Ht CSbe 31(35/ SUPERIOR COURT OF THE DISTRICT OF COLUMBIA SEARCH WARRANT TO: CHIEF OF POLICE OR ANY OTHER LAW ENFORCEMENT OFFICER (Speci?c law Enforcement Of?cer or Classi?cation ofOtTicer oflhe Metropolitan Police Department or other Authorized Agency) AFFIDAVIT, herewith attached, having been made before me by Detective Gremrv Pemberton 1 that he has probable cause to believe that in the premises controlled by DreamI-Iost Inc., there is now being concealed property. namely stored electronic communications including_but not limited to digital ?les. records, messages. and photoaraphs as set forth more fully in Attachments A and 8, attached hereto and incorporated herein. WHICH IS in violation of DC. Code 5 22-1322 and as I am satis?ed that there is probable cause to believe that the property so described is being concealed in the above designated electronic storage and remote computing service and that the foregoing grounds for issuance of the warrant exist, YOU ARE HEREBY AUTHORIZED, within days of the date of issuance of this warrant, to execute this warrant by emailing or faxing this warrant to the designated electronic storage and remote computing service for execution of a search of its electronic ?les for the electronic data speci?ed, and if the electronic data be found there, DreamHost, IS ORDERED TO ASSIST LAW ENFORCEMENT AND PRODUCE SUCH ELECTRONIC DATA, as detailed in Attachments A and B, to Detective Greggon?: Pemberton, and AUSA John Borchert YOU ARE FURTHER COMMANDED to ?le a copy of this warrant and return with the Court on the next Court %y/a?er its execution. - 7 22 W- Issued I day of I 20 I Judge, Superior Court ofthe District of Columbia RETURN 1 received the above warrant on 20 and have executed it as follows: On 20 at M., I electronically submitted the warrant to DreamHost, and requested that the provider execute a search of its electronic ?les and produce the requested information and electronic data (as detailed in the Attachments, attached herewith, to the undersigned law enforcement of?cer on or before The undersigned of?cer will supplement this return with an inventory of the information and electronic data produced by DreamHost, within days. Executing Officer Subscribed and sworn to before me this day of 20 Judge, Superior Court ofthe District of Columbia '15 ?Er/g! ATTACHMENT A Property to Be Searched This warrant applies to information associated with that is stored at premises owned, maintained, controlled, or operated by DreamHost, a company headquartered at 707 Wilshire Blvd, Suite 5050, Los Angeles, California 90017. 976:" area. 77$ 3 Lv? Lg ATTACHMENT Particular Things to be Seized I. Information to be disclosed by DreamHost To the extent that the infomiation described in Attachment A is within the possession, custody, or control of DreamHost, including any messages, records, ?les, logs, or information that have been deleted but are still available to DreamHost, or have been preserved pursuant to a request made under 18 U.S.C. 2703(f), DreamHost is required to disclose the following information to the government for each account or identi?er listed in Attachment A: a. all records or other information pertaining to that account or identi?er, including all ?les, databases, and database records stored by DreamHost in relation to that account or identi?er; b. all information in the possession of DreamHost that might identify the subscribers related to those accounts or identifiers, including names, addresses, telephone numbers and other identi?ers, e-mail addresses, business information, the length of service (including start date), means and source of payment for services (including any credit card or bank account number), and information about any domain name registration; c. all records pertaining to the types of service utilized by the user, d. all records pertaining to communications between DreamHost and any person regarding the account or identi?er, including contacts with support services and records of actions taken. II. Information to be seized by the government All information described above in Section I that constitutes fruits, evidence and instrumentalities of violations of DC. Code 22-1322 involving the individuals who participated, planed, organized, or incited the January 20 riot, relating to the development, publishing, advertisement, access, use, administration or maintenance of any website enumerated in Attachment A, including: 1. Files, databases, and database records stored by DreamHost on behalf of the subscriber or user Operating the website, including: a. programming code used to serve or process requests made via web browsers; b. HTML, CSS, JavaScript, image ?les, or other ?les; 0 lit We emit ?7 0. HTTP request and error logs; d. SSH, FTP, or Telnet logs showing connections related to the website, and any other transactional information, including records of session times and durations, log ?les, dates and times of connecting, methods of connecting, and ports; c. PostgreSQL, or other databases related to the website; f. email accounts and the contents thereof, associated with the account; 2. Subscriber information related to the accounts established to host the site enumerated in Attachment A, to include: a. Names, physical addresses, telephone numbers and other identi?ers, email addresses, and business information; b. Length of service (including start date), types of service utilized, means and source of payment for services (including-any credit card or back account number), and billing and payment information; c. If a domain name was registered on behalf of the subscriber, the date that the domain was registered, the domain name, the registrant information, administrative contact information, the technical contact information and billing contact used to register the domain and the method of payment tendered to secure and register the Internet domain name. DreamHost shall deliver the information set forth above via United States mail, courier, or email to the following: John W. Borchert Assistant US. Attorney US. Attorney?s Of?ce for the District of Columbia 555 Fourth Street, NW. Washington, DC. 20530 Email: John.Borchert@usdoj .gov Telephone: 202-252?7679 {Uzi} 5-