Search FraudFYI

Wednesday, January 25, 2017

Consumer Alert! Annoying Clickbaiting email from Emily Cooper

Ugggh - I hate these.  These are emails that are SPAMMED out that pose as a company (much like PHISHING emails) but forward you to generic marketing or affiliate sites, etc.  This one has been spammed all over the place, so I'm putting it here as an FYI just because it irritates me.

The link in this email, actually forwards you to which is supposedly another classified ads website, but there's nothing there.  It could also be a PHISHING site where they're hoping that you create an account there using the same log-in as your Craigslist account.  It could also be datamining your information to sell to other scammers/spammers.  So a warning - don't click on links like this.

Originating IP:
Originating ISP: Ovh Sas
City: n/a
Country of Origin: France

from: Emily Cooper <> 
date: Mon, Jan 23, 2017 at 3:54 PM
subject: Contact for your ad on craigslist


you have received a message for your ad on craigslist

to read the message Enter here :

Thank you

you wish to stop receiving our messages, simply Click here :

But in any case, this is the domain registration for that is SPAMMING you:

Domain Name:
Registry Domain ID: 1872076541_DOMAIN_COM-VRSN
Registrar WHOIS Server:
Registrar URL:
Updated Date: 2016-08-16T21:33:23.0Z
Creation Date: 2014-08-21T12:45:12.0Z
Registrar Registration Expiration Date: 2017-08-21T12:45:12.0Z
Registrar: OVH, SAS
Registrar IANA ID: 433
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone: +33.972101007
Domain Status: clientTransferProhibited
Domain Status: clientDeleteProhibited
Registry Admin ID:
Admin Name: Khammesi Wasim
Admin Organization:
Admin Street:, office #7343024, c/o OwO, BP80157
Admin City: Roubaix Cedex 1
Admin State/Province:
Admin Postal Code: 59053
Admin Country:  FR
Admin Phone: +33.972101007
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email:
Registry Tech ID:
Tech Name: Khammesi Wasim
Tech Organization:
Tech Street:, office #7343024, c/o OwO, BP80157
Tech City: Roubaix Cedex 1
Tech State/Province:
Tech Postal Code: 59053
Tech Country:  FR
Tech Phone: +33.972101007
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email:
Registry Registrant ID:
Registrant Name: Khames Wasim
Registrant Organization:
Registrant Street:, office #7343024, c/o OwO, BP80157
Registrant City: Roubaix Cedex 1
Registrant State/Province:
Registrant Postal Code: 59053
Registrant Country:  FR
Registrant Phone: +33.972101007
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email:
Name Server:
Name Server:
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System:

1 comment:

  1. It looks like the same folks are also spamming Canadians with similar fake notifications, but for Kijiji instead of of Craigslist: numerous, nearly-identical messages, with links to various URLs that all redirect to

    And the WHOIS details you posted list "OVH, SAS" as the domain registrar for - it's worth noting that they are also the hosting provider for that website. And if you check the details of the spam EMails you've received (E.g. using a tool like Spamcop), I'd wager that the messages were sent from OVH's servers as well. They are also typically the host & registrar for the links/domain names in the spam EMails (that redirect to

    Despite having sent OVH multiple abuse reports for this spam (going back to May 2015 - and I assume I'm not the only one who's reported it), they're still hosting


Thank you for commenting! Your comment will be reviewed and posted shortly!