Email Digital Forensics of Butler's Political Machine of Tulsi's Guru

By Rebecca Saltzburg June 21, 2026

Thousands of these documents and emails from the covert Science of Identity political operation have been independently examined by the Washington Post. The content on this website is attributed solely to the site's author.
My forensic database highlights evidence from 19,558 emails and 1,781 decrypted PGP documents, showing how Butler's project office ran as covert political infrastructure. Tulsi Gabbard even routed Congressional drafts through Science of Identity's encrypted systems.

When I agreed to help with Tulsi's campaign in 2011, I was reluctant to help for personal reasons, but I 100% believed in her original policy positions. I only gradually uncovered the disgusting corruption, financial abuse, and systemic exploitation of children. This post specifically focuses on the forensic data that supports years of my personal knowledge and experience as a senior PR strategist on her political campaign.

Section 1: Tulsi used Science of Identity infrastructure from the U.S. Congress

On January 10, 2017, Tulsi Gabbard was physically at the U.S. House of Representatives in Washington, D.C. Her IP address, 143.231.249.139, is in the block registered to the U.S. House (143.231.0.0/16 at ARIN). She sent an email with the subject "[Email Draft] 170110 ACA," a Congressional draft about the Affordable Care Act. 1

She didn't send it from her official government email. She sent it from T@alohafuture.com, routed through TGProject.onmicrosoft.com, a Science of Identity Exchange tenant, to Allison Hoen at researchhq.org and Sunil Khemaney at gmail.com.

Email from T@alohafuture.com, January 10, 2017
From: T <T@alohafuture.com>
IP: 143.231.249.139 (U.S. House of Representatives, Washington, D.C.)
Routed through: TGProject.onmicrosoft.com (Science of Identity Exchange tenant)
To: Allison Hoen (researchhq.org), Sunil Khemaney (gmail.com)
Subject: "[Email Draft] 170110 ACA"
Content: Congressional draft regarding the Affordable Care Act

Tulsi Gabbard, formerly a U.S. Congressmember and later Director of National Intelligence, routed a Congressional draft through a religious organization's private email infrastructure to Science of Identity operatives in Hawaii.

On six separate dates, Tulsi was confirmed at the U.S. House (by IP address) while Sunil Khemaney was simultaneously confirmed on the Science of Identity shared router in Hawaii: 2

Date Tulsi's location Sunil Khemaney's location
Sep 8, 2016 U.S. House, DC SIF router, Hawaii
Nov 15, 2016 U.S. House, DC SIF router, Hawaii
Nov 30, 2016 U.S. House, DC SIF router, Hawaii
Dec 7, 2016 U.S. House, DC SIF router, Hawaii
Jan 10, 2017 U.S. House, DC SIF router, Hawaii
Feb 2, 2017 U.S. House, DC SIF router, Hawaii

Tulsi was in Congress. Sunil Khemaney was at the project office. And they were communicating through Science of Identity's private email system, not through official government channels.

Tulsi's private Science of Identity email domain

The Exchange tenant hosting alohafuture.com is named "TGProject." This gave Tulsi a private email domain separate from her official campaign (votetulsi.com on Google Workspace) and separate from her personal Gmail, but hosted on the same Microsoft Exchange infrastructure as Science of Identity's nineisles.com and researchhq.org domains, and set up by the same Science of Identity IT administrator who built the others. 3

Email from T@alohafuture.com, November 16, 2017
From: T <T@alohafuture.com>
To: Allison <allison@researchhq.org>
CC: Jan <jan@researchhq.org>, Vikram <vikram@researchhq.org>, Sunil <sunil0570@gmail.com>
Subject: "Re: PPLs war re voting w/ GOP to Abolish Obamacare Death Panels"
Body: "Just saw this. Will get talking points."
Device: "Sent with aloha from my iPhone"

The UUID-format Message-ID with @alohafuture.com confirms her iPhone was configured with this Exchange account, routing her communications through Science of Identity infrastructure.

Tulsi Gabbard was confirmed as Director of National Intelligence in February 2025. In that role she held the highest security clearances in the United States government and oversaw 18 intelligence agencies.

Section 2: Six Exchange tenants, one IT admin, and $500K in campaign funds

What is a Microsoft Exchange Online "tenant"?

Think of it like renting a private office suite from Microsoft for your organization's email. Each tenant gets its own name, its own email addresses, and its own administrative controls. A law firm might have one tenant. A school might have another. They are completely separate; Microsoft treats each one as an independent organization.

Science of Identity didn't just use Gmail. They set up at least six of these separate Exchange tenants, each with a name that looks like an independent organization. To any outsider, a journalist, an attorney, a congressional ethics investigator, these would appear to be six unrelated entities. The email headers show they are not. 10

Tenant name Domain Purpose
ProjectHQ910 nineisles.com Primary Science of Identity operations hub (2,348+ emails)
ResearchHQ researchhq.org Extensive daily political monitoring and research
TGProject alohafuture.com Tulsi Gabbard's private email domain
sifoutreach sifyoga.com The one domain that directly names Science of Identity
office75hq office75.com IT administration and facility logistics
FergussonMark mark-fergusson.com Dedicated tenant for SIF leader and Healthy's CEO Mark Fergusson

The tenants were set up to look like they weren't all connected to Butler's central hub. "ResearchHQ" sounds like a think tank. "Aloha Future" sounds like a PAC. Each could be presented as a distinct entity.

One IT administrator built it all: Kit Robinson

Kit Robinson (Science of Identity name: "Kirtan") is directly confirmed as the person who built and managed the Exchange tenants. 11 On July 18, 2016, at 3:44 AM Hawaii time, he emailed setup instructions for a new ResearchHQ mailbox: 12

Email from Kit Robinson, July 18, 2016, 3:44 AM Hawaii time
From: Kit Robinson <kit.robinson@nineisles.com>
Subject: "New Mailbox for POL Project"
Content: URL https://portal.office.com / Username rebecca@researchhq.org / temporary password / instructions to choose "Exchange" or "Office 365"
HTML language tag: "EN-AU" (Australian English)

The 3:44 AM Hawaii send time equals afternoon in Australia. Kit Robinson was living in Australia at the time, administering Science of Identity's email infrastructure remotely. The "EN-AU" language tag in the email's HTML confirms an Australian-locale device.

Kit operates under three email identities across multiple tenants: kit.robinson@nineisles.com (ProjectHQ910), Kirtan@office75.com (office75hq), and kitprobinson@outlook.com (personal). In December 2024, emails from Kirtan@office75.com CC'd kit.robinson@nineisles.com, confirming they are the same person operating across tenants. 13

Kit Robinson later took over Allison Hoen's role as Butler's "secretary," the intermediary between Butler and all of his "projects." 18 The person who built the covert email infrastructure eventually became the person running Butler's entire operation through it.

Kit Robinson's brother: $500,000+ in campaign funds

Kit Robinson's brother, Kris Robinson, also grew up in Science of Identity. Kris runs a company called Northwest Digital from Stehekin, Washington, a remote village of 85 people, not accessible by road, with limited internet access. As reported by Honolulu Civil Beat, Tulsi Gabbard's campaign paid Kris Robinson and Northwest Digital more than $500,000, making him one of the highest-paid vendors on her presidential campaign. No political professionals Civil Beat interviewed had ever heard of him, and he had never worked for another candidate besides Gabbard. 14

One Robinson brother built Science of Identity's covert email infrastructure. The other received over half a million dollars from Tulsi's campaign through an obscure company in a town you can't drive to. Both grew up in Science of Identity.

Section 3: The Science of Identity router: one connection, multiple operatives

How IP co-location works, and why it's reliable evidence

Every email carries hidden metadata in its "headers," including the sender's IP address, which identifies the internet connection they were using when they hit send. This is the same type of evidence used in FBI cybercrime investigations and federal court proceedings. 4

The IPv6 subnet 2605:e000:d2cb:e000::/64 is a single residential Charter/Spectrum internet connection in Hawaii. This is not a VPN, corporate network, or shared public WiFi. It is one household's internet connection.

Person Role Emails from SIF router Date range
Sunil Khemaney Butler's operations chief 465 Apr 2016 – Jun 2017
Caitlin (teamtulsi.com) Tulsi's campaign coordinator 102 of 154 (66%) Sep 2016 – Apr 2017
Allison Hoen (Khemaney) Butler's project secretary Confirmed 2014–2017
Bhava Doyle Project office assistant Confirmed 2014–2017

Science of Identity operations staff and Tulsi's official campaign staff, all working from the same residential internet connection.

On 22 separate days, both Sunil Khemaney and Caitlin sent emails from the Science of Identity shared router, confirming they were physically present at the same location. The concentration falls in September through December 2016, during the peak of campaign operations for the general election. 6

Butler's operations chief and Tulsi's official campaign coordinator, sending email from the same residential router on the same days.

Section 4: The PGP encryption and document distribution system

The project office ran a PGP encryption system for distributing political documents, active since at least May 2011, when Tulsi was on the Honolulu City Council. 7

Document naming format
POL [TYPE] YYYY MM DD [Title] [timestamps].docx.pgp

The distribution hub: please.confirm@nineisles.com

Account Total emails Encrypted docs Encryption rate
please.confirm@nineisles.com 1,222 1,150 94%
pls.confirm@gmail.com 98 93 95%

Top encrypted document distributors

Sender Encrypted docs Total emails
please.confirm@nineisles.com 1,150 1,222
allison.hoen@nineisles.com 86 1,279
sunil0570@gmail.com 60 994
dhdtennis@gmail.com 37 102
allison8888@gmail.com 34 1,270

Notice dhdtennis@gmail.com in fourth place. That's Carol Gabbard, Tulsi's mother, operating under her Science of Identity devotee name "Devahuti Dasi" (dhd). Carol confirmed both identities herself in a September 2016 email. 8

Section 5: Allison Hoen: six email addresses, one operative

Allison Hoen (Khemaney) operated under at least six email addresses across multiple domains and tenants: 15

Email address Total emails Domain / system
allison.hoen@nineisles.com 1,279 Science of Identity, ProjectHQ910
allison8888@gmail.com 1,270 Personal Gmail
allison@teamtulsi.com 144 Tulsi's official campaign
allison@researchhq.org 82 Science of Identity, ResearchHQ
allison@sifyoga.com 1 Science of Identity, sifoutreach
allisonhoen@gmail.com 2 Personal Gmail (alternate)

On the sifyoga.com tenant, Allison appeared as "Allison SIF." The IP data shows all of these addresses converging on the same physical routers at the project office. In 2016, Allison sent emails from three different domains, teamtulsi.com, researchhq.org, and nineisles.com, all from router IP 66.91.253.154. Same person, same desk, three organizational identities.

Section 6: Documents created on government computers

Every Microsoft Word file carries hidden metadata, including a "Company" field that identifies the organization whose software license was used to create it. Among the 1,781 decrypted documents, 14 were created on U.S. government computers: 16

Document Created on Author
GabbardMentions 3.22.17 United States Senate O'Malley, Elizabeth
Mentions 12.13.16 United States Senate Joel Gross
GabbardMentions 06.23.17 U.S. House of Representatives Buzzell, Jessica
GabbardMentions 08.03.17 U.S. House of Representatives Vaishnavi Paudel
GabbardMentions 08.28.17 U.S. House of Representatives Vaishnavi Paudel
GabbardMentions 08.29.17 U.S. House of Representatives Vaishnavi Paudel
GabbardMentions 11.15.17 U.S. House of Representatives Vaishnavi Paudel

These "GabbardMentions" reports were created on official U.S. House and Senate computers, then distributed through Science of Identity's encrypted email system.

Section 7: The ResearchHQ migration

Around the time of the DNC hack, Kit Robinson set up ResearchHQ as a secure email system for the political operation and urged the team to adopt it within 24 hours. 17

Timeline
June 21, 2016 — Science of Identity team circulates report: "Clinton Foundation and DNC hacked by Russians, Guccifer"

July 18, 2016 — Kit Robinson emails "New Mailbox for POL Project" with ResearchHQ setup instructions

July 22, 2016 — WikiLeaks publishes DNC email dump

August 21, 2016 — Kit Robinson emails "Migrating to Researchhq.org Emails on Sunday 21"

Within one month of the migration, email volume on the old nineisles.com domain dropped 92%, from 390 emails in August to 30 in September 2016. PGP-encrypted attachments also vanished, dropping from 82 in August to zero by October.

"ResearchHQ" sounds like a think tank. "Nine Isles" sounds like a Hawaiian consulting firm. If a journalist or attorney subpoenaed one domain, the others wouldn't automatically surface. The Exchange tenants were set up to look like unique, unrelated entities, when in fact they were all built by Chris Butler's personal Science of Identity secretary, Kit Robinson.

Sources

  1. Email from T@alohafuture.com, January 10, 2017. IP 143.231.249.139 (U.S. House, ARIN). Routed through TGProject.onmicrosoft.com. Source: Google Takeout MBOX archive.
  2. IP co-location analysis from email headers. U.S. House IP range (143.231.0.0/16) via ARIN. SIF router IPv6 prefix 2605:e000:d2cb:e000::/64 (residential Charter/Spectrum Hawaii).
  3. Email from T@alohafuture.com, November 16, 2017. UUID Message-ID confirms Apple iPhone with Exchange account. Source: Google Takeout MBOX archive.
  4. IP addresses extracted from X-Originating-IP and Received headers. Standard digital forensic technique used in law enforcement and legal proceedings.
  5. Caitlin IP analysis: 154 traceable emails from caitlin@teamtulsi.com. 102 (66%) from SIF router. September 2016 – April 2017.
  6. Same-day co-location: 22 dates where both sunil0570@gmail.com and caitlin@teamtulsi.com sent from the same IPv6 /64 prefix.
  7. Earliest PGP document: "2011 05 04 RPT cape.real.estate.report1.doc.pgp." Tulsi elected to Honolulu City Council November 2010.
  8. Carol Gabbard email, September 4, 2016, confirming dual identity (carol@votetulsi.com / dhdtennis@gmail.com). Source: Google Takeout MBOX archive.
  9. Earliest PGP document: May 4, 2011.
  10. Exchange tenant IDs from x-ms-exchange-crosstenant-id and DKIM-Signature headers. Six tenants identified.
  11. Kit Robinson confirmed by emails: "New Mailbox for POL Project" (July 18, 2016) and "Migrating to Researchhq.org" (August 21, 2016). Cross-identity confirmed December 2024.
  12. "New Mailbox for POL Project" from kit.robinson@nineisles.com, July 18, 2016, 3:44 AM Hawaii time.
  13. December 2024 emails from Kirtan@office75.com CC'd kit.robinson@nineisles.com.
  14. Nick Grube, "Why Is Tulsi Gabbard Paying This Obscure Consultant Big Bucks," Honolulu Civil Beat, September 2019. $500,000+ to Kris Robinson / Northwest Digital. Stehekin, WA (population 85).
  15. Email counts from the Science of Identity forensic database senders table.
  16. Document metadata "Company" field extracted from decrypted .docx files using python-docx.
  17. "Migrating to Researchhq.org Emails on Sunday 21," Kit Robinson, August 21, 2016. WikiLeaks DNC dump: July 22, 2016.
  18. Based on the author's direct personal communications with both Kit Robinson and Allison Hoen.
Patriots Fight Corruption. Based on the network's own forensic email and document archive, IP and metadata analysis, and firsthand testimony.

Help Fund Patriots Fight Corruption

Donations are gratefully accepted, never expected.


Join our anti-corruption movement

Help us take back America.

Contact Us

SHARE THIS

Latest Posts

By Rebecca Saltzburg June 21, 2026
Sunil Khemaney is the man who connects Chris Butler, Wai Lana, and Tulsi Gabbard. He ran logistics for Tulsi's official congressional trip to India and tracked what foreign governments gave her.
By Rebecca Saltzburg June 21, 2026
Chris Butler controlled Tulsi Gabbard's brand: the platforms, the emotional delivery and the issues she'd own. It's all documented across hundreds of transcripts.
By Rebecca Saltzburg June 21, 2026
A Patriot's dictionary to identify corruption and defeat it: the Blobster, the Pickmeisha and the Fire Ant Strategy. The A-to-Z of how the Blob operates and how patriots take it down.
By Rebecca Saltzburg June 21, 2026
There are way more of us than them. Simple ways patriots can organize online and locally to expose corruption and take the country back by working together.
By Rebecca Saltzburg June 21, 2026
Our institutions are only as good as the people inside them. The Big Blob of Corruption is sliming our government agencies, businesses, religious institutions - anywhere there's power.
By Rebecca Saltzburg June 21, 2026
The Blob needs corrupt local operatives to do its dirty work. Why the county sheriff's office is one of its favorite weapons, and its biggest weakness.
By Rebecca Saltzburg June 21, 2026
Tulsi Gabbard's guru Chris Butler began producing propaganda inside China since the 1980’s, seeding his family's CCP-sponsored media empire. A scholar calls him "a propagandist's dream."
By Rebecca Saltzburg June 21, 2026
Tulsi Gabbard foreign policy position that America's Gulf "allies" like Saudi Arabia are the real funders of terrorism was secretly scripted by her guru Chris Butler.
By Rebecca Saltzburg June 21, 2026
The soundbites that made Tulsi Gabbard a cable-news favorite, on Fox, CNN, and MSNBC were carefully drafted by her guru Chris Butler.
By Rebecca Saltzburg June 21, 2026
Tulsi Gabbard’s guru Chris Butler directed a behind-the-scenes campaign to defend Modi, align Tulsi with the BJP, and brand her critics "anti-Hindu" bigots.
Show More