Case 8:13-mj-01744-WGC Document 25 Filed 10/31/16 Page 1 of 5

AD 93 (Rev. 12109) Se.1tch and Seizure Warrant

UNITED STATES DISTRICT COURT
for the
District of Maryland

)

In the Malter of the Search of

)

(Briefly describe the property to be searched
or identify the person by name and address)

The computers that access 'Websites '-23" as described
in Attachment A. incorporated herein

) Case No.
)

\;,

-

w. c...

\ "\ "'"'

)
)

SEARCH AND SEIZURE WARRANT
To:

Any authorized law enforcement officer

An application by a federal law enforcement officer or an attorney for the government requests the search
of the following person or property located in the
Southern
District of
Maryland and elsewhere
(identify the person or describe the property

to be searched and give ils loco/ion):

see Attachment A. incorporated herein.

The person or property to be searched, described above, is believed to conceal

(idmrify ,he person or describe the

proper~r to be seiud):

see Attachment B. incorporated herein.
I find that the affidavit(s), or any recorded testimony, establish probable cause to search and seize the person or
property.
YOU ARE COMl\IANDED to execute this warrant on or before

0....,

""-s.-.
(not

o

5
10

'-=,~__

__

exteed 14 days)

yJ at any

in the day1ime 6:00 a.m. to 10 p.m.

time in the day or night as I find reasonable cause has been
established.

Unless delayed notice is authorized below, you must give a copy of the warrant and a receipt for the property
'aken to the person from whom, or from whose premises, the property was taken, or leave the copy and receipt at the
place where the property was 13ken.

The officer executing this warrant, or an officer present during the execution of the warrant, must prepare an
inventory as required by law and promptly return this warrant and inventory to United States Magistrate Judge
Duty Magistrate
(name)

ii I find that immediate notification may have an adverse result listed in 18 U.S.c.!i 2705 (except for delay
of trial), and authorize the officer executing this warrant to delay notice to the person who, or whose property, will be
searched or seized (che-ck the appropriate box) tJ for
30
days (not to exceed 30).

o
Date and time issued:

City and state:

'5--'-\

until, the facts justifying, the later specific date of

"2.1.. '2._' ~

Greenbelt. Maryland

.

,

\ .....,'~.•.
e.-

C__ ~~

Judge's sig;lawre

_
\

William Connelly, Chief U,S. Magistrate Judge
Printed nnme and title

 Case 8:13-mj-01744-WGC Document 25 Filed 10/31/16 Page 2 of 5

AO 93 (Re\'. 12/O'J) Search anJ Sei::lI.reWa"anf (page 2)

Return

Ca'ie No.:

Date and time warrallt executed:

/3 l( (IIC-eya-.
Im'entmy rna e in the presence 0/:

id

g

lJd"UA/

g

I~"'?'~

fr

(1
Im'entory of the property taken and flame a/any person(s) seized:

/) ••..-t-t

frm

t(--fwr-t-1

tOI"r+et-5 ~ •...
t ,UU"cj

8h

/-13

1/::, ••",( g/5I"'.>.

Certi

I dec/are under penalty o/perjury
warrant to the designated judge.

lea/jlJII

that this inventory is correct and was returned along with the original

 Case 8:13-mj-01744-WGC Document 25 Filed 10/31/16 Page 3 of 5

ATTACHMENT A-PAGE

1 OF2

Locations to he Searched
This warrant authorizes the use of a network investigative technique ("NIT") to he deployed
on the computer server described below, obtaining infornlation described in Attachment B from the
activating computers described below.
The computer server is the server operating the Tor network child pornography

websites

referred to herein as Websites I -23, as identified by their respective Tor URLs in the foIlO\\ing chart,
which will be located at a government
The activating computers

facility in the District oft .•laryland.

are those of: (I) any user or administrator

who logs into any of

Websites I -23 by entering a username and password; (2) any user who accesses any section of any of
Websites I-23 where child pornography may be accessed; and (3) any user who uploads a file to any
of Web sites 1-23.
The government will not employ this network investigative
warrant is authorized, without further authorization.

97

technique after 30 days after this

 Case 8:13-mj-01744-WGC Document 25 Filed 10/31/16 Page 4 of 5

ATTACIli\1Ei\'T A -PAGE 2 OF 2
Locations to he Scarchcd

Website #
1

2
3
4
)

6
7
8

9
10
11
12
13
14
15
16
17
18
19

20
21
22

23

98

 Case 8:13-mj-01744-WGC Document 25 Filed 10/31/16 Page 5 of 5

ATT ACIIMENT
Information

B

to he Seized

From any "activating" computer described in Attachment A:
I.

the "activating" computcr's actual IP address, and the datc and time that the NIT detennines
what that IP address is;
a unique identiiicr (c.g., a series of numbcrs, lettcrs, and/or special characters) to distinguish
data from that of other "activating" computers, that will be scnt with and collected by the NIT;

3.

the type of operating systcm rWlIling on the computer, including type (c.g., Windows),
version (e.g., Windows 7), and architecture (e.g., x 86);

4.

infornlation about whether thc NIT has already becn delivered to the "activating" computcr;

5.

the "activating" computer's Host Name;

6.

the "activating" computer's media access control ("MAC") address;

that is evidence of violations of 18 U.S.c.
u.s.C.

SS 2251(d)(I)

S 2252A(g),

Engaging in a Child Exploitation Enterprise; 18

and or (e), Advenising and Conspiracy to Advenise Child Pornography; 18 U.s.c.

SS

2252A(a)(2)(A) and (b)(l), Rcceipt and Distribution ol~and Conspiracy to Rcceive and Distribute Child
Pornography; and/or 18 U,S.c.

S 2252A(a)(5)(B)

and (b)(2), Knowing Access or Attempted Access With

Intent to View Child Pornography.

99