Serenan Baturi [email protected]

[Tim Atem]

Originating IP address shows Compuserve, but another IP address in the header brings up Dakar, Senegal:

* 149.174.117.96 Compuserve n/a United States
41.214.118.127 Sonatel Societe Nationale Des Telecommunications D Dakar Senegal

Delivered-To: <snipped>
Received: by 10.202.81.145 with SMTP id f139csp2479707oib;
Tue, 10 Mar 2015 14:49:23 -0700 (PDT)
X-Received: by 10.55.25.224 with SMTP id 93mr69353984qkz.52.1426024162982;
Tue, 10 Mar 2015 14:49:22 -0700 (PDT)
Return-Path: <[email protected]>
Received: from oms-m01.mx.aol.com (oms-m01.mx.aol.com. [64.12.224.149])
by mx.google.com with ESMTPS id e184si1657779qhc.78.2015.03.10.14.49.22
for <<snipped>>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Tue, 10 Mar 2015 14:49:22 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 64.12.224.149 as permitted sender) client-ip=64.12.224.149;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 64.12.224.149 as permitted sender) smtp.mail=[email protected];
dkim=pass [email protected];
dmarc=pass (p=REJECT dis=NONE) header.from=aol.com
Received: from omr-m04.mx.aol.com (omr-m04.mx.aol.com [64.12.143.78])
(using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
(No client certificate requested)
by oms-m01.mx.aol.com (AOL Outbound OMS Interface) with ESMTPS id 4A87A3800295C
for <<snipped>>; Tue, 10 Mar 2015 17:47:49 -0400 (EDT)
Received: from mtaomg-mca01.mx.aol.com (mtaomg-mca01.mx.aol.com [172.26.221.79])
by omr-m04.mx.aol.com (Outbound Mail Relay) with ESMTP id 2C5E670001D68;
Tue, 10 Mar 2015 17:47:47 -0400 (EDT)
Received: from core-lga07h.mail.aol.com (core-lga07.mail.aol.com [10.76.11.7])
by mtaomg-mca01.mx.aol.com (OMAG/Core Interface) with ESMTP id 88D5038000082;
Tue, 10 Mar 2015 17:47:46 -0400 (EDT)
X-MB-Message-Source: WebUI
Subject: I Am Interested in you,
X-MB-Message-Type: User
MIME-Version: 1.0
From: Serenan Baturi <[email protected]>
Content-Type: multipart/alternative;
boundary="--------MB_8D22992FAFCDF80_1E48_2170FC_webmail-va120.sysops.aol.com"
X-Mailer: AOL Webmail BASIC
Received: from 41.214.118.127 by webmail-va120.sysops.aol.com (149.174.117.96) with HTTP (WebMailUI); Tue, 10 Mar 2015 17:47:46 -0400
Message-Id: <[email protected]>
X-Originating-IP: [41.214.118.127]
Date: Tue, 10 Mar 2015 17:47:46 -0400
x-aol-global-disposition: S
X-SPAM-FLAG: YES
DKIM-Signature: <snipped>
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1add4f54ff66823079

I Am Interested in you,
My name is Serena, I am very glad to view your profile today, please I want you to contact me through my email ID because I have a Very Important thing to tell you.
I will be expecting your mail.
Thanks

[Tim Atem]

Delivered-To: <snipped>
Received: by 10.202.199.202 with SMTP id x193csp724093oif;
Fri, 13 Mar 2015 02:50:33 -0700 (PDT)
X-Received: by 10.140.232.7 with SMTP id d7mr18253078qhc.99.1426240232950;
Fri, 13 Mar 2015 02:50:32 -0700 (PDT)
Return-Path: <[email protected]>
Received: from omr-m06.mx.aol.com (omr-m06.mx.aol.com. [64.12.143.80])
by mx.google.com with ESMTPS id 20si1429796qgf.98.2015.03.13.02.50.32
for <<snipped>>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Fri, 13 Mar 2015 02:50:32 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 64.12.143.80 as permitted sender) client-ip=64.12.143.80;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 64.12.143.80 as permitted sender) smtp.mail=[email protected];
dkim=pass [email protected];
dmarc=pass (p=REJECT dis=NONE) header.from=aol.com
Received: from mtaomg-mae01.mx.aol.com (mtaomg-mae01.mx.aol.com [172.26.254.143])
by omr-m06.mx.aol.com (Outbound Mail Relay) with ESMTP id 918BF700308E5
for <<snipped>>; Fri, 13 Mar 2015 05:50:32 -0400 (EDT)
Received: from core-lga02b.mail.aol.com (core-lga02.mail.aol.com [10.76.11.2])
by mtaomg-mae01.mx.aol.com (OMAG/Core Interface) with ESMTP id DD83138000081
for <<snipped>>; Fri, 13 Mar 2015 05:50:31 -0400 (EDT)
References: <CABvzxd6ctOb_X=[email protected]>
To: <snipped>
Subject: I have attached my picture here for you to know me very well.
In-Reply-To: <CABvzxd6ctOb_X=[email protected]>
X-MB-Message-Source: WebUI
MIME-Version: 1.0
From: Serenan Baturi <[email protected]>
X-MB-Message-Type: User
Content-Type: multipart/mixed;
boundary="--------MB_8D22B8A474792AF_12D0_1FF838_webmail-vm051.sysops.aol.com"
X-Mailer: AOL Webmail BASIC
Received: from 41.82.211.131 by webmail-vm051.sysops.aol.com (149.174.147.98) with HTTP (WebMailUI); Fri, 13 Mar 2015 05:50:31 -0400
Message-Id: <[email protected]>
X-Originating-IP: [41.82.211.131]
Date: Fri, 13 Mar 2015 05:50:31 -0400
x-aol-global-disposition: G
X-AOL-VSS-INFO: 5600.1067/98281
X-AOL-VSS-CODE: clean
DKIM-Signature: <snipped>
x-aol-sid: 3039ac1afe8f5502b2e74fa3

Hello my sweetlove,
How is everything? I know it's all good. I am excited to read from you today. My dear as I told you in my last mail, My name is serena Baturi, an Ivorian in West Africa.Presently I am residing in the refugee camp here in Dakar Senegal, as a result of the civil war going on in my country. I am a beautiful loving young girl of 23 years, about 5'8" tall. slim fit, weighing about 60kg. My father Late Hon. Humphrey Baturi was a successful businessman, he deals on Gold and Diamond before the rebels attacked our house one evening and kill him with my mother and my only brother. I'm the only one alive from the family.By the grace of God I made my way to a nearby country where I'm
presently living as a refugee.My dear, I came in the site to search for love and care which I have not gotten for a very long time since I lost my family members. I here by believe that in time to come you will be my side and I will show you unreserved love and respect through out my time .
Dear, I want to know more about you, your real name, Your real country, your occupation, your age your hobbies and what you are doing presently.
My hobbies are swimming, dancing, singing, cooking, reading, sports and watching movies.
As for me, i have a lot and VERY IMPORTANT thing to tell you in my next mail, maybe before then i will try to get our Rev phone number to give you so you can call for us to talk and hear each others voice.
And please also remember that in a any good relationship ''Distance or Age '' dose not matters, what matters is how you care about ache other , so please bear with me for the distance and age.
I have attached my pictures here for you to know me very well. In my next mail I will tell you more about
myself.
I wait your reply with impatience.
yours
serena

[Tim Atem]

Romance scammer Serena has now become the orphaned refugee and has introduced her Reverand's name and phone number:

Rev. Jude Agai +221-763-980-238

Delivered-To: <snipped>
Received: by 10.202.199.202 with SMTP id x193csp1147778oif;
Sat, 14 Mar 2015 01:03:38 -0700 (PDT)
X-Received: by 10.55.40.9 with SMTP id o9mr73802705qkh.55.1426320217841;
Sat, 14 Mar 2015 01:03:37 -0700 (PDT)
Return-Path: <[email protected]>
Received: from oms-m03.mx.aol.com (oms-m03.mx.aol.com. [64.12.233.220])
by mx.google.com with ESMTPS id w7si4122268qha.66.2015.03.14.01.03.37
for <<snipped>>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Sat, 14 Mar 2015 01:03:37 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 64.12.233.220 as permitted sender) client-ip=64.12.233.220;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 64.12.233.220 as permitted sender) smtp.mail=[email protected];
dkim=pass [email protected];
dmarc=pass (p=REJECT dis=NONE) header.from=aol.com
Received: from omr-m07.mx.aol.com (omr-m07.mx.aol.com [64.12.143.81])
(using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
(No client certificate requested)
by oms-m03.mx.aol.com (AOL Outbound OMS Interface) with ESMTPS id 0F1643800250B
for <<snipped>>; Sat, 14 Mar 2015 03:54:04 -0400 (EDT)
Received: from mtaomg-mca02.mx.aol.com (mtaomg-mca02.mx.aol.com [172.26.221.80])
by omr-m07.mx.aol.com (Outbound Mail Relay) with ESMTP id 02EEB700000A5
for <<snipped>>; Sat, 14 Mar 2015 03:54:02 -0400 (EDT)
Received: from core-lga10f.mail.aol.com (core-lga10.mail.aol.com [10.76.11.10])
by mtaomg-mca02.mx.aol.com (OMAG/Core Interface) with ESMTP id 6916B38000082
for <<snipped>>; Sat, 14 Mar 2015 03:54:01 -0400 (EDT)
References: <CABvzxd4AZF61GmtC9n8CT_aZ75qpMnhUx1ShYxY8CDFya8MHew@mail.gmail.com>
To: <snipped>
Subject: I am giving you all this information due to the trust I reposed in you.
In-Reply-To: <CABvzxd4AZF61GmtC9n8CT_aZ75qpMnhUx1ShYxY8CDFya8MHew@mail.gmail.com>
X-MB-Message-Source: WebUI
MIME-Version: 1.0
From: Serenan Baturi <[email protected]>
X-MB-Message-Type: User
Content-Type: multipart/alternative;
boundary="--------MB_8D22C432B534EAF_2008_201F11_webmail-vm083.sysops.aol.com"
X-Mailer: AOL Webmail BASIC
Received: from 41.214.116.87 by webmail-vm083.sysops.aol.com (149.174.147.106) with HTTP (WebMailUI); Sat, 14 Mar 2015 03:54:01 -0400
Message-Id: <[email protected]>
X-Originating-IP: [41.214.116.87]
Date: Sat, 14 Mar 2015 03:54:01 -0400
x-aol-global-disposition: S
X-SPAM-FLAG: YES
DKIM-Signature: <snipped>
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1add505503e91904ff

Hello My Dear,
How is your day? Like you know, I am living in the refugee camp here in Dakar-Senegal. In this camp, its just like one staying in the prison and I hope by God's grace, I will come out here soon. I don't have any relatives now whom I can go to as all my relatives ran away in the middle of the war.
The only person I have now is Rev. Jude Agai who is the pastor of ( Christ Gospel Mission ) here in the camp, he has been very nice to me since I came here but I am not living with him rather I live in the females hostel because the camp has two hostels one for men the other for women.
Please try to call by 12 GMT with The Pastor's Telephone number is: (+221-763-980-238), when you call, tell him that you want to speak with me, so that he will send for me in the hostel. Please call me today, I will love to hear your voice.
As a refugee here, I don't have any right or privilege to anything be it money or whatever because it is against the law of this country. I want to go back to my studies because i only attended my first year before the tragic incident that led to the death of my parents took place.
Please listen to this, I have my late father's statement of account and death certificate here with me which I will send to you later, because when he was alive he deposited some amount of money in a leading bank, which he used my name as the next of kin, the amount is $3.9M ( Three Million Nine Hundred Thousand US Dollars ). So I will like you to help me transfer this money to your account and from there you can send some money for me to get my travelling documents and air ticket to come over to meet with you.
I kept this secret to people in the camp here the only person that knows about it is the Reverend because he is like a father to me. So in the light of above I will like you to keep it to yourself and don't tell it to anyone for I am afraid of loosing my life and the money if people gets to know about it. Please I will like you to send me all the under-mentioned particulars, for me to know you more, and know whom I am dealing with.
Below here is what I need from
you so that I can Forward it to the bank to start the processing of transfer procedures with you as my representative :
(1) Full name
(2) country of residence & city
(3) phone number
Remember, I am giving you all this information due to the trust I reposed in you. I love you because you are an honest and understanding person.You are truthful, full of vision and a hardworking person. Thanks for your sweet regards for me. You are a nice person, I love to meet you very soon. I will like you to call me, call around 2pm GMT. I want to hear your voice ok.
Have a nice day and think about me.
Awaiting to hear from you soonest.

[Tim Atem]

More stolen photos and now she's introduced her "lawyer"

Delivered-To: <snipped>
Received: by 10.202.199.202 with SMTP id x193csp1505473oif;
Sun, 15 Mar 2015 03:21:36 -0700 (PDT)
X-Received: by 10.140.22.8 with SMTP id 8mr67860970qgm.72.1426414895816;
Sun, 15 Mar 2015 03:21:35 -0700 (PDT)
Return-Path: <[email protected]>
Received: from oms-m03.mx.aol.com (oms-m03.mx.aol.com. [64.12.233.220])
by mx.google.com with ESMTPS id 42si6738307qkv.115.2015.03.15.03.21.34
for <<snipped>>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Sun, 15 Mar 2015 03:21:35 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 64.12.233.220 as permitted sender) client-ip=64.12.233.220;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 64.12.233.220 as permitted sender) smtp.mail=[email protected];
dkim=pass [email protected];
dmarc=pass (p=REJECT dis=NONE) header.from=aol.com
Received: from omr-m02.mx.aol.com (omr-m02.mx.aol.com [64.12.143.76])
(using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
(No client certificate requested)
by oms-m03.mx.aol.com (AOL Outbound OMS Interface) with ESMTPS id 5883C38000BB3
for <<snipped>>; Sun, 15 Mar 2015 06:20:18 -0400 (EDT)
Received: from mtaomg-aal01.mx.aol.com (mtaomg-aal01.mx.aol.com [172.27.20.207])
by omr-m02.mx.aol.com (Outbound Mail Relay) with ESMTP id 448177000009F
for <<snipped>>; Sun, 15 Mar 2015 06:20:16 -0400 (EDT)
Received: from core-lga05d.mail.aol.com (core-lga05.mail.aol.com [10.76.11.5])
by mtaomg-aal01.mx.aol.com (OMAG/Core Interface) with ESMTP id 772E638000084
for <<snipped>>; Sun, 15 Mar 2015 06:20:15 -0400 (EDT)
References: <CABvzxd6TETgwfE00SEZaJfC0MdqW7Asc_rsEhwKoX1ufcCD1Lg@mail.gmail.com>
To: <snipped>
Subject: Honey please try and write to this bank for the transfer.
From: Serenan Baturi <[email protected]>
Content-Type: multipart/mixed;
boundary="--------MB_8D22D20C313BEC3_2D14_1C3DDC_webmail-m299.sysops.aol.com"
X-Mailer: AOL Webmail BASIC
Received: from 41.214.119.46 by webmail-m299.sysops.aol.com (64.12.152.50) with HTTP (WebMailUI); Sun, 15 Mar 2015 06:20:14 -0400
Message-Id: <[email protected]>
X-Originating-IP: [41.214.119.46]
Date: Sun, 15 Mar 2015 06:20:14 -0400
DKIM-Signature: <snipped>
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1b14cf55055cdf10ca

Hello My Dear,
I really thank you for your mail this morning.
How are you today and how is life moving over there, I hope everything is fine.
well I am also fine today by the grace of God, it's just that my condition is not getting better in this refugee camp and I want you to try and help me.

Really it sounds some how depositing such a big trust to someone that you have never seen in person but one thing you ought to understand is that any body who is into difficult situation may be looking for help from every angle and when I come in contact with you I was some how felt relaxed saying with you that God has answered my fasting and prayer's.I was moved.

I confide in you that is why I am giving you all this information's, I have already informed the bank about my intentions to claim my late father's deposit of which my name appears as the next of kin and the Bank told me to look for a foreign partner who will stand on my behalf to make the transfer due to my refugee status here in Senegal, as a refugee I am not allowed to have direct claim of the money but through an appointed representative as the united refugee law governing refugees all over the world states.
Based on this information I will like you to send a mail to the Remittance/Transfer department of the bank today.

The contact information of the bank where my late father deposited the money is as follows:

Dr. Stephen Hester
International Transfer Manager
Royal Bank of Scotland Group plc,
36 St Andrew Square,
Edinburgh EH2 2YB.
Registered in Scotland
No. 45551
United Kingdom
Telephone: +447937417240
Fax : +441317778170
Email: http://[email protected]
Email:[email protected]

Dr. Stephen Hester is the Remittance/Transfer manager of the bank, so please try and contact the bank today, tell them that you are my representative and that you want to assist me in transferring my late father's deposit which I am the next of kin, then any reply you get from the bank you let me know about it.
You will have 20% of the total money for helping me and I will also need your assistance to invest the remaining part of the money in some good businesses there in your country.

Here is the deposit information's

Account holder's name : Hon. Humphrey Baturi
Account number: 02617637090
Amount deposited : 3.9 M US Dollars
Next of Kin : Miss serena Baturi,
Swift code : RBSUK633721

I will be waiting to hear the reply you get from the bank soonest.
Yours truly love
Serena