Looks like the pharmers are trolling the employment sites in earnest. A quick glance indicates enough "official" stuff to lure the unwary, but I never click on an unexpected link without some detailed snooping.

Of course the www.ibn-corp.com goes to what may appear at first glance to be a recruiter site, but if you've looked for jobs at all it doesn't take long to see that this is bogus - no company info, address, phone number, etc. No way to search for legitimate positions. In short, a mediocre to medium effort fraud.

---
From: IBN-Corp.com
Response to your resume posting.

I have viewed your resume.
You might be a very good fit for our job openings...
We have multiple job positions available that you can view online.

Please go to:
<snip>

This email was sent per your authorization of the terms and
agreements you accepted on Hot Jobs and/or Monster and/or CareerBuilder.
Your current preferences on your resume account need to be
changed if you Do Not want to receive recruiter and/or
employer email messages. -- See instructions below.


Hot Job's - Resume & Email Privacy Options
(as seen on hotjobs.com)
<snip>

THUGS, CROOKS, CRIMINALS WHOSE PRIMARY PURPOSE IS TO RECRUIT US RESIDENTS/UK RESIDENTS/CANADIANS ETC. TO LURE THEM INTO CASHING FRAUDULENT CHECKS. THESE FOLKS NEED TO GET A FULL TIME JOB IN IRAQ

Our clients are some of the major companies in the industry who are looking for talented individuals. Our candidates never pay a fee for our services! We are unique in the respect that we are candidate friendly and offer our candidates no cost, complete career counseling. Our Head Hunters work with you every step of the way to give you the tools you need to advance your career and increase your value in the work place.

The strength of our industry and functional expertise, coupled with our desire to provide premier customer service and personal attention, allows our clients the opportunity to experience these values. Every search is different and each client's needs are different. IBN-Corp understands the intricacies of your needs as well as the needs of our client companies. Thus our process is tailored to the specifications of the search, and as each search differs, so too does the process.

We are dedicated to the recruitment and placement of quality candidates. Ranging from entry level to executive level professionals. With our industry experience, we have the contacts and technical expertise to present top quality companies and job opportunities.

If you would like to be considered for a posted or future position, please fill out the registration summary by filling out the form to your left. We are interested in candidates seeking employment in all parts of the nation.

http://www.ibn-corp.com/index.html

From Human Resources - IBN-Corp Mon Jun 27 06:12:42 2005
X-Apparently-To:@yahoo.com via 66.163.178.61; Mon, 27 Jun 2005 06:13:25 -0700
X-Originating-IP:[129.41.77.6]
Return-Path: <v-bcodh_cdcgbpdf_cagamba_a@bounce.rm02.net>
Authentication-Results: mta135.mail.mud.yahoo.com from=IBN-Corp.com; domainkeys=neutral (no sig)
Received: from 129.41.77.6 (EHLO mail4006.rm02.net) (129.41.77.6) by mta135.mail.mud.yahoo.com with SMTP; Mon, 27 Jun 2005 06:13:25 -0700
Received: by mail4006.rm02.net id hnvtna064ocf for <@yahoo.com>; Mon, 27 Jun 2005 09:12:42 -0400 (envelope-from <v-bcodh_cdcgbpdf_cagamba_a@bounce.rm02.net>)
Message-ID: <24584859.1119877962565.JavaMail.root@mailgen03.atlp2>
Date: Mon, 27 Jun 2005 09:12:42 -0400 (EDT)
From: "Human Resources - IBN-Corp" <rthomas@IBN-Corp.com>
Reply-to: rthomas@IBN-Corp.com
To: @yahoo.com
Subject: About your Resume posting...
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_Part_608_13616835.1119877955564"
x-mid: 77367
Content-Length: 1774

From: IBN-Corp.com Response to your resume posting.

I have viewed your resume. You might, very well, be a fit for our job openings... We have multiple job positions available that you can view online.

Please go to:
http://recp.rm05.net/ctt?kn=1&m=7736...=MzM5NTA3MzYS1

If your are interested in our open positions you can apply on-line.

To view jobs, click this link
http://recp.rm05.net/ctt?kn=1&m=7736...=MzM5NTA3MzYS1

This email was sent per your authorization of the terms and agreements you accepted on Hot Jobs and/or Monster and/or CareerBuilder. Your current preferences on your resume account need to be changed if you Do Not want to receive recruiter and/or employer email messages. -- See instructions below.


Hot Job's - Resume & Email Privacy Options (as seen on hotjobs.com)

Since the Site is a career site, HotJobs gives you the option of putting your resume in the Hot Jobs database. There are three ways of doing this:

1. With our HotBlock feature, you can store your resume in the database, but not allow it to be searchable by any employers or staffing firms. Not allowing your resume to be searchable means that you can use it to apply for a job online, but it will not be searchable through the resume database.

2. You can store your resume in the database, but not allow it to be searchable by certain employers or staffing firms who are members of HotJobs at the time you set your HotBlock preferences. Not allowing your resume to be searchable means that you can use it to apply for a job online, but those
employers or staffing firms that you have blocked will not have access to search it through the resume database.

3. If you allow your resume to be searchable, then those individuals or entities that pay for access to the resume database and all prospective customers who are receiving a demonstration of our product will have access to your resume. These individuals or entities have the ability to distribute your resume to their own hiring systems via e-mail.

Privacy Options - Job seekers can block some or all of HotJobs'
member companies from viewing a resume and sending you email
messages through the "HotBlock" feature.

Career Builder's - Resume & Email Privacy Options
(as seen on CareerBuilder.com)

Managing your privacy is as simple as selecting which pieces of your contact information are displayed. This is done at the bottom of the Review & Submit section of the resume form (shown below).

1. Be Visible. This option gives you the most visibility to the broadest employer audience possible. Select "Make my resume visible..." from the Privacy Settings, and allow employers to see your name, phone, and email.

2. Be Choosy. This option allows you to only display selected pieces of contact information, or none at all. (If you use this option be sure to remove your contact information from the body of the resume.) Select "Make my resume visible..." from the Privacy Settings, and select which contact information you want seen by employers.

3. Be Anonymous. This option allows you to post your resume on careerBuilder.com without having it searched by employers. The benefit is that you can quickly and easily apply for jobs without retyping your information. Select "Hide my resume..." from the Privacy Settigs.

IBN-Corp's recruiting services are paid by entirely by the employer. Job Seekers using IBN-Corp.com recruiting services pay no fee.

Sincerely,

IBN-Corp.com

If you prefer to not receive messages from NxtCareer,
you may unsubscribe. Click on the link below:
mailto:v-bcodh_cdcgbpdf_cagamba_a@reply.rm05.net?subject=Unsubscribe

-------------------------------------------------------------
email: jobs@IBN-Corp.com
web: http://recp.rm05.net/ctt?kn=2&m=7736...=MzM5NTA3MzYS1
-------------------------------------------------------------

Attached Images

	01-21-2006_19-50-56.png (213.6 KB, 33 views)
	moneymule.jpg (30.8 KB, 44 views)

From IBN-Corp Wed Jan 18 17:33:01 2006
X-Apparently-To: via 206.190.38.148; Wed, 18 Jan 2006 18:19:33 -0800
X-Originating-IP: [207.8.198.43]
Return-Path: <bounce-518161-@citius.getresponse.com>
Authentication-Results: mta107.mail.mud.yahoo.com from=ibn-corp.com; domainkeys=neutral (no sig)
Received: from 207.8.198.43 (HELO tempus.getresponse.com) (207.8.198.43) by mta107.mail.mud.yahoo.com with SMTP; Wed, 18 Jan 2006 18:19:33 -0800
Received: (qmail 98368 invoked by uid 1003); 19 Jan 2006 01:33:01 -0000
Date: 19 Jan 2006 01:33:01 -0000
Message-ID: <20060119013301.98367.qmail@tempus.getresponse.com>
From: "IBN-Corp" <recruiter@ibn-corp.com> Add to Address BookAdd to Address Book Add Mobile Alert
Sender: ibr-global@getresponse.com
Reply-to: recruiter@ibn-corp.com
To: YAHOO.COM>
X-Mailer: GetResponse
X-Serial: r7E811p7ef9972m8E833A5
X-Complaints-To: abuse@GetResponse.com
X-Responder-ID: 518161
X-Remove-Address: YAHOO.COM
X-Response-ID: ibr-global.FOLLOW.0.4-133142898
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="_----------=_1137633385998921957099891"
Subject: eBay Workers Needed - Come work with us online
Content-Length: 1360

Work Online With eBay...to find out more information click here

“I didn’t have to quit my current job to begin making money.”
-Todd S, Ann Arbor, MI

“I have a seventeen month old son and another baby on the way, so being able to make a real financial contribution to our family budget and be at home as a mom is very important to me…In just a couple hours a week, I am able to meet our financial goals, leaving me plenty of time to do the things that are really important to me in life…”
-Ruth G, Rexburg, ID

Join Todd, Ruth, and others. Start earning money immediately. Our service is GREAT for people who want to supplement or build terrific incomes for themselves working from home! Start working today! Work at home anytime of the day or night on the Internet or by telephone, you choose. For years, we have had one of the most respected careers available on the Internet. Our home based careers are great for people who want to supplement or build terrific incomes for themselves working from home, a local office, or on the Internet.

*For more information click here


IBR
514 Daniels Street
Raleigh
NC 27605
United States

I read this a little late. Filled out the form, got the return e-mail, but luckily have not and now plan not to verify it by clicking the link. Thanks for the post. I thought I'd check out the name on a google, and that's where I found your site and the scam info. I'm glad I followed that little voice that told me something was up. I just started my job search on Monster and Career Builder after getting laid off.
I have also gotten the paypal scam letter three times now. Gmail finally caught the last one that was sent. Thanks for the info

It was just blind fortune that I found this scam alert. My husband received the job opportunity email and when I tried the link it told me to go directly to the site. When I did an AOL search for the site it directed me to scam directories. I really appreciate whomever caught this first.

Domain Name: www.IBN-CORP.COM
Registrar: MELBOURNE IT, LTD. D/B/A INTERNET NAMES WORLDWIDE
Whois Server: whois.melbourneit.com
Referral URL: http://www.melbourneit.com
Name Server: NS1.SECURE.NET
Name Server: NS2.SECURE.NET
Status: ACTIVE
Updated Date: 30-apr-2006
Creation Date: 02-may-2005
Expiration Date: 02-may-2007

Last update of whois database: Sat, 24 Jun 2006 03:45:00 EDT

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
Domain Name.......... www.ibn-corp.com
Creation Date........ 2005-05-03
Registration Date.... 2005-05-03
Expiry Date.......... 2007-05-03
Organisation Name.... NxtCareer
Organisation Address. 518 N. Rogers
Organisation Address. Waxhahachie
Organisation Address. 75165
Organisation Address. TX
Organisation Address. UNITED STATES

Admin Name........... John Stallings
Admin Address........ 518 N. Rogers
Admin Address........ Waxhahachie
Admin Address........ 75165
Admin Address........ TX
Admin Address........ UNITED STATES
Admin Email.......... nxtcareer@afrjobs.com
Admin Phone.......... 972-9374447

Tech Name............ John Stallings
Tech Address......... 518 N. Rogers
Tech Address......... Waxhahachie
Tech Address......... 75165
Tech Address......... TX
Tech Address......... UNITED STATES
Tech Email........... nxtcareer@afrjobs.com
Tech Phone........... 972-9374447
Name Server.......... ns1.secure.net
Name Server.......... ns2.secure.net