Case 2:23-mj-01011-DUTY *SEALED* Document 4*SEALED* Filed 03/03/23 Page 1 of 4
Page ID #:74
United States District Court
CENTRAL DISTRICT OF CALIFORNIA.
In the Matter of the Seizure of
SEIZURE WARRANT
the Ite domain HORLDRTREDLABS .COM
CASE NUMBER: 2:23-mj-1011
TO: Federal Bureau Investigation and any Authorized Officer of the United States, Affidavit(s) having been made before me by FBI
‘Task Foree Officer ‘who has reason to believe that there is now certain property which i subject to forfeiture to the
United States, namely (ds
Toe le property tobe sized)
‘The Internet domain WORLDWIREDLABS.COM, as described in Attachment A, which is incorporated herein by reference,
Which is subject to seizure and forfeiture under 18 U.S.C. §§ 981(a)(1\(A) and (b), 982(6)(1), and 1030(0)(1)(A); and 21 U.S.C.
853
concerning a violation of Title 18 United States Code, Section(s) 1030(aYSWA) and 1956(a)2)
Tam satisfied thatthe affidavit(s) and any recorded testimony establish probable cause to believe thatthe property so described is subject
to seizure and that grounds exist forthe issuance of this seizure warrant
‘orisien. Inc. is ordered to redirect the Internet domain WORLDWIREDLABS.COM to substitute servers controlled by the FBI, as set
forth in Attachment A.
YOU ARE HEREBY COMMANDED to seize within 14 days the property specified, serving this warrant and making the seizare in the
daytime - 6:00 A.M. to 10:00 P.M,, leaving a copy of this warrant and receipt for the property seized, and prepare a written inventory
of the property seized and promptly retum this warrant to the undersigned judicial officer as required by law.
(03/03/2023 at 3:11 PM. Los Angeles, California
Date and Time Issued City and State
Hon. Rozella A. Oliver, U.S. Magistrate Judge
Name and Title of Judicial Officer
AUSAs Lisa Feldman & Maxwell CollCase 2:23-mj-01011-DUTY *SEALED* Document 4*SEALED* Filed 03/03/23 Page 2 of 4
Page ID #:75
RETURN _
DATEWARRANTRECEIVED | DATEAND TIME WARRANT EXLCUTED | COPY OF WARRANT AND RECEIPT FOR ITEMS LEFT
wine
INVENTORY MADE IN THE PRESENCE OF
INVENTORY OF PROPERTY SEIZED PURSUANT TO THE WARRANT
CERTIFICATION
| declare under penalty of perjury that Lam an officer who exeeuted this warrant and that this inventory is correct and will be
returned through ajiling withthe Clerk's Office.
Date:
Executing Officer s Signature
Printed Name and TitleCase 2:23-mj-01011-DUTY "SEALED" Document 4*SEALED* Filed 03/03/23 Page 3 of 4
Page ID #:76
Attachment A
SUBJECT DOMAIN Controlled by Verisign
With respect to the following SUBJECT DOMAIN,
WORLDWIREDLABS.COM, Verisign, Inc., located at 12061 Bluemont
Way, Reston, VA 20190, which is the domain registry (the
“subject Registry”), shall take the following actions to effect
the seizure of the SUBJECT DOMAIN:
1, Take all reasonable measures to redirect the
SUBJECT DOMAIN to substitute servers controlled by the FBI, by
associating the authoritative name server for the SUBJECT DOMAIN
to the following authoritative name servers:
(a) ns1.seizedservers.com
(b) ns2.seizedservers.com
(c) Any new authoritative name server to be
designated by a law enforcement agent in writing,
including e-mail, to the Subject Registry
2. Take all reasonable measures to propagate the
necessary changes through the Domain Name System as quickly as
practicable;
3. Prevent any further modification to, or transfer
of, the SUBJECT DOMAIN pending transfer of all right, title, and
interest in the SUBJECT DOMAIN to the United States upon
completion of forfeiture proceedings, to ensure that changes to
the SUBJECT DOMAIN cannot be made absent court order or, ifCase 2:23-mj-01011-DUTY *SEALED* Document 4*SEALED* Filed 03/03/23 Page 4 of 4
Page ID #:77
forfeited to the United States, without prior consultation with
the FBI or Department of Justices
4. Provide reasonable assistance in implementing
the terms of this Order and take no unreasonable action to
frustrate the implementation of this Order.
5. The Government will display a notice on the
website to which the SUBJECT DOMAIN will resolve. ‘hat notice
will consist of law enforcement emblems and the following text
(or substantially similar text with the potential addition of
international partners):
“This Website Has Been Seized
as part of a coordinated law enforcement action taken against
the NetWire Remote Access Trojan.
This domain has been seized by the Federal Bureau of
Investigation in accordance with a seizure warrant pursuant to
18 U.S.C. $ 981{a) (1) (A) and (b), 18 U.S.C. § 982(b) (1), 18
U.S.C, § 1030(i) (1) (A) and 21 U.S.C. § 853, issued by the United
States District Court for the Central District of California as
part of a joint international law enforcement operation and
action by: the United States Attorney's Office for the Central
District of California, the Federal Bureau of Investigation,
Croatia Ministry of the Interior Criminal Police Directorate,
Europol European Cybercrime Center, Zurich Cantonal Police, and
the Australian Federal Police”Case 2:23-mj-01011-DUTY *SEALED* Document 4-1*SEALED* Filed 03/03/23 Page 1 of 30
Page ID #:78
United States District Court
CENTRAL. DISTRICT OF CALIFORNIA
In the Matter of the Seizure of
AMENDED APPLICATION AND AFFIDAVIT
FOR A SEIZURE WARRANT BY.
‘TELEPHONE OR OTHER RELIABLE
ELECTRONIC MEANS
the Inemet domain WORLDALREDLABS . COM
CASE NUMBER: 2:23-mj-1011
RRR