1. 20100622 1430 Have you had any further attempts to tie up your server.txt
2. 20100623 1245 Re Unidentified SA Threat; Tie up your server; BOKF False claims.txt
3. 20100623 1251 Re Unidentified SA Threat; Tie up your server; BOKF False claims.txt
4. 20100624 1918 Threat Server Tie up and Inform of SEC.txt
5. Re: 20091117 1846 Trivia that might be helpful sometime.txt
6. Re: 20091119 0645 Trivia that might be helpful sometime.txt

---

20100622 1430 Have you had any further attempts to tie up your server.txt

Subject: RE: BOK Financial Corp (BOKF :NASDAQ) - False claims, failure to disclose, insiders benefiting
From: FBI Agent
Date: 6/22/2010 2:30 PM
To: PO

Nick,

Have you had any further attempts to tie up your server? Id like to get more info (i.e., when has it occurred, IP addresses identified, what impact it had on your website, etc.) as there is increasing interest at the home office on this issue.

Also, I had a good discussion yesterday with another SA who is very interested in your TC info. Sorry I can't be more specific.

Brad

1. City of Altus computers that occurred 08/05/2008. I contacted the city IT guy, who put a stop to that right away.

2. 11/17/09 Wi-Fi hot spot in Delta CO, after Anderson and Doughty, disappeared, and I thought it could be one of them and give you one possibility where they may have gone. (A lot of people were looking for the Big Shots to collect.)

Second veiled death threat Note: Both items "tie up your server" and "another SA who is very interested in your TC info" refer to prior actions and discussion - by and about the nameless and faceless behind threats and intimidation. I am convinced the SA referrered to is

Re: "tie up your server" referrers to two long past occasions, used to send a message. Minor and short in duration, no efforts to hide the email sources numerous parties had access. 1. Altus City Hall occurred 08/05/2008. 2. A Coffee House in Delta CO 11/17/09.

It made no sense why was the FBI now interested in someone attacking the website after they totally ignored what was never reported as a denial of service attack as such. Someone tried hammered the site for short periods to send a message. Case where Doughty and Anderson had disappeared, when the bank was closed July 2009, and people (except for the FBI) where trying to find them. This was relayed to the FBI as a possible location, but showed no interest.

---

20100623 1245 Re Unidentified SA Threat; Tie up your server; BOKF False claims.txt

Subject: Re: BOK Financial Corp (BOKF :NASDAQ) - False claims, failure to disclose, insiders benefiting
From: PO
Date: 6/23/2010 12:45 PM
To: FBI Agent

Brad,

Re: tie up your server

I will have to go back and check the log files. The host I had been using filed bankruptcy, but we didn't hear about that until experiencing serious reliability problems. Last month I started migrating to another host. That induces problems that have to be worked through and wasted a couple of weeks. There has definitely been problems, that at the time I assumed where move related. One in particular was puzzling. That will take a few days to sort out, and it may be nothing, but worth looking at.

Are you also interested in the details on the original problems we previously discussed, as well as recent problems, if there are any?

---

Re: 20100622 reGd BOK False claims failure to disclose insiders benefiting.

Re: Other SA

To hear others are interested is encouraging. I would like to think this is the result of more people willing to come forward and talk to authorities. There have been signs of increased concern since we started having budget problems, and the legislature started cutting programs this year.

Then the BOK thing is something people are finally connecting with. That may be because of that mentioned above. Personally, I see the evidence for other cases being equally as convincing. The BOK information is more complete and easier to explain in a way more would relate.

Can't remember if I told you, but the SEC was visiting prowlingowl.com within an hour of when the tip was submitted. They have been back to visit every day, but one since. I also submitted a copy of the SEC report on the FBI tip site.

Now I AM putting together something for the IRS. This will include more than just BOK. Specifically, an update on what was submitted to the IRS a year ago. They Apparently ignored that one; likely because the evidence was on the weak side. This new version will include all the evidence that has been uncovered over the last year, for Altus Ventures, Scissortail and OTC. This will be submitted to the FBI tip site, to get those cases on record.

Nick

---

20100623 1251 Re Unidentified SA Threat; Tie up your server; BOKF False claims.txt
20100623 reGd BOK False claims failure to disclose insiders benefiting!~200956694.txt

Subject: Re: BOK Financial Corp (BOKF :NASDAQ) - False claims, failure to disclose, insiders benefiting From: FBI Agent
Date: 6/23/2010 12:51 PM
To: PO

Nick,

They would be more interested in recent attacks on your site but any info would be of value.

Re: new interest, I agree that the BOK info was very helpful in this regard. Keep up the good work!

Re: FSB. Just curious, did you ever attempt to speak with any of the Doughtys?

See 20100623 Speaking to Doughtys.docx

---

20100624 0918 Threat Server Tie up and Inform of SEC.txt

Subject: Re: BOK Financial Corp (BOKF :NASDAQ) - False claims, failure to disclose, insiders benefiting
From: PO
Date: 6/24/2010 9:18 AM
To: FBI Agent

Brad,

I could find no evidence of any attempts to tie up prowlingowl.com, at least during 2010. I was really hoping something would show up, so you guys could raid some den of underworld criminals.

As a thought if some folks may have experienced problems trying to visit the site that could be because I use a shared server. Dedicate servers are expensive. Shared with at least 100 other sites, where someone is always failing to debug their software before taking live and slow down or crash the rest. And, yes, I have been guilty of that a time or two :-)

I couldn't find where I kept records of the times some tried before. Each of those occurred, 2 or 3 times, then sent away.

One, that occurred in late 2008, mostly came from the City of Altus computers, and distributed bots. I contacted the city IT guy, who put a stop to that right away.

The other from, a Wi-Fi hot spot in Delta CO. If I remember that was a Starbucks. This is the one I called you about. This came after Anderson and Doughty, disappeared, and I thought it could be one of them and give you one possibility where they may have gone. That went for a few days during certain hours. Then went away, after I contacted, the service provider, who I think was Comcast. Then it popped back up a little later for a short period, and hasn't occurred since.

I will keep an eye out.

Nick

---

20091117 1846 Trivia that might be helpful sometime.txt

From: PO
To: FBI Agent
Date: Tue Nov 17 18:46:26 2009
Subject: Trivia that might be helpful sometime

Brad,

I AM sure you know where Doughty and Anderson are, but someone in Delta Colorado has been running a denial of service attack on prowlingowl.com both yesterday and today. The source is a Qwest IP address 71.33.238.88 that traces to Delta Colorado. That could be cloaked, and it could be one of those virus like bugs they hide in other people's computers. Those usually have a different pattern and involve sneaking a Bot in 100s or 1,000s of computer. Each Bot making short burst of pinging a site. Someone in Altus did that about the time the audit started back around the first of the year.

Also noticed where Bruni's LinkedIn bio now states he completed "U.S. Naval Undergraduate Flight Training". That was a fancy term for pilot boot camp and where most washed out. A less than honorable failure. Never met one wash out that hadn't spun up an honorable reason. They come up with some real doozies. Never heard one go so far as to have becoming a pilot flying real plane, like Bruni claimed to have flown a P3. All those I knew where still in the Navy, where people know better. Usually wash out have to serve out their time in another capacity, and my guess is Bruni was stuck with some ground duty at a P3 Squadron. That would explain some of the other claims in his resume. Duties and accomplishments that typically weren't handled by pilots. This gives credence to the other rumor that Bruni doesn't have that Harvard MBA either. His career is probably over once this all gets out.

Nick

---

20091119 0645 Trivia that might be helpful sometime.txt

Subject: Re: Trivia that might be helpful sometime
Date: 11/19/2009 06:45 AM
From: PO
To: FBI Agent

As it turns out there is more than I had originally noticed. Because of the files sizes I keep all of the Colorado evidence files on another server, which has little action now that the auditors left the bank, so I seldom check that site.

That is where it first started the evening of the 15^th . They were back today, actually yesterday now.

I also checked other sites that share each of the same servers and found IP 71.33.238.88 never visited any other sites. This suggest it is not a just a random occurrence or accidentally stumbling up the wrong IP addresses.

With more info the random and erratic pattern is starting looks like some one taking a laptop to a public accessible Wi-Fi area, like Starbucks, library, etc. The timeline, suggest something that is open during hours covering at least from 9:48 AM
and 6:08 PM
MST. That may make it hard to track down who it is. I AM sure you know you can find Wi-Fi hot spots parking outside a location that has one. The limiting factor might be temp in that area. Just how long someone is willing to park outside, unless they leave the laptop on in the car while they go in and have coffee :-)