Title: Targets visiting specific websites

Release Date: 2015-07-01

Description: Ths undated set of annotated screenshots from XKeyScore provides a worked example of a search: see the Intercept article XKEYSCORE: NSA’s Google for the World’s Private Communications, 1 July 2015.

Document: xks-targets-visiting-specific-websites-p1-normal.gif:
TOP SECRET//COMINT//REL TO USA, AUS, CAN. GBR. NZU/20320108

Center.! =*oc

Book Aleo Hammer

See next page for Derived From: NSA'CSSM 1-52
results... Dated:20070108
Declassify On: 20320108

TOP SECRET//COMINT//REL TO USA, AUS, CAN, GBR, NZU/20320108xks-targets-visiting-specific-websites-p2-normal.gif:
TOP SECRET//COMINT//RELTO USA, AUS, CAN, GBR, NZU/20320108

811 Targets visiting specific websites |UU|1I

Produced these results....

CMteni =“OC
Bo<2 Ai«r HamUtsr

Notice my wildcard in front of the
domain produced www results
and non-www

TTTT

HTTPTvpe
Host LFL Path .FI Mqi F*Coirtry(F To Catty
get www.sliia-fwum.de style „images. 1 last postgif PK ES
get www.dewJhrereigion.de beige.swf PK DE
get www.dewjhrerelgiofude historyjs pk DE
gs ste-fcfun.je fslyfejMgesflfl]8dh3_*in sit PK 5
get www.dewjhr ei ekgioii.de dasiauhklBucliswi PK DE
get www.dewjhr eteligioii.de dn«nl:ii4ilswissen.j|>g Phi DE
get www.deAJhfereSgiofl.de undefined PK DE
g* stw-fcnm.je feJ'fJe.mjes/.festfiKtgl PK ES
get www.slitt-lwum.de jsci(itsip$_Knilitt|nei(uestjs PK ES
get www.slii4-loium.ik jscnpt$ips_meiiu.js PK ES

Derived From: NSA'CSSM 1-52
Dated:20070108
Declassify On: 20320108

TOPSECRET//COMINT//RELTO USA, AUS, CAN, GBR, NZU/20320108xks-targets-visiting-specific-websites-p3-normal.gif:
TOP SECRET//COMINT//REL TO USA, AUS, CAN, GBR, NZL//20320108

CNE Data in XKS

Pick your
query

CNE Data doesn!t
age off, so go way
back...

AND

Datetime: 11 Year ¡Ml Start: [2008-C8-31 • C0:00 £-| i

Add in your
CNE boxes

Select THIS
site only

0 Selected implant exfils from active collection (xts-criexorp.nsa ic.QOv:xs_web_db)

e-Highlighter

Click to send permalink to address bar, or right-click to copy permalink.

Un-highlight all Un-highlight selectionu Highlight selectionh