Internet Solutions Corporation

[Red Squad]

Internet Solutions Corp (internetsolutionscorp.com)

Internet Solutions Corp (ISC) is a Nevada corporation operating out of a Florida address that has been behind several suspect job emails mentioned on fraudwatchers.org before.

http://www.fraudwatchers.org/forums/...ad.php?t=13564
http://www.fraudwatchers.org/forums/...ad.php?t=13341
http://www.fraudwatchers.org/forums/...ead.php?t=8704
http://www.fraudwatchers.org/forums/...ad.php?t=11717
http://www.fraudwatchers.org/forums/...ad.php?t=10586
http://www.fraudwatchers.org/forums/...ad.php?t=11613
http://www.fraudwatchers.org/forums/...ead.php?t=9709

Internet Solutions Corp is run by lawyer Alex Finch along with ex-con Alec Defrawy who also used the names Ayman Achmed El-Difrawi, Michael El-Difrawi, Alex Simon, Phillip M Thomas and many other aliases.

Over the years they have operated under many different names, including Veriresume, USA Voice, Consumer Business Bureau, TooSpoiled, Impact 210, Instant Human Resources and many others. Many of these names are known to the BBB and you can check them out yourself if you wish. Internet Solutions Corp has also featured on WFTV and the Washington Post.

ISC has registered thousands of domain names, typically these are used for a few days and then abandoned as people start to post queries on boards such as this.

Where people do post complaints about ISC several things can happen. Sometimes someone "employed" by ISC will counter the claims, but more often than not ISC will start to make legal threats against posts and the people running the web sites with the posts. Where legal threats fail, other methods of persuasion are used. One example is Internet Solutions Corp vs Marshall which was dismissed.

In some cases, ISC gains control or limited administrative access to sites posting information. Two sites that formerly carried information on ISC but now appear to be compromised are scam.com and 419legal.org. In these cases, any posts critical to ISC are removed very quickly, clearly by someone with moderator access. These removals have never been explained.

Despite sending out millions of "job offers" to hundreds of thousands of people, it appears that the jobs offered do not exist. The only reported employment that ISC does is to recruit people to post on forums, bulletin boards, Yahoo Answers, SiteAdvisor and Wikipedia to either counter claims made by complainants or to spam or disrupt operations. A handful of people have been employed to handle phone calls or run the Florida operations, and one of them clearly identifies Alec Defrawy and Ralph Edward Bell in this WFTV report.

It is unclear what ISC does with the personal information that it gathers. Most likely it is being sold on to telemarketers, allegations of phishing and identity theft are not proven.

ISC also conceals its identity using anonymous domain registration details, virtual offices and drop boxes. In fact, ISC is based in Orlando rather than any of the fictional addresses it supplies.

There are over two thousand domains connected with ISC operations. If the moderators so permit, I would like to list them in this thread. I will post the most recent domains names shortly.

[poirot]

There seems to be a supplement of information on the alleged ex-con in question:
http://www.easybackgroundcheck.com/w...ecdefrawy.html

[brrrrrr]

Compliments for your good work, Red Squad. Two remarks, though.

First, I don't think Alex Finch has a major position for real. He is being used as a patsy by El Difrawi and Bell, just like Mike Fomkin was with Toospoiled predecessor Impact 210 Worldwide impactww.com

Second, you are absolutely right about scam.com being controlled (or even owned) by the scammers, but not about 419legal. I think 419legal cut some of this Florida based scam reporting because they intend to primarily focus on 419 scams.

[poirot]

Some sites or blogs may be affected by certain legal threats, and whether they have explained their actions or not, that doesn't mean they are controlled or owned by scammers. Unless you have supporting evidence, I find that comment ridiculous.

[brrrrrr]

I have to agree I am not certain if scam.com is actually owned by them. However, during the times I frequented scam.com hundreds of postings (I guess over ninety percent of them) about this particular line of scams were deleted, including some posts that could serve as evidence, alas. Also the use of the scammer's name and aliases was blocked. Imho this goes far beyond just being affected by. PNWD may be a better prescription for it.

brrrrrr, please read Poirot's post again. You reply is just as ridiculous, and maybe just a tad "tin-foil" too.

There are many reasons why large swathes of posts get removed from anti-fraud sites. Some are because of the fear of litigation, or in response to threats or actual litigation. Sometime it is because the admins and moderators feel that there is not enough evidence. Sometimes it is because internet trolls, or cohorts of the targets themselves, degrade discussions with nonsense. Sometimes it is even because the requests have come from the authorities. We at FraudWatchers have also removed large numbers of threads and discussions for a number of reasons outlined above... does that make us "PWND" by the targets of those discussions? Hardly.

"He who seeks truth from the horse, should talk to its head, not its rear."

Red Squad please continue, this looks quite interesting so far.

@ Red Squad,

There's no way I'm going to go through and check each of the registered domains you have quoted, though it is an option.

I have checked some and they are behind whois privacy.

Q: How do you know that these domains are associated with the subject of your post?

[Red Squad]

Originally Posted by John Fairheart

@ Red Squad,

There's no way I'm going to go through and check each of the registered domains you have quoted, though it is an option.

I have checked some and they are behind whois privacy.

Q: How do you know that these domains are associated with the subject of your post?

ISC have never denied that any of the domains posted on web sites belong to them, they have always asserted that they are doing nothing that is unlawful.

All you need to do is link these sites with Veriresume, TooSpoiled.com and World Voice News (listed in this complaint). I think you will find strong similarities, I will post some of those domains later.

Originally Posted by Red Squad

ISC have never denied that any of the domains posted on web sites belong to them, they have always asserted that they are doing nothing that is unlawful.

All you need to do is link these sites with Veriresume, TooSpoiled.com and World Voice News (listed in this complaint). I think you will find strong similarities, I will post some of those domains later.

Thanks, but this is not what I was asking.

Despite us here making general similarities when discussing sites, such as in Chinese or African based scammer activities, what we have here is a much different animal. One cannot simply use these general "similarities" between a handful of sites in a lawsuit and paint a wide brush across a huge number of others.

What I was asking, is how you "know" that the sites you posted belong to ISC, do you have any documentary evidence that the sites you have posted DO belong to ISC. Similarities in this case unfortunately do not constitute evidence and it would be incorrect to place that information into a light which may in fact be utterly wrong.

Can you verify the connection between each of the sites posted, and ISC?

Don't get me wrong, I'm not putting you down, but for the benefit of readers these finer points must be seen to be addressed.

[Red Squad]

That would be forensic analysis. IP addresses, name servers, traffic analysis, server architecture and some insider information helps to build up the picture.

You will find something interesting though.. the proof will turn up as people Google the domain names after getting an email similar to this:

Dear XXXXX,

I'm currently looking for a candidate to fill a Software Engineer opening with one of my clients. I believe you might be a perfect match due to your experience in the Technology field listed on your electronic resume. I have included some basic information about the vacancy.

MediWare

Software Engineer

$70,000.00 annual salary.Excellent Income with long term career growth

We are looking for someone with an eye for details and excellent organizational skills. To view a detailed description of the vacancy and to apply online, please click the link below. If your browser does not allow you to click the link, you may copy and paste it into your browser. The link will take you to an informative Web page with requirements and benefits.

http://thehiringnetwork.com/cmanager... TechScience_ 01272008_fr&rd=80&j=10666153

Typically it takes about two business days for your application to be processed. Once complete, one of our HR team members will contact you about your information and to set up your first interview.

Best Regards,
Keith Grivaldi
Sr. Recruiter, HR Division

I do not wish to be considered for future employment.

The emails are always very similar.

[Red Squad]

John, you can PM me if you wish.

[FW Admin]

On the site mentioned above (http://www.hiringnetworkonline.com/About.cfm#Contact) the About Us section claims the following:

Hiring Network Online is a part of the Career Network (CN). CN is a resource for employers, recruiters, and placement agencies to find and contact qualified applicants. CN is an aggregator of jobs posted online.

The Career Network Inc. (http://www.thecareernetworkinc.com/) is a company registered in Richmond, VA and has no information that relates in any way to the peoiple or individuals mentioned thus far in the thread.

Two points strike me here; a) Are Hiring Network Online really a part of the Career Network Inc. company and b) if not, are The Career Network Inc. aware that their name is being used without their knowledge?

Googling the exact phrase "is a part of the Career Network (CN)" comes up with lots of interesting hits... just under 100 identical site references. That web-template is pretty worn out by the looks of it.

As for your lists Red Squad, I'm still having problems with it and have not yet recieved an appropriate answer, I want a YES or NO, not fuzzy notions about 'insiders' and 'traffic analysis'. I will defer to FW Admin on this regard but if you cannot actually tie a domain name to this company through ACTUAL evidence that we can ALL see, then they should not be posted in the first place.

[Red Squad]

ISC's version of "The Career Network" is not connected with the real "Career Network" in VA. They also use names such as "Media Logic Team" which is not connected with the real "Media Logic, Inc".

Given that we know that Veriresume is an ISC company, we need only link these sites to ISC.

Here is a simple on - veriresume.com is hosted on 198.64.138.42 which is the same server as amazing-job-board.com, bestworkplacespace.com, careernationalservice.com, careers-rightnow.com, careerspaceboard.com, copersuasion.com, firstjob-sourcenow.com, incredible-jobs.com, joblist1.com, jobsleapservices.com, nationalstaffingco.com, rizzen-jobs.com, speedyjobsnow.com and usa-jobsforyou.com.

All the domain contact details are anonymous, but very similar. All the sites run the same software and ask the same question. Some of those other domains even show up as Veriresume.com. Also, when the data is submitted it is passed to the same back end processors, although you need a deeper technical analysis to see that.

This is not a case of shared hosting, this is a dedicated server rented by ISC. All the billing details are sent to the Orlando address.

If you ask ISC if these are their domains they will answer "yes". ISC's assertion is that they are doing nothing that is illegal. However, credible reports indicate that this is at least deceptive marketing. Check out Veriresume, USA Voice, TooSpoiled and Internet Solutions Corporation at the BBB for more details.

[FW Admin]

Thank you for clarifying those points, Red Squad. A trade name, such as The Career Network, is a very valuable and important commodity for business as far as commercial law in the US (and most other countries for that matter) is concerned. I am sure that if ISC are attempting to use the trade name of an uninvolved entity, then there may well be legal issues between them.

However that is not for us to decide, nor can we speculate. It is not up to us to ask ISC whether they own these domains; we cannot and will not carry out such detailed background checks, especially when no enquiry about them has been made on this website. You have issued an alert regarding ISC and its composite individuals, with appropriate references for which we thank you. This issue is now in the public domain via the search engines that will archive the data.

I am sure that your own research is sufficient and exhaustive for you to conclude that these domain names are all owned by ISC; we, however, without the relevant evidence, cannot concur. Record lookups, in whatever forms, and "deeper technical analysis", takes time and, in a lot of cases, expense that we, as a volunteer group donating our own time and effort, simply do not have.

Our brief and motives are clearly outlined in the "Our Objectives" link; we do allow a certain leeway with posts relating to frauds depending on the extent of the available information.

In this instance, however, because of the lack of tangible proof connecting ownerships of the domains posted to the subject of this thread, I have no alternative but to remove them. If proof of connection does arise during the course of this thread discussion, then it may be posted but only as far as it relates to the domain(s) for which the proof has been obtained. Similarly, iif there are any enquiries relating to any of these domain names, then the data relating to those domains together with any associative evidence may be published.

I trust you understand that the actions are not taken against you; indeed I am thankful for your initial post that brings this situation to the attention of the internet public; however, we do need to ensure adequate moderation.

Thank you FW Admin, eloquently put as per usual. I still see a distinct lack of a direct answer to my questions, even after a direct request.

Once again, for the benefit of readers...

Originally Posted by Red Squad

This is not a case of shared hosting, this is a dedicated server rented by ISC. All the billing details are sent to the Orlando address.

1. How do you know it is a dedicated server?
2. How do you know billing for the domain(s) in question goes "the address" in Orlando.

[Red Squad]

We know that Veriresume is ISC, they have attested to that in legal filings. We can show that The Career Network and Veriresume are closely linked through domain registrations.

Take hiringnetworkonline.com as a typical "CN" site. The WHOIS details are



Registrant:
The Career Network
400 Chesterfield Center
Suite 400
St Louis, MO 63017
US

Domain Name: HIRINGNETWORKONLINE.COM


Administrative Contact, Technical Contact:
The Career Network phillip.m.thomas@gmail.com
400 Chesterfield Center
Suite 400
St Louis, MO 63017
US
800-516-1764


Record expires on 15-Jan-2009.
Record created on 15-Jan-2008.
Database last updated on 8-May-2008 14:58:53 EDT.

Domain servers in listed order:

NS43.WORLDNIC.COM 205.178.190.22

The phillip.m.thomas@gmail.com is a key one, this is the "Mike Thomas" alias used by Alec Defrawy.

Compare this this a Veriresume domain, Vjobs.us. phillip.m.thomas@gmail.com is listed there, as is 16650 Royal Palm Drive which is Defrawy's house (Google it). That links The Career Network, Veriresume, Defrawy and the Mike Thomas alias together. This is just one example, there are many more.



Domain Name VJOBS.US
Domain ID D13693886-US
Sponsoring Registrar .US REGISTRAR L.L.C.
Domain Status clientTransferProhibited
Registrant ID 42093692
Registrant Name VeriResume
Registrant Organization VeriResume
Registrant Address1 801 International Parkway, 5th
Registrant City Lake Mary
Registrant State/Province FL
Registrant Postal Code 32746
Registrant Country United States
Registrant Country Code US
Registrant Phone Number +1.321579882
Registrant Email admin@vjobs.us
Registrant Application Purpose P1
Registrant Nexus Category C21
Administrative Contact ID 42093692
Administrative Contact Name VeriResume
Administrative Contact Organization VeriResume
Administrative Contact Address1 801 International Parkway, 5th
Administrative Contact City Lake Mary
Administrative Contact State/Province FL
Administrative Contact Postal Code 32746
Administrative Contact Country United States
Administrative Contact Country Code US
Administrative Contact Phone Number +1.321579882
Administrative Contact Email admin@vjobs.us
Administrative Application Purpose P1
Administrative Nexus Category C21
Billing Contact ID 40274612
Billing Contact Name Mike Thomas
Billing Contact Address1 16650 Royal Palm Drive
Billing Contact City Groveland
Billing Contact State/Province FL
Billing Contact Postal Code 34736
Billing Contact Country United States
Billing Contact Country Code US
Billing Contact Phone Number +1.772579122
Billing Contact Email phillip.m.thomas@gmail.com
Technical Contact ID 42093692
Technical Contact Name VeriResume
Technical Contact Organization VeriResume
Technical Contact Address1 801 International Parkway, 5th
Technical Contact City Lake Mary
Technical Contact State/Province FL
Technical Contact Postal Code 32746
Technical Contact Country United States
Technical Contact Country Code US
Technical Contact Phone Number +1.321579882
Technical Contact Email admin@vjobs.us
Technical Application Purpose P1
Technical Nexus Category C21
Name Server NS13.WORLDNIC.COM
Name Server NS14.WORLDNIC.COM
Created by Registrar .US REGISTRAR L.L.C.
Last Updated by Registrar .US REGISTRAR L.L.C.
Domain Registration Date Thu Aug 09 17:40:51 GMT 2007
Domain Expiration Date Fri Aug 08 23:59:59 GMT 2008
Domain Last Updated Date Thu Aug 09 17:40:55 GMT 2007

"The Career Network" has a domain name of www.careernetwork.us.com, again "Mike Thomas" is the name

Domain ID:CNIC-DO556596
Domain Name:CAREERNETWORK.US.COM
Created On:22-Apr-2008 13:24:12 UTC
Last Updated On:29-Apr-2008 14:58:54 UTC
Expiration Date:22-Apr-2009 23:59:59 UTC
Status:TRANSFER PROHIBITED
Registrant ID:42091564V
Registrant Name:Mike Thomas
Registrant Organization:.
Registrant Street1:ATTN insert domain name here
Registrant Street2:care of Network Solutions
Registrant Street3O Box 447
Registrant City:Herndon
Registrant State/Province:VA
Registrant Postal Code:20172
Registrant Country:US
Registrant Phone:+1.570708878
Registrant Email:cn69c7fq2nz@networksolutionsprivateregistration.com
Admin ID:42091564V
Admin Name:Mike Thomas
Admin Organization:.
Admin Street1:ATTN insert domain name here
Admin Street2:care of Network Solutions
Admin Street3O Box 447
Admin City:Herndon
Admin State/Province:VA
Admin Postal Code:20172
Admin Country:US
Admin Phone:+1.570708878
Admin Email:cn69c7fq2nz@networksolutionsprivateregistration.com
Tech ID:42091564V
Tech Name:Mike Thomas
Tech Organization:.
Tech Street1:ATTN insert domain name here
Tech Street2:care of Network Solutions
Tech Street3O Box 447
Tech City:Herndon
Tech State/Province:VA
Tech Postal Code:20172
Tech Country:US
Tech Phone:+1.570708878
Tech Email:cn69c7fq2nz@networksolutionsprivateregistration.com
Billing ID:40274612V
Billing Name:Mike Thomas
Billing Street1:ATTN insert domain name here
Billing Street2:care of Network Solutions
Billing Street3O Box 447
Billing City:HERNDON
Billing State/Province:VA
Billing Postal Code:20172
Billing Country:US
Billing Phone:+1.570708878
Billing Email:ya3td5v83t6@networksolutionsprivateregistration.com
Sponsoring Registrar ID:H292913
Sponsoring Registrar Organization:Network Solutions LLC
Sponsoring Registrar Street1:13861 Sunrise Valley Drive
Sponsoring Registrar Street2:Suite 300
Sponsoring Registrar City:Herndon
Sponsoring Registrar State/Province:VA
Sponsoring Registrar Postal Code:20171
Sponsoring Registrar Country:US
Sponsoring Registrar Phone:+1.5707088788
Sponsoring Registrar FAX:+1.7036685817
Sponsoring Registrar Website:http://www.networksolutions.com/
Name Server:NS71.WORLDNIC.COM
Name Server:NS72.WORLDNIC.COM

[Red Squad]

Another company linked to Veriresume is "Applicant Tree" with domains at applicant-career-tree.com, applicantree.com, applicanttree.com, applicant-tree.com, treecareer.com

Their own press release at http://www.reuters.com/article/press...08+PRN20080411 gives it away - "Jenifer Olson, of MediaLogic for VeriResume, +1-212-933-9768". Again, Veriresume is known to the BBB, so you can check them out yourself.

[FW Admin]

Thanks again for clarifying these matters, Red Squad. I have taken some time to check through a few of the domains you originally posted, and, as you suggest, although they are registered under domain privacy, there does seem to be certain similarities... i,e, several are registered to 'The Career Network' with the same address... others are simply registered to "WD" with no address. On the other hand, can simply be a combination of two random letters; as I am sure you understand, this falls far short of being conclusive proof. The links in your first post to the posts here on FraudWatchers certainly do indicate a very positive confidence of them all being a part of the ISC setup.

I will refrain from reposting the domain names until, during whatever time I manage to get available, I am more convinced of their association.

[brrrrrr]

Just a couple of hallmarks, and the conclusion something a is a 419 scam is easily made here. Nigerian gangs never tried to sue anyone, did they?

The pattern revealed by Red Squad's contributions seems more obvious to me than many allegations about Nigerian scams (which are true of course).

And @ John, I don't think I deserve your somewhat degrading remarks.