Thanks JWG, As always you have followed thru to the letter.
I had a feeling that this was a misnomer, as the Media & Nancy G. would still be screaming this over the airwaves.
I hope ButWhatIf also sees this.
:blowkiss:
Yep...here I am. Thanks JWG for putting it all together and explaining it.
Can you tell me the doc page where you got all this info please? Great work as usual btw.:clap:
I've been looking through the mountain of computer forensic data released last September and uploaded yesterday to a file sharing site by dedicated websleuther Muzikman. :rocker:
I posted yesterday on the escort service surfing activity, and I will have more to say about that in a future post. Suffice it to say, I am 99% certain George is solely responsible for the visits to escort sites, :blushing: and KC is uninvolved in that surfing activity.
This evening I took a close look at the visits to missing person's websites widely reported last September in the media. My conclusion is that KC did not visit missing persons websites prior to Caylee's disappearance. In fact, I do not believe she is responsible for those visits at all.
Following is the raw data for the visits in question:
07/16/2008 14:51:37 06/24/2008 16:01:46 http://www.missingkids.com/photographs/NCMC1097725c1t.jpg
07/16/2008 14:51:31 07/03/2008 01:28:12 http://www.missingkids.com/photographs/NCMC1099693c1t.jpg
07/16/2008 14:51:25 07/10/2008 11:37:33 http://www.missingkids.com/photographs/NCMC1096469c1t.jpg
07/16/2008 14:51:24 05/27/2008 12:58:47 http://www.missingkids.com/photographs/NCMC1096536c1t.jpg
07/16/2008 14:51:24 04/24/2008 16:06:48 http://www.missingkids.com/photographs/NCMC1094062c2t.jpg
07/16/2008 14:51:24 04/24/2008 16:06:48 http://www.missingkids.com/photographs/NCMC1094062c1t.jpg
07/16/2008 14:51:24 05/03/2008 17:07:29 http://www.missingkids.com/photographs/NCMC1094659c1t.jpg
07/16/2008 14:51:24 06/23/2008 15:30:12 http://www.missingkids.com/photographs/NCMC1098504c1t.jpg
07/16/2008 14:51:24 04/24/2008 16:06:48 http://www.missingkids.com/photographs/NCMC1094062c3t.jpg
07/16/2008 14:51:24 06/24/2008 14:14:01 http://www.missingkids.com/photographs/NCMC1098088c1t.jpg
07/16/2008 14:51:24 07/02/2008 19:50:00 http://www.missingkids.com/photographs/NCMC1099149c1t.jpg
07/16/2008 14:51:24 07/01/2008 00:06:13 http://www.missingkids.com/photographs/NCMC1099410c1t.jpg
07/16/2008 14:51:24 03/17/2008 15:47:48 http://www.missingkids.com/photographs/NCMC1091268c1t.jpg
07/16/2008 14:51:24 04/10/2007 12:29:03 http://www.get-involved.com/mashup/marker.swf
07/16/2008 14:51:22 http://www.get-involved.com/mashup/RSS_Read.php?state=XX
07/16/2008 14:51:22 http://www.get-involved.com/mashup/RSS_Read.php?state=XX
07/16/2008 14:51:21 06/19/2007 06:32:24 http://www.get-involved.com/mashup/map_small.swf
07/16/2008 14:51:20 04/26/2007 08:04:49 http://www.get-involved.com/mashup/images/kids_widget_04.gif
07/16/2008 14:51:20 04/26/2007 08:04:48 http://www.get-involved.com/mashup/images/kids_widget_01.gif
07/16/2008 14:51:20 04/26/2007 08:04:49 http://www.get-involved.com/mashup/images/kids_widget_05.gif
07/16/2008 14:51:20 04/26/2007 08:04:49 http://www.get-involved.com/mashup/images/kids_widget_02.gif
07/16/2008 14:43:09 http://www.get-involved.com/mashup/RSS_Read.php?state=XX
There are a few things to note about each item listed. First, the items are objects on the website, such as an image (.gif or .jpg) or shockwave video (.swf). The web browser will store the objects on the computer so that the next time the website is visited, it will appear to load faster than the first time. This is called caching.
The date / time shown in red indicates when the object was accessed by the web browser. This is indicative of when the website was surfed.
The other date / time (if there is one) indicates when the object was last modified by whoever created it or otherwise owned the object. Using an image, for example, this date / time could indicate when the picture was taken, resized, photoshopped...you name it. It is often indicative of when the web page was created or modified. It is not indicative of when the web page was surfed.
Unfortunately, the media saw the old dates and assumed that they were surf dates. LE did not make that assumption. There is nothing in the complete forensic report that indicates they ever thought this was something to look into.
I should further point out that the sites were visited from the laptop computer and not the home computer.
So what really happened? :waitasec:
Recall that Lee picked up KC's computer on the evening of the 15th from Tony's. (I will need to post later on the activity beginning late that night, but in an attempt to keep this post to under five pages, I will stay on topic. )
Sometime during the afternoon of the 16th the "cayleeismissing" myspace page goes live. This page becomes a missing person's website - Caylee's. Work on this page occurred between 2:37 PM and 2:52 PM on July 16th - completely encompassing the time the missing person's sites were accessed.
Given KC was pre-occupied during this time, the best candidate for this activity is ... Lee. He was just trying to get Caylee's name out there as a missing person. :angel:
Hi butwhatif...
There is not a document page to reference. I downloaded computer files released by LE in September and looked through those. Surf to my profile page and look for a recent post by Muzikman - there is a link there for a 95MB zip file containing the documents I've been looking at.
That file also contained a couple of Caylee pics (very good resolution) from the visit to Mt. Dora that I had personally not seen before. Worth the download just for those, IMO.
I posted yesterday on the escort service surfing activity, and I will have more to say about that in a future post. Suffice it to say, I am 99% certain George is solely responsible for the visits to escort sites, :blushing: and KC is uninvolved in that surfing activity.
10:43 PM - a successful attempt to log into myspace is made, although the account is not clear (if I knew the numeric ID for KC I could probably tell). For the next 10 minutes comments and inbox messages are viewed.
Ok...a couple of questions...how does Tony get on to the laptop...when did the "blue screen" appear supposedly? I thought it was there when Lee came to pick it up. I also remember a lot of discussion about what went on the morning of the 16th. I believe it was CA talking about how that morning, when Casey was back home, they were all busy setting up the website. Remember how she said they had very little time to talk- Casey took a shower, they were busy setting up the website ('cause Cindy had no idea how) yada yada. If what you're saying is true (and I do believe it is) then all that talk from CA was a bunch of baloney. The website was set up in the afternoon...and Casey was NOT there. Is that correct?As I was researching the missing persons website visits on KC's laptop computer, I began to piece together what happened to KC's laptop during the final 24 hours before it was turned over to LE.
Lee arrives at Tony's around midnight, leaving around 2:00AM and arriving back at his parents around 2:25AM (evidence pages 1442 - 1445). While there he sees KC's laptop plugged in and set up on the kitchen counter top. He starts it up but gets the "blue screen of death" indicating the computer was improperly shutdown and data has been lost (page 1478). Lee also states later that, as he is investigating the situation with Caylee after bringing KC's computer back to life, he notices that in KC's Yahoo email account all emails prior to June 15 were deleted (page 1479).
I personally noticed that the internet history before June 27 was deleted, as was July 2 - 9.
Now let's look at the activity...
No activity on July 15 until 8:47 PM, when about 40 seconds worth of AIM activity occurs. My belief is this is when the computer is powered on by Tony, and AIM automatically launches. Nothing happens for 1 1/2 hours.
KC's phone - which is in the possession of Tony, receives texts from Andy F. and Will W., around 9:25. At around 10:05 Tony calls Amy and learns about KC cleaning out her bank account. Tony is probably not emotionally stable at this point.
At 10:15 PM activity resumes. For the next five minutes it looks like there are repeated attempts to log into KC's ATT wireless account, culminating in a visit to the "lost password" page to presumably have a new password sent to her email account. A successful login to Yahoo may have occurred at this time.
Activity resumes again at 10:30 with an attempt to either register with or log into an existing "Lava Life" account. This lasts for about a minute (methinks Tony is looking at the internet history). Attempts are then made to log into Facebook (unsuccessfully).
10:43 PM - a successful attempt to log into myspace is made, although the account is not clear (if I knew the numeric ID for KC I could probably tell). For the next 10 minutes comments and inbox messages are viewed.
10:57 PM - a successful attempt to log into Facebook is made, although the account is not clear. Numerous photos are viewed for the next 3 minutes. Activity stops.
11:15 PM - a return to Facebook with what appears to be a single upload.
11:19 PM - a second attempt to login to the ATT wireless account.
11:23 PM to 11:35 PM - a rapid-fire mixture of myspace and photobucket views. On Photobucket it is images. On myspace it is images and messages.
11:35 PM to 11:50 PM - many, many views of Facebook photos after what appears to be a successful login.
Computer handed over to Lee.
1:40 AM - computer appears to reboot.
2:32 AM - successful login to Yahoo mail. Activity stops at 2:34 (possibly after seeing no email exists).
At 5:09 AM the computer is powered up, but no real activity until 5:18 when the MSN website is brought up. One of the very first things done here is to go to the white pages search off this site and enter "aida" as a first name and "fernandez-gonzalez" as the last name. Lee searches referral sites ussearch.com and reunion.com for ZFG. Activity is very sparse from about 5:25 AM to 1:40 PM.
From 1:40 PM to 2:00 PM or so there are multiple searches on multiple site for combinations of "cheryl davis" "east coast universal" and "battle of the bands" - all of which were figments of KC's imagination. One wonders how he continues believing sis to this day. :waitasec:
After a brief pause of 20 minutes or so, work began on the cayleeismissing, myspace page...Lee's part to understand just what KC was up to.
I have to wonder if George's Nigerian internet scam was really money going to escort services?? hmmmmm.....
JWG - You always continue to amaze me!! Thank you for clearly showing what happened with her computer.
I would like to see what time Lee's calls to TonE came in.....and for how long they talked.
The only statement you made that I'm not 100% certain of is that TonE ACCIDENTALLY caused the blue screen.
LA could have called TonE and told him KC was in a lot of trouble and to please start deleting.....and he would be over soon to pick up her stuff.
TonE definitely gathered KC's things and probably folded them and packed her bags -- good riddance after what he saw on her computer.
I'm hoping the taped meeting between LA and TonE will give us a better understanding of what exactly happened that night.