Page:James Gordon Meek Affidavit.pdf/9

 depicted the Woodrow Wilson Bridge as seen from the vicinity of Jones Point Park in Alexandria, Virginia, within the Eastern District of Virginia. That image was created with the rear camera of an iPhone 8 on April 5, 2020, at 17:52 UTC. This image indicates MEEK was located in the Eastern District of Virginia at the time the child pornography video was distributed on Telegram, as discussed above.

26. The external hard drive also contained an image titled “IMG_5333.PNG”, saved in a folder titled “iphone pix backup”, which depicts a screen shot of an iPhone with the open applications/window shown as tiles. The open windows include the Safari internet browser with “Omegle” website displayed (other evidence, discussed below, indicates that MEEK used Omegle to chat with and attempt to chat with purported minors); a photo album with the heading “Tandies” with several breastfeeding images visible (the iPhone 8 contained an Instagram account with the username “TandiesClare” that purported to be collecting images of and stories about women breastfeeding, one of MEEK’s known interests); the Kik application; and a window that is only partially visible that appears to be the internet-based chat application Telegram.

27. The apparent Telegram tile shows a chat log containing several images on the right side of the chat, indicating they were sent from the user of that account. The images appear to be videos, as they include time stamps in the upper left corner. The images were sent at 1:33 PM and contain two check marks indicating the message had been delivered to the server and that the conversation had been opened once the message was present.

28. The sent images are consistent with child pornography. Also visible is a still image of a video that appears to be 1:30 in length. Based on my training and experience, I know this to be part of a series of child pornography images and videos known to law enforcement and contained in a NCMEC database of identified children.