaintiff

for

Respectfully submitted,

DATED:

person

third party.

must

seeks

goods

comments

such,

WHEREFORE,

that

of

sustained

& Dean

Suite

PA 18701

371-5290

Attorneys

for Defendant

1000

in

this

EXHIBIT

"A''

SUNDANCE VACATIONS, INC., :

IN THE COURT OF COMMON PLEAS OF
LUZERNE COUNTY

Plaintiff
vs .

CIVIL ACTION - LAW

ALBERT WHITEHEAD,
Defendant

NO.

12-CIV-8006
rvj

1^.3

I"

r>
^ -- _:
CO

AMENDED ORDER

o^r"-

—J

AND NOW, this 23rd day of October, 2012, at /#¦£* a.m., upon ¦
consideration of Plaintiff Sxmdance Vacations, Inc's Petition for Preliminary
Injunction and supporting memorandum as well as testimony/argument introduced

at the hearing this date,

IT IS HEREBY ORDERED that Defendant Albert-Whitehead is enjoined
from existing and future breaches of the Settlement Agreement dated February 6,
2007 pending further Order of Court.

Further, all posts and activity concerning

-Sundance Vacations, Inc. in any manner made by Defendant Albert Whitehead
posing as "John Flannagan" or using any other pseudonym on Facebook or any
other platform shall be removed immediately.

Fifing ID: 1370267
2012-08006-0073 Order with Rule 236
Luzerne Cgunty Civil Records
10/23/201 2 3:27:28 PM

v

Further, Defendant Albert Whitehead shall not interfere with the efforts of
i

Sundance Vacations Inc. to remove the posts ancflshall cooperate with" Sundance
Vacations Inc. in directing Facebook to remove the'"Boycott Sundance Vacations"
page.

Security shall be entered in the amount of $100.00 (one hundred dollars) in
accordance with Pa.R.Civ. P. 1531(b)
The Prothonotary is directed to forward a copy of this order to all parties

pursuant to Pa. R.C.P. 236.

BY THE

RANTONI

EXHIBIT

XXB"

IN TKS COMMONWEALTH OF PENNSYLVANIA
SUNDANCE VACATIONS,

INC.,

IM THE COURT OF COMMON PLEAS
OF LUZEHME

COUNTY

Plaintiff,

CIVII. ACTION - LAW
vs.

ALBERT WHITEHEAD,
Defendant .

:

No.

e006-CV-2012

AFFIDAVIT OF ALBERT WHITEHEAD

NOW

COMBS,

the

undersigned,

being

duly

sworn,

deposes

and

says:

L,

On

April

("Plaintiff")

25,

filed

a

alleging that

I

(the

Action

"Federal

Plaintiff

States

Additionally,
contractual

2.

Plaintiff

complaint

breached

stemming

District

2012,

a

against

February

Settlement

from

Court

a

6,

the

Plaintiff

me,

2007

alleges

Albert

between

lawsuit

Eastern

Vacations,

filed

District

tortious

in

of

Inc,

Whitehead

settlement

Agreement")

previous

for

Sundance

agreement

myself

the

and

United

Pennsylvania.

interference

with

relations.

On

preliminary

September
injunction

21,
in

2012,
this

Plaintiff

Court

filed

seeking

a

petition

enforcement

of

for
the

Federal Action Settlement Agreement.
3.

On

Pia-intiff s
to

entry

October
preliminary

of

the

19,

2012,

injunction

injunction,

after
petition

this

oral
and

Honorable

argument

after

on

I

conceded

Court

granted

Plaintiff's petition

for injunction.

the Court's October 19,

4.

remove

with

the

5.

at p.

I

"Boycott

6.

cannot,

The

"Boycott

whose

As

powers

Vacations"

I

a

to

§

Facebook

page

because

Sundance Vacations"

result,

page

down.

4904

I

am

not

declare

best

I

do

not

Facebook

that

of

Sworn

to

I

"shall

Facebook

(See October

to

was

ray

the

have
to

to
19,

remove

not,

nor

this
am

1

foregoing

was

nor

created by a

do

I

have

any

creator.

the

take

knowledge

page

aware,

authority,
the

capability

"Boycott

statements

and made

are

pursuant

Sundance

true

to

18

and

Pa.

relating to unsworn falsification to witnesses.

Albert

rae.

directing

direct

identity of this page's

direct

the

in

I

this page.

identity

to

hereby

correct

C.S.A.

the

Inc.

that

page."

Vacations"

creator of

knowledge of

ordered

Vacations"

however,

a

third-party

7.

Sundance

copy of

attached hereto.

Court

Vacations,

and correct

2) .

Sundance

currently,

this

Sundance

"Boycott

2012 Order

or

2012 Order is

Additionally,

cooperate

A true

ehead

and subscribed before

J^pHay u£. October, 2012.

NOX
NOTARIAL SEAL
RICHARD BAYE
Nowy Public
PHILADELPHIA Cin PHILADELPHIA CN-TY

iviy Commission spires May 7, jU^

a^M"1^^

IN

SUNDANCE

THE

VACATIONS/

COMMONWEALTH

OF

PENNSYLVANIA

IN THE

INC.,

OF

COURT

LUZERNE

OF

COMMON PLEAS

COUNTY

Plaintiff,
CIVIL ACTION

LAW

vs .

ALBERT

WHITEHEAD,

Defendant ,

No.

CERTIFICATE

I,
be

Matthew

served

on

Carmody,

this

Motion

for

and/or

counsel

mail

J.

day,

Judgment

addressed

of
as

a

On

OF

hereby
true

record

via

SERVICE

certify

and

Liability

8006-CV-2012

that

correct

and

have

copy

Against

e-mail

I

Him
via

of

to

U.S.

caused

to

Defendant's

all

parties

first

class

follows:
Daniel

T.

Brier,

Donna Walsh,

MYERS,
425

Esquire

Esquire

BRIER & KELLY,

Spruce

Scranton,

Street,
PA

LLP""

Suite

200
\— -c

18503

2=
O
i

3=»

Matthe^ J.

DATED:

November

2,

2 012

Carm^ji^

U3

-<

Sign up to vote on this title
UsefulNot useful