
Federal records reviewed this week by the New York Post show how the Butler rally gunman stocked up before he climbed onto that rooftop in July 2024: he ordered online under borrowed names, including “Bob Dole,” the late Kansas senator and 1996 Republican nominee, and the parcels kept arriving at his family’s home.
Story Highlights
- Records surfaced September 14 show Thomas Crooks used aliases, including “Bob Dole” and “Bill Cook,” to buy gear tied to the attack.
- His father told the FBI two days after the shooting that parcels to the house held “parts, tools and items to increase the capacity of his rifle.”
- The FBI says Crooks made at least two dozen firearms-related online purchases starting in 2023.
- Investigators treat the Butler shooting that wounded President Trump as an assassination attempt and potential domestic terrorism; officials say he acted alone.
FBI Identifies Alias Purchases Tied to Attack Prep
Federal Bureau of Investigation records say Thomas Matthew Crooks used several false names to prepare for the Butler, Pennsylvania rally attack. The FBI summary cites “Bill Cook” and “Bob Dole” among the aliases used to buy tactical gear and weapons parts before the shooting. Investigators assessed the alias use as a way to hide planning online. That summary anchors a timeline of purchases that began in 2023 and continued into 2024, building the kit he carried to the rooftop that day.
The Bureau also said Crooks made at least 25 online purchases linked to firearms before the attack. The activity, according to the FBI, showed steady preparation and intent. Agents traced the accounts and deliveries as part of their forensic review. The summary offers the government’s narrative of how a 20-year-old assembled gear over time without drawing fast attention on mainstream platforms or at the point of sale.
🚨 THIS WAS NEVER A LONE WOLF. 🚨
New federal docs just dropped on Thomas Crooks — the kid who almost took out Trump in Butler.
Sick gun obsession. “Bob Dole” fake name on Amazon. 3D-printed pistol attempts. Pacing the garage talking to himself while cleaning a rifle. Anonymous… pic.twitter.com/dPIp20EONW— CONSTITUTION X 🇺🇸 (@ConstitustionX) September 15, 2026
Assassination Attempt, Domestic Terror Probe, and Public ID
The FBI announced it is investigating the Butler shooting as an assassination attempt against President Trump and as potential domestic terrorism. The Bureau’s initial statement identified Crooks by name, age, and hometown. Officials asked the public for any tips tied to the events around July 13. That posture reflects the gravity of a presidential targeting and brings maximum federal resources to bear on the case and any connected threats that may surface.
National reporting after the attack cited law enforcement officials who said Crooks acted alone. That conclusion aligns with what investigators have shared so far about his planning and purchases. It also matches the FBI’s statements that presented a single shooter, working from a fixed position near the fairgrounds, using a rifle recovered at the scene. The core facts are not in dispute in official records and mainstream coverage.
How A Simple Alias Shield Helped Him Buy and Build
Online marketplaces often ship common gear with little friction, which helps law-abiding buyers but can also aid bad actors. Crooks, investigators say, hid behind everyday-sounding names to make his buys blend in. That tactic can defeat casual checks and delay pattern detection until after an attack. The FBI’s summary shows why name games matter: even basic pseudonyms can mask a chain of orders long enough to prepare for violence if no one matches the pieces in time.
For conservatives who value strong law and order, this case underscores two needs. First, faster coordination when online purchases form an obvious pattern of risk. Second, firm penalties for anyone who hides identity to plan violent acts. These steps do not attack the Second Amendment. They target deception and pre-attack conduct. The goal is simple: stop political violence early, protect free speech at rallies, and ensure families can attend civic events without fear of rooftop gunmen.
Security Lessons For Campaigns, Communities, and Law Enforcement
Event planners and local police can use these facts right now. Perimeter checks must include elevation risks, open roofs, and line-of-sight scans. Gear like optics and parts shipped to a region before a high-profile stop can be a signal, when linked in real time. Federal and local teams should keep rapid alerts flowing in the days before a rally. Clear roles and quick action can close the gaps a lone shooter seeks to exploit when he hides in plain sight online.
What Accountability Should Look Like
Americans deserve transparency on how alias-linked orders were tracked, when red flags appeared, and which safeguards worked or failed. Congress and state partners can press for targeted fixes that respect privacy and the Constitution. The standard is narrow and clear: focus on deception tied to violent plotting, not on lawful speech or legal purchases. That balance honors conservative values, protects families, and backs President Trump’s duty to keep the nation safe at home.
Sources:
wpxi.com, the-sun.com, static.foxnews.com, fbi.gov



