Emergency Petition for Contempt Sanctions

SUNDANCE VACATIONS, INC.

Plaintiff,

v.

ALBERT WHITEHEAD,

Defendant.

IN THE COURT OF COMMON

PLEAS OF LUZERNE COUNTY

NO. 12-CV-8006

PLAINTIFF'S EMERGENCY PETITIONFOR CONTEMPT SANCTIONS AND FOR

ORDER COMPELING COMPLIANCE WITHOCTOBER 23, 2012 AMENDED ORDER

C3 .'~

¦ - i

1? ' ¦ .,

1 J

Plaintiff Sundance Vacations, Inc. ("Sundance Vacations"), by and

through its undersigned counsel, presents this emergency petition for relief arising

from Defendant Albert Whitehead's continuing violation of this Court's October

23, 2012 Amended Order and states the following in support thereof:

1 . Sundance Vacations initiated this action on April 25, 20 12

alleging, inter alia, that Mr. Whitehead breached his obligations under the February

6, 2007 Settlement Agreement by posting defamatory remarks concerning

Sundance Vacations on various internet sites and by posting disparaging messages

concerning Sundance Vacations on a Facebook page titled "Boycott Sundance

Vacations" (hereinafter "the 'Boycott' page"). (Compl. tl 9-12.) Sundance

Vacations also asserted a claim against Mr. Whitehead for tortious interference

with its contractual relationships. (Id HH 13-19.)

2. On September 21, 2012, Sundance Vacations filed a Petition for

Preliminary Injunction seeking to enjoin Mr. Whitehead from existing and future

breaches of the Settlement Agreement and specifically to compel the removal of

the "Boycott" page.

3. At the preliminary injunction hearing on October 19, 2012, Mr.

Whitehead, through his counsel, admitted that he administered and posted

messages on the "Boycott" page using the false name "John Flannagan." (See Tr.

ofProceedings on October 19, 2012 at 7, 11.3-4; id at 7, 11.15-16.) (The transcript

of the October 19, 2012 proceeding is attached hereto as Exhibit "A.") Unable to

deny or defend against the allegation that he administered and posted disparaging

messages on the "Boycott" page in violation of the Settlement Agreement, Mr.

Whitehead conceded to entry of the request for a preliminary injunction. (Id at 4,

11.18-19.)

4. By Order dated October 23, 2012, this Court preliminarily

enjoined Mr. Whitehead from existing and future breaches of the Settlement

Agreement. (A true and correct copy of the October 23, 2012 Amended Order is

attached hereto as Exhibit "B.") In addition, the Court Ordered that "all posts and

activity concerning Sundance Vacations, Inc. in any manner made by Defendant

Albert Whitehead posing as 'John Flannagan' or using any other pseudonym on

Facebook or any other platform shall be removed immediately," (See Order at 1 .)

The Court further directed Mr. Whitehead to cooperate with Sundance Vacations

Inc. in directing Facebook to remove the 'Boycott Sundance Vacations' page."

(Id at 2.)

5. Mr, Whitehead has refused and continues to refuse to comply

with the October 23, 2012 Amended Order,1

1 The undersigned counsel for Sundance Vacations contacted Mr. Whitehead'scounsel on October 24, 2012 to request confirmation that Mr. Whitehead removedall posts and activity that he made concerning Sundance Vacations on Facebook orany other platform and that he directed Facebook to remove the "Boycott" page.(A true and correct copy of the October 24, 2012 letter to Mr. Whitehead's counselis attached hereto as Exhibit "C") Mr. Whitehead's counsel did not respond to theletter. In a second attempt to secure Mr. Whitehead's compliance with the October23, 2012 Amended Order, the undersigned counsel for Sundance Vacations wroteto Mr. Whitehead's counsel on November 1, 2012 to request that Mr. Whiteheaddirect Facebook to remove the "Boycott" page consistent with the Court's Order.(A true and correct copy of the November 1, 2012 letter to Mr. Whitehead'scounsel is attached hereto as Exhibit "D.") Again, no response was received.

6. Mr. Whitehead has not directed Facebook to remove the

"Boycott" page and the page remains active. Nor has he removed posts that he

made on other internet sites.

7. Since the Order was entered on October 23, 2012, discovery

revealed that Mr. Whitehead posted disparaging remarks concerning Sundance

Vacations on other internet sites. Specifically, Mr. Whitehead posted disparaging

messages concerning Sundance Vacations under the display name "Dolores" on

http://sundancevacationsccp.blogspot.com. http ://naskiewicz2.biogspot.com, and

http://sundancevactionsmanipulation.blogspot.com using an AOL email address,

[email protected]. associated with his home. (Copies of the records

produced by AOL and Google in response to requests for information relating to

Mr. Whitehead's email and internet activity are attached hereto as Exhibits "E" and

"F," respectively.) None of the postings made by Mr. Whitehead using the

pseudonym "Dolores" have been removed.

8. This activity forms the basis for Sundance Vacations' Petition

for Contempt Sanctions which was filed on December 11, 2012. A Rule To Show

Cause was issued on that date scheduling a hearing on the Petition for Contempt

Sanctions for January 22, 2013 at 9:30 a.m.

9. After the Petition for Contempt Sanctions was filed, Sundance

Vacations received records from Facebook in response to the subpoena duces

tecum which was served on October 24, 2012, (A true and correct copy of the

subpoena served on Facebook is attached hereto as Exhibit "G.") The subpoena

compelled Facebook to produce, inter alia, records identifying the administrators

of the "Boycott" page and the internet protocol ("IP") addresses relating to activity

on the "Boycott" page. The responsive records that were produced by Facebook

on December 13, 2012 (copies are attached as Exhibit "H") confirm that Mr.

Whitehead continued to administer the "Boycott" page using the name "Mary

Smith" after the Court entered the October 23, 2012 Order preliminarily enjoining

him from, inter alia, posting disparaging messages concerning Sundance Vacations

and requiring him to cooperate in securing the removal of the "Boycott" page.

Specifically, the Facebook production establishes that the "Boycott" administrator

using the email address marvsmith4 1 [email protected] logged onto the "Boycott"

page from the Internet Protocol address ("IP address") assigned by Verizon to Mr.

Whitehead's home — 72.78.191.60 — beginning on October 17, 2012 and

continuing until at least November 16, 2012 (the cutoff date established by

Facebook for the production). (Compare Facebook log in logs attached as Exhibit

"H" with response to subpoena served on Verizon which is attached to Sundance

Vacations' Petition for Contempt Sanctions as Exhibit "I.")

10. Even more troubling, Mr. Whitehead continued to administer

the "Boycott" page under the name "Mary Smith" after he moved for a judgment

of liability against himself based on the false premise that he had stopped posting

on the "Boycott" page and was not aware of the name of the current administrator

of the page. (See Def.'s Mot. for J. ofLiability H 3, 7, 7; see also Affidavit of

Albert Whitehead (attached to Def.'s Mot. for J. ofLiability as Exhibit "B") fflf 5-

7.) (A copy ofMr. Whitehead's Motion for Judgment of Liability (with attached

Affidavit) is attached hereto as Exhibit "J.") In fact, Mr. Whitehead logged in as

the administrator of the "Boycott" page as "Mary Smith" on October 26, 2012 —

the same day that he signed the Affidavit under penalty ofperjury swearing that he

had no ability to control the "Boycott" page. (See Exhibit "H.")

1 1 . Mr. Whitehead has intentionally and willfully violated this

Court's October 23, 2012 Amended Order.

12. Given the substantial, ongoing and irreparable harm caused by

Mr. Whitehead's contemptuous acts — the same irreparable harm that prompted

the preliminary injunction imposed on October 23, 2012 — Sundance Vacations

respectfully requests an expedited hearing on the instant Petition for Contempt

Sanctions.

WHEREFORE, Sundance Vacations respectfully requests that this

Court enter an order: (1) declaring that Mr. Whitehead is in contempt of this

Court's October 23, 2012 Amended Order; (2) requiring Mr. Whitehead to pay a

daily file of $500.00 for each day that he remains in violation of the Court's

October 23, 2012 Amended Order or, in the alternative, that he be confined to the

Luzerne County Jail until he fully complies with the Court's October 23, 2012

Amended Order; (3) requiring Mr. Whitehead to reimburse Sundance Vacations

for the attorneys' fees and costs incurred in seeking to compel his compliance with

the Court's October 23, 2012 Amended Order; and (4) such other and further relief

as the Court deems appropriate in the circumstances.

Respectfully submitted,

l>\\J)(UXi--Daniel T. Brier

Donna A. Walsh

Attorneys for Plaintiff,

Sundance Vacations, Inc.

Myers, Brier & Kelly, LLP

425 Spruce Street, Suite 200

Scranton, PA 18503

(570)342-6100

Date: December 20, 2012

VERIFICATION

I, John Dowd, President and CEO of Sundance Vacations, Inc.,

hereby certify that the facts contained in the foregoing Petition for Contempt

Sanctions are true and correct to the best ofmy knowledge, information and belief

and are made subject to the penalties of 18 Pa. C.S.A. § 4904 relating to unsworn

falsification to authorities.

John Dowd

¦HDate: l^Jio /S~

IN THE COURT OF COMMON PLEASOF LUZERNE COUNTY, PENNSYLVANIA

SUNDANCE VACATIONS, INC. ,

Plaintiff

vs

ALBERT WHITEHEAD,

Defendant

CIVIL ACTION - LAW

NO. 8006-C of 2012

TRANSCRIPT OF PROCEEDINGS

BEFORE:

THE HONORABLE FRED A. PIERANTONI, IIILuzerne County Courthouse200 North River StreetWllkes-Barre, Pennsylvania 18711

Comenclng Friday, October 19, 2012

APPEARANCES:

ON BEHALF OF THE PLAINTIFF:DONNA WALSH, ESQ.

-- ON BEHALF OF THE DEFENDANT:HATTHB/ J. CARMODY, ESQ.

tore sheets COPYPage2to2of2

'r-i

&

THE COURT: We're here on Sundance Vacations,

Inc. versus Albert Whitehead, number 8006 dvll of

2012. PlalntiffSundance Vacations filed a

petition for preliminary injunction.

HS. WALSH: We did. Your Honor.

THE COURT: Let me have you state your names

of record.

MS. WALSH: Donna Walsh, Your Honor, on behalf

of the Pialntlffe Sundance Vacations, Inc.

MR. CARMODY: Matt Carmody on behalf of the

Defendant Albert Whitehead.

THE COURT: I understand there may be some

potential resolution to some Issues this morning;

Is that correct?

MS. WALSH: That's right. Your Honor. If I

could briefly give the background.

THE COURT: Go right ahead, please.

MS. WALSH: We filed our petition back on

September 20, 2012 asking for an injunction to

compel the Defendant, Albert Whitehead, to comply

with the terms of the settlement agreement that was

reached back in 2007. We specifically asked in our

wherefore clause of our petition for an order,

again, enjoining him from further breaches,

compelling him to discontinue the page on Facebook

that he's been administering in violation of the

settlement agreement. That is a page called

Boycott Sundance Vacations which Is dedicated to

the purpose of encouraging people not to do

business with my client

Mr. Whitehead had agreed in 2007 that he would

not do that, he would not post any messages

anywhere In any public forum that would disparage

my dlent. He also agreed he wouldn't encourage,

assist or coerce or Induce others to post messages.

He's been violating that agreement for years

by administering, moderating, creating, endorsing

Inducing others to post on this page called Boycott

Sundance Vacations. We sought In our injunction

papers and order enjoining him from further

breaches and preventing him from doing It again and

also compelling him to take down this unlawful

page.

Since that time. Judge, there has been no

answer filed to our petition. So under Rule

206.7(a} all of the factual allegations In our

petition should be deemed admitted.

Since that time we tried to take Mr.

Whitehead's deposition. We noticed his deposition

for October 10th in my office. He failed to show

1 up. He's not here today. He's offered nothing to2 rebut or to refute these factual allegations.

3 We would ask for an order compelling him to4 comply with the terms of the agreement, ratifying5 the terms of the agreement, enjoining him from

6 further breaches, and most importantly, compelling7 him to take down, to discontinue, to remove the

0 unlawful posts that he, himself, made and the ones9 he encouraged other people to make.

10 Based on these changed events since the time11 we filed our petition, we prepared a revised

12 proposed order which I would like to hand up to the13 Court.

14 THE COURT: I will take It under consideration19 for review and hear from Attorney Carmody.

16 MR. CARMODY: This Is the original order that17 was attached with the petition that was tiled onIB September 20th. Defendant Albert Whitehead, we

19 concede the Injunction. We ask the Court to sign20 the original order that was attached to the

21 petition. We told Plaintiffs counsel early

22 yesterday that Plaintiff [sic] was not contesting

23 it, the Plaintiff [sic] was not going to be

24 present, he was not opposing it, he was not going25 to present evidence/witnesses in opposition. So

resheets

1 with that, we respectfully request the Court to2 sign the order that was attached .

3 At 9:00 last night I received a revised order4 which I didn't receive until I came Into work this8 morning. In that order, which Is quite extensive,6 It details the Rules of Civil Procedure on7 omissions of not answering petitions which, I

8 believe. Is redundant to the rules. It references9 the 2007 settlement agreement In federal court,

10 again, redundant. All the language Is referenced11 — of the settlement agreement Is referenced In the12 original order.

1 3 The original order says that the Defendant has14 to comply with the 2007 agreement. So now to have18 a new order regurgitating all that stuff Is

18 redundant. In addition to all that, there is also17 the statements of the elements of a preliminary18 injunction. It goes without saying that If you

19 sign this original order the Injunction Is granted

20 and the Plaintiff has met their burden of proving21 the elements of the PC - or of an injunction. But22 to state that In this order I think Is unnecessary.

23 But in addition to that. It goes beyond the

24 scope of the petition. Paragraph 4 of this new

25 order lists a dozen, 15, 1 don't know, a dozen

COPYPafleZtoSoflS

6names or so new pseudonyms that they're alleging

the Defendant had on the Internet Nowhere In thepetition, nowhere In the brief In support of the

petition Is any reference to any of these names.The only name they mention Is John Rannagan andthat's what the original petition asks for, allposts made by John Flannagan and other pseudonymsto be taken down and removed.

I dont want to present this as evidencebecause it's a copy of my Facebook page but I wenton the Sundance website and I went from present dayto November 2011 and there's not one post of JohnFlannagan.

THE COURT: Any opposition, counsel, to my

review of that document?

MS. WALSH: I have not seen it.

THE COURT: Take a moment.

MR. CARMODY: If you remove a name fromFacebook ~ I'm not sure If you are aware of how itworks — if a person made various posts on other

pages throughout the years but if you remove thataccount not only does the account remove, the nameremoves but every single post that that person everput down is also deleted. So we're looking at twoyears worth of Facebook messages and there is not

one John Flannagan,

MS. WALSH: No objection.

MR. CARMODY: John Flannagan has been removedfrom Facebook. He's in compliance with the 2007settlement agreement and now he's in compliancewith this proposed order that was attached to theSeptember petition.

In addition to that, this new revised orderthat was sent at the 11th hour talks about Mr.Whitehead having to go on various other websitesand do various certain things. It's beyond thescope of the petition. Paragraph 7 of his revisedcomplaint accuses for the first time in the

petition that he created this Facebook page.

My dlent admits that he was an administrator,that there were postings, and he has since removedthose In compliance with the settlement agreementIn compliance with the original order. Now they'resaying that he created it and now he's obligated —this new order is now obligating him to take down apage which he does not have the authority to or thepower to do so. In addition, it's asking ~ it'sordering him to tell third parties what to do and

to get third parties to act In a certain manner.Ifs ridiculous. It's Impossible. You can't put

1 Mr. Whitehead in a position where now he's2 responsible for the actions of third parties.3 This petition - in addition to that, it4 orders sanctions. This is beyond the scope of an5 Inunction hearing. If he's in violation of the6 injunction then the Plaintiff has every right to7 come back to you and say they're in violation and8 here Is the appropriate sanctions we think you9 should apply.

10 This revised order « again, Judge we told11 oounsel yesterday morning that we're not

12 contesting, that we were conceding it, and we ask13 you to sign it. Now, in addition to that, lefs

14 try to dump some more stuff on It since we are not18 going to be opposing It and that's what we're here16 for today.

17 MS. WALSH: May I respond? Respectfully,16 we've been discussing a proposed order, I'm sure19 Mr. Carmody wouldn't dispute this, since Monday of20 this week. So to say, yes, the first time he saw21 this draft of the order was yesterday but we've22 submitted a draft -•

23 MR. CARMODY: It was today.24 MS. WALSH: -- similar to this earlier this28 week and we've been in negotiations. Respeetftiliy,

1 we need a strong order to prevent this from2 happening again. We reached an agreement In 20073 where he promised he wouldn't post messages under4 foke names. He, by not answering, by not refuting8 the allegations In this petition admits he's done6 Just that.

7 We allege In Paragraph 7 of our petition for6 preliminary injunction that he used fake names and9 pseudonyms to post on Facebook. We seek In the

10 wherefore clause of our petition an order11 compelling him to discontinue the page which12 Includes his posts under fake names. That*s the13 relief we sought on September 20th. Ifs the14 relief that he hasn't filed any opposition to.15 Respectfully, Judge, ifs the relief that we're16 entitled to under the settlement agreement from17 2007.

18 THE COURT: The original order that was19 prepared does call for no more posing as John20 Rannlngan or using any other pseudonym on Facebook21 or any other platform shall be removed immediately,22 correct?

23 MS. WALSH: Thafs right. But our petition,24 our wherefore clause does ask speeiflcaily for an25 order, and I have my copy here which I can hand up

3fr6sheets COPYP»ge6to9ofi5

1 5

10

to the Court, which does ask for an order

compelling the Immediate discontinuance of the page

and the removal of ad offending posts on the page.

And the reason why they're all offending, if he

agreed back in 2007 he wouldn't encourage other

people to do this. He's now conceded that he wasJohn Flannagan, the administrator.

And you can see, Your Honor, from the sample

Facebook posts that you have there that the

administrator of this page encourages people daily

to Join the page, to like the page, to complain

about Sundance Vacations. He, as administrator,

has been violating his oontractible obligations by

encouraging people to post messages like that.

Those messages should come down under the agreement

pursuant to the wherefore dause in our petition

because he's not here today opposing that relief.

He had a chance under Rule 206 to file an

answer, he dldnt Our factual allegations shouldbe deemed admitted. The order should be broad

enough to compel him to take those unlawful posts

down. Your Honor, respectfully, we need a strong

sanction here to make sure we're not back here

again asking for this same relief.

This gentleman doesn't have the same respect

121 that we're here for today is a breach of ~ or to

2 enforce the 2007 settlement agreement Thafswhat3 this case is about, this hearing is about

4 Now that we conceded, that we are asking you5 to enforce the order, they're trying to pile all

6 this defamatory stuff on and all this additional

7 stuff and all this additional work and

8 requirements. Plaintiff's counsel said that9 they're not requiring him to do anything. The

10 language says Mr. Whitehead shall not interfere

11 with the efforts of Sundance to remove the12 offending posts and shall cooperate with Sundance13 and directing Facebook to remove the Boycott

14 Sundance Vacations page and directing third parties15 to remove all other offending stuff.

16 So if there's a person In Tennessee by their

17 order he would be In violation of this order if he

16 told somebody in Tallahassee or somewhere in

19 Tennessee or anywhere in the country If they didn't20 remove their posts. It's putting a ridiculous

21 burden on the Defendant.

22 We are not even contesting this case. We are

23 not even here today for - this Is beyond the scope

24 of the injunction » but Mr. Whitehead is seeking a26 Judgment. He wants to put an end to this. Every

11

for the agreement that he signed and the rules of

2 this Court and we need a strong sanction to make

3 sure that he doesn't tomorrow go online and post

4 under a different name Just to get around this. So

5 we're not back here two months from now asking for

the same relief because he's using a different

name.

We would like a strong order to send the

message to him that he has to comply with this16 obligation and he has to take the things down.

1 We're not asking him to compel third parties to do

2 anything that's outside of his ability. We're

3 asking him to take down the posts that he made and

4 the posts that he encouraged other people to make.

5 Thafs within his ability. He's certainly capable6 of doing that

7 Your Honor, we're entitled to that under the

8 February 2007 settlement agreement. But we need an

0 order thafs broad enough that includes these

factual findings, that ratifies and reaffirms the

settlement agreement and that compels him to do

what he promised to do and also Imposes sanctions

|3 in the event that he doesn't.

|4 THE COURT: Mr. Carmody, any final response?

MR.CARMODY: The essence of this petition

131 day It's petitions, it's filings, ifs nonstop

2 flood of legal papers. He's 71 year old. He lives

3 in Philadelphia. He has pretty significant4 physical injuries. He Just had two surgeries in

5 the last year. He's In the process of recuperating6 physically. That was part of, I think, why he

7 dldnt want to participate in the deposition.

8 But this guy doesnt want this headache. This

0 guy wants to be left alone and ifs Just constant

10 He's done everything at this point to comply. And

11 every concern, every — anything they're worried

12 about on that other side the original petition

13 attached to the injunction on September 20th it

14 protects ail that, you know, no defamatory

18 comments, no on Facebook, no posting this, no going

16 on additional names outside of a John Flannagan or17 somebody else. The original order protects that.

18 This new order that we got at the last minute It

19 adds stuff thafs beyond the scope of the petition.

20 It requires the Defendant to do stuff thafs

21 impossible and it's litigating issues that are not22 before the Court today.

23 THE COURT: Anything else that I havent24 already heard?

25 MS. WALSH: Just very briefly. Mr. Carmody

4 re sheets COPY Page 10 to 13 or 15

|2

$4

5

e

7

89

0

1

2

3

4

5

6

7

e

8

: o

|1

12

23

£

1*-referenced Paragraph 7 of the proposed order.That's exactly what we are asking for In thewherefore clause of our petition. That's therelief we're seeking, that's the relief we'reentitled to.

THE COURT: Mr. Carmody?MR. CARMODY: That's It, Your Honor.THE COURT: I commend both counsel for

eloquent and excellent presentations. I will ruletoday.

(Whereupon, the hearing concluded.)

5 tTSsheets COPY Page 14 to M of is

15

CBRTITICATB

I HEREBY CERTIFY that the proceedings and

evidence are contained fully and accurately in the

notes of testimony taken by me in the proceedings

of the above cause, and that this is a true and

correct transcript thereof.

Allison M. Ross, !a-yv'

Allison M. Ross, RPROfficial Court Reporter

6fcr 6 sheets COPV Page 15 to 15 of 15

OCT. -23' 12(TUE) 11:32P. 002

SUNDANCE VACATIONS, INC., : IN THE COURT OF COMMON PLEAS OF

PlaintifiT LUZERNE COUNTY

va

ALBERT WHITEHBAJ),

DefendantCIVIL ACTION- LAW

NO. 12-CIV-8006

-W—

re -"•;?£.. ¦AMENDED ORDER

AND NOW, this 23rd day of October, 2012, at /J.&> B.m„ upon

consideration of Plaintiff Sundance Vacations, Inc's Petition for Preliminary

Injunction and supporting memorandum as well as testimony/argument introduced

at the hearing this date,

IT IS HEREBY ORDERED that Defendant Albert Whitehead is enjoined

from existing and future breaches of tbe Settlement Agreement dated February 6,

2007 pending further Order ofCourt Further, all posts and acttvtty eonceniing

Sundance Vacations, Inc. in any manner made hy Defendant Albert Whitehead

posing as ••John Flannagan" or using any other pseudonym on Facebook or any

other platform shall bo removed immediately.

m.ziyjum] 11:32 p. 003

Further, Defendant Albert Whitehead shall not interfere with the efforts of

Snndanee Vacations Inc. to remove the posts and shall cooperate with Sundance

Vacations Inc. in directing Facebouk to remove the "Boycott Sundance Vacations"

page.

Security shall be entered in the amount of $100.00 (one hundred dollan) in

Accordance with Fa.R.Civ. P. 1S31(b)

The Protbonotary is directed to forward a copy of this order to all parties

pursuant to Pa. ILC.P. 236.

BY THE Cj

Exhibit C

m b k myers brler&kelly..' ATTORNEYS AT IAW 7

October 24, 2012

VIA TELECOPY & FIRST-CLASS MAIL

Matthew J. Cannody, EsquireElliott Greenleaf& Dean

-39-PubKc-Square

Suite 1000

Wilkes-Baire, PA 18701

Re: Sundance VacwTions. Inc. v. Albert Whitehead -No.12.CV-8006

Dear Matt:

Enclosed please find a receipt from the Luzerne County Prothonotaiy whichverifies that the required $100.00 security was posted in accordance with the October 23, 201 2Amended Order. The Order is now valid and caiforceable. Accordingly, I ask that you provideconfirmation that Mr. Whitehead has removed all posts and activity that he made concerningSundance Vacations, Inc. on Facebook or any other platform. Please also provide writtenconfirmation that Mr. Whitehead has directed Facebook to remove the "Boycott SundanceVacations" page as required by the October 23, 2012 Amended Older. Please provide therequested written confirmation immediately.

As you know, my client continues to monitor activity on the "Boycott" page. IfMr. Whitehead fails to comply with the October 23, 2012 Amended Order, we intend to seekappropriate contempt remedies.

Please do not hesitate to contact me ifyou have any questions.

Sincerely,

Donna A. Walsh

DAW:rcs

Enclosure

00065218

425 Spajce Street | Suite 200 | P.O. Box 551 | Scranton. PA 18501-0551 | p {570)342-6100 | f (570) 342-6147 | www.mbWow.com

Luzerne County Civil Records

Receipt #: 2012-5-04756

Date: 10/23/2012 3:34:10 PM

[Duplicate Copy]FILING 201 2-08006-0074: Poundage $100 00SUNDANCE VACATIONS INC vs. WHITEHEAD. ALBERTCheck #12582 $100.00

Total $100.00

Total Fees: $100.00- - — - -- — Total Payments: - - -• — --$moo-

***Thank You*

-o c.y'

m b k myers brier&kelly.'attorneys at LAW '

November 1,2012


Matthew J. Carmody, Esquire

Elliott Greenleaf& Dean

39 Public Square

Suite 1000

Wilkes-Baire, PA 18701

Re: Sundance Vacations. Inc. v. Albert Whitehead - No.l2-CV-8Q06

Dear Matt:

As you know, the Amended Order dated October 23, 2012 requires Mr.Whitehead to "cooperate with Sundance Vacations Inc. in directing Facebook to remove the'Boycott Sundance Vacations' page." Despite my request dated October 24, 2012 (attached), youhave foiled to provide confirmation that Mr. Whitehead has done anything to comply with thisdirective or the other directives in the Amended Order. Accordingly, I am enclosing a draft letterto Facebook on behalfofMr. Whitehead. I request that you send the letter to Facebookimmediately as required by the October 23, 2012 Amended Order ofCourt Ifyou refuse to sendthe letter, we will consider this a violation of the Court's Order and will seek appropriateremedies against your client for contempt


Sincerely,

Donna A. Walsh ' ^^:2-

DAWacs

Enclosure

00065747

425 Spruce Street | Suite 200 | P.O. Box 551 | Scranton, PA 18501-0551 | p (570) 342-6100 | f (570) 342-6147 | www.mbklaw.com

m b k myers brler&kellyw' ATTOBNEYS AT LAW 1

October 24, 2012


Matthew J. Carmody, EsquireElliott Oreenleaf& Dean

¦ -39-PubHc-Sqiiare

Suite 1000Wilkes-Banc, PA 18701

Re: Smftm Ytrettto. Ing. v. Aftqrt Whitghff^ - Np.12-CV-8W»

Dear Matt:

Enclosed please find a receipt from the Luzerne County Prothonotary whichverifies that die required $100.00 security was posted in accordance with the October 23, 2012Amended Order. The Order is now valid and oiforceable. Accordingly, I ask tiiat you provideconfinnation that Mr Whitehead has removed aU posts and activfySundance Vacations, Inc. on Facebook or any other platform. Please also provide writtenconfirmation that Mr. Whitehead has directed Facebook to remove the "Boycott SundanceVacations" page as required by die October 23, 2012 Amended Order. Please provide therequested written confirmation immediately.

As you know, my client continues to monitor activity on the "Boycotr page. IfMr. Whitehead foils to conq)ly with the October 23, 2012 Amended Order, we intoid to seekappropriate contempt remedies.


Sincerely,

Donna A. Walsh

DAWacs

Enclosure

0006J2I>

425 Spiuce Street | SuHe200 | P.O.BcwSSl | Scronton. PA 18501-0551 ( p (570) 342-4100 | f (570)342-4147 | www.mbktaw.com

November 1, 2012

VIA UPS OVERNIGHT DELIVERY

Theodore W. Ullyot, EsquireVP, General Counsel and SecretaryFacebook, Inc.

Legal Department1601 Willow Road

Menlo Park, CA 94025

Re: Sundance Vacations. Inc. v. Albert Whitehead -No. 12-CIV-8006

Dear Mr. Ullyot:

This office represents Defendant Albert Whitehead in the above-referenced matterwhich is pending in the Court of Common Pleas ofLuzeme County, Pennsylvania. Enclosed is acopy ofan Amended Order issued on October 23, 2012 in this matter. Pursuant to the AmendedOrder, I am writing on behalfofMr. Whitehead to demand that Facebooktake immediate actionto remove the "Boycott Sundance Vacations" page appearing on your platform. Mr. Whiteheadadmits that he administered the page using the false name "John Flannagan" and that he did so inviolation ofcontractual obligations imposed by the Settlement Agreement that he signed onFebruary 6, 2007 and therefore requests that the "Boycott" page be removed as required by theOctober 23, 2012 Amended Older of Court Kindly take immediate action to remove the"Boycott" page in accordance with the Amended Order.


Sincerely,

Matthew J. Carmody

cc: iptgtfb.com (via electronic mail)Donna A. Walsh, Esquire (via electronic & first-class mail)

IN THE COURT OF COMMON PLEASOF LUZERNE COUNTY

SUNDANCE VACATIONS, INC.,

Plaintiff,

v.

ALBERT WHITEHEAD,

Defendant.

CASENO.12-CV-8006

NOTICE

TO; Custodian ofRecords, AOL Inc.22000 AOL WaySterling, Virginia 20166

You are required to complete the following Certificate ofCompliance

when producing documents or things pursuant to the Subpoena.

CERTIFICATE OF COMPLIANCE WITH SUBPOENA TO PRODUCEDOCUMENTS OR THINGS

irôJro- m^Tovj am authorized to make this certification

as a Custodian ofRecords for AOL Inc. I hereby certify that, to the best ofmy

knowledge, information and belief, all documents or things required to be

produced pursuant to the Subpoena issued on AuflUse ?-?-. 2jo\7- (date of

Subpoena) have been produced,

Date: M&wn- CUSTODIAN OF RECORDS FOR AOL INC.

By(kfe A.^j^

m to and subscribed before me thisday of/^/M'r. 2012

flMm^Notary Public / / o nMy Commission expires: ^£\ zfD'XDl'^)

cnssmuiAOENotvyPuMo

CannnomwaniolVttfRtaHyOonnMDnBqteaJknniDa

"DOCUMENTS ^QMESTED"

1. Any and all documents containing subscriber data and/orinformation, internet protocol (IP) address(es) and/or activity reports that refer orrelate to Albert Whitehead, Kathleen Whitehead, Rose Whitehead, WilliamWhitehead, and/or any Individual residing at 842 North 27th Street, Philadelphia,PA 19130, including, but not limited to, for each of the foregoing Individuals, allaccount applications, subscriber records, billing information, billing records,access logs, activity logs, time stamps and records of session times and durations.

Account Information for

o Johnf08081 (screen name has been deleted)o Novnog

o phllapa312

o deserie

o nogamesno

o thesia

o all9130

Ip Sessions for

o AI19130

o Deserie

o Nogamesno

o Novnog

o Phiapa312

o Thesia

Ip UAS sessions for

o Deserie

o Nogamesno

o Novnog

o Phllapa312

o thesia

2. Any and all documents containing subscriber data and/orinformation, Internet protocol (IP) address(es) and/or activity reports that refer or

relate to the email address [email protected]. including, but not limited to, ailaccount applications, subscriber records, billing information, billing records,access logs, activity logs, time stamps, records of session times and durations andall records identifying the owner and/or subscriber using this e-mail address.

• Client IP Sessions for JohnfOSOBl

• UAS Data for JohnfOSOBl

3. Any and all documents identifying the aliases, screen namesand/or email addresses associated with any of the individuals referenced inParagraphs 1 or 2.

• Account information for

o JohnfOSOBl (screen name has been deleted)o Novnog

o philapa312

o deserie

o nogamesno

o thesia

o all9130

4. Any and all documents that contain traffic informationrelating to the [email protected] account, including, but not limited to, mailtraffic logs and records Identifying the sender, recipient and time stamp ofmessages to and from the account (but excluding email content)."

N/A. No email was returned for the deleted screen name, JohnF0808l.

Account Information for johnfD8081

Account Information for johnf08081

NoV NoG

PhilaPa312

Deserie

NoGamesNo

Thesia

AL19130

Dyce0961

Trubblinparadise

AWORDTOTHEWISE

SweetyForSpoilin

PfflLA PA 19130

Danella

al9128

JILL 199999

Jaded by games

LindleyRednick

Albert Whitehead

Screen Names

0873675978

0595822734

0864406624

0245434301

0733123118

0355035776

0061926271 (DELETED)

0107817894 (DELETED)

01 13417480 (DELETED)

01 14305970 (DELETED)

0133729004 (DELETED)

0152680979 (DELETED)

0159673989 (DELETED)

0230755682 (DELETED)

0285493004 (DELETED)

0349161951 (DELETED)

0477717067 (DELETED)

BEWARE SUNDANCE 0526593736 (DELETED)

0528572984 (DELETED)

0589152013 (DELETED)

0660796499 (DELETED)

0723085349 (DELETED)

0756586785 (DELETED)

0760551349 (DELETED)

0905217114 (DELETED)

0963954714 (DELETED)

1070440919 (DELETED)

John08081

The Litigators

NO FABULATION

LydiaMedany

Ellen Moylan

Sundance Vac

JILL19999

MARIA STORCH

JohnFOSOSl

Address Information_- ...—-— ..-

Name ALBERT WHITEHEAD|

Street 842 N 27th st

City Philadelphia

State/Zip PA 19130

Country Code US

Evening Phone 2152351308

Daytime Phone 2152351308

ile:///Jl/200340/iohn«)8081.acct_details.htinl[ll/7/2012 5:26:48 PM]

Account Information forjohnft)8081

|| Service J|AOL

Status Information

Account Status ??ACTIVE**

Member Since 96-06-30 13:20:23 edt

Account Type NORMAL

|BID Country us

Ie^//Jl/200340/gohnfl)8081.acct_detaiIs.htniI[n/7/2012 5:26:48 PM]

Client IF Sessions for JohniDSOSl

StartTime

(UTC)

End- Time

t (UTC)

SignonID

Session IDUser

GroupGuest

SessionVersion Subversion

MasterAccount

NetworkAddress

^

DialedFrom

¦IP

DAHA

2012090614:29:09

2012090614:51:48

6 5048b3351a7091b903 643993 Normal 0 4343 19 873675978 72.78.191.60 null null

20120906

14:54:18

20120906

14:56:506 5048b91ala90456003644813 Normal 0 4343 19 873675978 72.78.191.60 null null

2012090615:0322

2012090615*4:27

6 5048bb3aladfl)c6703644d3a Normal 0 4343 19 873675978 72.78.191.60 null null

2012090617:23:04

20120906 ,1724:49 0 5048dbf803bft)afe00fl8c29 Normal 0 4343 19 873675978 72.78.191.60 null null

2012090619:31:24

20120906 ,1952:45 b 5048fa0clafD43O03654e5e Noimal 0 4343 19 873675978 72.78.191.60 null null

2012090711:14:13

20120907 ,11:14:47 0 5049d7051 a906c3 1 03707e08 Normal 0 4343 19 873675978 72.78.191.60 null null

20120907

|l 1:19:4420120907 „11:19:45 8 5049d8501 a7672ec03654c96 Normal 0 4343 19 873675978 72.78.191.60 null null

12012090711:19:55

20120907 ,1U1:37 0 |j 5049d85b023f959(»0133bf3 Normal 0 4343 19 873675978 72.78.191.60 null null

le;///J|/20034O/jotanfDt081.ip_KBiaai.hliiil[l 1/7/2012 S:26:4S PM]

UAS Data for johnfflSOSl

Event Time

(UTC)Session ID IP Address Service Name

Event

TypeEventAction

2012-09-06

14:35:365048b4b80000a7770aabcc68 64.12.116.77 sns.mailsvc.aol.com TGS OK

2012-09-07

11:21:035049d89fD000a8bl0826f55c 205.188.116.7 sns.mailsvc.aol.com TGS OK

ile:///Jl/200340/johiifD8081 .ip_uas.htnil[l 1/7/201 2 5:26:49 PM]

Account Information foraI19130

Account Information for all9130

NoV NoG

PhilaPa312

Deserie

NoGamesNo

Thesia

AL19130

Dyce0961

Trubblinparadise

Screen Names

0873675978

0595822734

0864406624

0245434301

0733123118

0355035776

0061926271 (DELETED)

0107817894 (DELETED)

AWORDTOTHEW1SE 0113417480 (DELETED)

0114305970 (DELETED)

0133729004 (DELETED)

0152680979 (DELETED)

0159673989 (DELETED)

0230755682 (DELETED)

0285493004 (DELETED)

0349161951 (DELETED)

0477717067 (DELETED)

SweetyForSpoilin

PHILA PA 19130

Danella

al9128

JILL 199999

Jaded by games

LindleyRednick

Albert Whitehead


John08081

The Litigators

NO FABULATION

LydiaMedany

Ellen Moylan

Sundance Vac

JILL19999

MARIA STORCH

JohnF08081

0528572984 (DELETED)

0589152013 (DELETED)

0660796499 (DELETED)

0723085349 (DELETED)

0756586785 (DELETED)

0760551349 (DELETED)

0905217114 (DELETED)

0963954714 (DELETED)

1070440919 (DELETED)

Address Information

Name ALBERT WHITEHEAD


|City Philadelphia

[State/Zip PA 19130

Country Code US

Evening Phone; 2152351308

Daytime Phone 2152351308 1i !iH

ile:///;|/200340%2010-08/Producdon/all9130.acct_detaiIs.html[l 1/8/2012 1:48:27 PM]

Account Information forall9130

I j Service JJAOL

Status Information

Account Status ""ACTIVE** _j


Account Type NORMAL

BID Country us

ile:///J|/200340%2010-08/pFoduction/all9130.8cct_details.html[1 1/8/2012 1:48:27 PM]

Client IP Sessions for all9130

(UTQ | (UTQ ^Session D)

UserGroup

GuestSession

Version SubversionMaster

AccountNetworkAddress

DialedFrom

IP

DAHA

JSSS1 IJJSSS1 6 ||501943b30fec7dl000922dad Normal 0 4343 19 873675978 72.78.191.60 null null

ley//J|/200340K20ia-08/Productioii/>J19I30.ip_feuioi».hlinl[l 1/8/2012 1:48:27 PM]

Account Information for deserie


NoVNoG

PhiIaPa312

Deserie

NoGamesNo

Thesia

AL19130

Dyce0961

Trubblinparadise

Screen Names

0873675978

0595822734

0864406624

0245434301

0733123118

0355035776

0061926271 (DELETED)

0107817894 (DELETED)

AWORDTOTHEW1SE 0113417480 (DELETED)

0114305970 (DELETED)

0133729004 (DELETED)

0152680979 (DELETED)

0159673989 (DELETED)

0230755682 (DELETED)

0285493004 (DELETED)

0349161951 (DELETED)

0477717067 (DELETED)

SweetyForSpollin

PHILA PA 19130

Danella

al9128

JILL 199999

Jaded by games

LindleyRednick

Albert Whitehead


John08081

The Litigators

NO FABULATION

LydiaMedany

Ellen Moylan

Sundance Vac

JILL 19999

MARIA STORCH

JohnF08081

0528572984 (DELETED)

0589152013 (DELETED)

0660796499 (DELETED)

0723085349 (DELETED)

0756586785 (DELETED)

0760551349 (DELETED)

0905217114 (DELETED)

0963954714 (DELETED)

1070440919 (DELETED)

Address Information

Name

Street

City

State/Zip

Country Code

Evening Phone

Daytime Phone

ALBERT WHITEHEAD

842 N 27th st

Philadelphia

PA 19130

US

2152351308

2152351308

ile^/J|/200340%2010-08/Productioii/descrie,acct_detaUs.htinl[l 1/8/2012 1 :48:27 PM]


IService j|AOL. . .., I

Status Information

Account Status **ACTIVE**


Account Type NORMAL

BID Country us

ile:///Jf|/200340%2010-08/Pn)duction/deserie.acct_details.htinl[l 1/8/2012 1:48:27 PM]

Client IP Sessions for deserie

StartTime

(UTQ

EndTime

(UTC)

Signon

IDSession ED

UserGroup

GnestSession

Version SubversionMasterAccount

Network

AddressDialedFrom

IP

DAHA

201209061233:29

2012090612:3537

6 504898I903feb6b900ed352a Nonnal 0 4343 19 873675978 72.78.191,60 null null

2012090614:22:03

2012090614:24*5

6 S048bl8blaa9082503643S46 Normal 0 4343 19 873675978 72.78.191.60 null null

2012090614:51:48

2012090614:54:18

6 5048b8841aad24fl036446c2 Nonnal 0 4343 19 873675978 72.78.191.60 null null

ile^//Jl/20CO4O%2010-(»/Pro<tactioii/de«erie.ip_ieMion»,litiiil[l 1/8/20 12 1:«:27 PM]

UAS Data for deserie

Event Time (UTC) Session ID IP Address Service Name Event Type Event Action

2012-07-14 20:25:33 null 2.50.141.10 mail/smtp AS FAIL



2012-08-2410:13:06 null 117.201.97.253 mail/smtp AS FAIL

Je:///J|/20O340%2010-08/Production/deserie.ip_uas.htinl[l 1/8/2012 1:48:27 PM]

Account Information for nogamesno

Account Informaition for nogamesno

NoVNoG

PhilaPa312

Deserie

NoGamesNo

Thesia

AL19130

Dyce0961

Trubblinparadise

Screen Names

0873675978

0595822734

0864406624

0245434301

0733123118

0355035776

0061926271 (DELETED)

0107817894 (DELETED)

AWORDTOTHEWISE 0113417480 (DELETED)

0114305970 (DELETED)

0133729004 PELETED)

0152680979 (DELETED)

0159673989 (DELETED)

0230755682 (DELETED)

0285493004 (DELETED)

0349161951 (DELETED)

0477717067 (DELETED)

SweetyForSpoilin

PfflLA PA 19130

Danella

al9l28

JILL 199999

Jaded by games

LindleyRednick

Albert Whitehead


John08081

The Litigators

NO TABULATION

LydiaMedany

Ellen Moylan

Sundance Vac

JILL19999

MARIA STORCH

JohnF08081

0528572984 pELETED)

0589152013 pELETED)

0660796499 pELETED)

0723085349 PELETED)

0756586785 pELETED)

0760551349 PELETED)

0905217114 PELETED)

0963954714 PELETED)

1070440919 PELETED)

Address Information

Name ALBERT WHITEHEAD!


City Philadelphia

State/Zip PA 19130

Country Code US |



]e:///J|/200340%2010-08/Production/nogamesno.acct_details.html[l 1/8/2012 1:48:28 PM]

Account Information for nogamesno

1 1 Service jJAOL

Status Information

Account Status ??ACTIVE^*


Account Type NORMAL

BID Country us

ile^/J|/200340%2010-08/Produc(ion/nogamesno.acct_details.html[l 1/8/2012 1:48:28 PM]

Client IP Sessions for nogamesno

Start EndTime Time

(UTQ (UTC)l8'^0- Session ID User

GroupI GuestSession



DialedFrom

IP

DAHA

20120715 2012071313:47:34 13:48:02 h |J5002c9f60ffef45flK)56f266 Normal 0 4343 19 873675978 72.78.191.60 null null

2012072C

12:55:30

20120720

13:01:596 500955421a5c293aO7c6fl8c Normal

0 4343 i9 873675978 72.78.191.60 null null

20120720

22:03:312012072022:03:53

6 5009d5b30ffl)6934006b828e Normal 0 J 4343 19 873675978 72.78.191.60 null null

null2012072514:41:21

20120725

14:41:446 501005910379071400622fd9 Normal 0 4343 19 873675978 72.78.191.60 null

2012073011:09:00

20120730 ,11:0924 0 50166b4cla01716102Bc95cc Normal 0 4343 19 873675978 72.78.191.60 null null

2012082715:48:53

20120827 ,

15:49:11 0 503b96e31ald80el0334d23d Normal 0 4343 19 873675978 72.78.191.60 null null

2012090612:18:39

20120906

12:33:296 5048949f0312b7efl)0«12(1cd Normal 0 4343 19 873675978 72.78.191,60 null null

2012090614:24:05

2012090614:25:57

6 5048b20Slaa8d35c0364369d Normal 0 4343 19 873675978 72.78.191.60 null null

20121002

19:49:07

20121002

19:49:496 506b45330f(9fd61014afa03c Normal 0 4343 19 873675978 72.78.191.60 null null

20121016 2012101621:5333

6 507dd0cl02e2de83006b7d90 Normal 0 4343 19 873675978 72.78.191.60 null null

2012101622-2\-22

2012101622:24:02

6 507ddde20f?3447o0163cl63 Normal r- 4343 19 873675978 72.78.191.60 null null

2012101622:46:58

201210171107:59:59 || 6 507de3e2030a9a4«01573c21 Normal 0 4343 19 873675978 72.78.191.60 null null

2012101708:00:00

2012101807:59:59

S 5O7dc3e2030a9a4a0 1 573c2 1 Normal 0 4343 19 873675978 72.78.191.60 null null

2012101808:00:00

20121018 ,12:51:09

5 1

507de3e2030a9a4a01 573(2 1

1Normal 0 4343 " 873675978

1 li72.78.191.60 null null

k7//^/20034(»UOI(M>8/Pro<luctii>ii/hagaiiw>iia.ip_Hlsioat.had[ll/8/20I2 1:48:28 PM]

UAS Data for nogamesno

Event Time

(UTC)Session ID IP Address

Service

NameEvent

TypeEventAction

2012-07-2323:12:22

null 190.231.255.90 mail/smtp AS FAIT,

2012-08-1911:16:14

null 31.181.152.132 mail/smtp AS FAIT,

2012-09-06

12:32:16504897d00000ac980ad5fl 7b 205.188.116.8 help.aol.com TGS OK

2012-09-06

12:32:58null 72.78.191.60 bill.aol.com AS FAIL

2012-09-06

12:33:12null 72.78.191.60 bill.aol.com AS FATT,

2012-10-07

15:16:19null 176.102.7.16 mail/smtp AS FATT,

2012-10-07

15:16:19null 176.102.7.16 mail/smtp AS FAIL

ilei'//J|/200340%2010-08/Producdon/nogamesiio.ip_uas.html[U/8/2012 1:48:28 PM]

Account Information fbrnovnog

Account Information for novnog

NoV NoG

PhilaPa312

Deserie

NoGamesNo

Thesia

AL19130

Dyce0961

Trubblinparadise

AWORDTOTHEWISE

SweetyForSpoilin

PHILA PA 19130

Danella

al9128

JILL 199999

Jaded by games

LindleyRedmck

Albert Whitehead

Screen Names

0873675978

0595822734

0864406624

0245434301

0733123118

0355035776

0061926271 (DELETED)

0107817894 (DELETED)

0113417480 (DELETED)

0114305970 (DELETED)

0133729004 (DELETED)

0152680979 pELETED)

0159673989 (DELETED)

0230755682 (DELETED)

0285493004 (DELETED)

0349161951 (DELETED)

0477717067 (DELETED)


John08081

The Litigators

NO FABULATION

LydiaMedany

Ellen Moylan

Sundance Vac

JILL 19999

MARIA STORCH

JohnF08081

0528572984 (DELETED)

0589152013 (DELETED)

0660796499 (DELETED)

0723085349 (DELETED)

0756586785 (DELETED)

0760551349 (DELETED)

0905217114 (DELETED)

0963954714 (DELETED)

1070440919 (DELETED)

Address Information



City Philadelphia

State/Zip PA 19130

Country Code US


Daytime Phone-- -

2152351308

ile:///Jl/200340%2010-08/Pro<taction/novnog.acct_details.html[1 1/8/2012 1:48:28 PM]

Account Information for novnog

fl Service AOL

Status Information

Account Status "ACTIVE**


Account Type NORMAL

BE) Country us

le:///J|/200340%2010-08/Producdon/novnog.acct_details.htnil[l 1/8/2012 1:48:28 PM]

Client IP Sessions for novnog

StartTime

(UTQ

EndTime

(UTC)^l Session ID

¦

UserGroup

GuestSession

—



DialedFrom

IP

DAHA

2012082715:50:24

2012082715:5227

6 jJ503b9740037ffb3600oef2a7 Normal 0 4343 19 873675978 72.78.191.60 null null

null

2012082717:34:54

20120827

17:41:556 jJ503bafbe0f9891ea00e97605 Normal 0 4343 19 873675978 72.78.191.60 null

20120828 2012082813:15:55 13:1621

6 503oc48b03d28ed6O0cb4856 Normal 0 4343 19 873675978 72.78.191.60 null null

20120906 2012090612:12:00 12:15:30

6 504893 1003a362c600ed2ael Normal 0 4343 19 873675978 72.78.191.60 null null

20120906 201209061425:57 14:29:09

6 50485275 Ia06ddad036437a9 Normal 0 4343 19 873675978 72.78.191.60 null null

20120907 20120907 ,11:14:47 11:16:14 0 5049d7271at74106e03707e3a Noimal 0 4343 19 873675978 72.78.191.60 null null

null

20120907 20120907 ,11:17:44 11:19:44 0 5049d7d81ae3907703654bb5 Normal 0 4343 19 873675978 72.78.191.60 null

20120907 20120907 ,

1121:37 11:22:57 0 5049d8cl 024dl 746001 33c96 Normal 0 4343 19 873675978 72.78.191.60 null null

20120913 20120913 ,12:10:02 12:11:45 j6 5051cdla0f9b0360011900ee Normal .'- 4343 19 873675978 72.78.191.60 null null

le7//I|/20034OK20l0-O8/Pnidiictioii/novnog.ip_feuioiu.btml[n/8/20l2 1:4«:28 PM]

UAS Data for novnog

Event Time

(UTC)Session ID IP Address

ServiceName

EventType

EventAction

2012-08-27

15:51:16503b97740000ac9b07d4ec4b 205.188.116.8 help.aoI.coin TGS OK

2012-08-2717:35:09

503bafcd0000a790076 1 eObe 205.188.116.8 heIp.aol.com TGS OK

2012-08-2717:35:25

503bafcd0000a7900761e0be 72.78.191.60 bill.aol.com AS OK

2012-09-0612:12:28

5048932c0000ac22034a595d 64.12.116.8 help.aol.com TGS OK

2012-09-0612:12:28

5048932c0000ac22034a595d 64.12.116.8 help.aol.com TGS OK

2012-09-06

12:12:505048932c0000ac22034a595d 72.78.191.60 bUl.aol.com AS OK

2012-09-06

12:14:355048932c0000ac22034a595d 64.12.116.203 help.aol.com TGS OK

2012-09-06

14:27:155048b2c30000aal90346b88b 205.188.116.8 help.aol.com TGS OK

2012-09-0614:27:15

5048b2c30000aal90346b88b 205.188.116.8 help.aol.com TGS OK

2012-09-06

14:27:515048b2c30000aa 1 90346b88b 72.78.191.60 bill.aol.com AS OK

2012-09-0614:27:54

null 72.78.191.60 bill.aol.com AS FAIL

2012-09-06

14:28:065048b2c30000aal90346b88b 205.188.116.139 bilI.aol.com TGS OK

2012-09-06

14:28:065048b2c30000aal 90346b88b 72.78.191.60 biIl.aol.com TGS OK

2012-09-07

11:15:065049d73a0000aa390ae7e85 1 205.188.116.8 help.aol.com TGS OK

2012-09-0711:15:23

5049d73a0000aa390ae7e85 1 72.78.191.60 bill.aol.com AS OK

2012-09-0711:18:45

5049d8 1 50000a8890b3c3d3b 205.188.116.8 help.aol.com TGS OK

2012-09-07

11:19:095049d8 1 50000a8890b3c3d3b 72.78.191.60 bill.aoI.com AS OK

2012-09-07

11:21:535049d8dl0000a8b00351dl82 205.188.116.8 heIp.aol.com TGS OK

2012-09-07

11:22:055049d8dl0000a8b00351dl82 72.78.191.60 bill.aol.com AS OK

2012-09-13

12:10:42505 1 Cd420000a8af0b3dab45 64.12.116.12 bill.aol.com TGS OK

ile:///J|/200340%2010-08/Production/novnog.ip_uas.htinl[ll/8/2012 1:48:29 PM]

Account Information for philapa312

Account Information for philapa312

NoV NoG

PbilaPa312

Deserie

NoGamesNo

Thesia

AL19130

Dyce0961

Trubblinparadise

AWORDTOTHEWISE

SweetyForSpoilin

PHILA PA 19130

Danella

al9128

JILL 199999

Jaded by games

LindleyRednick

Albert Whitehead

Screen Names

0873675978

0595822734

0864406624

0245434301

0733123118

0355035776

0061926271

0107817894

0113417480

0114305970

0133729004

0152680979

0159673989

0230755682

0285493004

0349161951

0477717067

BEWARE SUNDANCE 0526593736

John08081 0528572984

The Litigators

NO FABULATION

LydiaMedany

Ellen Moylan

Sundance Vac

JILL 19999

MARIA STORCH

JohnF08081

0589152013

0660796499

0723085349

0756586785

0760551349

0905217114

0963954714

1070440919

(DELETED)

(DELETED)

PELETED)

(DELETED)

PELETED)

PELETED)

PELETED)

PELETED)

PELETED)

PELETED)

PELETED)

PELETED)

PELETED)

PELETED)

PELETED)

PELETED)

PELETED)

PELETED)

PELETED)

PELETED)

PELETED)

Address Information



City Philadelphia

State/Zip PA 19130

Country Code US



ile:///J|/200340%2010-08/Production/philapa312.acct_details.htinl[ll/8/2012 1:48:29 PM]

Account Information for pbilapa3 12

f| Service ||AOL

Status Information

Account Status ??ACTIVE**


Account Type NORMAL

BID Country us

le.7//J|/200340%20I0-08/Production/phiIapa312.acct_detajls.htnU[l 1/8/2012 1:48:29 PM]

Client IP Sessions for philapa312

StartTime

(UTC)

EndTime

(UTQ

Signon

IDSession ID

User

Group;Guest

SessionVersion Subversion

MasterAccount

Network

AddressDialedFrom

IPDAHA

null

null

20120714

10:55:31

20120714

10:56:326 500150230f95739b0054b63e Normal 0 4343 19 873675978 72.78.191.60 null

2012073011:09:24

2012073011:17:48

6 50166b641a50382502ec95fe Normal 0 4343 19 873675978 72.78.191.60 null

201208061 10:55:20

2012080611:02:29

6 501fa2980fl9ec0e00a6982f Noimal 0 4343 19 873675978 72.78.191.60 null nuU

20121002

18:01:2820121002

18:12:02 LJ506b2bf802f99117004al08 Nonnal 0 4343 19 873675978 72.78.191.60 null null I

ley///|/200340K20IO-OS/Pr(xfaiction/|ilul*pa312.ip_Knioiu litinl(ll/g/2012 1:4S:2»PM]

UAS Data for philapa312

Event Time

(UTC)Session ID IP Address Service Name

Event

TypeEventAction

2012-07-08

12:20:454ff97bld0000aa43033b74c0 72.78.191.60 sns,webmail .aol .com AS OK

2012-07-09

11:33:304f&cl8a0000aa3804664969 205.188.116.145 bill.aol.com TGS OK

2012-07-0911:34:44

4ffacld40000aa37045c27ba 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-09

11:36:374ffac2450000aa3c06f820e9 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-09

11:39:234ffac2eb0000ac2 1 077d9ed7 205.188.116.145 bill.aol.com TGS OK

2012-07-09

11:41:274fiac3670000ac9706c0a547 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-09

11:44:104ffac40a0000a78e086f3508 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-0912:16:15

4ffacb8fl)000a78c07d588be 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-09

13:22:144f&c40a0000a78e086f3508 72.78.191.60 help.aol.com TGS OK

2012-07-09

15:18:474ffac40a0000a78e086f3508 72.78.191.60 sns.webmail.aol.com TGS OK

2012-07-09

15:22:204ffac40a0000a78e086f3508 72.78.191.60 sns.webmail.aol.com TGS OK

2012-07-09

15:24:454ffaf7bd0000ac9b04e70 1 b2 72.78.191.60 sns.webmail .aol.com AS OK

2012-07-0915:31:39

4ffaf95b0000ac9a06e5a350 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-09

15:41:194ffafb9fD000ac8fl)6e8906b 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-09

16:05:064ffafb9fl)000ac8fl)6e8906b 72.78.191.60 help.aol.com TGS OK

2012-07-09

16:06:574flEbO 1 al 0000ac9b04e7b36a 64.12.116.13 bill.aol.com TGS OK

2012-07-09

16:10:204ffl)026c0000a88a0824fac0 72,78.191.60 sns.webmail.aol.com AS OK

2012-07-10

11:57:334ffi;l 8ad0000ac92046bb5fl 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-10

12:07:314ffl>026c0000a88a0824fac0 72.78.191.60

api-

saab.login.aol.comTGS OK

2012-07-10

12:07:334ffb026c0000a88a0824fac0 72.78.191.60

api-


ile.///J|/200340%2010-08/Produetion/phiIi?)a312.ip_uas.htinl[l 1/8/2012 1:48:29 PM]

2012-07-1012:07:39

4ffb026c0000a88a0824fac0 72.78.191.60api-

saab.login,aol.comTGS OK

2012-07-1012:07:44

4ffb026c0000a88a0824fac0 72.78.191.60api-

saab.login.aol.cotnTGS OK

2012-07-10

12:08:064ffb026c0000a88a0824fac0 72.78.191.60

api-


2012-07-10

12:09:094ffb026c0000a88a0824fac0 72.78.191.60

api-


2012-07-10

12:10:064ffl)026c0000a88a0824fac0 72.78.191.60

api-


2012-07-1012:10:35

4ffl)026c0000a88a0824fec0 72.78.191.60api-


2012-07-1012:11:18

4fifb026c0000a88a0824fec0 72.78.191.60api-


2012-07-1012:11:29

4ffb026c0000a88a0824fac0 72.78.191.60api-

saab.logm.aol.comTGS OK

2012-07-10

12:11:434flEb026cOO00a88a0824facO 72.78.191.60

api-


2012-07-1020:40:56

4flEb026c0OO0a88aO824fec0 72.78.191.60 sns.webmail.aol.com TGS OK

2012-07-1023:56:38

4ffccl 360000aal7075940eb 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-10

23:58:514ffcc1360000aal7O75940eb 72.78.191.60 sns.webmail.aol.com TGS OK

2012-07-1110:25:45

4frd54a90000ac950492560 1 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-1117:28:22

4flfdb7b6O0O0a794O7ccdefe 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-12

10:22:014ffea5490000a8afl)785d07f 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-13

10:49:534ttttd5 1 0000a77807c4a423 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-13

11:12:125000028c0000a79305 1 f6654 72.78.191.60 sns.webmaiUol.com AS OK

2012-07-13

19:30:505000776a0000ac9a00 1 03b74 72.78.191.60 sns.webmail.aol .com AS OK

2012-07-1321:45:47

5000970b0000aal707899061 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-14

10:56:01500 1 504 1 00O0aa39O7aaO5c5 205.188.116.145 bill.aol.com TGS OK

.

2012-07-14

16:04:455000970b0OO0aa 1 70789906 1 72.78.191.60

api-saab.login.aol.com

TGS OK

i012-07-14

16:05:065000970b00O0aal7O7899061 72.78.191.60


TGS OK

r i i ¦¦ i 1

le^//J|/200340%201 0-08/Production/philapa3 12.ip_uas.html[l 1/8/201 2 1 .-48:29 PM]

2012-07-14

[ 16:05:585000970b0000aal707899061 72.78.191.60

api-


¦ 2012-07-14

! 16:06:155000970b0000aal707899061 72.78.191.60

api-


2012-07-14

16:06:385000970b0000aal 707899061 72.78.191.60

api-


2012-07-14

16:07:085000970b0000aal707899061 72.78.191.60

api-


2012-07-15

11:09:225002a4e20000ac9a0026c643 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-16

10:52:325003f2700000a79100354883 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-1611:25:05

5003fel 10000ac95{)4e2f553 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-1617:38:57

5003fel 10000ac9504e2f553 72.78.191.60 sns.webmail.aol.com TGS OK

2012-07-1701:26:51

5004bf5a0000a889082df60b 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-1710:41:32

5005415c0000aa41089a97db 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-1711:05:13

500546e90000a78b04a9e990 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-1810:37:12

50069 1 d70000aa4207bba208 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-18

13:24:265006b9090000a8b0005cdd99 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-1817:35:41

5006b9090000a8b0005cdd99 72,78.191.60 sns.webmail.aol.com TGS OK

2012-07-1921:28:23

50087bf70000aal80077138d 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-2010:55:19

500939170000ac8d03f68615 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-21

11:54:51500a988b0000acld07cl42dc 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-2210:54:53

500bdbfd0000aa38053fd3e2 72.78.191.60 oar-artifact AS FAIL

2012-07-22

10:55:16500bdcl40000aa39082cfDd5 72.78.191.60 sns.webmail.aol.com TGS OK

2012-07-22

10:55:16500bdc 1 40000ac I fD880f59a 72.78.191.60 client_sso TGS OK

2012-07-22

10:55:16SOObdcl 40000aa39082cfDd5 72.78.191.60 sns_sso TGS OK

2012-07-2310:29:53

500d27al0000a78e095248fd 72.78.191.60 sns.webmail.aol.com AS OK

r - ¦¦ l" 1

Ie:///J|^00340%2010-08/Producdon^hjl^>a312.ip_uas.html[l 1/8/2012 1:48:29 PM]

2012-07-23

10:31:44500d28100000a8b30854f0b5 72.78.191.60 sns.webmail.aol.com AS OK j

2012-07-23

11:04:24500d2fb70000ac8900acla90 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-2311:56:07

500d3bd70000ac99098f62d0 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-23

12:32:56500d447 1 0000ac98080e5 1 8 1 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-23

13:34:07500d52cfl)000a8bl0580ceb6 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-24

10:40:35500e7ba30000a8bl059014ae 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-2412:53:22

500d52cfDOOOa8bl0580ceb6 72.78.191.60api-


2012-07-24

12:53:365OOd52cfDO00a8blO58Oceb6 72.78.191.60

api-


2012-07-24

12:53:55500d52cf0000a8bl 0580ceb6 72.78.191.60

api-


2012-07-2412:54:19

500d52cfl)000a8bl 0580ceb6 72.78.191.60api-


2012-07-24

12:54:34500d52cfl)000a8b 1 0580ceb6 72.78.191.60

api-


2012-07-24

12:55:37500d52cfD000a8bl0580ceb6 72.78.191.60

api-


2012-07-2412:55:51

500d52cfDOOOa8b 1 0580ceb6 72.78.191.60api-saab.login.aol.com

TGS OK

2012-07-2611:02:42

501 123d20000ac8900el3645 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-2611:21:43

501 123d20000ac8900el3645 72.78.191.60 sns.webmail.aol.com TGS OK

2012-07-26

13:22:21501 123d20000ac8900el3645 72.78.191.60

api-


2012-07-26

13:22:39501 123d20000ac8900el3645 72.78.191.60

api-


2012-07-2613:23:46

501 123d20000ac8900el3645 72.78.191.60api-

saab.logm.aol.comTGS OK

2012-07-26

13:25:05501 123d20000ac8900el3645 72.78.191.60

api-


2012-07-2613:25:32

501 123d20000ac8900el3645 72.78.191.60api-


2012-07-26

13:25:51501 123d20000ac8900el3645 72.78.191.60

api-


2012-07-2613:26:44

501 123d200O0ac8900el3645 72.78.191.60api-


r - u I i l ' "i

le:///J|/200340%2010-08/Production/phUapa312.ip_uas.htinl[l 1/8/2012 1:48:29 PM]

2012-07-2613:27:20

501 123d20000ac8900el3645 72.78.191.60api-saab.logm.aol.com

TGS OK

2012-07-26

13:27:40501 123d20000ac8900el3645 72.78.191.60

api-saab.logm.aol.com

TGS OK

2012-07-27

01:34:5750 1 1 f04 1 OOOOaa 1 a086427c2 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-27

12:59:275011fl)410000aala086427c2 72.78.191.60 sns.webmail.aol.com TGS OK

2012-07-27

14:05:405012a0340000a7930608ca04 72.78.191.60 sns.webmail.aol.com AS OK

2012-07-2918:04:15

50157blfD000ac8a01119e23 72.78.191.60 sns.webmail .aol.com AS OK

2012-07-3010:41:26

501664d60000aa42087b7907 72.78.191.60

sns.webmail.aol.com AS OK

2012-07-3010:46:59

501664d60000aa42087b7907 72.78.191.60 sns.webmail.aol.com TGS OK

2012-07-3011:44:36

501664d60000aa42087b7907 72.78.191.60 sns.webmail.aol.com TGS OK

2012-07-3012:31:39

50167eab0000aa3e086e3cdd 72.78.191,60 sns.webmail.aol.com AS OK

2012-07-3012:52:41

50 167eabO000aa3e086e3(x1d 72.78.191.60api-


2012-07-30

12:53:3750 167eabO000aa3e086e3cdd 72.78.191.60

api-


2012-07-3012:53:55

50167eab0000aa3e086e3cdd 72.78.191.60api-

saab.login.aol.com TGS OK

2012-07-3012:54:20

50 1 67eab0000aa3e086e3cdd 72.78,191.60api-


2012-07-3012:54:47

50167eab0000aa3e086e3cdd 72.78.191.60api-saab.login.aol.com

TGS OK

2012-07-3012:54:48

50167eab0000aa3e086e3cdd 72.78.191.60api-


2012-07-30

12:55:25501 67eab0000aa3e086e3cdd 72.78.191.60

api-


2012-07-30

12:56:5350 167eabO00Oaa3eO86e3cdd 72.78.191.60


TGS OK

2012-07-30

12:57:225O167eab0OO0aa3e086e3cdd 72.78.191.60

api-


2012-07-3012:57:46

50 167eab0000aa3e086e3cdd 72.78.191.60api-

saab.login,aol.comTGS OK

2012-07-3012:59:45

SO 1 67eab0000aa3e086e3cdd 72.78.191.60api-


2012-07-3013:00:56

501 67eab0000aa3e086e3cdd 72.78.191.60api-


r-'' ¦ ir ¦ 1

le:///J|/200340%2010-08fl,roduction^hilapa312.ip_uas.html[l 1/8/2012 1:48:29 PM]

2012-07-3013:01:13

50 1 67eab0000aa3e086e3cdd 72.78.191.60api-


2012-07-3013:01:27

50 1 67eab0000aa3e086e3cdd 72.78.191.60api-


2012-07-30

13:01:4450167eab0000aa3e086e3cdd 72,78.191.60

api-


2012-07-30

13:02:0850167eab0000aa3e086e3cdd 72.78.191.60

api-


2012-07-3013:02:28

50 167eab0000aa3e086e3cdd 72.78.191.60api-


2012-07-3013:03:05

50 167eab0000aa3e086e3cdd 72.78.191.60api-saab.login.aol.com

TGS OK

2012-07-3013:03:14

501 67eab0000aa3e086e3cdd 72.78.191.60api-


2012-07-30

13:03:17501 67eab0000aa3e086e3cdd 72.78.191.60


TGS OK

2012-07-30

13:03:20 J50167eab0000aa3e086e3cdd 72.78.191.60

api-


2012-07-30

13:03:4050 1 67eab0000aa3e086e3cdd 72.78.191.60

api-


2012-07-3013:04:00

50 1 67eab0000aa3e086e3cdd 72.78.191.60api-saab.login.aol.com

TGS OK

2012-07-30| 13:06:41 50 1 67eab0000aa3e086e3cdd 72.78.191.60

api-saab.logm.aol.com

TGS OK

2012-07-31

11:42:3450167eab0000aa3e086e3cdd 72.78.191.60


TGS OK

2012-07-31

11:42:51501 67eab0000aa3e086e3cdd 72.78.191.60


TGS OK

2012-07-31

11:43:2550 167eab0000aa3e086e3cdd 72.78.191.60


TGS OK

2012-07-31

11:43:3550167eab0000aa3e086e3cdd 72.78.191.60


TGS OK

2012-07-31

11:44:0350 1 67eab0000aa3e086e3cdd 72.78.191.60


TGS OK

2012-07-31

11:45:20501 67eab0000aa3e086e3cdd 72.78.191.60

api-


2012-07-31

11:46:17501 67e^b0000aa3e086e3cdd 72.78.191.60


TGS OK

2012-07-3111:46:22

50 1 67eab0000aa3e086e3cdd 72.78.191.60api-


2012-07-3113:19:44

50 1 67eab0000aa3e086e3cdd 72.78.191.60api-saab.login.aol.com

TGS OK

2012-07-3113:19:49

50 1 67eab0000aa3e086e3cdd 72.78.191.60wp\-saab.login.aol.com

TGS OK

— i I I 1

ile:///J|/200340%2010-08/I>roduction/philapa312.ip_uas.html[l 1/8/2012 1 :48:29 PM]

2012-07-31

13:23:11501 67eab0000aa3e086e3cdd 72.78.191.60

api-

saab.login.aol.coniTGS OK

2012-08-03

16:04:59501bf5ab0000a77809201 la7 72.78.191.60 oar-artifect AS FAIL

2012-08-0316:06:29

501bf7050000aa4001649761 72.78.191.60 oar-artifect AS FAIT,

2012-08-03

16:06:48501bf7180000a88b093c81f8 72.78.191.60 sns_sso TGS OK

2012-08-0316.06:48

501bf71 80000a88f08f7dd52 72.78.191.60 client_sso TGS OK

2012-08-0316:06:48

501bf7180000a88b093c81f8

72.78.191.60 sns.webmail.aol.com TGS OK

2012-08-0319:15:07

501bf7180O00a88b093c81f8 72.78.191.60 sns.webmail.aol.com TGS OK

2012-08-04

11:34:41501d08d00000ac2101732796 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-0414:17:38

501d08d00000ac2101732796 72.78.191.60 sns.webmail.aol.com TGS OK

2012-08-0513:08:45

501d08d00000ac2101732796 72.78.191.60api-


2012-08-05

13:08:49501d08d00000ac2101 732796 72.78.191.60

api-


2012-08-0513:09:32

501 d08dO0O00ac2 1 0 1 732796 72.78.191.60api-


2012-08-05

13:09:4550 1 d08d00000ac2 1 0 1 732796 72.78.191.60

api-


2012-08-05

13:10:37501d08d00000ac21 01 732796 72.78.191.60

api-


2012-08-05

13:11:08501d08d00000ac2101732796 72.78.191.60

api-


2012-08-05

13:11:45501d08d00000ac2101732796 72.78.191.60

api-


2012-08-05

13:12:47501d08d00OO0ac21 01 732796 72.78.191.60

api-


2012-08-05

13:18:18501d08d00000ac2 101 732796 72.78.191.60

api-


2012-08-05

13:18:51501d08d000O0ac2101732796 72.78.191.60


TGS OK

2012-08-0513:18:59

50 Id08d00000ac2 1 0 1 732796 72.78.191.60api-


2012-08-05

13:19:56501d08d000O0ac2 1 0 1 732796 72.78.191.60

api-


2012-08-05

13:20:2450 1 d08d00000ac2 1 0 1 732796 72.78.191.60

api-


II i I 1

le;///J|/200340%2010-08/Production/|Aiiapa312.ip_uasJitml[l 1/8/2012 1:48:29 PM]

| 2012-08-0513:21:01

501d08d00000ac2101732796 72.78.191.60api-


2012-08-05

13:21:14501d08dO00O0ac2101732796 72.78.191.60

api-


2012-08-05

13:22:0050 Id08d00000ac2 1 01732796 72.78.191.60


TGS OK

2012-08-0513:22:18

501d08d00000ac2101732796 72.78.191.60api-saab.login.aol.com

TGS OK

2012-08-05

13:22:3350 Id08d00000ac2 1 0 1 732796 — ^ — *—.—„ — ——

72.78.191.60api-


2012-08-05

13:23:12501d08d00000ac2101732796 72.78.191.60

api-


2012-08-0513:24:10

501d08d00000ac2101732796 72.78.191.60api-saab.login.aol.com

TGS OK

2012-08-05

13:26:10501d08d00000ac2101732796 72.78.191.60

api-


2012-08-05

13:26:13501d08d00000ac2101732796 72.78.191.60

api-


2012-08-05

13:26:15501d08dOOOO0ac21 01732796 72.78.191.60

api-


2012-08-0513:26:30

501d08d00000ac21O1732796 72.78.191.60api-saab.login.aol.com

TGS OK

2012-08-0513:26:36

501d08d00000ac2 1 0 1 732796 72.78.191.60api-


2012-08-0515:28:50

501e91320000a8ac017bcca6 72.78.191.60 sns.webmailaol.com AS OK

2012-08-05

16:05:50501 d08d00000ac2 1 01 732796 72.78.191.60 sns.webmail.aol.com TGS OK

2012-08-0610:53:54

501 fa2420000ac20093cG60 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-06

11:03:35501 fa2420000ac20093cf360 72.78.191.60 sns.webmail.aol.com TGS OK

2012-08-0614:01:22

501 fce3 1 0000a88e044ddfb3 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-0614:22:21

501fd31d0000ac9401906540 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-06

16:58:56501£f7d00000ac2201 8be963 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-0704:05:55

50 1 ff7d00000ac220 1 8be963 72.78.191.60 sns.webmailaol.com TGS OK

2012-08-08

11:49:25502252440000a78c09b66afl 72.78.191.60 sns.webmailaol.com AS OK

2012-08-09

12:06:315023a7c70000aalc0667b0al 72.78.191.60 sns.webmailaol.com AS OK

r I ) —i ,

le:///Jl/200340%2010-08/Production/phiiapa312.ip_uas.htnil[l 1/8/2012 1 :48;29 PM]

2012-08-09

12:08:275023a83b0000a88eO47d526a 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-0917:34:10

5023f4910000aal709322f9d 72.78.191.60 sns.webmail.aol .com AS OK |2012-08-09

19:11:0350240b470000ac97089c8eG 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-0919:36:57

50240b470000ac97089c8ef3

72.78.191.60 sns.webmail.aol.com TGS OK

2012-08-10

01:24:2050240b470000ac97089c8eG 72.78.191.60 sns.webmail.aol.com TGS OK

2012-08-10

14:31:085025 lb2aO00OaclfD9b00768 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-10

19:57:13502567970000ac920665b089 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-1111:38:52

5026444c0000aala094b9908 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-11

11:40:43502644bb0000a88c09c7c5fd 72.78.191.60 sns.webmail.aol .com AS OK

2012-08-13

17:11:23502644bb0000a88c09c7c5fd 72.78.191.60 sns.webmail.aol.com TGS OK

2012-08-1411:15:49

502a33650000aa3fD95 1 0e3 9 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-14

17:05:12502644bb0000a88c09c7c5fd 72.78.191.60 sns.webmail.aol.com TGS OK

2012-08-14

17:46:49502a8fl)90000a88fl)994d837 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-15

11:06:23502b82afD000a888098c3bla 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-1511:49:49

502b8cdd0000aa3a0208 ld8c- —

72.78.191.60 sns.webmail.aol.com AS OK

2012-08-1611:26:18

502cd8da0000ac9809915c04 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-1611:51:31

502cdec30000a8b202179ece 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-1612:35:46

502cdec30000a8b202 1 79ece 72.78.191.60 sns.webmail.aol.com TGS OK

2012-08-18

00:35:27502ee34fD000ac8d05bl 36al 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-18

00:37:33502ee34fD000ac8d05bl36al 72.78.191.60 help.aol.com TGS OK

2012-08-1811:56:02

502£82d20000ac9809b5b284 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-20

12:11:555032296c0000a88809d2bbcf 72.78.191.60 account.login.aol .com AS FAIT,

n ¦¦¦ i i 1

le:///J)/200340%20I0-08/Production/philapa312.ip_uas.htinlIl 1/8/2012 1 :48:29 PM]

2012-08-20

12:13:355O3229efDO00ac1 d0987 1 93 1 72.78.191.60 sns.webinail.aol.coni AS OK

2012-08-20

13:08:045032369d0000a78e0af80532 72.78.191.60 account.login.aol.com AS FAIL

2012-08-20

13:13:28503229ef0000acld09871931 72.78.191.60 help.aol.cora TGS OK

2012-08-2013:14:24

503229efDO00acldO9871931 72.78.191.60 get.aol.com TGS OK

2012-08-20

13:30:4550323bcaOOOOaal b065b8a83 72.78.191.60 sns.webraail.aol.com AS OK

2012-08-2013:31:04

50323bca0000aalb065b8a83 72.78.191,60 help.aol.com TGS OK

2012-08-20

13:32:20503229efD000acld09871 93 1 72.78.191.60 bill.aol.com AS OK

2012-08-2013:42:36

50323ecb0000aal90250c74b 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-20

13:47:0050323fd40000ac91025b720a 72.78.191.60 sns.webmail.aol.cora AS OK

2012-08-20

13:54:3350323ecb0000aal90250c74b 72.78.191.60 help.aol.com TGS OK

2012-08-20

16:44:4450323ecb0000aal90250c74b 72.78.191.60 sns.webmail.aol .com TGS OK

2012-08-20

17:12:2350326ff70000ac8b09ac7ad8 72.78.191.60 sns.webmail.aol.cora AS OK

2012-08-2112:09:50

50337a8e0000ac880bf9fe93 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-21

12:13:0550337a8e0000ac880bf9fa93 72.78.191.60

api-


2012-08-21

12:13:1350337a8e0000ac880bf9fa93 72.78.191.60

api-saab.login.aol.cora

TGS OK

2012-08-2112:13:41

50337a8e0000ac880bf9fa93 72.78.191.60api-saab.login.aol.cora

TGS OK

2012-08-21

12:14:0550337a8e0000ac880bf9fa93 72.78.191.60

api-

saab.login.aol.coraTGS OK

2012-08-21

12:15:3150337a8e0000ac880bf9fa93 72.78.191.60


TGS OK

2012-08-21

12:16:035033 7a8e0000ac880bf9fa93 72.78.191.60

api-saab.login.aol.cora

TGS OK

2012-08-21

12:16:5750337a8e0000ac880bf9fa93 72.78.191.60

api-


2012-08-21

12:17:5050337a8e0000ac880bf9fa93 72.78.191.60

api-


2012-08-21

20:36:515033n630000a78b06dl28e0 72.78.191.60 sns.webraail.aol.com AS OK

r - ii I

Ie:///J|/200340%2010-08/Production/philapa312.ip_uas.htinI[n/8/2012 1:48:29 PM]

2012-08-2123:05:30

5034 143a0000ac8e0269df26 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-2200:13:57

5034143a0000ac8e0269df26 72.78.191.60 sns.webmail.aol.com TGS OK1

2012-08-2215:34:51

5034 1 43a0000ac8e0269dC6 72.78.191.60api-saab.login.aol.com

TGS OK

2012-08-22

15:35:355034143a0000ac8e0269df26 72.78.191.60

api-


2012-08-2215:35:53

5034 1 43a0000ac8e0269df?,6 72.78.191.60api-


2012-08-2215:36:08

5034 143a0000ac8e0269df26 72.78.191.60api-


2012-08-2215:36:23

5034143a0000ac8e0269df26 72.78.191.60api-


2012-08-22

15:36:505034143a0000ac8e0269d£26 72.78.191.60


TGS OK

2012-08-2215:37:14

5034143a0000ac8e0269df26 72.78.191.60api-saab.login.aol.com

TGS OK

2012-08-22

15:37:315034143a0000ac8e0269df26 72.78.191.60

api-


2012-08-22

15:39:505034 1 43a0000ac8e0269df26 72.78.191.60

api-


2012-08-22

15:42:275034143a0000ac8e0269df26 72.78.191.60

api-


2012-08-22

15:42:405034143a0000ac8e0269df26 72.78.191.60

api-


2012-08-22

19:53:39503538cl0000aalb0681ec3a 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-2220:08:00

503538cl0000aalb0681ec3a 72.78.191.60 sns.webmail.aol.com TGS OK

2012-08-2223:03:06

503538cl0000aalb0681ec3a 72.78.191.60api-


2012-08-2223:03:33

503538cl0000aalb0681ec3a 72.78.191.60api-


2012-08-22

23:03:44503538cl0000aalb0681ec3a 72.78.191.60

api-


2012-08-23

11:48:38503538cl0O00aalb0681ec3a 72.78.191.60 sns.webmail.aol.com TGS OK

2012-08-2311:59:32

5036 Iaec0000aa3a027d447f 72.78.191.60 account.login.aol.com AS FAIL

2012-08-23

12:03:3850361c 1 90000a7780a3fb39b 72.78.191.60 client_sso AS OK

2012-08-23

12:03:3850361c1a0000a78a0a90fefd 72.78.191.60 sns.webmail.aol.com TGS OK

) i — ' ¦ i n

Ie:///J|/200340%2010-08/Production^hilapa312.ip_uas.html[l 1/8/2012 1:48:29 PM]

2012-08-23

12:03:3850361 Cla0000a78a0a90fefd 72.78.191.60 sns_sso TGS OK

2012-08-2312:04:33

5036 1 c5O0OO0a7930795cc63 72.78.191.60 sns.webmail.aol.coni AS OK

2012-08-23

12:05:585036 1 ca50000a88e054683 1 9 72.78.191,60 sns.webmaiLaol.com AS OK

2012-08-2312:24:56

503621 170000a88d0acld4aa 72.78.191.60 sns.webmail.aol.coni AS OK

2012-08-2317:35:43

503669e50000ac 1 fl)a6ddd30 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-24

12:32:56503774770000ac900293d888 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-2512:48:56

5038c9b80000a78cOaafDe23 72.78.191.60 sns.webmail.aol .com AS OK

2012-08-2611:43:43

503774770000ac900293d888 72.78.191.60 sns.webmaiLaol.com TGS OK

2012-08-26

22:38:10503aa5500000a7770al 279f2 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-2712:08:19

503b63320000aclfl)a9de385 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-27

12:49:07503b6cc 1 0000aa36O2bOb5f2 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-2812:02:19

503cb34b0000a7770a288cc5 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-2812:16:36

503cb34b0000a7770a288cc5 72.78.191.60api-


2012-08-28

12:17:38503cb34b0000a7770a288cc5 72.78.191.60

api-


2012-08-2812:17:50

503cb34b0000a7770a288cc5 72.78.191.60api-


2012-08-28

12:18:07503cb34b0000a7770a288cc5 72.78.191.60

api-


2012-08-2812:18:30

503cb34b0000a7770a288cc5 72.78.191.60api-saab.login.aol.com

TGS OK

2012-08-2812:20:33

503cb34b0000a7770a288cc5 72.78.191.60api-


2012-08-28

12:20:35503cb34b0000a7770a288cc5 72.78,191.60

api-


2012-08-2812:20:37

503cb34b0000a7770a288cc5 72.78.191.60api-


2012-08-2812:20:43

503cb34b0000a7770a288cc5 72.78.191.60api-

saab.login.aol.com

' ¦ ¦——

TGS OK

2012-08-28

12:20:58503cb34b0000a7770a288cc5 72.78.191.60

api-


i i i I I 1

ley'//Jl/200340%201(W»8/Production/philfl)a312.ip_uas.html[l 1/8/2012 1:48:29 PM]

2012-08-2812:21:15

503cb34b0000a7770a288cc5 72.78.191.60api-


2012-08-2812:39:35

503cb34b0000a7770a288cc5 72.78.191.60api-


2012-08-2812:39:38

503cb34b0000a7770a288cc5 72.78.191.60api-


2012-08-28

12:39:57503cb34b0000a7770a288cc5 72.78.191.60


TGS OK

2012-08-2812:40:48

503cb34b0000a7770a288cc5 72.78.191.60api-

saab.login.aol.coinTGS OK

2012-08-28

12:41:02503cb34b0000a7770a288cc5 72.78.191.60

api-saab.login.aol.coni

TGS OK

2012-08-28

12:41:32503cb34b0000a7770a288cc5 72.78.191.60


TGS OK

2012-08-28

12:42:12 j503cb34b0000a7770a288cc5 72.78.191.60


TGS OK

2012-08-28

12:44:47503cb34b0000a7770a288cc5 72.78.191.60

api-


2012-08-28

12:45:52503cb34b0000a7770a288cc5 72.78.191.60

api-


2012-08-28

12:46:18503cb34b0000a7770a288cc5 72.78.191.60


TGS OK

2012-08-28

12:47:57503cb34b0000a7770a288cc5 72.78.191.60


TGS OK

2012-08-28

12:48:37503cb34b0000a7770a288cc5 72.78.191.60


TGS OK

2012-08-28

12:48:49503cb34b0000a7770a288cc5 72.78.191.60

api-


2012-08-28

12:48:56503cb34b0000a7770a288cc5 72.78.191.60


TGS OK

2012-08-28

12:49:00503cb34b0000a7770a288cc5 72.78.191.60

api-


2012-08-2812:49:41

503cb34b0000a7770a288cc5 72.78.191.60api-saab.login.aol.com

TGS OK

2012-08-28

12:50:08503cb34b0000a7770a288cc5 72.78.191.60

api-


2012-08-2812:50:38

503cb34b0000a7770a288cc5 72.78.191.60api-


2012-08-28

15:32:11503ce47b0000ac9207629d3f 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-28

20:08:46503d254e0000a88a00da6884 72.78.191.60 sns.webmail ,aol.com AS OK

2012-08-29

12:12:28503eO72c0OO0aal 902d4c50f 72.78.191.60 sns.webmail.aol.com AS OK

!r ir i ¦¦ i i I—:1

iIey'//Jl/200340%2010-O8/Pro*iction/i*il^>a3 12.ip_uas.htinl[l 1/8/2012 1 :48:29 PM]

2012-08-29

19:38:325O3e6fb8O000ac93066a5233 72.78.191.60 sns.webniail .aol.com AS OK

2012-08-3017:56:37

503fa9540000a88b0ac56f7a 72.78.191.60 sns.webmail.aol.com AS OK

2012-08-3112:31:12

503fa9540000a88b0ac56f7a 72.78.191.60api-


2012-08-3112:31:20

503fa954O000a88b0ac56f7a 72.78.191.60api-


2012-08-3112:31:30

503fa954OO0Oa88bOac56f7a 72.78.191.60api-


2012-08-3112:31:58

503fa9540000a88b0ac56f7a 72.78.191.60api-


2012-08-31

12:32:21503fe9540000a88b0ac56f7a 72.78.191.60

api-


2012-08-3112:32:31 _j

503fa9540000a88b0ac56f7a 72.78.191.60api-


2012-08-3112:33:12

503fe954000Oa88b0ac56f7a 72.78.191.60api-


2012-08-31

12:33:34503fa9540000a88b0ac56f7a 72.78.191.60

api-


2012-08-3112:33:49

503fa9540000a88b0ac56f7a 72.78.191.60api-saab.login.aol.com

TGS OK

2012-08-31

12:37:34503fe9540000a88b0ac56f7a 72.78.191.60

api-


2012-08-3112:37:48

503fa9540000a88b0ac56f7a 72.78.191.60api-


2012-08-31

12:38:40503fa9540000a88b0ac56f7a 72.78.191.60

api-


2012-08-31

12:39:01503fa9540000a88b0ac56f7a 72.78.191.60

api-


2012-08-3113:17:29

5040b9690000aal 70a6bc2fl) 72.78.191.60 sns.webmail.aol.com AS OK

2012-09-05

12:23:395047444b0000ac980ac4ced6 72.78.191.60 sns.webmail.aol.com AS OK

2012-09-0512:36:42

5047475a0000a78f0ble9bl7 72.78.191.60 sns.webmail.aol.com AS OK

2012-09-06

13:28:285O47475a00O0a78fDbl e9b 1 7 72.78.191.60 help.aol.com TGS OK

2012-09-0712:18:13

5049e6050000ac940368382c 72.78.191.60 sns.webmail.aol.cora AS OK

2012-09-0813:09:04

504b436d0000a7770ac83efe 72.78.191.60 sns.webmail.aol.com AS OK

2012-09-1012:03:33

504dd71 50000a88e0640300a 72.78.191.60 sns.webmail.aol.com AS OK

¦¦ i , !

i i ¦¦ ~i

Ie:///J|/200340%2010-08/P«)duction/phil«)a3I2.ip_uasJitnil[n/8/2012 1:48:29 PM]

2012-09-1116:17:56

504b436d0000a7770ac83efe 72.78.191.60api-


2012-09-1116:18:13

504b436d0000a7770ac83efe 72.78.191.60api-


2012-09-1116:18:43

504b436d0000a7770ac83efe 72.78.191.60api-


2012-09-1116:19:05

504b436d0000a7770ac83efe 72.78.191.60api-


2012-09-11

16:19:30504b436d0000a7770ac83efe 72.78.191.60


TGS OK

2012-09-11

16:20:59504b436d0000a7770ac83efe 72.78.191.60

api-


2012-09-1212:40:00

505082a00000aala0b0f7277 72.78.191.60 sns.webmail.aol.com AS OK

2012-09-1323:18:50

5O5269da0OO0aa3aO3bO3O33 72.78.191.60 sns.webmail.aol.com AS OK

2012-09-14

20:23:385053922d0000a78a0bd020ff 72.78.191.60 account.login.aol.com AS FAIT,

2012-09-14

20:25:23505392b30000aa390b53c363 72.78.191.60 sns.webmail.aol.com TGS OK

2012-09-14

20:25:23505392b30000a79308d6c9d3 72.78.191.60 client_sso AS OK

2012-09-1420:25:23

505392b30000aa390b53c363 72.78.191.60 sns_sso TGS OK

2012-09-14

20:25:44505392b30000aa390b53c363 72.78.191.60 help.aol.com TGS OK

2012-09-1601:14:09

505527e 1 0000aa3c0b0f6129 72.78.191.60 sns.webmail.aol.com AS OK

2012-09-22

12:07:02505da9e50000ac8e042e363 1 72.78.191.60 sns.webmail.aol.com AS OK

2012-09-2311:27:07

505eO0a0000a7910435e98c 72.78.191.60 sns.webmail .aol.com AS OK

2012-09-2511:30:08

506195c00000ac890462e2b9 72.78.191.60 sns.webmail.aol.com AS OK

2012-09-26

20:41:335063687d0000a78d09ae6177 72.78.191.60 .sns.webmail.aol.com AS OK

2012-09-2717:37:43

50648ee70000a8b30c2b6e78 72.78.191.60 sns.webmail.aol.com AS OK

2012-09-2914:55:44

50670bfD0000a88a02a6381 7 72.78.191.60 sns.webmail .aol.com AS OK

2012-09-3019:43:32

5068aOe20000a790095094cl 72.78.191.60 sns.webmail.aol.com AS OK

2012-10-02

12:09:34506ad97d0000aa3d094 14604 72.78.191.60 sns.webmail.aol.com AS OK

-- ¦¦ ¦ r 1 ¦ i

ile;///J|/200340%2010-08/Pro<hiction/philiipa312.ip_uas.html[l 1/8/2012 1 :48:29 PM]

2012-10-04

21:02:55506df97fD000a79404e5d2bd 72.78.191.60 sns.webmail.aol.com AS OK

2012-10-06

18:39:3950707aeb0000a88e07c 1 ecdl 72.78.191.60 sns.webmail.aol,com AS OK

2012-10-06

22:49:075070b5620000a7940501al 13 72.78.191.60 sns.webmail.aol.com AS OK

2012-10-07

22:14:345070b5620000a7940501al 13 72.78.191.60

api-


2012-10-07

23:44:20null 2.50.135.131 mail/smtp AS FAIL

2012-10-0723:44:20

null 2.50.135.131 mail/smtp AS FAIL

2012-10-1200:28:49

507764410000aa3a05426b30 72.78.191.60 sns.webmail.aol.com AS OK

2012-10-1411:36:56

507aa3d80000ac93099739c6 72.78.191.60 sns.webmail.aol.com AS OK

2012-10-1611:41:24

507d47e30000a791 057e7fcf 72.78.191.60 sns.webmail.aol.com AS OK

2012-10-1822:41:03

5O8O857fD00Oaa3e0cffb3d9 72.78.191.60 sns.webmail .aol.com AS OK

2012-10-1912:44:51

508 14b430000ac9405d020db 72.78.191.60 sns.webraail.aol.com AS OK

2012-10-1917:02:34

508 1 87aa0000a78b0a626a54 72.78.191.60 sns.webmailaol .com AS OK

2012-10-22

18:27:36508590 1 8O000ac960a683 1 6a 72.78.191.60 sns.webmail.aol.com AS OK

2012-10-2218:34:07

50859 1 9fD000ac 1 bOdfl2673 72.78.191.60 sns.webmail.aol.com AS OK

2012-10-2311:49:55

508684630000a8890dcc2Od 72.78.191.60 sns.webmail.aol.com AS OK

2012-10-24

11:11:465087ccGOO00ac9O06O0d209 72.78.191.60 sns.webmail.aol.com AS OK

2012-10-26

10:41:31508a68db0000ac8b0e22cl93 72.78.191.60 sns.webmail.aol.com AS OK

2012-10-2613:49:52

508a68db0000ac8b0e22c 1 93 72.78.191.60api-


2012-10-2623:29:50

508a68db0000ac8b0e22cl93 72.78.191.60 sns.webmail.aol.com TGS OK

2012-10-2716:28:50

508c0bc20000aa390ecb3b35 72.78.191.60 sns.webmail.aol.com AS OK

2012-10-3022:07:09

50904f8d0000a88c0e540d07 72.78.191.60 sns.webmail.aol.com AS OK

2012-10-3109:42:24

5090f2800000a8adOb8f8b7e 72.78.191.60 sns.webmail.aol.com AS OK

— ¦- f*1

le:///Jl/200340%2010-08/I,roducdoii/philapa3 12.ip_uasJitml[l 1/8/201 2 I ;48:29 PM]

12012-10-311 15:34:08 509 1 44f00000ac8f0d82cb8a 72.78.191.60 sns.webtnail.aol.coin AS OK

2012-10-31» 16:53:28

509157880000a7780e23d696 72.78.191.60 sns.webmail.aol.com AS OK

2012-11-01

10:13:3650924b500000aa410ec6a0d4 72.78.191.60 sns.webmail .aol .com AS OK

2012-11-02

11:08:2550924b500000aa4 1 0ec6a0d4 72.78.191.60 sns.webmai l.aol .com TGS OK

2012-11-02

20:45:27509430e70000aal906806774 72.78.191.60 sns.webmail.aol.cora AS OK

2012-11-05

11:36:495097a4d00000a8b2069 laa54 72.78.191.60 sns.webmail.aol.com AS OK

!:///J|/200340%2010-08/Productioii/phiIapa312.ip_uas.html[l 1/8/2012 1:48:29 PM]

Account Information for tfaesia

Account Information for thesia

NoV NoG

PhilaPa312

Deserie

NoGamesNo

Thesia

AL19130

Dyce0961

Trubblinparadise

AWORDTOTHDEW1SE

SweetyForSpoilin

PHILA PA 19130

Danella

al9128

JILL 199999

Jaded by games

LindleyRednick

Albert Whitehead

Screen Names

0873675978

0595822734

0864406624

0245434301

0733123118

0355035776

0061926271 PELETED)

0107817894 (DELETED)

0113417480 PELETED)

01 14305970 PELETED)

0133729004 PELETED)

0152680979 PELETED)

0159673989 PELETED)

0230755682 PELETED)

0285493004 pELETED)

0349161951 PELETED)

0477717067 PELETED)

BEWARE SUNDANCE 0526593736 PELETED)

John08081

The Litigators

NO FABULATION

LydiaMedany

Ellen Moylan

Sundance Vac

J1LL19999

MARIA STORCH

JohnF08081

0528572984 PELETED)

0589152013 pELETED)

0660796499 PELETED)

0723085349 pELETED)

0756586785 PELETED)

0760551349 PELETED)

0905217114 pELETED)

0963954714 PELETED)

1070440919 PELETED)

Address Information

Name ALBERT WHITEHBAD


City Philadelphia

State/Zip PA 19130

Country Code US


Daytime Phonel 2 1 5235 1 308 j|• i 1

ite^7/J|/200340%2010-O8/Production/ttiesia.acct_details.html[l 1/8/201 2 1:48:31 PM]

Account Information for thesia

' I Service ||AOL

Status Information

Account Status *•ACTIVE**


Account Type JlNORMAL

BIDCountiy us

le:///J|/200340%2010-08/Production/fliesia.acet_details.htinl[l 1/8/2012 1:48:31 PM]

Client IP Sessions for thesia

StartTime

(UTC)

| EndTime

(UTC)

S^noi

EDSession ID

UserGroup

GuestSession


AccountNetwork

AddressDialedFrom

IP

DAHA

2012071313:48:02

2012071513:48:44

6 5002cal20f4cbdb2005ef2aa Normal 0 4343 19 873675978 72.78.191.60 null null

2012071611:50:40

2012071611:51:07

6 5004001 10fl0da0c005a0bfb Notmal 0¦

4343 19 873675978 72.78.191.60 null null

2012071712:38:02

201207171238:33

6 5O055caa033a3c730O478eOf Nonnal 0 4343 19 873675978 72.78.191.60 null null

2012072012:54:47

2012072012:55:30

6 500955171 ac2697102c6fee5 Normal 0 4343 19 873675978 72.78.191.60 null null

2012080114:57:14

201208011500:56

6 50 1943ca0f33e05000922el b Nonnal 0 4343 19 873675978 72.78.191.60 null null

2012080522:37;39

2012080522:38:18

6 501ef5b30f2807f2003al366 Nonnal 0 4343 19 873675978 72.78.191.60 null null

2012080610:54:55

2012080610:55:20

6 501fe27fDf39700100a697ef Nonnal 0 4343 19 873675978 72.78.191.60 null null

20120820

14:32:07201208201433:06

6 50324a670f46o4cfD0d247fD Nonnal 0 4343 19 873675978 72.78.191.60 null null

2012082411:4705

20120824

11:47:466 503769b903 1 56al e00cf3 603 Normal 0 4343 19 873675978 72.78.191.60 null null

2012082622:36:18

20120826

22:37:325 503aa4e20f474b0c00ec3ab0 Nonnal 0 4343 19 873675978 72.78.191.60 null null

2012082715:49:11

20120827 ,15:5000

503b96f71ab086c80354d284 Nonnal o 4343 19 873675978 72.78.191,60 null null

2012090612:15:30

20120906 ,12:1839 ° 504893e20301df8d00ed2c6f Normal 0 4343 19 873675978 72.78.191.60 null

—

null

2012090614:56:50

20120906 ,15:0322 0 5048b9b21al2054103644981 Normal 0 4343 19 873675978 72.78.191.60 null null

20120913 :12:11:45

J0120913 ,12:16:42 " n h.

5O5Icd81OfD659abO11902fd Nonnal 0 4343 19 873675978 72.78.191.60 null null

20121002 :18:01:01

J0121002 ,8:0128 0 506b2bdd02803e09004aa098 Nonnal 0 4343 1 19 873675978 72.78.191.60 null ^j|

By//J|/200340%20I0-08/Pro<toeliOB/tliiiia.ip_»e«iioniJitinl[ll/8«012 l:4«:3I PM]

UAS Data for thesia

Event Time(UTC)

Session ID IP Address Service NameEventType

EvenrAction

2012-07-2517:29:11

null 2.187.26.100 mail/smtp AS FATT,

2012-08-0114:58:07

501 943ffD000a793065713f6 205.188.112.3api-saab.login.aol.com

TGS OK

2012-08-0114:58:07

501943ff0000a793065713f6 205.188.112.3api-saab.login.aol.com

TGS OK

2012-08-1615:06:17

null 178.121.87.185 mail/smtp AS FATT,

2012-09-1312:13:12

505 Icdd80000ac8b0b032ee2 64.12.112.37api-


2012-09-1312:13:12

505 1 Cdd80000ac8b0b032ee2 64.12.112.37api-


2012-09-1312:13:54

505 1 Cdd80000ac8b0b032ee2 64.12.116.8 help.aol.com TGS OK

2012-09-1312:15:41

505 1Cdd80000ac8b0b032ee2 64.12.116.9 sns.mailsvc.aol.com TGS OK

ile:///JT/200340%2010-08/Production/lhesiB.ip_uas.htinl[l 1/8/2012 1:48:32 PM]

Google Inc. i -„r(l{ ^ 1 H iK-"" Fbk: 650.887 16731600 Amphitheatre Parkway X_i" V^ ^SL !L\^ 90ogle-legal-supoort@9oog(e.comMountain View, California 94043 {^J ' www.google.com

November 6, 2012

Via Email andExpress [email protected]

Donna M. WalshMyers, Brier & Kelly, LLP425 Spruce St, Ste 200Scranton, Pennsylvania 18S02570-342-6100

Re: Sundance Vacations, Inc v. Albert Whitehead, Superior Court of California,County of Santa Clara, 112CV233932 (Internal Ref. No. 271483)

Dear Donna M. Walsh:

Pursuant to the Subpoena issued in the above-referenced matter, we have conducted adiligent search for documents and information accessible on Google's systems that are responsiveto your request. Our response is made in accordance with state and federal law, including dieElectronic Communications Privacy Act. See 18 U.S.C. § 2701 et seq. By this response, Googledoes not waive any objection to further proceedings in this matter.

We understand that you have requested customer information regarding the user accountsspecified in the Subpoena, which includes the following information: (1) Subscriber informationfor the Blogger accounts SUNDANCEVACAnONSCCP.BLOGSPOT.COM,NASKIEWICZ23LOGSPOT.COM, EMUELLE1 .BLOGSPOT.COM,SUNDANCEVACAnONSMANIPULAnON.BLOGSPOT.COM.

To the extent any document provided herein contains information exceeding the scope ofyour request, protected from disclosure or otherwise not subject to production, ifat all, we haveredacted such information or removed such data fields.

Finally, Google requests reimbursement in the amount of$125 for reasonable costsincurred in processing your request. Please forward your payment to Google Custodian ofRecords, at the address above and please write the Internal Reference Number (271483) on yourcheck. The federal tax ID number for Google is 77-0493581.

Very truly yours,

Andrew Chung

Legal Investigations Support

Google Inc. A i" sj1600 Amphitheatre Parkway N^^JJ V-^

.•^ Fax: 650.887 1673-Vi^ [email protected]

Mountain View, California 94043 (£_jy www.google.com

CERTIFICATE OF AUTHENTICITY

I, Andrew Chung, certify:

1. 1 am a Custodian of Records for Google Inc. ("Google"), located in Mountain View, California.

I am authorized to submit this Certificate ofAuthenticity on behalfof Google in response to a

Subpoena dated October 12, 2012 (Google Inc. Internal Reference No. 271483) in the matter of

Sundance Vacations, Inc v. Albert Whitehead. I have personal knowledge ofthe following facts

and could testify competently thereto ifcalled as a witness.

2. The documents contained in Exhibit A and attached hereto are true and correct copies of

records pertaining to the blogs SUNDANCEVACAnONSCCP.BLOGSPOT.COM,

NASKIEWICZ2.BLOGSPOT.COM, EMUELLEl.BLOGSPOT.COM,

SUNDANCEVACATIONSMANIPULATION.BLOGSPOT.COM.

3. The documents attached hereto reflect records made and retained by Google. The records were

made at or near the time the data was acquired, entered, or transmitted to or from Google; the

records were kept in the course of a regularly conducted activity ofGoogle; and the making of the

records were a regular practice of that activity.

I declare under penalty ofperjury under the laws of the State ofCalifornia that the foregoing is

true and correct.

DATED: November 6, 2012

Andrew Chung, Custodian ofRecords for Google Inc.

Google Inc.

1600 Amphitheatre ParkwayMountain View, California 94043

Fax- 650.887 [email protected]

www.google.conn

EXHIBIT A

URL; http://sundancevacationsccp.blogspot.com/

Owner;

User Key: 695618005525Username: [email protected] Name: Dolores

Email: [email protected] created: 2009-02-05X14:40: 16.596Z

Google Confidential and Proprietary10f4

URL; http://naskiewicz2.blogspot.com/

Owner;

User Key: 695618005525Usemame: johnf71 [email protected] Name: DoloresEmail: [email protected] created: 2009-02-05X14:40: 16.596Z

Google Confidential and Proprietary2 of 4

URL; http://emuellel.blogspot.coni/

Owner;

User Key: 244659942151Usemame: emuellel @gmail.comDisplay Name: Eric MuellerEmail: [email protected]

Google Confidential and Proprietary3of4

URL;http://sundancevacationsmanipulation.blogspot.con]/

Owner;

User Key: 695618005525Usemame; [email protected] Name; DoloresEmail: [email protected] created: 2009-02-05714:40: 16.596Z

Google Confidential and Proprietary4oM

Exhibit G

SUBP-0351 ATTORNEV OR PARTY WITHOUT ATTORNEY (Namo. S/a/» Bar nunilwr. antl address):LDonna M. Walsh, Esq. (PA SBN 74833)[Myers, Brier & Kelly, LLP425 Spruce St, Ste. 200, Scranton, PA 18502

TELEPHONE NO,: (5 70) 342-6100 FAX NO.:

E-MAIL ADDRESS;

! attorney for (,**»): PlaintiffSUNDANCE VACATIONS, INC.

FOR COURT USE ONLY

Court for county In which dlscovBry Is to be conducted: SAN MATEO

SUPERIOR COURT OF CALIFORNIA, COUNTY OF SAN MATEObiKhtr address.- 400 County Center

MAILING ADDRESS:

aTY.STATH.ANOBPCOOE: Redwood Ci CA 94053

BRANCHNAME: Main Courthouse

Court in which action is pending: COURT OF COMMON PLEAS

Name of Court: LUZERNE COUNTY, COMMONWEALTH OF PAstreetaddress: 200 No. River Rd.MAILING ADDRESS;

CTY.STATE.ANDZIPCODE Wilkes.B pA I8701

COUNTRY: USA

PLAINTIFF/PETITIONER: SUNDANCE VACATIONS, INC.

DEFENDANT/RESPONDENT: ALBERT WHITEHEAD

SUBPOENA FOR PRODUCTION OF BUSINESS RECORDS

IN ACTION PENDING OUTSIDE CALIFORNIA

CASE NUMQER (of BcBon pendns outsMa Calffiimla):

12-CVr8006

THE PEOPLE OF THE STATE OF CALIFORNIA, TO (name, address, and telephone number of deponent, If known):

CUSTODIAN OF RECORDS FOR FACEBOOK, INC., 1601 Willow Rd., Menlo Park, CA 94025

1. YOU ARE ORDERED TO PRODUCE THE BUSINESS RECORDS described in Item 3, as follows:

To (name of deposition officer): Tony Klein, Notary Public

On (date): November 26, 2012

Location âddress;; 1601 Willow Rd., Menlo Park, CA 94025Atfl/me); 10:00 AM

Do not release the requested records to the deposition officer prior to the date and time stated above.

a. I I by delivering a true, legible, and durable copy of the business records described In item 3, enclosed in a sealed inner

wrapper with the title and number of the action, name of witness, and date of subpoena clearly written on it The inner

wrapper shall then be enclosed in an outer envelope or wrapper, sealed, and mailed to the deposition officer at the

address in item 1 .

b. I y I by delivering a true, legible, and durable copy of the business records described in item 3 to the deposition officer at the

witness's address, on receipt of payment in cash or by check of the reasonable costs of preparing the copy, as determined

under Evidence Code section 1563(b).

c. I I by making the original business records described in item 3 available for inspection at your business address by the

attorney's representative and permitting copying at your business address under reasonable conditions during normal

business hours.2. TTie records are to be produced by the date and time shown in item 1 (but not sooner than 20 days after the issuance of the

deposition subpoena, or 15 days after service, whichever date is later). Reasonable costs of locating records, making them

available or copying them, and postage, if any, are recoverable as set forth in Evidence Code section 1563(b). The records must be

accompanied by an affidavit of the custodian orother qualified witness pursuant to Evidence Code section 1561.

3. The records to be produced are described as follows (if electronically stored information is demanded, the form or forms In which

each type of information Is to be produced may be specified):

See attachment to PA Subpoena, Attachment 3

I x I Continued on Attachment 3 (use form MC-025).

4. Attorneys of record in this action or parties without attorneys are (name, address, telephone number, and name ofparty

represented):Matthew J. Carmody, Esq., Elliott Greenleaf& Dean, 39 Public Sq., Ste 1000, Wilkes-Batrc,

I I Continued on Attachment 4 (use form MC-025). Pag<1 , ^2

Form Adopted for Mandatory UsaJudicial Caunc9 of CaUfonHa

SUBP-03!i (Row. Jsnunty 1. 20123

SUBPOENA FOR PRODUCTION OF BUSINESS RECORDS


Code of CM Pmceduns, §$ 2029.100-3029,900,

2020.410-2020.440;Sovemmenl Coda, $ 08097.1

"ttw.courts.ca.goir

_ puaintiff/petitioner; SUNDANCE VACATIONS, INC.

DEFENDANT/RESPONDENT: ALBERT WHITEHEAD

SUBP-035CASE NUMBER (ofaction pendng aubide Culifania):

5. If you have been served with this subpoena as a custodian of consumer or employee records under Code of Civil

Procedure section 1985.6 and a motion to quash or an objection has been served on you, a court order or agreement of

the parties, witnesses, and consumer or employee affected must be obtained before you are required to produce

consumer or employee records.

6. r~~l Other terms or provisions from out-of-state subpoena, if any (specify):

See attached PA Subpoena

I I Continued on Attachment 6 fuse form MO025).

DISOBEDIENCE OF THIS SUBPOENA MAY BE PUNISHED AS CONTEMPT BY THIS COURT. YOU WILL ALSO BE LIABLE

. „ FOR THE SUM OF $500 AND ALL DAMAGES RESULTING FROM YOUR FAILUR^TQ OBEY.

of re(SIQNi ISSUINQ SUBPOENA)

^//t-PROOF OF SERVICE OF SUBPOENA FOR

..,. :&£ PRODUCTION OF BUSINESS RECORDS1 . I served this Subpoena forProduction ofBusiness Records In Action Pending Outside California by personally delivering a copy

to the person served as follows:

a. Person served (name):

b. Address where served

c. Date of delivery: d. Time of delivery:

e. Witness fees and mileage both ways (check one):

(1)1 I were paid. Amount: $

(2) | I were not paid.

(3) | I were tendered to the witness's public entity employer as required by Government Code section 68097.2. The

amount tendered was (specify): $

f. Fee for service: $

I received this subpoena for service on (date):

3. I ] I also served a completed ProofofService ofNotice to ConsumerorEmployee and Objection (form SUBP-025)

by personally delivering a copy to the person served as described In 1 above.

4. Person serving:

a. I I Not a registered California process serverb. j j Califomla sheriff or marshalc. i I Registered California process serverd. I I Employee or independent contractor of a registered California process server

e. I I Exempt from registration under Business and Professions Code section 22350(b)

f. I I Registered professional photocopier9- I I Exempt from registration under Business and Professions Code section 22451

h. Name, address, telephone number, and, if applicable, county of registration and number

I declare under penalty of perjury under the laws of the State of

California that the foregoing is true and correct.

Date:

(SIGNATURE)

(For California sheriff or marshal use only)

I certity that the foregoing Is true and correct.

Date:

(SfQNATUREl

SUBP-03S [ [Rev. January 1, 201211 SUBPOENA FOR PRODUCTION OF BUSINESS RECORDS


Page Z of 2

Attachment 3

Commonwealth ofPennsylvania

oi

Is 4039

vs.

AT.RF.RTWHTTFHF.An

12-CV-8006

TO;

SUBPOENA TO PRODUCE DOCUMENTS OF THINGS

FOR DISCOVERY PURSUANT TO RULE 4009.22

Custodian ofRecords, Facebook, Inc.; 1601 Willow Road; Merdo Park, CA 94025

(Name of Person or Entity)

. Within twetrty*^©) oaysafter service of this subpoena, you are ordered by the court to produce the

following documents or things:

See Addendum attached hereto as Exhibit "A51, as well as the attached

Certificate ofCompliance. The subpoena is returnable on Qctobatll , 201 2 @ 10:00 am (pacific

standard time).November 26, 2012 Wjj/

atFacebook Inc.; 1601 Willow Road; Menlo Park, CA 94025

(Address)

You may deliver or mail legible copies of the documents or produce things requested by this subpoena,

together with the certificate of compliance, to the party making this request at the address listed above. You

have the right to seek in advance the reasonable cost of preparing the copies or producing the things sought

If you fail to produce the documents or things required by this subpoena within twenty (20) days after

its service, the part)' serving this subpoena may seek a court order compelling you to comply with it.

This subpoena was issued at the request of the following person:

BYTHE.COpRl^

By(Prothonotary)

DATE:

Seal of the Court

¦Doima A-.-Walsh^ EsquireAttorney's Name

> rv-': 74833

Identification Number

Myers, Brier & Kelly, LLP, 425 Spruce

Street, Swte 200, Scranton, PA 1 RmAddress

(570) 342-6100

TelephongNumberPlaintiff Sundance

Attorney for Vacations, Inc.

00052669

EXHIBIT MAM

Custodian ofRecords, Facebook, Inc.

DEFIWmON

As used here, the term "document" includes, but is not limited to, any

writing, graphic matteror other tangible thing, whether prmtedy.recorded, produced

by any other process, or written orproduced by hand, including, but not limited to,

letters, reports, other written communications, electronic messages, metadata,

electronic records, electronic files, correspondence, telegrams, memoranda,

summaries, records or itineraries, forecasts, analyses, lab reports, projections, work

papers, photographs, tape recordings, models, graphs, statistical statements,

notebooks, charts, plans, drawings, artwork, brochures, summaries ofnegotiations,

press releases, intra-office or inter-company communications, routing slips or the

like, promotional or advertising materials, marginal comments appearing on any

document, invoices, shipping papers, labels, packaging, purchase orders, contracts,

printed publications, minutes or records ofmeetings, minutes or records of

conferences, agendas, expressions or statement ofpolicy, lists ofperson attending

meetings or conferences, reports and summaries of investigations, opinions or

reports of consultants, studies, evaluations, records, sounds recordings, motion .

pictures, models, sketches, video tapes, proofs, photographs, films, computer input

or output, recordings on disk or tape, archive records, whether recorded on volatile

or nonvolatile media, hard disks or floppy disks, by magnetic or electronic

impulse, e-mail messages whether or not printed or in hard copy, or any other

writing including draft and revisions.

BOCUMENTS REQUESTED

1 . Any and all documents that refer or relate to or identify the

originating internet protocol (IP) address(es) and timestamps for activity on the

Facebook page titled "Boycott Sundance Vacations"

rhttp://www.facebook.com/#!/pages/Boycott-Sundance-

{00053256} 1

Vacations/l 72805 1 72735470) and any and all documents that refer or relate to or

identify the administrators) of this page^ including, but not limited to, for each of

the foregoing individuals, all administrator lists, account applications, subscriber

information, user profiles, billing information, billing records, administrator

records, access records, activity logs and records of session times and durations.

2. Any and all documents that refer or relate to or contain log or

activity information for the "Boycott Sundance Vacations" page, including, but not

limited to, documents identifying the internet protocol (IP) address(es) associated

with persons administering and/or posting to the page and time stamps showing the

date and time ofall activity on the page.

3 . Any and all documents that refer or relate to or contain

subscriber information for the administrators) of the "Boycott Sundance

Vacations" page, including but not limited to, for all such individuals, all account

information, user profiles, account creation records, login information and page set

up records.

4. Any and all documents that refer or relate to or contain

subscriber and/or user information and/or profiles relating to John Flannagan

and/or JohnF0808 1 @aol.com and/or Elaina Monteleone

rhttp://www.facebook.coin/#!/elaina.monteleone).

{00053256} 2

SUBP-0301 ATTORNEY OR PARTY WITHOUT ATTORNEY INmo, Sola Barattnftor, ««« mfdressj.-Laonna A. Walsh, Esq. (PA SBN 74833)[Myers, Brier & Kelly, LLP425 Spruce St., Ste. 200, Scranton, PA 18502

TELEPHONENO; (570) 342-6100 FAXND.fOptorm.-

E-MAIL ADDRESS <Qp(/o/)a9:

attorney FOR (Atanii.,1: Plaintiff SUNDANCE VACATIONS, INC.

FOR COURT USE ONLY

EMD0RSE0 FILEDSAW i\MT£0 COUNTY

OCT 2 4 Z012

Oiori', of ihti Subflilor QoUfJ

Court for county in which discovmy Is to be conducted: SAN MATEO

SUPERIOR COURT OF CAUFORNIA, COUNTY OF SAW MATEOstreetaddress: 400 County Center

MAIUNS ADDRESS:

crrvand zip code: Reciwood city/ CA 94063

1 BRANCH NAME; Main COUrthOUSe

\ Court In which action ts pending: COURT OF COMMON PLEASName of Court: LUZERNE COUNTY, COMMONWEALTH OF PENNSYLVANIA

streetaddress: 200 North River St.

MARJNG ADDRESS;

criY,sTATE,ANDZi(>coDE:wilkes-Barre, Pennsylvania 1B701COUNTRY: USA

PLAINTIFF/PETITIONER: SUNDANCE VACATIONS, INC.

i DEFENDANT/RESPONDENT; ALBERT WHITEHEAD

CAUR3RNIA CASE NUMBER (If any asdgneil by court)

APPLICATION FOR DISCOVERY SUBPOENAIN ACTION PENDING OUTSIDE CALIFORNIA

CASE NUMBER (of adlon ponding oubdda Calitemio):

12-CV-8006

t. Appiicant Cname;.- SUNDANCE VACATIONS, INC.

fTl Plaintiff | I Petitioner I I Defendant I I Respondent I I Other fspecflyj;

in the above action.

Is (oheck one):

2. Applicant requests that this court issue a subpoena for discovery under Code of Civil Procedure sections 2029.100 - 2029.900

to (name and address ofdeponent orperson In control ofproperly):

Facebook, Inc., 1601 Willow Road, Menlo Park, CA 94025

3. Attached is (chec/c onej: ( / I the original I | a true and correct copy of the document from the court in which the action

is pending that requires the person in 2 to (check all that apply);

a, | I attend and give testimony at a deposition;

b, njT] produce and permit Inspection and copying of designated materials, Information, or tangible things in the possession,

custody, or control of the deponent;

c, | | permit the inspection of premises under the control of Ihe deponent.

4. Applicant submits with this application a proposed subpoena that Includes terms identical to those in the document from the

out-of-state court. (Code of Civil Procedure section 2029,300(d).)

I declare under penalty of petjury under the laws of the State of California that the foregoing is true and correct.

Date: October 23/ 2012

Donna A. Walsh, Esq. fe> fayîU(TYPE OR PRWT NAME) (SIGNATURE OF ATTORNEY OR PARTYWITHOUT ATTORNEY)

Note: This application must be accompanied by the fee specified in Government Code section 70626.

A discovery subpoena must be personally served on the deponent in compliance with California law, Including

Code of Civil Procedure section 1985,

FoimAtfopled forMandolixyUMJudicial CouncO of CalfomlB

8U8P-030 [NowJonwuy 1,2010]

APPLICATION FOR DISCOVERY SUBPOENA


Codu of CM Piocedim SS 2029.10l>-900

mnv.courM'o.casw

oj renn

County ofLuzerne

SIMDAIJCE VAr.ATTONS, TNC.

vs,

ATBRRTWHTTTRHKAD

la 4039

12-CV-8006

TO;

SUBPOENA TO PRODUCE DOCUMENTS OF THINGS

FOR DISCOVERY PURSUANT TO RULE 4009.22

Custodian ofRecords, Facebook, Inc.; 1601 Willow Road; Menlo Park, CA 94025

. Within twenty-^) dayâi

(Name of Person or Entity)

after service of this subpoena, you are ordered by the court to produce the

following documents or things:

See Addendum attached hereto as Exhibit "A", as well as the attached

Certificate of Compliance. The subpoena is returnable on ! JfiiS® 10:00 am (pacific

standard time).November 26, 2012 ^W

atFacebook Inc.; 1601 Willow Road; Menlo Park, CA 94025

(Address)

You may deliver or mail legible copies of the documents or produce things requested by this subpoena,

together with the certificate of compliance, to the party making this request at the address listed above. You

have the right to seek in advance the reasonable cost of preparing the copies or producing the things sought.

If you fail to produce the documents or things required by this subpoena within twenty (20) days after

its service, the party serving this subpoena may seek a court order compelling you to comply with it.

This subpoena was issued at the request of the following person:

BYTHECPPR^

By ^(Protbonotary)

DATE:

Seal of the Court

-Donna A. WatBht BsqirireAttoraey'sName

:¦ --^ ^v 74833

Identification Number

Myers, Brier & Kelly, LLP, 425 Spruce

Street, Suite 200, Scraoton, PA 1 85113 .Address

(570)342-6100

Tfelephone NumberPlaintiff Sundance

Auomeyfor Vacations, Inc.

000S2669

EXHIBIT C<AW

Custodian of Records^ Facebook, Inc.

DEFINITION

As used here, the term "document" includes, but is not limited to, any

writing, graphic matter or other tangible thing, whether printed,,recorded, produced

by any other process, or written or produced by hand, including, but not limited to,

letters, reports, other written communications, electronic messages, metadata,

electronic records, electronic files, correspondence, telegrams, memoranda,

summaries, records or itineraries, forecasts, analyses, lab reports, projections, work

papers, photographs, tape recordings, models, graphs, statistical statements,

notebooks, charts, plans, drawings, artwork, brochures, summaries ofnegotiations,

press releases, intra-office or inter-company communications, routing slips or the

like, promotional or advertising materials, marginal comments appearing on any

document, invoices, shipping papers, labels, packaging, purchase orders, contracts,

printed publications, minutes or records ofmeetings, minutes or records of

conferences, agendas, expressions or statement ofpolicy, lists ofperson attending

meetings or conferences, reports and summaries of investigations, opinions or

reports of consultants, studies, evaluations, records, sounds recordings, motion,

pictures, models, sketches, video tapes, proofs, photographs, films, computer input

or output, recordings on disk or tape, archive records, whether recorded on volatile

or nonvolatile media, hard disks or floppy disks, by magnetic or electronic

impulse, e-mail messages whether or not printed or m hard copy, or any other

writing including draft and revisions.

DOC0MENTS REQUESTED

I . Any and all documents that refer or relate to or identify the

originating internet protocol (DP) address(es) and timestamps for activity on the

Facebook page titled "Boycott Sundance Vacations"

(http://www.facebQok.com/#!/pages/Boycott-Sundance-

{00053256} 1

Vacations/1 72805 1 72735470") and any and all documents that refer or relate to or

identify the administrators) ofthis page, including, but not limited to, for each of

the foregoing individuals, all administrator lists, account applications, subscriber

information, user profiles, billing information, billing records, administrator

records, access records, activity logs and records of session times and durations,

2. Any and all documents that refer or relate to or contain log or

activity information for the "Boycott Sundance Vacadons'' page, including, but not

limited to, documents identifying the internet protocol (IP) address(es) associated

with persons administermg and/or posting to the page and time stamps showing the

date and time ofall activity on the page.

3 . Any and all documents that refer or relate to or contain

subscriber information for the administrator(s) of the "Boycott Sundance

Vacations" page, including but not limited to, for all such individuals, all account

Information, user profiles, account creation records, login information and page set

up records.

4. Any and all documents that refer or relate to or contain

subscriber and/or user information and/or profiles relating to John Flannagan

and/or JohnF0808 1 (5),aol.com and/or Elaina Monteleone

(http^/A\fww.facebook.com/#!/elama.monteleone).

{00053256} 2

Attorney or Party without Attorney:

Telephone No:

— —— ——-For Court Use Only

Attorneyfor: PlaintiffRef. No. or File No.:

Insert name ofCourt, andJudicial District and Branch Court:

SAN MATEO COUNTY SUPERIOR COURT

Plaintiff: SUNDANCE VACATIONS, INC.Defendant: ALBERT WHITEHEAD

PROOF OF SERVICE Hearing Date:

Mon, Nov. 26, 2012

Time:

10:00AM

Dept/Div: Case Number:

12-CV-8006/. At the time ofservice I was at least 18 years ofage and not a party to this action.

2. I served copies of the SUBPOENA FOR PRODUCTION OF BUSINESS RECORDS IN ACTION PENDING OUTSIDECALIFORNIA; ATTACHMENT 3; DECLARATION OF CUSTODIAN OF RECORDS (BLANK).

3. a. Party served:b. Person served:

CUSTODIAN OF RECORDS FOR FACEBOOK, INC.Nai Saeteum, person authorized by the Agent to accept service for the Party in item3.a..

4. Address where the party was served: CSC-LAWYERS INCORPORATING SERVICE27 10 Gateway Oaks DriveSuite 150 North

Sacramento, CA 958335. 1 served the party:

a. by personal service. I personally delivered the documents listed in item 2 to the parly or person authorized to receive service ofprocess for the party (1) on: Thu., Oct. 25. 2012 (2) at: 2:27PM

b. I received this subpenafor service on: Thursday, October 25, 20 1 2

6. Witnessfees were offered or demanded, andpaid: $15.00

7. Person Wio Served Papers:a. Tyler DiMariab. Attorney Service of San Francisco

4104 24th Street

PMB #393San Francisco, CA 941 14

c. 415 495-4221

Recoverable Cost Per CCP 1 033,5Ca)(4)(B)

The Feefor Service was:I am: (3) registered California process server

0) Independent Contractor(ii) Registration No.: 2006-06fiii) County: Sacramento(iv) Expiration Date: Thu, Feb. 13, 2014

8. I declare underpenalty ofperjury under the laws ofthe State ofCalifornia that thefop

Date: Frl, Oct 26, 2012

Judicial Council Form , „„_Rule 2.150.(a)&(b) Rev January I, 2007

PROOF OF SERVICE

d correct

assf.65186

Exhibit H

Target 1423887846 (Generated 2012-11-16 16:55:45 UTC)Date Range Creation to 2012-11-16 16:55:45 UTC

Account End Active trueDate

Credit Cards

Emails [email protected]@comcast.net

Logins ip 70.192.128.165Time 2012-10-11 10:37:41 UTC

Site WWW

ip 166.137,99.17Time 2012-10-11 00:04:35 UTCSite WAP

ip 166.137.99.17Time 2012-10-11 00:04:35 UTCSite WAP

Ip 76.124.171.226Time 2012-09-17 13:34:19 UTCSite WWW

Ip 76.124.171.226

Time 2012-08-20 02:27:03 UTCSite WWW

Ip 76.124.171.226

Time 2012-07-29 16:27:52 UTCSite WWW

Ip 76.124.171.226

Time 2012-07-13 11:12:53 UTCSite WWW

Ip 76.124.171.226

Time 2012-07-11 01:56:02 UTCSite WWW

Ip 76.124,171.226Time 2012-07-02 19:28:48 UTCSite WWW

Ip 70,192.130.102

Time 2012-06-25 18:26:01 UTCSite WWW

Ip 76.124.171.226

Time 2012-06-19 11:25:18 UTCSite WWW

Ip 166.147,101.157

Time 2012-06-18 21:50:07 UTCSite WAP

Ip 166.147,101.157Time 2012-06-18 21:50:07 UTCSite WAP

CONFIDENTIAL Facebook 000001








Ip 166.147.108.127Time 2012-04-14 13:27:29 UTCSite WAP









Ip 76.124.171.226Time 2012-02-19 18:32:29 UTC


Site WWW












Ip 76.124.171.226Time 2012-01-22 02:45:24 UTC



Ip 76.124.171.226

Time 2012-01-09 03:45:28 UTCSite WWW


Ip 76.124.171.226


Time 2011-12-30 21:14:39 UTCSite WAP

Ip 76.124.171.226

Time 2011-12-30 21:14:39 UTCSite WAP















Ip 76.124.171.226Time 2011-10-26 19:45:13 UTC





Ip 76.124.171.226

Time 2011-10-11 12:32:40 UTCSite WWW








Ip 76.124.171.226

Time 2011-09-16 20:31:56 UTCSite WWW



Ip 76.124.171.226

Time 2011-07-14 16:51:11 UTCSite WWW

Ip 198.228.193.160

Time 2011-07-08 01:15:03 UTCSite WWW

Ip 174.57.246.96Time 2011-06-30 12:56:14 UTC


Site WWW



Ip 166.137.140.141

Time 2011-06-29 15:49:28 UTCSite WWW


Ip 166.137.142.60

Time 2011-06-13 01:37:46 UTCSite WWW


Ip 76.124.171.226

Time 2011-05-24 15:47:43 UTCSite WWW

ip 76.124.171.226

Time 2011-05-02 03:08:17 UTCSite WAP



ip 76.124.171.226Time 2011-04-22 12:43:16 UTCSite WWW


Ip 76.124.171.226

Time 2011-04-20 15:39:41 UTCSite WWW

Logouts Ip 76.124.171.226Time 2012-09-16 13:34:26 UTCSite WWW

Ip 76.124.171.226

Time 2012-08-14 00:22:50 UTCSite WWW

ip 76.124.171.226Time 2012-07-26 18:04:18 UTC


Site WWW

ip 76,124.171.226Time 2012-07-02 21:46:10 UTCSite WWW























Ip 76,124.171.226Time 2011-08-30 20:03:18 UTCSite WWW




Name First FranMiddle

Last Wilson

PhoneNumbers

Registration 2009-04-17 17:42:10 UTCDate

Vanity fran.wilson.37




Credit Cards

Emails [email protected]

Logins Ip 75.151.131.165Time 2012-11-10 13:25:54 UTCSite WWW





Ip 76.124.165.5Time 2012-11-06 20:17:24 UTC

Ip 76.124.165.5Time 2012-11-04 18:46:08 UTC




Ip 67.208.164.82

Time 2012-11-01 23:37:15 UTCSite WAP


Ip 68.80.252.37

Time 2012-10-31 18:17:09 UTCSite WWW






Ip 67.208.164.82

Time 2012-10-25 22:02:33 UTCSite WWW





Ip 68.80.252.37

Time 2012-11-09 21:33:06 UTCSite WWW


Ip 76.124.165.5

Time 2012-11-08 00:41:18 UTCSite WWW

Ip 68.80.252.37Time 2012-11-07 19:46:09 UTC

Site WWW


Ip 68.80.252.37

Time 2012-11-01 20:43:50 UTCSite WWW

Ip 68.80.252.37

Time 2012-10-31 16:52:13 UTCSite WWW

Ip 76.124.165.5

Time 2012-10-30 15:47:19 UTCSite WWW






Name First MaryMiddle

Last Smith

PhoneNumbers

Registration

Date2012-10-25 04:39:58 UTC

Vanity




Credit Cards

Emails [email protected]














ip 72.78.191.60


Time 2012-11-11 13:16:49 UTCSite WWW


































Ip 72.78.191.60Time 2012-10-31 11:19:12 UTC


Site WWW














Ip 72.78.191,60Time 2012-10-26 20:57:19 UTCSite WWW

















Ip 72.78,191,60Time 2012-10-20 16:41:16 UTCSite WWW

Ip 72,78,191.60Time 2012-10-20 11:31:56 UTCSite WWW


Ip 72,78.191,60Time 2012-10-19 12:44:22 UTC


Site WWW
















Ip 72.78.191.60Time 2012-11-13 17:49:06 UTC


Site WWW




















ip 72.78,191.60Time 2012-11-06 18:38:29 UTCSite WWW














Ip 72.78.191.60Time 2012-11-02 01:30:25 UTC


Site WWW



















Ip 72.78.191.60

Time 2012-10-23 17:19:58 UTCSite WWW







Ip 72.78.191.60

Time 2012-10-20 16:00:24 UTCSite WWW








Ip 72.78.191.60

Time 2012-10-17 17:31:04 UTC


Site WWW

Name First Mary

MiddleLast Smith

Phone +12153013140 Cell Verified on 2012-08-14 15:02:55 UTCNumbers


Vanity

CONFIDENTIAL Facebook 00001 1



Credit Cards

Emails [email protected]@centurylink.net

Logins ip 76.5.57.193Time 2012-10-25 21:51:58 UTCSite WWW

ip 76.5.57.193

Time 2012-10-25 01:10:39 UTCSite WWW



Ip 76.5.62.167

Time 2012-10-14 22:33:44 UTCSite WWW










Ip 76.5.63,18

Time 2012-09-08 22:09:21 UTCSite WWW






Ip 76.5.61,174

Time 2012-08-18 20:08:19 UTCSite WWW

Ip 76.5.61.174

Time 2012-08-18 20:07:16 UTCSite WWW


Ip 76.5.60.161

Time 2012-08-16 11:50:43 UTCSite WWW


Ip 98.110.46.167Time 2012-08-10 19:22:05 UTC


Ip 98.110.46.167

Time 2012-08-10 02:55:36 UTCSite WWW



Ip 98.110.46.167

Time 2012-08-08 12:28:45 UTCSite WWW



Ip 98.110.46.167

Time 2012-08-07 20:00:34 UTCSite WWW


Ip 76.5.57.221

Time 2012-08-04 00:26:32 UTCSite WWW

Ip 76.5.57.221

Time 2012-08-03 15:35:12 UTCSite WWW






Ip 76.5.57.221

Time 2012-08-03 15:35:10 UTCSite WWW

Ip 76.5.57.221

Time 2012-08-03 15:35:10 UTCSite WWW

Ip 76.5.57.221

Time 2012-08-03 15:35:10 UTCSite WWW

Ip 76.5.57.221

Time 2012-08-03 15:35:10 UTCSite WWW

Ip 76.5.57.221

Time 2012-08-03 15:35:10 UTCSite WWW

Ip 76.5.57.221

Time 2012-08-03 15:35:10 UTCSite WWW


Name First NancyMiddle

Last Vosicka

PhoneNumbers


Vanity nancy.vosicka.3




Credit Cards

Emails [email protected]@gmail.com















Ip 64.121.241.121

Time 2012-11-02 01:51:44 UTCSite WWW
















Ip 64.121.241.121Time 2012-10-11 19:32:05 UTC


Site WWW










Ip 64.121.241.121

Time 2012-09-28 01:10:05 UTCSite WWW











Ip 64.121.241.121

Time 2012-09-18 00:19:55 UTCSite WWW













Ip 64.121.241.121Time 2012-09-03 11:36:10 UTC


Site WWW


ip 64,121.241.121Time 2012-08-30 19:02:40 UTCSite WWW








Ip 64.121.241.121

Time 2012-08-25 15:14:33 UTCSite WWW





Ip 64.121.241.121

Time 2012-08-17 01:40:50 UTCSite WWW











Ip 64.121.241.121

Time 2012-08-08 21:56:55 UTCSite WWW








Ip 64.121.241.121Time 2012-08-03 19:52:21 UTC


Site WWW
















Ip 64.121.241.121Time 2012-11-12 18:23:54 UTC


Site WWW























Ip 64.121.241.121

Time 2012-10-12 02:18:10 UTCSite WWW

Ip 64.121.241.121

Time 2012-10-11 19:37:49 UTCSite WWW










Ip 64.121.241.121Time 2012-09-27 00:56:51 UTC


Site WWW





















Ip 64.121.241.121

Time 2012-09-05 01:48:42 UTCSite WWW





Ip 64.121.241.121

Time 2012-08-30 00:57:27 UTCSite WWW



ip 64.121.241.121

Time 2012-08-29 19:58:14 UTCSite WWW





Ip 64.121.241.121Time 2012-08-20 16:51:28 UTC

CONFIDENTIAL Facebook 00001 1

Site WWW

ip 64.121.241.121

Time 2012-08-19 16:19:30 UTCSite WWW




Ip 64.121.241.121

Time 2012-08-16 00:17:46 UTCSite WWW


Ip 64.121.241.121

Time 2012-08-14 02:08:57 UTCSite WWW




Ip 64.121.241.121

Time 2012-08-10 01:33:38 UTCSite WWW



Ip 64.121.241.121

Time 2012-08-06 19:11:05 UTCSite WWW









ip 64.121.241.121

Time 2012-07-31 19:29:22 UTCSite WWW

ip 64.121.241.121

Time 2012-07-31 02:08:36 UTCSite WWW


ip 64.121.241.121

Time 2012-07-29 22:16:26 UTCSite WWW

ip 64.121.241.121

Time 2012-07-28 22:37:00 UTCSite WWW




Name First MarkMiddle

Last Adorno

PhoneNumbers



Vanity mark.adorno.7


Exhibit I

veriTonAugUSt 1,2012 Le^^mpllanoe

2701 S. Johnson StSanAngelo,TX 76904Voice: 888-483-2600Fax 325-949-691 6

Verizon Case #12275571

Re: Subpoena Per Court of Common Pleas Lnzerne County, PA Myers, Brier & Kelly LLPAttorneys for the Plaintiff Sundance Vacations Inc. vs. Albert WhiteheadSigned 7/12/2012

Business Records Affidavit

I, Christine Gardener, being duly sworn, deposes and says: I am the custodian of records forVerizon, and in that capacity, I certify that the attached records are true and accurate copies of therecords created from the infonnation maintained by Verizon in the actual cowse of business,

It is Verizon's ordinary practice to maintain such records, and that said records were madecontemporaneously with the transaction and events stated therein, or within a reasonable timethereafter.

I have provided Donna A Walsh, Esquire, the subscriber records as requested to include IPAddress, Session Logs for name, address, account number and type, account creation date,corresponding telephone number and user ID and user name for die subscribers named on theresponse document,

ExecutolonAusnst 1,2012 // / i M J

Chrisiinc Gardener, Consullant Net Ops

August 1, 2012 L8aal CompllancTXD01S132701 8. Johnson St.San Angalo, TX 78904Volea; 888-483-2600Fax 325-949^918


Re: Subpoena Per Court of Common Pleas Luzerne County, PA Myers, Brier & Kelly LLPAttorneys for the Plaintiff Sundance Vacations Inc. vs. Albert WhiteheadSigned 7/130012

IP Session logs are rellected in GMT

IP Address: 68.163.49.135Start Hole: 2011-08-21 21:12:04Z Stop Time: 2011-08-25 13:48:38ZIF Address: 68.16333047Start Ttoie: 2011-09-13 10:46:112 Stop Time: 2011-09-21 21:35:382

VOL Account Number: 0063909960386Account Creation Date; 04/24/2006

Customer Name: Kathy WhiteheadAccount Address: 842 N 27th St

Philadelphia, PA 191301832

Daytime TN: 2152321236Payment Method: LECBilling (included on local telephone bill)

DSL/2152321236 DeactivatedService End Date: 03/1^/2012VOL User ID: vzetbdnx

VOL Account Number: 0118739285494Account Creation Date: 12/19/2011

Customer Name: Albert WhiteheadAccount Address: 842 N 27 ST

Philaddphia, PA 19130

Daytime TN: 2152351308Evening TN: 2152058160Payment Method: Invoice

VZ FIOS Consumer Internet Plan/ ActiveVOL User ID: vzel98ekin

veriZSDAugust 1, 2012


Legal CompllancaTXD01B13Z701S. Johnson StSan Angola, TX 78904Voice: 888-483-2600Fax 325-949-6916

Re: Subpoena Per Court of Common Pleas Luzerne County, PA Myers, Brier & Kelly LLPAttorneys for the Plaintiff Sundance Vacations Inc. vs. Albert WhiteheadSigned 7/12/2012

IP Session logs are reflected te GMT

VZID Session List for Kathy WhiteheadStart Date : 2011-09-22 0O:0O;00ZStop Date : 2012-03-19 00:00:002User ID : vzetbdnxTotal Sessions : 89

I Start Time I Stop Time^Baaaaaiajtaaaaaaaataaasaiaaaj BasaasKasKaBaasajsuB1 2012-02-15 18;31:44Z j 2012-03-19 09:50:222i|saKiK!«Ka^jKS!saa.-sasaaKSS!4 affisassassi^KSjafflSKSssasaaaassK1 2012-02-10 21:07:25Z | 2012-02-15 18:31;34ZBaassaaaasiaasaaBaaaaaaasasaS aasaaaaaa<aa!aaaaa;aaaB!aa!aa

I 2012-02-05 14:12:292 j 2012-02-10 21:07:162^

»»aaaasw<isasKHSf

Durationpaaaa:aa»ffiHaaa»»a;a»aa

User ID IPAddress I

32dl5hl5m33s| vzetbdnx] 70.110.201.252saaaaaasBaaasissaasa^ iaassasaasaaa! BBssaaaiaaiaaasaaKaaa

4d 21h 23m 45s I vzeflxinx ' 70. 1 10.203.30aaauaaaBiaaaaaKuaaaal ansasaaaaassas aaaasssasaaaasaaaaaasfi5deh54ra20s | vzetbdnx j 68.163.44.121 '

12012-01-29 12: 15:492 1 2012-02-05 14: 12:202 1 7dlh 55m 54s | vzetbdnx! 70.110.195.10 I

|2012-01-29 01;43:312 2012-01-29 12:15:402 1 Od lOh 32m 7s i vzetbdnx i 151.199.254.194

2012-01-29 01:43:222 j Od 13h 26m 16s | vzMbdnx| 70.lia215.159 j12012-01-28 12:17:032

1 2012-01-28 07:42:572 2012-01-28 12:16:542 y Od 4h 33m 56s I vzetbdnx || 70.110.191.12 |

2012-01-28 07:42:482Tod 3h 29m 29s j vzetbdnx | 68. 163.47.21 1iuiaîaaaMUuaaâaiuiaua;aaua4>i»waâiitaaiaaui^^

2012-01-28 04:13:182

12012-01-18 20:28:552 2012^)1-28 04:13:092 f 9d Tli 43m 25s [j vzetbdnx | 151.199^53.95

2012-01-18 20:28:472 1 3d 8h 12m 35s I vzetbdnx 70.110.197.76I 2012-01-15 12: 15:55Z

tbdnxI 2012-01-15 10: 13:27Z

I 2012-01-1508:37:4221 sanreaaaaasaaaaaaaaaHiaasa:

2012-01-13 12:18:092

2012-01-1120:37:452

2012-01-15 12:15:462 1 Od 2h 2m 18s I vzetbdnx | 70.110.223.51

2012-01-15 10:13:182 1 Od Ih 35m 36s "] vzetbdnx |i 151.199.251.1762012-01-15 08:37:322 1 Od 44h 19m 13s j vzetbdnx j 70.1 10.195.160ia»«aaBBaaaaafttsaaa»aa»3«»^lsa«a>wmn»»aaaa^ assaasaaaaaiasBaaaass!! 12012-01-13 12:18:012 f Od 39h 40m 7s | vzetbdnx] 70.110.223.67 J

SaitXUUHMMtJMMSaiUUXIi*

irmw^vwiHrmnn. fin.wiii.»«~muK.«»»«»a«i^mM

ij 2012-01-07 12: 16:06Z || 2012-01-1 1 20:37:36Z 1 4d 8h 21m i vzctbdnx 151.197.27.203

1 2012-01-07 01;12:25Z |! 2012-01-07 12:15:56Z § Od 1 Ih 3m 29suuu;smuaatu

2012-01-06 12: 16:03Z jj 2012-01-07 0lTl2: l6zfod 12h 56m 10svzetbdnxji 68.163.47.57 |

tuuiuuuuuwuut;

vzettidnx 71,242.92.98

2012-01-06 03:36;27Z | 2012-01-06 12:15:53Z I Od 81i 39ra 25sr

vzetbdnxjUiUUKC

71.242.88.182

1 2012-01-04 12:16:03Z 1 2012-01-06 03l36:18Z i Od 39h 20m 6s

J, 2012-01^)4 11:38:53Z I 2012-01-04 12:15:54Z | Od CUi 37m Is |

vzetbdnxji 68.163.49.223

! 2012-01-04 10:56:07Z ; 2012-01-04 1 1:38:43Z fod Oh 42m 36s

vzetbdnxsKsaasasra

vzetbdnx

fflxoxa

71.242.89.216 ÎsêsisaaaisaBoiaaaasaaall

68. 163.58J247

| 2012-01-04 06:59;24Z 2012-01-04 ia55:58Z i Od 3h 56m 33s>Baa»a!iaK!aaMa«>KBB»nBWB^^ awaimTOiaBW«taw«aaiBwa»awa| maakasraaKnamaaaoss:

! 2012-01-03 23:56:03Z 2012-01-04 06:59:15Z|0d7h 3m lisasnum

vzetbdnx \\ 70.110.194.145 1xtiYfftÂKmtntQyittRn

vzetbdnx |! 68.163.54.116..}l.

1 2012-01-03 22:49:00Z | 2012-01-03 23:55:53Z | Od Ih 6m 53s vzetbdnx I 72.81.124.90

1 2012-01-03 22:12:58Z | 2012-01-03 22:48:51Z | Od Oh 35m 53s vzetbdnx. 68.163.58.12

| 2012-01-02 12:15:42Z 1 2012-01-03 22:12:492 0d33h57m0s

2012-01-02 05:05:58Z 2012-01-02 12:15:33z| Od 7h 9m 34s

vzetbdnx | 70.110.221.71 |

2012-0 1-02 03: 14:55zl| 2012-01-02 05:05:48Z f Od Ih 50m 54svzetbdnx I 70.110.212.50

u :.vzetbdnxr 72.81.12:127.149

i 2012-01-02 02:29;24ZutuUmttt*tuimaimntutiiUiKUKuuittu

2012-01-02 a2:00:51Z

J 2012-01-02 00:57:472

\ 2011-12-3012:15:422tjassassaisssaaKasBaKiaasaaisasJ

2011-12-2923:45:5521

2011-12-28 12:15:55Z j

2011-12-28 01:12: 15Z

12011-12-26 12:17-A7Z

r2012-01-02 02:00:412 ij Od Ih 2m 54s

aiâisaiErftSK«tt^*K

201 1-12-30 12:15:33Z i Od 12h 29m 35s I

2011-12-29 23:45:46Z 1 0d35h 29m 44s [

12012-01-02 03:14;46Z | Od Oh 45m 21s I vzetbdnx Ij 70.110.200.190

" 2012-01-02 02:29:152 i Od Oh 28m248

" vzetbdnx! 70.110.191.64ilUUUUlUWIUIt^ WUMUKlUKllUOUUHiUUlW^]

2012-01-02 00:57:39Z | Od 601 41m 43s | vzeftdnx I 70.110.190.141

vzetbdnx p 151.199.247.195 '

saassaass&asaaaasax^^

vzetbdnx! 70.110.193.41

vzetbdnx j 68.163.50.17

201 1-12-28 12: 15:46Z i Od 1 Ih 3m 288 Fvzetbdnxii....:

201 1-12-28 01:12;06Z | Od 36h 54m 10s | vzetbdnx i

201 1 -12-26 12: 17:38z| 3d CBi OtaMs ^ vzetbdnx

68.163.51.231 {

70.110.199.206 j2011-12-23 12:16:54Zi 151.197.27.32

2011-12-23 12:16;45z|0d Uh 34m 50s (vzetbdnx1 ¦¦i!i!!K!i:t;!!!iJ;i;

I 2011-12-23 00:41:52Z 68.163.45.228

2011-12-23 00:41:42Z I Od 12h 23m 35s f vzetbdnx 70.110.204^9 I2011-12-22 12:18:05Z

$ 2011-12-22 12:17:56Z f Od 18h 7m 51s i vzetbdnx i2011-12-21 18:10:022

201 1-12-21 18:09:532 ^ Od 5h 53m Os I vzetbdnx |

70.110.217.80

2011-12-21 12:16:512 j 70.110.190.158

12:16:42z|;;tt«aHaj;aH«i«K»u;uaC^«;Hi; .iikuuuicuu;:

2011-12-21 03:56:442

2011-12-2103:44:252

2011-12-21 0d8hl9m56s ij vzetbdnxuuu:CfUUu:;uuuuu::uuu:ua

2011-12-21 03:56:352 1 Od Oh 12m 9s vzetbdnx I

70.110,219.62

70.110.212.35JUUagUUMUUUKaUUtKUUWUUUtU

12011-12-16 12:15:522 2011-12-20 04:17:30Z | 3d l6h 1m 19s

2011-12-20 12:15:422

2011-12-20 11:07:542

2011-12-2004:17:392

201 1-12-21 03:44:162 |0d 15h 28m 31s | vzefednx

| vzetbdnx

I vzetbdnx jl

201 1-12-20 12:15:332 f Od Ih 7m 39siyTOWisi!a»is«BmiaiiB«B8S5S«a! fita&cs&xx&stisxitisssix:

201 1-12-20 11:07:452 0 Od 6h 50m 4s

::<«wim«u:utuumuucj

vzetbdnx

72.81.120.190

70.110.214.31 J

68.163.60.215

68.163.46.160 j.

2011-12-16 00:48:422 Ij 2011-12-16 12:15:432 1 Od 1 Ih 26m58s

2011-12-1212:17:362 201 1-12-16 00:48:332 f 3d 12h 3(ta 38s I vzetbdnx

vzetbdnx 70.110.223.16 .,

70.110.204.81

2011-12-11 12:15:532

1 2011-12-11 07:47:532

1 2011-12-11 05:42;06Z

201 1-12-12 12:17:272 i Od 24h 1m 28s vzetbdnxr

u;;:wu;uuu:

70.110.218.128 I

201 1-12-11 12; 15:442 1 Od 4h 27m 50s |

201 1-12-11 07:47:442 1 Od 2h 5in 38s

vzetbdnx

vzetbdnx

70.110.211.99 J

72.81.127.242 12011-12-1012:15:472

2011-12-10 11:07:442

201 1-12-11 05:41:582 i Od 17h 26m 6s

2011-12-10 12:15:382 f Od Ih 7m 54s

vzetbdnx ||

vzetbdnx

45m 49s vzettxlnxlttBamiiBaaa

vzeAdnx33m lis

68.163.53.40

70.110.213.230 i

|2011-12-1006:21:46Z 1| 2011-12-1011:07:352

2011-12-10 06:21:372

68.163.49.90

68.163.57.138

""I

i 2011-12-09 12:17:382 201 1-12-10 00:48:162 1 Od 12h 30m 35s | vzetbdnx I 68.163.50.192 |r ;2011-11-08 11:47:312 |j 2011-12-09 12:17:2921 31d Oh 27m lis I vzetbdnx 70.110.209.22

2011-11-02 15:39:142 f 2011-1 1-08 11:47:222 1 5d20h 7m 36s vzetbdnx 72.81.126.195

2011-10-27 11:15:542 pOl 1-11-02 15:21:112 1 6d4h4m44s if vzetbdnx

2011-10-27 10:31:482 1 201 1-10-27 11:15:452 1 Od Oh 43m 56s I vzetbdnx I

68.163.48.3

72.81.123.223 il

2011-10-27 09:24:302

2011-10-27 08:08:132

2011-10-2623:45:212

2011-10-23 11:17:312

2011-10-2211:15:592

2011-10-22 10:22:302

SmK!u«u1«iKI1«;«K1«ua,«1K«aa

tr2011-10-2111:15:422

201 1-10-27 10:31:392 1 Od Ih 7m 9s i vzetbdnx IitWUMliiWtiWWHliWmimii'ji t IU11Kt-jIHiiHit^J:.,

. 2011-10-27 09:24:212 1 Od Ih 16m 8s | vzetbdnx |j

| 201 1-10-27 08:08:032 | Od 8h 22m 40s \ vzctbdux

2011-10-26 23:45:122 j 3dl2h27m22s f vzetbdnx 'aa:ssssaaassaaiasa3aa8a!'.a»aS waaassaaaasaaaaaiasasS iaantataaaataî:

201 1-10-23 11: 17:222 Od 24h 1m 17s l, vzetbdnx

2011-10-22 11:15:502 Od(Bi53m20s I vzetbdnxsaaaaasfjjsaaiasaaaaas

ai

a:aaa2aaaaaaaaaaaa(auaatas^j n£auaaasaa«iH«wM«tMi»»v <

201 1-10-22 10:22:212 1 Od 23h 6m 34s j vzetbdnx I

68.163.58.189

72.81.126.110{UlKUUUtULIUIUUUtUlUUItUIt

71.242.87.39

68.163.49.13ttaaaaaaanaaaasaaa

68.163.48.54âaanaaaaaauKanaai

70.110.206.7BaaaaKSaaaaaaasasiaasi-70.110.201.216

i 2011-10-21 09:39:122 201 1-10-21 11:15:332 | Od Ih 36m 21s | vzetbdnx I 70.110.206.24

201 1-10-21 05:46: 142 i| 201 1-10-21 09:39:032 | Od 3h 52m 49s I vzetbdnx 151.197.5.120

I 2011-10-20 23:33:242i| 2011-10-21 05:46:052 f Od 6h 12m40s % vzetbdnx] 151.199.252.91ar,;i;;m!iim;H-,!i;»v.aaK;aJ68.163.45.15412011-10-2023:00:502 201 1-10-20 23:33: 152 1 Od Oh 32m 24s N vzetbdnx

tfXiK-.nniiiillilllsizJ':

|2011-10-17 11:16:00Z 2011-10-20 23:00:412 I 3d llh 44m22s i vzetbdnx 68.163.59^51i!^;-,i.v!ri!i;,.iiiimi!mm;"j;;Kifiii;iiiiiiB«ai;iBiK!

12011-10-17 06:47:062 2011-10-17 Il:15:512i0d4h28ra45s I vzetbdnx 70.110.197.235Kus««uiu;aimuu:mguawwa;m;:«K;««u; uu: iiiâ

2011-10-15 11:15:5021

2011-10-15 03:23:032

2011-10-15 01:38:322'

2011-10-1418:15:252

201 1-10-17 06:46:562 1 0d43h 30m 57s i| vzetbdnx 70.110.208.165 I

201 1-10-15 11:15:412 1 Od 7h 52m 36s | vzeftdnx 72.81.124.107

2011-10-15 03:22:542 j Odlh 44m 21s | vzetbdnx 151.197.27.41 |tjWStt^tewwftttttWWftWH^ issrjaiMiiSiftwSwfftaa^ aiKUSr»wiysi!!iwgrt!^^

201 1-10-15 01:38:232 i0d7h 22m 56s I vzetbdnx 70.110.204.254'ttXGiitsixtXBCisiS^^Xi&f&is^^

12011-10-1211:15:442Laaaaasassaa

»naaaa»aaa»a«4i»«aaa»aaa«aa:aaaaiaaaav

| 2011-10-1209:23:492

201 1-10-14 18:15:162 y Od 54h 59m 20s ^ vzetbdnx 70.110.216.245

r S t\A 11. CI ̂̂ . lii ._-.VJI2011-10-12 11:15:352 | Od Ih 51m46s I vzetbdnx ! 151.197.5.184

u MvfflnCTayttYftCTttwffly

¦c4^:^.J.«aK^.-»<..»r...-M-:rn « „r.,.,„WJMW,

""^^r"""""""^:12011-10-1201:34:112 2011-10-12 09:23:402 1 Od 7h 49m 27s I vzetbdnx 70.110.198.237

12011-10-11 11:16:562 2011-10-1201:34:022 f Od 14h 17m 3s vzetbdnx 151.199.248.19 I

vzetbdnxiuu«u»uuu:u:!u

vzetbdnx

\ 2011-10-11 09:51:532

2011-10-08 11:16:492

2011-10-11 11:16:462 1

2011-10-1109:511452

0dlh24m53s

2d22h34m40s

68.163.60.246

70.110.221.194

112011-10-08 11:14:462 2011-10-08 11:16:402 1 0d0hlm53s |vzetbdnx|| 71.242.86.105

70.110.199.2042011-10-01 11:15:352

[2011-09-28 16:16:062'

201 1-IO-OS 11:14:372^K!maa^K6!!âsasKasaaaas!sas^^

6d23h58m24s vzetbdnxil

2011-10-0111:15:2621 2dl8h59m5s i vzi vzetbdnx j; 70.110.206J229 f2011-09-22 16:36:142

2011-09-21 21:36:492imaiaiim»B»iii»iBt»ig«wffiiBwai)rf.

2011-09-2816:15:572|

2011-09-2216;36:052|

5d23h39mns

Od 18h 59m 12s

vzetbdnxl

vzetbdnx

151.197^.250

151.197.27.236

YZID Session List for Albert WhiteheadStart Date : 2011-12-15 00:00:002Stop Date : 2012-07-30 00:00:002User ED : V2el98ekmTotal Sessions : 3

\Y ssxs&ataia^jxsiassiassass^^

Start Time

2012-06-1906:28:552'

2012-03-04 13:20:472

xlxxa

Stop Time Duration

I 44d6h(tan43s

2012-06-19 05:46:302 1 I06dl2hlm30s

IPAddress |Ki«»sss«a:Baaas»K|72.78.191.60 I

108.36.71.163 1

2011-12-21 17:36:14Z 2012-03-04 11:41:402 Ii 73d 18h 5ra26s 108.16.120.35

Exhibit J

IN THE COMMONWEALTH OF PENNSYLVANIA


Plaintiff,

vs

ALBERT WHITEHEAD,

Defendant .

DEFENDANT'S MOTION FOR JUDGMENT

IN THE COURT OF COMMON PLEAS

OF LUZERNE COUNTY

CIVIL ACTION - LAW

T-3 ,: •¦.•¦5

No. 8006-CV-2012 r-5

^?ON LIABILITY AGAINST HIM ^&

Unable to defend himself against Plaintiff's efforts to

affect the conduct of unknown third parties and Facebook

regarding protected speech made on Facebook by third parties,

Defendant Albert Whitehead ("Defendant"), moves this Honorable

Court that judgment be entered in this action in favor of

Plaintiff Sundance Vacations, Inc. ("Plaintiff") and against

Defendant. Plaintiff brought this action to enforce an alleged

settlement agreement in the United States District Court.

Defendant, a retired senior citizen unable to travel, has agreed

to forego his right to make statements on another person's

Facebook page as part of the settlement agreement from another

court. Defendant does not own or control this Facebook page,

.See Affidavit attached hereto. He is unable to direct third

parties to stop exercising their rights to protected speech or

direct Facebook to do anything. Plaintiff, knowing that

Facebook is generally immune from defamation or tortious

interference for posting web pages, has not sued Facebook or the

person who owns the Facebook page and is allegedly publishing'

criticisms of the Plaintiff. Further prosecution of this claim

against Mr. Whitehead, knowing of these facts, is abusive and

designed to punish him outside the permissible purposes of legal

process .

In support of this Motion, Defendant demonstrates as follows:

1. On April 25, 2012, Plaintiff filed a complaint against

Defendant alleging that Defendant breached a February 6, 2007

settlement agreement (the "Federal Action Settlement Agreement")

between the parties stemming from a previous lawsuit filed in

the United States District Court for the Eastern District of

Pennsylvania. Additionally, Plaintiff claims lost business

damages from alleged tortious interference with contractual

relations arising from Defendant's statements made on another

person's Facebook page.

2. On or about May 14, 2012, Defendant, acting pro se,

filed a Response/Rebuttal to Plaintiff's Complaint.

3. On or about June 25, 2012, Defendant retained the

undersigned to resolve this matter as the Defendant has stopped

any posting contemporaneous with this matter. Defendant, before

he retained the undersigned counsel, believed this his written

revocation to his lawyer in the federal lawsuit served as a

revocation of the settlement without knowing that his former

lawyer may not have forwarded that revocation to the Plaintiff's

counsel .

4. On September 21, 2012, Plaintiff filed a petition for

preliminary injunction" in this Court seeking enforcement of the

Federal Action Settlement Agreement against Defendant. By this

time, Defendant was fully complying1 with the Agreement for over

two months .

5. On October 19, 2012, after oral argument on

Plaintiff's preliminary injunction petition and after Defendant

conceded to the entry of the injunction submitted on September

21, 2012, this Honorable Court granted Plaintiff's petition for

injunction.

5. This Court entered an injunction conceded by Defendant

but added language directing that Defendant "shall cooperate

with Sundance Vacations, Inc. in directing Facebook to remove

the "Boycott Sundance Vacations" page." (See October 23, 2012

Amended Order at p. 2 attached hereto as Exhibit "A") .

7. Defendant, however, cannot direct unknown third parties

or Facebook to do any act. (See Defendant's October 25, 2012

Affidavit attached hereto as Exhibit "B" ) .

8. At this time. Defendant requests that judgment on all

equitable claims be entered in this action in favor of Plaintiff

and against Defendant. Defendant is without funds to challenge

a "tortious interference" claim which cannot, as a matter of

Pennsylvania law, be sustained absent proof that any person

refused to purchase goods or services from Plaintiff as a result

of any posting of comments by Defendant on a Facebook page

controlled by a third party.

9. As such, Plaintiff's claim for damages for tortious

interference must await proof of such damage before the Court.

Defendant seeks to end this pursuit of him.

WHEREFORE, Defendant Albert Whitehead respectfully requests

that this Honorable Court grants judgment on liability in this

action in favor of Plaintiff and against Defendant.

Respectfully submitted,

i.M'eyy y

John G. E>ân //Matthew J. Carmody

Elliott Greenleaf & Dean

39 Public Square, Suite 1000

Wilkes-Barre, PA 18701

(570) 371-5290

. Attorneys for Defendant

DATED: November 2, 2 012

EXHIBIT "A''

SUNDANCE VACATIONS, INC., : IN THE COURT OF COMMON PLEAS OF

Plaintiff LUZERNE COUNTY

vs .

ALBERT WHITEHEAD,

Defendant

CIVIL ACTION - LAW

NO. 12-CIV-8006rvj

AMENDED ORDER

1^.3

r>

CO

—J

I"

^ -- _:

o^r"-

AND NOW, this 23rd day of October, 2012, at /#¦£* a.m., upon ¦

consideration ofPlaintiff Sxmdance Vacations, Inc's Petition for Preliminary

Injunction and supporting memorandum as well as testimony/argument introduced

at the hearing this date,

IT IS HEREBY ORDERED that Defendant Albert-Whitehead is enjoined

from existing and future breaches of the Settlement Agreement dated February 6,

2007 pending further Order of Court. Further, all posts and activity concerning

-Sundance Vacations, Inc. in any manner made by Defendant Albert Whitehead

posing as "John Flannagan" or using any other pseudonym on Facebook or any

other platform shall be removed immediately. v

Fifing ID: 1370267

2012-08006-0073 Order with Rule 236

Luzerne Cgunty Civil Records

10/23/201 2 3:27:28 PM

Further, Defendant Albert Whitehead shall not interfere with the efforts of

i

Sundance Vacations Inc. to remove the posts ancflshall cooperate with" Sundance

Vacations Inc. in directing Facebook to remove the'"Boycott Sundance Vacations"

page.

Security shall be entered in the amount of $100.00 (one hundred dollars) in

accordance with Pa.R.Civ. P. 1531(b)

The Prothonotary is directed to forward a copy of this order to all parties

pursuant to Pa. R.C.P. 236.

BY THE

RANTONI

EXHIBIT XXB"

IM THE COURT OF COMMON PLEASOF LUZEHME COUNTY

CIVII. ACTION - LAW

IN TKS COMMONWEALTH OF PENNSYLVANIA


Plaintiff,

vs.

ALBERT WHITEHEAD,

Defendant . : No. e006-CV-2012

AFFIDAVIT OF ALBERT WHITEHEAD

NOW COMBS, the undersigned, being duly sworn, deposes and

says:

L, On April 25, 2012, Plaintiff Sundance Vacations, Inc,

("Plaintiff") filed a complaint against me, Albert Whitehead

alleging that I breached a February 6, 2007 settlement agreement

(the "Federal Action Settlement Agreement") between myself and

Plaintiff stemming from a previous lawsuit filed in the United

States District Court for the Eastern District of Pennsylvania.

Additionally, Plaintiff alleges tortious interference with

contractual relations.

2. On September 21, 2012, Plaintiff filed a petition for

preliminary injunction in this Court seeking enforcement of the

Federal Action Settlement Agreement.

3. On October 19, 2012, after oral argument on

Pia-intiff s preliminary injunction petition and after I conceded

to entry of the injunction, this Honorable Court granted

Plaintiff's petition for injunction. A true and correct copy of

the Court's October 19, 2012 Order is attached hereto.

4. Additionally, this Court ordered that I "shall

cooperate with Sundance Vacations, Inc. in directing Facebook to

remove the "Boycott Sundance Vacations" page." (See October 19,

2012 Order at p. 2) .

5. I cannot, however, direct Facebook to remove this

"Boycott Sundance Vacations" page because I was not, nor am 1

currently, a creator of this page.

6. The "Boycott Sundance Vacations" page was created by a

third-party whose identity I am not aware, nor do I have any

knowledge of the identity of this page's creator.

7. As a result, I do not have the authority, capability

or powers to direct Facebook to take the "Boycott Sundance

Vacations" page down.

I hereby declare that the foregoing statements are true and

correct to the best of ray knowledge and made pursuant to 18 Pa.

C.S.A. § 4904 relating to unsworn falsification to witnesses.

eheadAlbert

Sworn to and subscribed beforeJ^pHay u£. October, 2012.rae.

NOX

NOTARIAL SEALRICHARD BAYENowy Public

PHILADELPHIA Cin PHILADELPHIA CN-TY

iviy Commission spires May 7, jU^ a^M"1^^

IN THE COMMONWEALTH OF PENNSYLVANIA

SUNDANCE VACATIONS/ INC.,

Plaintiff,

vs .

ALBERT WHITEHEAD,

Defendant ,

IN THE COURT OF COMMON PLEAS

OF LUZERNE COUNTY

CIVIL ACTION LAW

No. 8006-CV-2012

CERTIFICATE OF SERVICE

I, Matthew J. Carmody, hereby certify that I have caused to

be served on this day, a true and correct copy of Defendant's

Motion for Judgment On Liability Against Him to all parties

and/or counsel of record via e-mail and via U.S. first class

mail addressed as follows:

Daniel T. Brier, Esquire

Donna Walsh, Esquire

MYERS, BRIER & KELLY, LLP""425 Spruce Street, Suite 200

Scranton, PA 18503

Matthe^ J. Carm^ji^

\— -c2=O

i

3=»

U3-<

DATED: November 2, 2 012

Documents

Emergency Petition for Contempt Sanctions