Robert Nolan of Halyard Capital Had Knowledge of Alec Difrawi Scams

Robert B. Nolan, Jr., founding partner at Halyard Capital whose business address is below had knowledge of Alec Difrawi who previously did business under the names of Softrock, Inc. or Expand Incorporated or Gigats scams and lawsuits against bloggers.

140 East 45th Street, 37th Floor
New York, NY 10017
Tel: (212) 554-2121

Yes….
Alec is getting deep in bed with Halyard Capital who owns Education Dynamics now. He’s about to hit the home run he’s dreamed about. Totally disgusts me. He is still a criminal.
Can’t believe no one will stop him. Blows my mind.

WhoIs ~ www.omniaclassifieds.com

WhoIs ~ http://www.omniaclassifieds.com DBA Bestjobsusa
pub-8231106908580706
UA-9300920
_______________________

omniaclassifieds

Domain / Last seenexport: txt IP Available details

www.**niads.co.uk

2013.03.23 -198.1.121.140 >> Adsense: pub-8231106908580706
Analytics: UA-9300920
www.**mania-matrimoniale.ro
2013.11.23 -142.4.28.1 >> Adsense: pub-4035698997339803
Analytics: UA-7794683 9300920
www.**ckstage.ro
2013.11.03- 37.251.142.81 >> Analytics: UA-9300920
www.**ip.ro >>
2014.01.21- 81.180.123.173 >> Analytics: UA-9300920
Email: viorel(x)atip.ro
**0photoanimation.com >>
2014.01.15 – 206.225.92.18 >> Analytics: UA-9300920
**ckstage.ro >>
2013.12.23 – 37.251.142.81 >> Analytics: UA-9300920
www.**nianunturi.ro >>
2014.01.05 – 89.36.134.85 >> Adsense: pub-8231106908580706
Analytics: UA-9300920
www.**stralservicii.ro >>
2014.01.15- 81.180.123.173 >> Analytics: UA-9300920
**mania-ceasuri.ro >>
2014.01.17 -216.55.141.34 >> Adsense: pub-4035698997339803
Analytics: UA-9300920
**mania-mall.ro >>
2013.12.03- 142.4.28.1 >> Adsense: pub-4035698997339803
Analytics: UA-9300920
www.**mania-ceasuri.ro >>
2013.12.18- 142.4.28.1 >> Adsense: pub-4035698997339803
Analytics: UA-9300920
**mania-matrimoniale.ro >>
2014.01.15- 216.55.141.34 >> Adsense: pub-4035698997339803
Analytics: UA-7794683 9300920
www.**nianet.ro >>
2014.01.12- 37.251.142.81 >> Analytics: UA-9300920
**nianunturi.ro >>
2013.06.30- 198.1.121.140 >> Adsense: pub-8231106908580706
Analytics: UA-9300920

Careers Train ~ ukcareers.org.uk

The Purpose of this post is to ALERT you that the job you are about to apply for orscamalert may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of an individual or a business entity have been stolen along with fund from their bank accounts.

These job postings are an attempt to lure you into accepting and cashing counterfeit checks into your bank accounts. You are being recruited to wire transfer these funds via WESTERN UNION or MONEYGRAM from your bank into a DOMESTIC BANK  or OFFSHORE BANK ACCOUNT.

 Essentially You Become A Money or Repackage Mule

  1. Money Mule Explained 
  2. Understanding The Cyber Theft Ring
  3. Protecting Yourself Against Money Mule
  4. KrebsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

ukcareers

Deaf-mute person ~ dave.mcwright@aol.com

The Purpose of this post is to ALERT you that the job you are about to apply for orscamalert may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of an individual or a business entity have been stolen along with fund from their bank accounts.

These job postings are an attempt to lure you into accepting and cashing counterfeit checks into your bank accounts. You are being recruited to wire transfer these funds via WESTERN UNION or MONEYGRAM from your bank into a DOMESTIC BANK  or OFFSHORE BANK ACCOUNT.

 Essentially You Become A Money or Repackage Mule

  1. Money Mule Explained 
  2. Understanding The Cyber Theft Ring
  3. Protecting Yourself Against Money Mule
  4. KrebsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

Email header analysis report
All valid IP Addresses found in the header.
Ip Address 3rd Party Info Provider City Flag Country
* 172.129.4.76 Check 172.129.4.76 at Senderbase.org Check 172.129.4.76 at Reputationauthority.org America Online n/a United States
66.199.228.71 Check 66.199.228.71 at Senderbase.org Check 66.199.228.71 at Reputationauthority.org Access Integrated Technologies New York United States
98.138.213.185 Check 98.138.213.185 at Senderbase.org Check 98.138.213.185 at Reputationauthority.org Yahoo Sunnyvale United States

*Probable originating IP address

Header Analysis

Originating Info

Email info Geographical Info
Originating IP address From Continent
Originating hostname Originating Email address Latitude
Originating Organization Subject Longitude
Originating Country Date Sent Time zone
Originating City Message ID GMT offset
Google Map for 172.129.4.76

In search of personal care assistant for Deaf-mute person.
Responsibilities
Schedule domestic, international, and private travel arrangements.

Organize events.
Make reservations
Communicate on behalf of me.
Answer the phone and file documents.
Various tasks.
Must be able to handle sensitive, confidential information
Must have experience with private travel
Must be very well organized and a strong communicator

You must be nice, caring, trustworthy, energetic, competent, intelligent, and self-motivating.

And, you must be able to speak, read, and write English fluently.
No experience necessary.

Base Pay: $60.000

Please reply to this email if you are interested !

WhoIs ~ grand-chanceltd.org ~ niagarallc.com

The Purpose of this post is to ALERT you that the job you are about to apply for orscamalert may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of an individual or a business entity have been stolen along with fund from their bank accounts.

These job postings are an attempt to lure you into accepting and cashing counterfeit checks into your bank accounts. You are being recruited to wire transfer these funds via WESTERN UNION or MONEYGRAM from your bank into a DOMESTIC BANK  or OFFSHORE BANK ACCOUNT.

 Essentially You Become A Money or Repackage Mule

  1. Money Mule Explained 
  2. Understanding The Cyber Theft Ring
  3. Protecting Yourself Against Money Mule
  4. KrebsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

GRAND CHANCE LTD ~ grand-chanceltd.org

  1. consultinglines.biz
  2. grand-chanceltd.org
  3. consultinglines.net
  4. consultinglines.biz
  5. niagarallc.com

grand-chanceltd.org has been registered on 09/30/2013
grand-chanceltd.org doesn’t have any IPv4 address associated.
Get a full list of grand-chanceltd.org DNS records on

Announced By
Origin AS Announcement Description
AS35662 5.152.192.0/19 Redstation Limited

Address lookup
canonical name grand-chanceltd.org

aliases
addresse:5.152.209.149
Domain Whois record

Queried whois.publicinterestregistry.net with “grand-chanceltd.org”…

Domain ID:D169820613-LROR
Domain Name:GRAND-CHANCELTD.ORG

Created On:30-Sep-2013 15:09:36 UTC
Last Updated On:09-Oct-2013 07:45:07 UTC
Expiration Date:30-Sep-2014 15:09:36 UTC

Sponsoring Registrar:Paknic (Private) Limited (R1605-LROR)
Status:TRANSFER PROHIBITED

Registrant ID:PAK13093057713-1
Registrant Name:Scott Dean
Registrant Organization:Scott Dean
Registrant Street1:44 Reads Avenue
Registrant City:Blackpool
Registrant State/Province:Lancashire
Registrant Postal Code:FY1 4DE
Registrant Country:GB
Registrant Phone:+44.12536256
Registrant FAX:+44.12536256
Registrant Email:whittier@grand-chanceltd.org

Admin ID:PAK13093057713-2
Admin Name:Scott Dean
Admin Organization:Scott Dean
Admin Street1:44 Reads Avenue
Admin City:Blackpool
Admin State/Province:Lancashire
Admin Postal Code:FY1 4DE
Admin Country:GB
Admin Phone:+44.12536256
Admin FAX:+44.12536256
Admin Email:whittier@grand-chanceltd.org

Tech ID:PAK13093057713-3
Tech Name:Scott Dean
Tech Organization:Scott Dean
Tech Street1:44 Reads Avenue
Tech City:Blackpool
Tech State/Province:Lancashire
Tech Postal Code:FY1 4DE
Tech Country:GB
Tech Phone:+44.12536256
Tech FAX:+44.12536256
Tech Email:whittier@grand-chanceltd.org

Name Server:NS1.MERXS.SU
Name Server:NS2.WERMO.SU
Name Server:NS3.MARSO.CC

DNSSEC:Unsigned

Network Whois record
Queried whois.ripe.net with “-B 5.152.209.149
Information related to ‘5.152.209.144 – 5.152.209.151’

Abuse contact for ‘5.152.209.144 – 5.152.209.151’ is ‘abuse@redstation.com’

inetnum: 5.152.209.144 – 5.152.209.151
netname: RSDEDI-KJBFOPMO
descr: Dedicated Server Hosting
country: GB
admin-c: RA1415-RIPE
tech-c: RA1415-RIPE
status: ASSIGNED PA
remarks: ABUSE REPORTS: abuse@redstation.com
mnt-by: REDSTATION-MNT
mnt-domains: REDSTATION-MNT
mnt-routes: REDSTATION-MNT
changed: ripe-admin@redstation.com 20130818
source: RIPE

role: Redstation Admin Role
address: Redstation Limited
address: 2 Frater Gate Business Park
address: Aerodrome Road
address: Gosport
address: Hampshire
address: PO13 0GW
address: UNITED KINGDOM
abuse-mailbox: abuse@redstation.com
e-mail: ripe-admin@redstation.com
admin-c: KMAC-RIPE
tech-c: PA5242-RIPE
nic-hdl: RA1415-RIPE
mnt-by: REDSTATION-MNT
changed: ripe-admin@redstation.com 20080625
source: RIPE

% Information related to ‘5.152.192.0/19AS35662’

route: 5.152.192.0/19
descr: Redstation Limited
origin: AS35662
mnt-by: REDSTATION-MNT
changed: kevin.mcardle@redstation.com 20120719
source: RIPE

% This query was served by the RIPE Database Query Service version 1.69 (WHOIS1)

DNS records
name class type data time to live
grand-chanceltd.org IN SOA
server: ns1.grand-chanceltd.org
email: hostmaster@grand-chanceltd.org
serial: 6
refresh: 300
retry: 120
expire: 86400
minimum ttl: 60
120s (00:02:00)
grand-chanceltd.org IN TXT v=spf1 a mx ip4:55.11.65.20/2 ip4:90.2.123.112/2 ip4:176.33.87.19/2 ip4:212.63.89.33/2 ?all 120s (00:02:00)
grand-chanceltd.org IN NS ns2.wermo.su 120s (00:02:00)
grand-chanceltd.org IN A 5.152.209.149 120s (00:02:00)
grand-chanceltd.org IN NS ns1.merxs.su 120s (00:02:00)
grand-chanceltd.org IN MX
preference: 10
exchange: mx.grand-chanceltd.org
120s (00:02:00)
grand-chanceltd.org IN NS ns3.marso.cc 120s (00:02:00)
149.209.152.5.in-addr.arpa IN PTR h5-152-209-149.host.redstation.co.uk 86400s (1.00:00:00)
209.152.5.in-addr.arpa IN SOA
server: ns1.redstation.com
email: admin@redstation.com
serial: 2013072806
refresh: 3600
retry: 1800
expire: 172800
minimum ttl: 86400
86400s (1.00:00:00)
209.152.5.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 7200 (02:00:00)
signature expiration: 2013-11-09 10:31:49Z
signature inception: 2013-10-10 09:31:49Z
key tag: 18562
signer’s name: 5.in-addr.arpa
signature:
(1024 bits)

7200s (02:00:00)
209.152.5.in-addr.arpa IN NSEC
next domain name: 210.152.5.in-addr.arpa
record types: NS RRSIG NSEC
7200s (02:00:00)
209.152.5.in-addr.arpa IN NS ns2.redstation.com 86399s (23:59:59)
209.152.5.in-addr.arpa IN NS ns1.redstation.com 86399s (23:59:59)

— end —