Suspicious online activity by the man suspected of killing Lyhanna was reported by NCMEC, a leading organization that aggregates alerts collected by internet service providers, major web platforms and social media companies.