info@swedbank-group.com

[Big Al]

Attention,


I am Ms.Hana Henriksson, Admin Manager To Swed Bank, As you received this email do try and revert back to me to put you through, And i want to know if you are the real person that i am contacting, Is not all i will explained here on the email for starting your process. Until I hear from you back.


Mrs.Hana Henriksson
Admin Manager
And below email
NOTE:
Contact Transfer Manager for your funds.
Mr. Hans Göran Persson
Email: info@swedbank-group.com

And Keep me posted .

Header:

Received: from 10.217.136.93
Return-Path: < negotiations.swedbfund@gmail.com >
X-Originating-Ip: [209.85.128.48]
From: Hana Henriksson <negotiations.swedbfund@gmail.com>
Date: Fri, 30 Sep 2022 09:53:02 -0700
Message-ID: <CADvPE-+1g=7zHn0evnz67HRG0w1prKqD3eGZLf5c4NE58HEGLA@mail.gmail.com>
Subject: Greetings From Mrs . Hana Henriksson (URGENT )

[Big Al]

Attention,

Welcome to Swed Bank, Your email was received since and we the Swed bank have to follow up the due process, Please fill out this form and resend back, In other to start process to your funds.

Mr. Hans Göran Person

Headquarter Stockholm, Sweden

Head Office Branch Address: BRUNKEBERGSTORG 8 10534 STOCKHOLM
Bank: Sandbank AB
SWIFT Code: SWEDSESS

Header:

Delivered-To:
Received: by 2002:adf:cc03:0:0:0:0:0 with SMTP id x3csp232987wrh;
Fri, 14 Oct 2022 08:05:22 -0700 (PDT)
X-Google-Smtp-Source: AMsMyM5eItChsM4z3M6GJfpu1JJjS1P7aOFUFezB90Lc9UEpWIgmSh1kO/MMdP+okhla5ni60iy8
X-Received: by 2002:a17:903:40c3:b0:180:cfb7:827b with SMTP id t3-20020a17090340c300b00180cfb7827bmr5818696pld.0.1665759921286;
Fri, 14 Oct 2022 08:05:21 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1665759921; cv=none;
d=google.com; s=arc-20160816;
b=pZyrmF8q+qu2Ir8orGgqhjdO57IzWyauRFABgD0A+dBbKWET3BhtyjHnF8U4+dJ5pP
4PiaLfAwHQK92yJsrsmboSYSDipdMya/ojIdBuv8ldED2jPgjpwgG1czL+H+dqun1rMD
3/HcVkG14GpMa8Y7aRjltwgD97FEmvgofk3XZR4z+i93wuVnGqNr2yStmg3neckC2VQi
mLkoMBFb+WXa6ToRGBztMfkRjX4dMDGRWbLxNsspHn1Bslf+TyUNytfCZZemQAGSqz4j
QpYgp3lotQtgG7blIBiVvpT1eZsVDWkGQh/3nKVCDtieLc8KXYnwjPoXX4hK2IiVhmaA
Kw0Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=message-id:user-agent:references:in-reply-to:subject:to:from:date
:mime-version:dkim-signature;
bh=0ocTba55jSMKwbvKhB9kil6jhudmBu8w7PIkwlfFbfg=;
b=i/h/TE1gHnNEZEWRVrHiJCjfuZGU5y28+J++x90LeoJbOZV20TS846J9Za3yB2+BFB
EwFj8QS3U47iZpmOmXRHUH1g48NPHizKv0yRjd5Wz9k7EGMVwTpazX0z3e/qoj1EEOi3
uMaPGs35kDA1W0nICK6jHTsIjktEquRTAypHkjf9xPVLeoMo0H7x/mwZEtIrk+f14IAE
mAiQrt2DneUKbHQyLqEhtZ0ioX9VbyL0SDzNMRuzb2tyAgHhA/bay5kXoA10AB+AuKwB
d0N09SRE6F3Ey/UV8aFmj7AvI8E17UQbbmmG9CUPf0uwhzDnSZ/i94SH162NSxf9KvgC
fO/g==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@swedbank-group.com header.s=20220531 header.b=EVqRCMwh;
spf=pass (google.com: domain of info@swedbank-group.com designates 162.210.70.51 as permitted sender) smtp.mailfrom=info@swedbank-group.com
Return-Path: <info@swedbank-group.com>
Received: from us2-ob1-5.mailhostbox.com (us2-ob1-5.mailhostbox.com. [162.210.70.51])
by mx.google.com with ESMTPS id t15-20020a63534f000000b00439c930538csi2896242pgl.85.2022.10.14.08.05.19
for < >
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Fri, 14 Oct 2022 08:05:21 -0700 (PDT)
Received-SPF: pass (google.com: domain of info@swedbank-group.com designates 162.210.70.51 as permitted sender) client-ip=162.210.70.51;
Authentication-Results: mx.google.com;
dkim=pass header.i=@swedbank-group.com header.s=20220531 header.b=EVqRCMwh;
spf=pass (google.com: domain of info@swedbank-group.com designates 162.210.70.51 as permitted sender) smtp.mailfrom=info@swedbank-group.com
Received: from localhost (unknown [10.25.144.106]) (Authenticated sender: info@swedbank-group.com) by us2.outbound.mailhostbox.com (Postfix) with ESMTPA id 9D6DE6400FE for <>; Fri, 14 Oct 2022 15:05:18 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=swedbank-group.com; s=20220531; t=1665759918; bh=0ocTba55jSMKwbvKhB9kil6jhudmBu8w7PIkwlfFbfg=; h=Date:From:To:Subject:In-Reply-To:References; b=EVqRCMwhRSAk2ywg5jy9nkdFd9tbstNga29UsZEab5+AfesC+njYaKQgubbYxZcfT
XrwFOUmdd1NGuqOl+ZLPD7WUimuSthQd659yP1Q5+rUY5rU2NXfV/XHhmp814KggtC
pUU7DoD0gK/5ugUBNUp2YPviXreChDGjgAVMclO4=
MIME-Version: 1.0
Date: Fri, 14 Oct 2022 08:05:18 -0700
From: info@swedbank-group.com
To:
Subject: Re: From Swed Bank To
In-Reply-To: <CACih3N9YFrmDnKc8PyWFW-k9iqZRo0ix_o2U0+APAC=hEnaNxg@mail.gmail.com>
References: <CACih3N9YFrmDnKc8PyWFW-k9iqZRo0ix_o2U0+APAC=hEnaNxg@mail.gmail.com>
User-Agent: Roundcube Webmail/1.4.8
Message-ID: <1e69f0e9f391bba70bf128ab9c8da641@swedbank-group.com>
X-Sender: info@swedbank-group.com
Content-Type: multipart/mixed; boundary="=_f7284148b9e1079d59b315d221fc9c4f"
X-CMAE-Score: 0
X-CMAE-Analysis: v=2.4 cv=GKRrrsBK c=1 sm=1 tr=0 ts=63497aae a=brnr/LCjQpBuhh0OfwEfPw==:117 a=ZKKiQ5QChvChWmHbDusA:9 a=QEXdDO2ut3YA:10 a=GVpOZmJuHbQ3I8ftLGsA:9 a=c5z2EVtJmHzk4BIB:21 a=_W_S_7VecoQA:10 a=5dpdQO7-1duw0xTTbhAA:9 a=rs_29ct8_1e-7OYY:18 a=KQqxNPgzF0kA:10 a=VEiTNn8F7TgA:10

--=_f7284148b9e1079d59b315d221fc9c4f
Content-Type: multipart/alternative; boundary="=_52228c0bf2fa99e3c91e456ae62d73d8"

--=_52228c0bf2fa99e3c91e456ae62d73d8
Content-Transfer-Encoding: 8bit

[firefly]

The fake site used in scam is a spoof of Swedbank.

The fraudulent domain name shows no content and is used only for the email address, as in info@swedbank-group.com.

Entry in the aa419 database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=158599

From the domain name registration:

Domain Name: SWEDBANK-GROUP.COM
Updated Date: 2022-07-31
Creation Date: 2022-05-31
Registrar Registration Expiration Date: 2023-05-31
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Maxine Heaney
Registrant Organization: Oakdale
Registrant Street: 80533 Markville Road
Registrant City: Sandstone
Registrant State/Province: Alabama
Registrant Postal Code: 55072
Registrant Country: US
Registrant Phone: +1.6016241170
Registrant Email: admin@ibtf-ng.com