Homicide trial: Police discover a number of airline and banking searches on lacking girl’s telephone

Legislation enforcement and FBI personnel testified Tuesday on the trial for Bernard Brown, who’s charged with second-degree homicide within the disappearance and suspected dying of his ex-girlfriend, Moreira “Mo” Monsalve.

The 46-year-old mom of three was final seen on Sunday night, January 12, 2014, greater than eight years in the past. Brown has pleaded not responsible to the fees.

Between the night of January 12 and the early morning hours of January 13, the police noticed that a number of web sites had been being accessed by way of browser exercise on Monsalve’s telephone.

In testimony Tuesday, Lieutenant Nelson Hamilton detailed how Monsalve’s telephone was present in items below a dumpster at Pāpōhaku Park, situated simply 0.3 miles from Brown’s residence in ʻĪao Parkside. Together with the telephone, police discovered the car title, paperwork belonging to each Monsalve and his son, Monsalve’s checkbook, and his ID.

Police had been delivered to the placement on the afternoon of Thursday, January 16, 2022, after being advised that Monsalve’s purse had been discovered there earlier than, and had been eliminated by a homeless individual.

Lt. Nelson Hamilton (8.9.22) PC: Wendy Osher

In response to Lt. Hamilton, the realm with the dumpster was cordoned off with police tape and the waste was eliminated layer by layer, beginning by eradicating baggage and dirt from above. Because the staff approached the underside, Lt. Hamilton needed to go contained in the dumpster as a result of he may not attain. “I noticed his ID card under,” he stated.


On the time of the search, Hamilton was a Detective Sergeant with the Maui Police Division’s Felony Intelligence Division.

Lt. Nelson Hamilton (8.9.22) PC: Wendy Osher

The objects had been photographed and located by proof specialists.

Earlier that day round midday, Lt. Hamilton was assigned to assist test on neighbors to see if anybody noticed or heard something on the evening of January 12, 2014–when Monsalve was final seen at Brown’s residence.


About 45 minutes after finishing the realm and checking with neighbors, Lt. Hamilton stated Brown got here out of the condo and approached him, asking what to do about folks harassing or threatening him.

In the course of the change, Lt. Hamilton stated he seen “numerous scratches” down each of Brown’s arms. They “haven’t any specific path, like everybody else, down their arms and fingers.” Officers described the scratches as “skinny,” and stated they had been seemingly brought on by operating via brush. When requested in the event that they regarded like fingernail marks, Lt. Hamilton stated, “No.” He pointed to the earlier expertise saying each “thinness” and “randomness” of the indicators resulting in this perception.

Lt. Hamilton was additionally tasked with reviewing telephone statements and Fb knowledge extracted from Monsalve’s telephone on the evening of January 12 to the morning of January 13, 2014. This included browser exercise that confirmed searches and financial institution exercise.

The lieutenant additionally noticed a sequence of deletions on Brown’s Fb account between 11 pm on January 12 and after 7 am on Jan. 13, the place he deleted in succession 21 people from his listing of associates, then 14, then 23, for a complete of 58 relationships deleted.

Police additionally famous: a 14 second name made within the early morning hours of January 13 from Monsalve’s telephone to Brown’s telephone; At round 1:04 am on Jan. 13, the police famous that Monalve’s Fb account did an exercise whereas inked to the identical IP tackle as Brown’s; and after midnight, there’s a sequence of financial institution or bank card searches accomplished via Monsalve’s telephone.

Police testified that on the morning of January 13, there have been a number of outgoing calls on Brown’s telephone together with one to Los Angeles, and two calls to a quantity within the San Jose space code.

A stipulation witness, Dustin Simerly, who’s employed as an digital engineer with the FBI, acknowledged that the group was capable of extract and picture of the broken Monsave Android smartphone.

Cindy Maglasang (8.9.22) PC: Wendy Osher

Honolulu’s FBI Cindy Maglasangwho’s now retired, educated, skilled, and licensed in digital evaluation of cell telephones.

He defined that the FBI was ready to attract and retailer knowledge from Monsalve’s telephone. In his capability, Maglasang made a duplicate of the picture and verified it utilizing software program and hash worth to make sure that the created picture is identical as the unique.

She stated the duplicate was saved within the examination machine till it was completed after which copied on one other disc and saved with the software program outcomes. The ensuing half was then reviewed on a separate disk, whereas the unique was not touched, and remained as proof.

Detective Matthew Bigoss (8.9.22) PC: Wendy Osher

Detective Matthew Bigossand an 18-year veteran of the Maui Police Division, defined to jurors in less complicated phrases what sort of knowledge was discovered throughout a search of Monsalve’s telephone and Fb account.

Det. Bigoss stated, “For those who use the web on the telephone, there will likely be some knowledge saved on the telephone – whether or not you obtain it, or there’s an computerized course of that occurs within the background. It always shops knowledge in your telephone to make the person expertise higher.

In lots of circumstances, the telephone shops knowledge to hurry up the presentation of net pages, in accordance with Det. Bigoss. On this case, investigators use bodily extraction strategies to acquire knowledge, which is a bit-by-bit copy of digital storage knowledge that’s reviewed and applied within the container file.

From Monsalve’s telephone, Det. Bigoss stated, he may say that at 21:08 on January 12, 2014, and once more at 1:04 am, Monsalve’s telephone interacted along with his Fb software from the IP tackle of Bernard Brown.

Det. Bigoss additionally sees machine cookies, that are lengthy alphanumeric strings, used to determine a tool, retailer preferences, and retailer analytics to see what number of occasions somebody has been to an internet site.

In response to Det. Bigoss, the identical IP tackle additionally seems in Monsalve’s Fb file. In cross-referencing the info, he discovered that Fb data confirmed that Monsalve’s account was accessed from Brown’s IP tackle on the morning of January 13, 2014, January 29, 2014, and once more on February 4, 2014.

Utilizing knowledge from Monsalve and Brown’s Fb data, he stated there was a particular exercise famous on January 29, through which the identical machine was used to entry each accounts.

There was additionally a second name 14 made out of Monsalve’s telephone on January 13 at 12:07, and a textual content message from Monsalve’s telephone to Brown’s telephone at 2:46 am on January 13, in accordance with police testimony.

Shopping historical past exhibits visits to mutilple banking, airline websites

Between the night of January 12 and the early morning hours of January 13, the police noticed that a number of web sites had been being accessed by way of browser exercise on Monsalve’s telephone.

Det. Bigoss stated there have been a number of visits to the banking web site together with:

  • Financial institution of Hawaiʻi at 10:34 pm, and 10:51 pm on January 12; and (cellular banking) at 12:28 January 13, 2014.
  • Capitol One: Google search at 1:05 am, and web site entry at 1:16 am on Jan. 13, 2014.
  • Chase: Google Search at 12:27 am; Chasing bank cards at 12:28; cellular banking web site at 1:58 am; bank card customer support at 2:02 am; and card service at 2:22 January 13, 2014.
  • Visa Reward: 13:40 January 13, 2014.
  • Barclay Card: Google search at 1:42 am, login and password web page at 1:45 am on January 13, 2014.

Det. Bigoss additionally particulars entry to a number of airline websites, and searches for airline fares between Kahului airport and San Jose.

  • 1:30 a.m. Google searches for Priceline; 1:39 am go to cellular web site; 1:40 am Priceline Rewards
  • Hawaiian Airways: Google Search at 1:47 am, 2:27 am, and a pair of:34 am; web page for flight availability and reservations; 1:56 am LA Occasions article associated to Hawaiian Airways.
  • American Airways: 1:53 am searching for American Airways; entry to the web page for flight reserving; 1:56 web site exercise; 2:22 a.m. web site entry; 2:34 am cellular web site, flight reserving web page, login web page, traveler info web page, contact info, and traveler abstract.

In response to Det. Bigoss, there’s a knowledge entry that exhibits the thirteenth of January for an grownup passenger. On the American Airways web site, the traveler abstract web page confirmed that the traveler’s identify was entered as Bernard Anthony Brown, with a birthday of July 4, 1971. Within the contact part, Monslave’s telephone quantity and electronic mail tackle had been listed, in accordance with testimony. The web site affords choices for return flights on January 21 and 22, with info on costs obtainable, in accordance with Det. Bigoss.

After that, Monsalve’s cellphone knowledge confirmed that the telephone once more accessed Chase’s cellular banking web site, then T-Cell’s web site. There was additionally extra entry to Microsoft, Outlook and Hotmail earlier than looking exercise ended round 3:05 a.m., in accordance with testimony.

Det. Bigoss outlined additional browser exercise on Monsalve’s telephone in the course of the time interval, which included: entry to Outlook and Hotmail, each Microsoft electronic mail providers; MSN and T-Cell web page. Fb was additionally accessed to seek out associates at 1:04 am, 1:20 am, and 1:57 am; and there’s a Fb password reset at 1:32 am on January 13, 2022.

The trial resumed within the 2nd Circuit Courtroom on Thursday, Aug.11, earlier than Choose Peter Cahill.

About the author


Leave a Comment