Florin Investment Limited 135 Bonham Strand Trade Centre, HK

From <imap-client> Thu Jun 16 08:27:17 2016
From:
X-Uniform-Type-Identifier: com.apple.mail-note
Content-Type: text/html;
charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Notes 4.2 \(555.10.42\))
Date: Thu, 16 Jun 2016 20:27:26 +1200
X-Mail-Created-Date: Thu, 16 Jun 2016 20:27:17 +1200
Subject:
X-Universally-Unique-Identifier: DC6844D0-ADA5-4BE5-8666-BD63CDA703B7
Message-Id: <[email protected]>
Content-Length: 456

Jun 16 at 8:27 PM

TRADING OVERVIEW:

Trading Overview
Trade Date Security Description Qty Average Price Initial Position Current Price P/L Percentage Change Cash Position Status Actions
Buy: 21st March 2016 - Sell: 14th April 2016 Synaptics NASDAQ:SYNA 200 $77.86 - Sell: 90.00 $NaN $61.81 $NaN NaN% Credit $18,000 - (Commission - $36.00) Closed

Buy: 6th April 2016 - Sell: 12th April 2016 NYSE: VRX 1170 $29.00 - Sell: $32.80 $23.66 Move to Margin $38,301.39 Closed

Sell: 14th April 2016 - Buy: 15th June 2016 NASDAQ: AXDX 1000 $13.70 - Buy: $14.39 $16.87 Credit: $13,010.00 - (Commission $28.78) Closed

Sell: 14th April 2016 - Buy: 15th June 2016 NYSE: MBLY 500 $40.74 - Buy: $35.21 $35.81 Credit: $23,135.00 - (Commission $46.27) Closed

Buy: 20th April 2016 - Sell: 15th June 2016 NYSE: DFS 500 $55.33 - Sell: $53.87 $53.12 Credit: $26,935.00 - (Commission $53.87) Closed

Buy: 20th April 2016 - Sell: 9th June 2016 NASDAQ: PYPL 500 $39.20 - Sell: $37.60 $36.84 Credit: $18,800.00 - (Commission $37.60) Closed

Sell: 26th April 2016 - Buy: 15th June 2016 NYSE: MNK 375 $65.90 - Buy: $59.80 $60.12 Credit: $27,000.00 - (Commission $54.00) Closed

Buy: 15th June 2016 Line Allocation 10,000 $25.00 $Unfortunately, we could not get stock quote Line Allocation this time. Debit: $250,000.00 (Commission $300.00) Cash Balance $0.00 - Provisional Margin $60,402.73 Open

(Prices quoted are in USD ($) Unless otherwise stated)
Reply Reply to All Forward More

The email was sent from Moldova, not Hong Kong. Could you post the text of the PDF attachment?

FLORIN INVESTMENT LTD TRADE ID 160616USSMART7975513-35-008-ALLISON 000TL19408 ********************************************************************************************************************** TRADE CONFIRMATION 16-06-2016 CLOSED ********************************************************************************************************************** - 000TL19408 ********************************************************************************************************************** BUY 375 MNK (MALLINCKRODT) US$59.80 CREDIT US$27,000 COMMISSION US$54.00 REALIZED PROFIT US$2,233.50 ORDER FILLED 09:32 EST 15-06-2016 TRADE CONFIRMATION 15-06-2016 CLOSED ********************************************************************************************************************** BUY 500 MBLY (MOBILEYE) US$35.21 CREDIT US$23,135.00 COMMISSION US$46.27 REALIZED PROFIT US$2,718.73 ORDER FILLED 09:37 EST 15-06-2016 TRADE CONFIRMATION 15-06-2016 CLOSED ********************************************************************************************************************** BUY 1000 AXDX (ACCEL DIAG) US$14.39 CREDIT US$13,010.00 COMMISSION US$28.78 REALIZED PROFIT -US$718.78 ORDER FILLED 09:38 EST 15-06-2016 TRADE CONFIRMATION 15-06-2016 CLOSED ********************************************************************************************************************** SELL 500 DFS (DISCOVER) US$53.87 CREDIT US$26,935.00 COMMISSION US$53.87 REALIZED PROFIT -US$783.87 ORDER FILLED 10:50 EST 15-06-2016 TRADE CONFIRMATION 15-06-2016 CLOSED ********************************************************************************************************************** COMMISSION TOTAL US$182.92 TOTAL TRADE US$89,897.08 (T+3) REALIZED PROFIT US$3,449.58 PRIOR CASH BALANCE US$0.19 NEW CASH BALANCE US$89,897.27 AVAILABLE FUNDS US$0.19 REPORT ANY DISCREPANCIES IMMEDIATELY - PRINT FOR YOUR RECORD ********************************************************************************************************************* FLORIN INVESTMENT LTD TRADE CONFIRMATION 16-06-2016 CLOSED **********************************************************************************************************************
FLORIN INVESTMENT LTD TRADE ID 090616USSMART7539341-35-007-ALLISON 000TL19408 ********************************************************************************************************************** TRADE CONFIRMATION 09-06-2016 CLOSED ********************************************************************************************************************** - 000TL19408 ********************************************************************************************************************** SELL 500 PYPL (PAYPAL) US$37.60 CREDIT US$18,800.00 COMMISSION US$37.60 ORDER FILLED 09:38 EST 08-06-2016 TRADE CONFIRMATION 08-06-2016 CLOSED ********************************************************************************************************************** COMMISSION TOTAL US$37.60 TOTAL TRADE US$18,762.40 (T+3) PRIOR CASH BALANCE US$5.79 NEW CASH BALANCE US$18,768.19 AVAILABLE FUNDS US$5.79 REPORT ANY DISCREPANCIES IMMEDIATELY - PRINT FOR YOUR RECORD ********************************************************************************************************************* FLORIN INVESTMENT LTD TRADE CONFIRMATION 09-06-2016 CLOSED **********************************************************************************************************************
FLORIN INVESTMENT LTD TRADE ID 260416USSMART7389267-35-006-ALLISON 000TL19408 ********************************************************************************************************************** TRADE CONFIRMATION 26-04-2016 CLOSED ********************************************************************************************************************** - 000TL19408 ********************************************************************************************************************** SELL 375 MNK (MALLINCKRODT) US$65.90 DEBIT US$24,712.50 COMMISSION US$49.43 ORDER FILLED 09:12 EST 25-04-2016 TRADE CONFIRMATION 25-04-2016 CLOSED ********************************************************************************************************************** COMMISSION TOTAL US$49.43 TOTAL TRADE US$24,761.93 CASH BALANCE US$5.79 REPORT ANY DISCREPANCIES IMMEDIATELY - PRINT FOR YOUR RECORD ********************************************************************************************************************* FLORIN INVESTMENT LTD TRADE CONFIRMATION 26-04-2016 CLOSED **********************************************************************************************************************
FLORIN INVESTMENT LTD TRADE ID 210416USSMART7115025-35-005-ALLISON 000TL19408 ********************************************************************************************************************** TRADE CONFIRMATION 21-04-2016 CLOSED ********************************************************************************************************************** - 000TL19408 ********************************************************************************************************************** BUY 500 DFS (DISCOVER) US$55.33 DEBIT US$27,665.00 COMMISSION US$55.33 ORDER FILLED 09:37 EST 20-04-2016 TRADE CONFIRMATION 20-04-2016 CLOSED ********************************************************************************************************************** BUY 500 PYPL (PAYPAL) US$39.20 DEBIT US$19,600.00 COMMISSION US$39.20 ORDER FILLED 09:41 EST 20-04-2016 TRADE CONFIRMATION 20-04-2016 CLOSED ********************************************************************************************************************** COMMISSION TOTAL US$94.53 TOTAL TRADE US$47,359.53 CASH BALANCE US$24,767.72 REPORT ANY DISCREPANCIES IMMEDIATELY - PRINT FOR YOUR RECORD ********************************************************************************************************************* FLORIN INVESTMENT LTD TRADE CONFIRMATION 21-04-2016 CLOSED **********************************************************************************************************************

From "[email protected]" Mon Jul 25 00:27:18 2016
X-Apparently-To: [email protected]; Mon, 25 Jul 2016 08:31:55 +0000
Return-Path: <[email protected]>
Received-SPF: pass (domain of floringlobal.com.ovlafbalvppcmik.mesvr.com designates 91.103.1.84 as permitted sender)
Q09ORklSTUFUSU9OIEFORCBCQU5LSU5HL1BBWU1FTlQgSU5TVFJVQ1RJT05T
IEZ1cnRoZXIgdG8geW91ciBlYXJsaWVyIGNvbnZlcnNhdGlvbiBiZSBhZHZp
c2VkIFByb3Zpc2lvbmFsIE1hcmdpbiBTZXR0bGVtZW50IGlzIGhlbGQgdW5k
ZXIgY29udHJhY3Qgbm90ZSBudW1iZXIgNTAyNDcxIGZvciBjbGllbnQgYWNj
b3VudCBudW1iZXIgVEwxOTQwOCAuIFRoZSBkb2N1bWVudCBhdAEwAQEBAQ--
X-YMailISG: bbilJuAWLDs0bKPP6GLNAbLJRU7dLqVFSsMtErXaEV8KPBnk
x6CxPdEcPpb7Eixj0Dq.CMFhT60vJVTymZlov7pgClr0VpCx2mPmiON0.YYA
YVffth2vzGglJI3ovfhZGqi6PgxgXRT_Aa38tSVZbkYHOR3UyxY.XpDG615Q
_NGRW4bc4kSt3eOOmbAZUuU8.FLGgoUny2ydd3TFdY0x9gh3TzymUt.rqKKp
MjSi8dYSLY_Yu4JY1NjhhgtFSNWez28qDg_o6KXtyldJX.sCIJWgX7D4awto
z4uVLELBXiOCzLx5u10oaUNCcjExziR6vUPOqrT4EDk9TW5QQwIdn4Ez82gi
4wwA3fWcwWxxDHOd4e2m9H3oBff0Z4qiStr39GKKqquILOzFkN2kk.fqKoph
1FqU.fky.qUqw.r3AjXdl63Pp8Wv93MD02pvGJIKhNkUziyA5Hkw7xvDmWd0
7_FYESk3hmVmJM9Esw.6jISR_UQRsCpUzuwpAK1reO1mEi8HVzl5YM8urWLW
ADxhyMLbUIlzsw7hqXHM_eu0IkD49nnpIjKlbMgXmQ94IGo11qPgwUJVoxdg
nOYDhSB23bcUDs5tryOWIiP7wVuggBTEwdAUhNm5j9OxtulWIazkxQmM2moz
VRNELJckEMJ6Gv9dHdAs2zrgUjzyc_ndxbR7R0G4dC3soHp5JjtKpGRV1fSD
UYI0W_xGHgwIBIPmEi53H9aDamnqnY39X3o0VIZaYQjQdSki9exPPl5l3be8
Z4tkgpU8QGDFNmdBOUA2FHOHXLvcoBHs_6GTIiAium7JyIwqBR_9FLp85wE_
YQwlU63VMBiTvsyapgASPPCbYlJBL6KvjZBfutV25V9y9KAtZaap.Ea3btwX
9mkJqg.tJ7TRZyqdlTaM.67ZU0gD9IO6eHmeldz0s1xDW.MIyN9T.dCbIRrG
ZW7O_N.FID9YYdTAWszSKbOj5XjuyPyquEFoI1J2scdL2A2F2Vgt3db_Vh45
u2MthhZ6FFOh3JcrhIf6fHwewleSC0eMoyaLIDmUpYwBUJWmjxES1NwL9PnX
.xm9Ks.CCOmbtCv4MXjTbT5pYvhZxEwpAmjyC5ZbD7dKKBQharoCYaGsKTtd
vQaawFK1eiZTIzK.gL7a3EeGkolkAmK5ioQI5IX0jg78WbTTMWaxS8i.g9_p
F_GalLNuqHT0Ue6X6SBPPfqpLRegj3TshZfOSNfn04gyopjZWc0UiCKeKUCu
_ienUICIwmRo5aUKFuhmekBhUDaFFVAHJpX1SSO9AwWRba5f7bxPzeD2z06l
tvIxGv7ewMS_jxRDaxiOlm8RH2ND4mlTeXAx285xDKd0oudbqKGebzZXDLEr
5Y1MhQpZkHu5yqQpyKWKwHqXSRHjsIAuVjb6mdhQJ7v7d9if3r8qCvKgeqk9
a.TdJINPK5TBdynpGb7yL_OE3v81sWjgv0z2DuQaN_nrhVGTMTOCdnO3Qi1v
g_5RwIU4A0IPB3ro7.pEFW6I_c17auqS.MQh6uPaIw--
X-Originating-IP: [91.103.1.84]
Authentication-Results: mta1010.tnz.mail.aue.yahoo.com from=; domainkeys=neutral (no sig); from=floringlobal.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtp.mesvr.com) (91.103.1.84)
by mta1010.tnz.mail.aue.yahoo.com with SMTPS; Mon, 25 Jul 2016 08:31:54 +0000
Received: from smtp.mesvr.com (localhost.localdomain [127.0.0.1])
by smtp.mesvr.com (8.14.4/8.13.8/CWT/DCE) with ESMTP id u6P8Vqvs023251
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
for <[email protected]>; Mon, 25 Jul 2016 08:31:52 GMT
Received: (from mail@localhost)
by smtp.mesvr.com (8.14.4/8.13.8/Submit/CWT/DCE) id u6P8Vqee023241
for [email protected]; Mon, 25 Jul 2016 08:31:52 GMT
Resent-Date: Mon, 25 Jul 2016 08:31:52 GMT
Resent-Message-Id: <[email protected]>
Resent-From: "[email protected]" <[email protected]>
Received: from [208.113.200.129] by mesvr.com [91.103.1.84]
for <[email protected]>
on-behalf-of [email protected]; Mon Jul 25 08:31:51 2016
Received: from homiemail-a58.g.dreamhost.com (sub5.mail.dreamhost.com [208.113.200.129])
by smtp (8.14.4/8.13.8/CWT/DCE) with ESMTP id u6P8Vmvi023153
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
for <[email protected]>; Mon, 25 Jul 2016 08:31:50 GMT
Received: from homiemail-a58.g.dreamhost.com (localhost [127.0.0.1])
by homiemail-a58.g.dreamhost.com (Postfix) with ESMTP id 575E76009399
for <[email protected]>; Mon, 25 Jul 2016 01:31:44 -0700 (PDT)
Received: from localhost (alc-nat.dreamhost.com [66.33.206.8])
(using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
(Authenticated sender: [email protected])
by homiemail-a58.g.dreamhost.com (Postfix) with ESMTPSA id 20F2460EFE43
for <[email protected]>; Sun, 24 Jul 2016 17:27:25 -0700 (PDT)
Message-Id: <268ffb466cbd390f8bca7a302dfe7b3438003cd3@webmail.floringlobal.com>
From: "[email protected]" <[email protected]>
To: [email protected]
X-Mai1er: Atmail 7.5.3
X-Originating-IP: 185.80.129.131
Subject: TRADE CONFIRMATION AND BANKING/PAYMENT INSTRUCTIONS
Date: Mon, 25 Jul 2016 08:27:18 +0800
Reply-To: [email protected]
MIME-Version: 1.0
Notice-Requested-Upon-Delivery-To: [email protected] ... .mesvr.com
Errors-To: [email protected] ... .mesvr.com
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFuplleJIrShJLcpLzFFi42KpZ2Bg1I0+NzXcoPkch0Xv+83MDowe33q7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Content-Length: 6718


[email protected]
To Jul 25 at 8:31 PM
25th July 2016





Dear,

TRADE CONFIRMATION AND BANKING/PAYMENT INSTRUCTIONS
Further to your earlier conversation be advised Provisional Margin Settlement is held under contract note number 502471 for client account number TL19408.

The document attached works as follows. The trade confirmation and contract note is your permanent transaction record. The A4 formatted instruction is your working copy. If you are using internet banking the process is straightforward. If you are filling out forms to authorize your branch to conduct the transfer on your behalf, please be sure to clearly state the ELEVEN CHARACTER REFERENCE NUMBER indicated on the working copy. As with most international stock transfer agents, automated processing is all about digitized reference numbers. Limiting the transfer identification to simple reference numbers avoids language errors and miscommunications.

In closing, should you need anything further information please drop me a quick note and I shall address it immediately. Please be sure to forward a copy of your Telegraphic Transfer Receipt which enables our accounts department to match the funds to your account.

In the meantime if you have any questions or queries please do not hesitate in contacting me via email or by telephone.

Warm Regards,

Mark Edwards
Accounts Department
Florin Investment Limited

135 Bonham Strand Trade Centre
Sheung Wan Hong Kong
+852-5808-0493

Web: http://www.floringlobal.com

This e-mail and any attachments are confidential/legally privileged and any unauthorized use, distribution or disclosure thereof, in whatever form, by anyone other than the addressee is prohibited. If you have received this e-mail in error, please destroy it. Florin Investment Limited does not accept any liability for any damage, loss or expense arising from this e-mail and/or from accessing any of its attachments, and cannot assure that the integrity of this communication has been maintained nor that it is free of errors, virus, interception or interference.

just received a phone call from florin investments man known as David Roth 1206 AM GMT time

Can it help to catch these guys if I keep communications going as long as possible? I am going to rn out of options when I don't front up with any more money

just received a phone call from florin investments man known as David Roth 1206 AM GMT time

Can it help to catch these guys if I keep communications going as long as possible? I am going to run out of options when I don't front up with any more money

Sir , we are not law enforcement . The only thing we can do is report the site to the registrar and hosts and hope they remove it and suspend it . For apprehension you need to report this on the IC3 website .


https://www.ic3.gov/complaint/default.aspx


Definitely do not give them any more money and we don't recommend you maintain contact with these criminals

Is there any point or advantage to gained by posting new emails to this site?

At this point what we need is a detailed description of how this scam occurred so it can be included in a report to registrar and hosts . We are not knowledgeable in the workings of stock trading deals such as this and this will be important .

Did you buy the stock from them ?

Or did you transfer stock you already owned to them ?


And you can certainly send your own complaint to them as well . I have extracted their contact details here :

[email protected], [email protected], +1-213-271-9359.

Be sure to file theft reports with your state, local or federal police .

florin investments is bogus share broking firm, normally traders use broking firms as an agent to buy and sell shares on the account holders behalf, (Commission agent dealing in shares), some times the broker can offer a larger block (number) to shares at discount often requiring the trader ether advance more money or borrow money from the broker called " Margin Trade". Like any loan there is repayment i.e. when the shares are sold or if the shares drop to a value where the broker considers his loan at risk. Much the same as any other credit facility.
A traders signs an agreement before margin trading takes place.
Florin gets money from a trader/investor for a quoted stock and has a practise of buying and selling stock and buying more stock costing more than the trader or investors money invested, which results in a margin. they then contact the Trader/investor requiring more money to clear the margin even when those shares have been sold for much more than they were bought for. If a trader / investor instructs florin to sell all their shares ( cash up)
Florin discontinues any contact with that trader with out paying the money to the trader/ investor. the same thing occurs with a margin trade i.e. all shares to a value of ten times more than the margin owed they will not just deduct the margin owed and pay out or reinvest the balance,( normal practise) they discontinue any further communication with the trader/ investor unless the trader/ investor fronts up with a cash injection of at least the margin. and on it goes. the money florin receives is not buying shares it going to the scammers account.
florins bogus traders have a computer setup where they follow the sharemarket and create fictitious sale and purchases. using a web site to follow the markets thus getting the current value of shares for their bogus trades

Do Not Invest any money with florin investments Limited

Thank you sir . Be sure to report this crime . Your post will help warn other potential victims.

I have posted 2 emails received this morning. I would be extremely grateful if the origin of these emails can be confirmed . They were supposedly send from Hong Kong. the content of both emails are identical but have different email addresses from the one office.
Thanks in advance.


From "[email protected]" Tue Jul 26 00:30:51 2016
X-Apparently-To: ; Tue, 26 Jul 2016 00:43:53 +0000
Return-Path: <[email protected]>
Received-SPF: pass (domain of floringlobal.com.zgsytzxkmawebjv.mesvr.com designates 91.103.1.84 as permitted sender)
Q09ORklSTUFUSU9OIEFORCBCQU5LSU5HL1BBWU1FTlQgSU5TVFJVQ1RJT05T
IEZ1cnRoZXIgdG8geW91ciBlYXJsaWVyIGNvbnZlcnNhdGlvbiBiZSBhZHZp
c2VkIFByb3Zpc2lvbmFsIE1hcmdpbiBTZXR0bGVtZW50IGlzIGhlbGQgdW5k
ZXIgY29udHJhY3Qgbm90ZSBudW1iZXIgNTAyNDcxIGZvciBjbGllbnQgYWNj
b3VudCBudW1iZXIgVEwxOTQwOCAuIFRoZSBkb2N1bWVudCBhdAEwAQEBAQNt
dWx0aXBhcnQvYWx0ZXJuYXRpdmUDAzkCA3RleHQvaHRtbAMDOAIDYXBwbGlj
YXRpb24vcGRmAwMwAgNhcHBsaWNhdGlvbi9wZGYDAzA-
X-YMailISG: ZDguD9wWLDvm1xDUGon7ZNrMbb3Hlz2gxTj1AbK3Zpgkq9yT
NQMrSJLrHmH9DSJjrOFnJevLlRMhVzJ75XyvdQSfgPZcPYFXUwcz4GKz2Hnf
ZxtZCR3LDCdREpU7KGgtia16OcHPEL4VMqA9CMi7aw2CsEW6_9Hkl0vOg4L8
kQ_zsITZJHZUPaknLPJT2jnKpnseAndvCpuTVr.oP8pBre38kHt0FMg.EaGg
3lLatTJSeu_TGXZ0ulPulRfEtscCB6gN1BLUWEDtYrEx2lnTQt_qIPNDd6Un
iyB6nTYH8JvCcX4OrUX2SAyCxU6p9_LuPGQfUU8AlvbJu5Hqyw83KWg8qLY2
ffVWcipyoDrc1kLJxuF5OboYagMhvI1V4LdJNW5urMryNHdvCvLD4BEdie_S
MZudbdrJ2c9woos2RB_3wiTAFcM_Kx_9jbiKgsUbhyOrKiSkwFvPhk9KAz4k
nQqg3HDQr6g77UFc4y_dcEYJ7S.kaCuTjlR_UYZIjNkrMzb9jDaqPn4P6C5W
KvTScCtzYXcOzvAH1N8j44Y_nib0l5l0hXpXN5G4fAG1zyuR3Lv0Qh_DDUPp
o._hWZ1bKazLVWxkHsMuNiETPbP6nJ_42EjfGoRBCLXcEM1Ho82kMD1ocyXT
BLzmbfDYIIdn6JNt.Xci.gKk5N8j98wgiRporFChIZeYdHFyGtPP.PEApXoS
_sthCHQpLWuRI_RGBoaYv9QDTfLpdabOtiAQz8KRlb9KH6CGWKaySYXuh.4C
uMAiN5Fp5ObGyR8j451kImEyVQsEW3J530anKz9ZBBg5BvA5o46FV_QY6dye
wJVhhUIzqM90CsGBcA8phoB.gslxYyhrdGtsqcFcXf2BGZKkKS5v9cyugWjG
kL7K5sIQgGpYeO7VVu3J_c3ze7Mc_41JrqJ8d7z94Jt.M8kXk535eKtQDemR
6a1Fr7l_F9sg_Vz0zi4H2Bw_7qUoGKW_GUKb96mPQQ_DZ6dofPcNoKdOETpv
frPkg2GEbXrER.uwl4DG6SMahu4DDThDSu82iIO45fWocEbXbT274mliCjda
XKRWlC5P8oNy2Z3lkuUd4bDAjTKCsdJl0zsnTv0xe6d7aEDWVN4YyBzw_S_b
rcNPSWmvMyzBkH8akyVnx_urBoWnDyzoETIK6YJCyJWHmvJUQ9UabnmAb0Zi
sNVL.PQJE879c6SQ5hQJz0AJmhHv6B5Q58TrZkHr0ccB9EgKQ6gRmh.hxH8k
jjJ9o_ofFX4t8f80awV25xGubwN9nNbRjZS_Mg4HIg3wanol.QW59Bm0Cgm2
I0cTSBJyYrd6vWKhg1Ui2sqnCO5HGXRn5XAZiYTehwodlANd8m77RSdh1rK0
zGZNX68pwlFo4H3f785v_gXVOs9CNAMmzHjr2YrWt9ne1IiLJV1wHQjRVOoc
PxZHhoi4KUyOLk.ocxFF6Gd2PbE3nvW5dQi53oRI6klhnBToVlAZNxCJ1e8Y
a_0oOkae.kiaFZHGA6JOjIQYsRTCOemDQQFvkfKkB_UkhSkRqFLyjQ3Nfevv
..v7vZr7ZDg-
X-Originating-IP: [91.103.1.84]
Authentication-Results: mta1002.tnz.mail.aue.yahoo.com from=; domainkeys=neutral (no sig); from=floringlobal.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtp.mesvr.com) (91.103.1.84)
by mta1002.tnz.mail.aue.yahoo.com with SMTPS; Tue, 26 Jul 2016 00:43:52 +0000
Received: from smtp.mesvr.com (localhost.localdomain [127.0.0.1])
by smtp.mesvr.com (8.14.4/8.13.8/CWT/DCE) with ESMTP id u6Q0huu5000331
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
for <[email protected]>; Tue, 26 Jul 2016 00:43:56 GMT
Received: (from mail@localhost)
by smtp.mesvr.com (8.14.4/8.13.8/Submit/CWT/DCE) id u6Q0hthB000326
for ; Tue, 26 Jul 2016 00:43:55 GMT
Resent-Date: Tue, 26 Jul 2016 00:43:55 GMT
Resent-Message-Id: <[email protected]>
Resent-From: "[email protected]" <[email protected]>
Received: from [66.33.216.122] by mesvr.com [91.103.1.84]
for <
on-behalf-of [email protected]; Tue Jul 26 00:43:55 2016
Received: from hapkido.dreamhost.com (hapkido.dreamhost.com [66.33.216.122])
by smtp (8.14.4/8.13.8/CWT/DCE) with ESMTP id u6Q0hpas032680
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
for <; Tue, 26 Jul 2016 00:43:53 GMT
Received: from homiemail-a80.g.dreamhost.com (sub5.mail.dreamhost.com [208.113.200.129])
by hapkido.dreamhost.com (Postfix) with ESMTP id B0422CD1F9
for <; Mon, 25 Jul 2016 17:43:31 -0700 (PDT)
Received: from homiemail-a80.g.dreamhost.com (localhost [127.0.0.1])
by homiemail-a80.g.dreamhost.com (Postfix) with ESMTP id 4509A6003706
for ; Mon, 25 Jul 2016 17:30:57 -0700 (PDT)
Received: from localhost (alc-nat.dreamhost.com [66.33.206.8])
(using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
(Authenticated sender: [email protected])
by homiemail-a80.g.dreamhost.com (Postfix) with ESMTPSA id 9A3E8600370F
for ; Mon, 25 Jul 2016 17:30:53 -0700 (PDT)
Message-Id: <5d2ea58a44a05798ce758e3d532a4b4b4c5104a9@webmail.floringlobal.com>
From: "[email protected]" <[email protected]>
To:
X-Mai1er: Atmail 7.5.3
X-Originating-IP: 43.249.37.100
Subject: TRADE CONFIRMATION AND BANKING/PAYMENT INSTRUCTIONS
Date: Tue, 26 Jul 2016 08:30:51 +0800
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="=_9253530468eadbf1c8263ac3ae721929"
Notice-Requested-Upon-Delivery-To: [email protected] ... .mesvr.com
Errors-To: [email protected] ... .mesvr.com
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrKKsWRWlGSWpSXmKPExsVSz8DAqKu6aVq4weuloha97zczOzB6fOvt
YgtgjGLNzEvKr0hgzWh58Y+9oPW6TMWp13MYGxgnfpDuYuTkEBKIkNjZ0MHaxcgFZM9hlLj3
9CgTREJL4szqNcwQtr3EttXnWSDsLIlVm05C1cxllFg1zwCiuZNJYu+KhywQzg1GiWMfnkFV
nQOqWuEGkXjKJPH3xxWwsbwC/hKTri8EG8sm4Cmx6fQKRhBbREBC4teBJ2BxCQExiUN721gh
bHmJhTMegtUIC9hI/Lx0G6yGRUBVYv+uRXBn73/8H2q+oMTJmRBzmAV8JC6cfsMGYvMJxEgc
f38dbA6rgIvE1cvfmSYwis1C0jILSQuEHSLRfPE0I4QtL7H97RxmCFtN4va2q+wQtrbEsoWv
oeKyEpOffIeyFSWmdD8EquECspsZJZZfns+GWxGI3c4oMf+bwAJGnlWMnDn5yYk5GfnFJZsY
oVG9g/HDQudDjAIcjEo8vIwMDAxCrIllxZW5hxglOZiURHnneCwJFeJLyk+pzEgszogvKs1J
LT7EqMHBITDx8pp9jFIsefl5qUoSvP4BQHWCRanpqRVpmTnA5ARTysTBeYhRgoNHSYS3AqSG
t7ggMbc4Mx0if4pRUUqc95M/UEIAJJFRmgfXC0qNToo3qi4xykoJ81Z7AdXwFKQW5WaWoMq/
YhQHul6Y1wZkPE9mXgnc9FdAi5mAFs8VWwSyuCQRISXVwCjpuGWSKFuZ5unHF66nXBZYslfB
6PaX1dcfXpMJnC4yYTnDKVfHC+U+Hp+rzUQSJQo9avJPp2o7zt3m2P466rT86hYzh5xNwm5N
/YnG519rn5Pew3/EdcLSR76rdjgVztSoqCo0FjulpcqYYSTIsfnDkZiXIZls55InB53dkfJo
yQHlO7YGZUosxRmJhlrMRcWJAFSJt4aIAwAA
Content-Length: 463520


From "[email protected]" Tue Jul 26 00:35:13 2016
X-Apparently- Tue, 26 Jul 2016 00:40:42 +0000
Return-Path: <[email protected]>
Received-SPF: pass (domain of floringlobal.com.sxvsmmzdxxlkati.mesvr.com designates 91.103.1.84 as permitted sender)
Q09ORklSTUFUSU9OIEFORCBCQU5LSU5HL1BBWU1FTlQgSU5TVFJVQ1RJT05T
IEZ1cnRoZXIgdG8geW91ciBlYXJsaWVyIGNvbnZlcnNhdGlvbiBiZSBhZHZp
c2VkIFByb3Zpc2lvbmFsIE1hcmdpbiBTZXR0bGVtZW50IGlzIGhlbGQgdW5k
ZXIgY29udHJhY3Qgbm90ZSBudW1iZXIgNTAyNDcxIGZvciBjbGllbnQgYWNj
b3VudCBudW1iZXIgVEwxOTQwOCAuIFRoZSBkb2N1bWVudCBhdAEwAQEBAQNt
dWx0aXBhcnQvYWx0ZXJuYXRpdmUDAzkCA3RleHQvaHRtbAMDOQIDYXBwbGlj
YXRpb24vcGRmAwMwAgNhcHBsaWNhdGlvbi9wZGYDAzA-
X-YMailISG: Tlwt3dAWLDsYhlovp1XuJbUHVPVW_MHV2zrmt0kKmYrWHNVP
0L298TszQORwR5EFN4It7WbEp7ZHzULJjF9ch3HOWPnemVq32Z._0P.sj38t
gR9TJhRtR0_jEhJA.i5bXaUmGCZKTFyFHKmd2b3bPl2N.zfnqJYwuKHf0JRN
tpqltuCKNrRTcCH.Sdl2wy_nCsygvB9XYsgXPcI9RyiaCNs0d2V0VgjNTVl2
XFfiYOqB0CACxYRTn8I9.mIlDV1qxYb7Uxcqn12SXEi5ZZy0Nr90MNOAgqMB
obNAf0jTQLuZE6No0tA3TYP31k6Jm7Clknb3emMDOUQyiOsPxVjN_j4ICv7m
DpsYTVjGus9MzCS076GejY.E6NF78t3GR7dKoER9lPF5qt5Zfg8bdKEBZcS1
sxnBc_AYkJiJB8MQJ6vnmK36RWBVwpdi2ClJI__22cCuTcO3nvfdiu7IZ7cV
SI5fZvPSUldP1yMUhCk2cP7aETiI.YZeiKQ7Wb8LpUYHYsqEAiaYt_lhIEL.
aUfYGjmWfTKy6VSWMVS38MRlNUEjw1m919pNyxN3I.sLCZbMpfq0YqFjAXSb
HxUZ3X7ufXlLHviTUkP4iWl68TKbwNVvum.Ldft_OVVPFgPyXlNLNNew1oC.
Kh5BWCIa0RG6.2UKIbYHZMEX_2XjCsn3GH_oGlexQKU_.9_QX28D35Ywb42y
ylMDIFFeIgc6ziqpshmRkWAbJ3BtsVUeW4sv0TNrMXNmWLOWu3HsRmcYV8Gk
dvP.X8uA4rCCOnwnLPVdnJ7d5c4aQR0OxI1FgONMkisrn1gv0BUyT4oDkVHp
7CceAvuqoZcQvq7RTrCV_gQko1mkorhmoUWkS4330JEJ4a9sFLbjz_.C9307
UeuGpm4ZndhBTgqvscqu5ZVWLXjSwv.fCVc5_QJ4pPI4F5FYKWqPriH4ORp4
wakSUHOBN6FJMrdmq5zsDg1W7ETu8yx1j4jxRMFst63OYoWnOfmXXY9GQIOU
8Hvky9GeDYLT8OltNin2oAXgHQSKGdU8i6M3BU36KQ74G1lvCIWxVBGmKSrg
OKX.T7ph06h2oTRUnEZiGhstiGIcM1oUE9tL0M9T8qs4NSpFP_VTk7gmjwtl
6hl7FdwVHoFBZt0CEXUOxSj14nTNrhFnwM38U7k025h2jgoY_42L7Jd28f2c
G_vL8T1FtVgCH8I92mzJNEi7nrZ.nhtk6TuqdVDxGyCerWvTrNfOuzOI7C37
LmnhvoSxNCyNYr0HtD7zh35xqspIJ28VGUik12ospx6sjacqdNxWcs8lwtyK
sOfDXAKMZ0tipCM1eBZqpNPvNDN8zf76_AKdTsTVjPSU84BoLb7ehBoxIsen
_shNpKu0_kWEtAXnjZF68793e4NJg2eQ1HMgKEuPgBLL3cwVrxDC72sUtpqJ
7lg9bSF0j8HR1qsfj2CUpjnh5ouKg_GUAxzNl0fTqCq4RKV38AbWCm2aovfN
WLWMn8GFXYXkh7oRHgLJceaMQg2Xez3_GiCNbkqWWSgWaTHPh.lA3ao1o2Q9
iQ4rXVRJDA--
X-Originating-IP: [91.103.1.84]
Authentication-Results: mta1003.tnz.mail.aue.yahoo.com from=; domainkeys=neutral (no sig); from=floringlobal.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtp.mesvr.com) (91.103.1.84)
by mta1003.tnz.mail.aue.yahoo.com with SMTPS; Tue, 26 Jul 2016 00:40:32 +0000
Received: from smtp.mesvr.com (localhost.localdomain [127.0.0.1])
by smtp.mesvr.com (8.14.4/8.13.8/CWT/DCE) with ESMTP id u6Q0ear1024922
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
for <[email protected]>; Tue, 26 Jul 2016 00:40:36 GMT
Received: (from mail@localhost)
by smtp.mesvr.com (8.14.4/8.13.8/Submit/CWT/DCE) id u6Q0eZgC024905
for ; Tue, 26 Jul 2016 00:40:35 GMT
Resent-Date: Tue, 26 Jul 2016 00:40:35 GMT
Resent-Message-Id: <[email protected]>
Resent-From: "[email protected]" <[email protected]>
Received: from [66.33.216.122] by mesvr.com [91.103.1.84]
for <>
on-behalf-of [email protected]; Tue Jul 26 00:40:34 2016
Received: from hapkido.dreamhost.com (hapkido.dreamhost.com [66.33.216.122])
by smtp (8.14.4/8.13.8/CWT/DCE) with ESMTP id u6Q0eVIf024868
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
for <>; Tue, 26 Jul 2016 00:40:33 GMT
Received: from homiemail-a92.g.dreamhost.com (sub5.mail.dreamhost.com [208.113.200.129])
by hapkido.dreamhost.com (Postfix) with ESMTP id 588AFCD1A2
for <>; Mon, 25 Jul 2016 17:40:13 -0700 (PDT)
Received: from homiemail-a92.g.dreamhost.com (localhost [127.0.0.1])
by homiemail-a92.g.dreamhost.com (Postfix) with ESMTP id 9B92A8025B39
for ; Mon, 25 Jul 2016 17:35:21 -0700 (PDT)
Received: from localhost (alc-nat.dreamhost.com [66.33.206.8])
(using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
(Authenticated sender: [email protected])
by homiemail-a92.g.dreamhost.com (Postfix) with ESMTPSA id 3709F8025B2D
for <>; Mon, 25 Jul 2016 17:35:15 -0700 (PDT)
Message-Id: <76ff28876d35b81220961bd022f372b4ebfe16c3@webmail.floringlobal.com>
From: "[email protected]" <[email protected]>
To:
X-Mai1er: Atmail 7.5.3
X-Originating-IP: 43.249.37.100
Subject: TRADE CONFIRMATION AND BANKING/PAYMENT INSTRUCTIONS
Date: Mon, 25 Jul 2016 17:35:13 -0700
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="=_a9d01b8641848eb68e74338a8ad62be9"
Notice-Requested-Upon-Delivery-To: [email protected]
Errors-To: [email protected]
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrCKsWRWlGSWpSXmKPExsVSz8DAqBu7cVq4wd49fBa97zczOzB6fOvt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Content-Length: 464154

http://whatismyipaddress.com/trace-email



Header 1
Tue, 26 Jul 2016 00:43:53 +0000

The source IP address is 43.249.37.100.

Geo-Location Information

Country Hong Kong
State/Region 00
City Hong Kong
Latitude 22.2833
Longitude 114.15
Area Code


Header 2
Tue, 26 Jul 2016 00:40:42 +0000

The source IP address is 43.249.37.100.

Geo-Location Information

Country Hong Kong
State/Region 00
City Hong Kong
Latitude 22.2833
Longitude 114.15
Area Code




same result:

http://www.iptrackeronline.com/email-he ... alysis.php

Header Analysis Quick Report<br>Originating IP: 43.249.37.100<br>Originating ISP: Leaseweb Asia Pacific Hong Kong<br> City: Hong Kong<br>Country of Origin: Hong Kong<br>* For a complete report on this email header goto ipTRACKERonline

From "[email protected]" Sat Jun 18 05:00:09 2016
X-Apparently-To: XXX; Sat, 18 Jun 2016 05:00:22 +0000
Return-Path: <[email protected]>
Received-SPF: pass (domain of floringlobal.com.vdaqdutrgxtdzfk.mesvr.com designates 91.103.1.84 as permitted sender)
b24gQWNjb3VudDogMDAwVEwxOTQwOCBUcmFkZSBDb25maXJtYXRpb24gMTYw
NjE2VVNTTUFSVDc5NzU1MTMtMzUtMDA4LUFMTElTT04gMDAwVEwxOTQwOCAw
OTA2MTZVU1NNQVJUNzUzOTM0MS0zNS0wMDctQUxMSVNPTiAwMDBUTDE5NDA4
IDI2MDQxNlVTU01BUlQ3Mzg5MjY3LTM1LTAwNi1BTExJU09OIDAwMFRMMTk0
MDggMjEwNDE2VVNTTUFSVDcxMTUwMjUtMzUtMDA1LUFMTElTTwEwAQEBAQNt
dWx0aXBhcnQvYWx0ZXJuYXRpdmUDAzUCA3RleHQvaHRtbAMDNQIDYXBwbGlj
YXRpb24vZG93bmxvYWQDAzE1MA--
X-YMailISG: Jm9dYicWLDszsSNffJpY5Q8AoVxdRBFW5rAosUW_69agQGdK
QOaH2orVpcT98ZZEQURa1JxYIXh7HrsT4sTx1T.hCeB5Kp0TBOCQ.4pa2Ixk
etfeprLlpclL4oRP6SNwAiVULsZP5gi06fuZ3YkwD9rIJ4lFtyjj5FgU4Jm_
anV3nYvef.lyEn20P22NU6Yb8Le3HhiOwFVvAMxAyfdtWJ8gPnsGQptG5Ggi
VMACOVjn1kYo6dgapYHjomPpfJ5S4SMXstSwWjzu_POicKGigvtPRj4Z1koh
cvpLOmW11Tufqc1nqOcW5MrmGlqsA2bSbeL62Kz3rdZ1T4rUZgMXt6rj6kml
15Nl8sAxY3W.MOFsGeUSVO6qYsPjrrdZEF.chwNyR2v4pAbduxQXaBlrG6P0
fcvjG9fPAWnr3C7t7XYytEmHcSe2oNMvLrGml5n0h0KRkMwDU5VltiDxveQW
w.mGhUUelrQE.4hyREdXN6qDoyCjYFnPXHYlFJIa.JBNBU7TYR.xVIiBzx_P
lVWE9MhMSo8wEbMPQkVqev9vrsvtbFhMMjnfHAaSkmf8wuCqV0StANMJI9YT
_o2xXZv1G3wxKNv6jb5rnShiDPX.Emg1JwWFrejnJQqMZcldYi1Fo8aCoepi
qgH4PYvajaYXJHKZtRuaEidGAfWqxzm24HNOqeAJjBhyzOvtbfJz.9nDCN4p
1XLeli_qE.GFcha27IAzKxT6tBdPQ9ziEybt4RuYoHhzWNSel_jAZk30b2lF
LDts8SeeoVSpYNVzm5diCjKPClXNnjKS6.8M8ynvUAFXHbWzPFRenuc3LEmE
7mZDiqWELrWdfOVYBqIvlskJRGBhk1nAaKbCbo9fhp5GsIACFQEr9njJXvmp
.hOGzLGiRtmoKoBLJ8Uc4RFTYEQx3F9gwCVHD_io4hPcxvVhsR_q2u5LQUp5
BUFaFsTthD5F719tP77Zs5H.f7B2ebn30iSdR.ZmdvJeE0Anb_Dz92aOtGqS
df3EN3o2N3WVW_Z7WsTFjfIPTdNOyr2lREoedGaqtHPSwf1FmQ.ZIABw8ZAL
BGgeM7e01MkM5mVg1gYsSOgDthx8nhxry3phdOvRXs.VNX_MQ_wJhRqNZszV
hxdVMACmgvpI3B6Rd4PHxqGqqB3dXHCm_gZ5OqXolRMoNgwzcg_imEBV3Ukh
mWTFngeGZVti3fS3EpeIzDovcm61hAGXDNt8KpHjh82I.DaLzCvGGRZjv5i5
g9CHtHl0Okvv6lbStn9doLRkzsNdRNkeRpbFky1t.hFJZAcoyjfQxkS7MUzo
etAnxaW_xJ4g0CNGyI1..fdXNafL4wpdonTdI36QsUmnklgAI5PAh6KHOcxW
wKUU9pBcIRemcxyOw3Y4.vEcjo6KCZnGfDX2SjcwUfCd1RHsDn7b6atnnl4_
QACxPPAE_TY1meRELL1nLpUpiZciaxiurs5q_2Z8_EOl4K3SQ2TJYfMdTwtV
s.wwubxnvn557qQJ.1NJ0YpOHoPWZ6_z43_JcrZnbsJhd94OGry792.guDkI
d8lpxjKo70Ec7Q--
X-Originating-IP: [91.103.1.84]
Authentication-Results: mta1011.tnz.mail.aue.yahoo.com from=; domainkeys=neutral (no sig); from=floringlobal.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtp.mesvr.com) (91.103.1.84)
by mta1011.tnz.mail.aue.yahoo.com with SMTPS; Sat, 18 Jun 2016 05:00:21 +0000
Received: from smtp.mesvr.com (localhost.localdomain [127.0.0.1])
by smtp.mesvr.com (8.14.4/8.13.8/CWT/DCE) with ESMTP id u5I50E6V009236
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
for <XXX>; Sat, 18 Jun 2016 05:00:14 GMT
Received: (from mail@localhost)
by smtp.mesvr.com (8.14.4/8.13.8/Submit/CWT/DCE) id u5I50EuL009235
for XXX; Sat, 18 Jun 2016 05:00:14 GMT
Resent-Date: Sat, 18 Jun 2016 05:00:14 GMT
Resent-Message-Id: <[email protected]>
Resent-From: "[email protected]" <[email protected]>
Received: from [208.113.200.76] by mesvr.com [91.103.1.84]
for <XXX>
on-behalf-of [email protected]; Sat Jun 18 05:00:13 2016
Received: from homiemail-a119.g.dreamhost.com (caibbdcaaahg.dreamhost.com [208.113.200.76])
by smtp (8.14.4/8.13.8/CWT/DCE) with ESMTP id u5I50ArW009222
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
for <XXX>; Sat, 18 Jun 2016 05:00:12 GMT
Received: from homiemail-a119.g.dreamhost.com (localhost [127.0.0.1])
by homiemail-a119.g.dreamhost.com (Postfix) with ESMTP id 3922A60005067
for <XXX>; Fri, 17 Jun 2016 22:00:09 -0700 (PDT)
Received: from localhost (alc-nat.dreamhost.com [66.33.206.8])
(using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
(Authenticated sender: [email protected])
by homiemail-a119.g.dreamhost.com (Postfix) with ESMTPSA id 2987660005053
for <XXX>; Fri, 17 Jun 2016 22:00:09 -0700 (PDT)
Message-Id: <1860cad6795b4e5a9bd1cb56e410b93e0b45570f@webmail.floringlobal.com>
From: "[email protected]" <[email protected]>
To:
X-Mai1er: Atmail 7.5.3
X-Originating-IP: 31.131.4.167
Subject: FLORIN INVESTMENT LTD TRADE CONFIRMATION REPORT
Date: Sat, 18 Jun 2016 13:00:09 +0800
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="=_d5b7547b096c4e1c7b68561a10fb522f"
Notice-Requested-Upon-Delivery-To: [email protected] ... .mesvr.com
Errors-To: [email protected] ... .mesvr.com
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrIKsWRWlGSWpSXmKPExsVSz8DAqFt5OSXcYM4/fove95uZHRg9vvV2
sQUwRrFm5iXlVySwZvw+eZS94P89zoo1826xNDBu2s3ZxcjJISQQIXGq9QIrhD2HUeLQOV8I
W0vi35OjLF2MHEC2vcTzGdkQ4SyJO6+bWCDseYwS/e9tuhi5gOwZTBKP9q5jhnAuMkp8P3SD
DcJ5ziSx8NhRRpBJvAL+EpfnloF0swl4Smw6vYIRxBYRkJD4deAJ2FQJATGJQ3vbWCFsOYkd
fTPAbGEBC4k7qx4yg4xhEVCVWPBWEubO/Y//M4PYvAKCEidnQoxhFvCRuNDzmgnE5hOIkdg2
eR4biM0q4CLRt3MG4wRG0VlIWmYhaYGwQySeTZvIDGHLS2x/OwfKVpO4ve0qO4StLbFs4Wuo
uJLEmclvoGxFiSndD4FquIDsyYwSS44+ZlzAyLmKkTMnPzkxJyO/uGQTIzTadjB+WOh8iFGA
g1GJh5eRgYFBiDWxrLgy9xCjJAeTkijvHI8loUJ8SfkplRmJxRnxRaU5qcWHGDU4OAQmXl6z
j1GKJS8/L1VJgtc/AKhOsCg1PbUiLTMHmDRgSpk4OA8xSnDwKInwVoDU8BYXJOYWZ6ZD5E8x
KkqJ837yB0oIgCQySvPgekEp60LhCZ9LjLJSwrzVXkA1PAWpRbmZJajyrxjFga4X5rUBGc+T
mVcCN/0V0GImoMVzxRaBLC5JREhJNTCGczzcfFpiTVlenlB+c+PsunWhTSxH3+74eaQ18dcK
SSHlS+fLt+RM4hbiPS23oPjdDoGMHzpmmq2i+pO8Dq2YWLXu2dO7DzysKjWeL+XzXeP156+l
3beZ65fGPutJulN+5Ft7WlF7xZzKg4n2y+J1fE4H7nsyh+Xb+juR5S18PFwza31t7z9RYinO
SDTUYi4qTgQAxX+polQDAAA=
Content-Length: 157437

[email protected]
To Jun 18 at 5:00 PM

18th June 2016

Account: 000TL19408
Trade Confirmation
160616USSMART7975513-35-008-ALLISON 000TL19408
090616USSMART7539341-35-007-ALLISON 000TL19408
260416USSMART7389267-35-006-ALLISON 000TL19408
210416USSMART7115025-35-005-ALLISON 000TL19408
150416USSMART6982754-35-004-ALLISON 000TL19408
150416USSMART6982754-35-003-ALLISON 000TL19408
060416USSMART5898554-34-002-ALLISON 000TL19408

Florin Investment Limited

135 Bonham Strand Trade Centre
Sheung Wan Hong Kong
+852-5808-0493

Web: http://www.floringlobal.com

This e-mail and any attachments are confidential/legally privileged and any unauthorized use, distribution or disclosure thereof, in whatever form, by anyone other than the addressee is prohibited. If you have received this e-mail in error, please destroy it. Florin Investment Limited does not accept any liability for any damage, loss or expense arising from this e-mail and/or from accessing any of its attachments, and cannot assure that the integrity of this communication has been maintained nor that it is free of errors, virus, interception or interference.




< /html>
FLORIN INVESTMENT LTD TRADE ID 160616USSMART7975513 .pdf

I just had a quick question . I was doing some research and found this on some sites including floringlobal . Is this a log in portal for clients to view this fake stock activity ?

https://www.floringlobal.com/portal/login-page/


thx

Hong Kong . Securities and Futures Commission . "Florin" and "Florin Global" searches no such entity registered:

http://www.sfc.hk/publicregWeb/searchByName?locale=en


"Florin" search in the Hong Kong Yellow pages yields one result . Florin Investment Ltd
TEL # 2541 6480 Address Lee Man Coml Bldg, Sheung Wan .
From the website Tel # 5808 0493 . 135 Bonham Strand Trade Center . Addresses are maybe 300 meters apart .

http://www.yp.com.hk/s-florin/p1/en/


Possible Stolen Identity .