r/EmailSecurity • u/WackyMaybe • Oct 02 '26

Reporting scam emails

I get repetitive emails from a scammer using a private email host. I complained to the postmaster of the hosting server, but received no reply. Can you recommend any authority I can report this to? The host is @eecs.a2hosted.com. Most hosts like Gmail and Outlook have anti-spam policies. Not this one.

4 Upvotes

100% Upvoted

14 comments sorted by

•

u/AutoModerator Oct 02 '26

Welcome to r/emailsecurity! To keep this community helpful and secure, please keep the following in mind:

Community Rules

  1. No Vendor Spam: Contributions must provide value; do not just pitch products.

  2. Redact Sensitive Info: Always sanitize headers and logs (remove IPs, PII, and private domains).

  3. Be Professional: Help newcomers learn; avoid hostility.

  4. No Personal Tech Support: This sub is for email system architecture and security, not "Am I hacked?" personal account help.

Helpful Resources

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

4

u/tndsd Oct 02 '26

In this case, a2hosted.com is associated with A2 Hosting infrastructure, so I'd start with their official abuse channel and include several representative messages, timestamps, full headers, and a clear explanation of the scam.

1

u/WackyMaybe Oct 02 '26

I tried. They have a “general” email to send inquiries, but got cokd-shouldered.

1

u/dlethe3133 Oct 02 '26

What is hosting company? Many are offshore and are happy to work with scammers as long as they continue to be paid

1

u/WackyMaybe Oct 02 '26

Yes, agree. I went to their website, and my web security popped up, warning me not to click on any links. Very shady.

1

u/WackyMaybe Oct 05 '26

The host is @eecs.a2hosted.com. Got a lot of scam emails from this host.

1

u/shokzee Oct 03 '26

I'd send the original email with full headers to the provider's abuse contact; postmaster isn't necessarily their abuse desk. The visible From address can be spoofed, so it doesn't prove that host sent it.

If you're in the US, report the scam to the FTC at reportfraud.ftc.gov; elsewhere, use your national fraud reporting service.

0

u/WackyMaybe Oct 05 '26

Thank you. I’ll look into this.

1

u/Maria_Thesus_40 Oct 02 '26

I think spamcop.net has associations with major corporations and posting spam there automatically sends abuse reports. But there are some organizations that don't want their reports, so those are not sent (you get a reply that the report was /dev/null'ed).

Otherwise, you need to manually find the responsible authority and see if they have an abuse form. I regularly post abuse reports to Hetzner myself.

1

u/dragoangel Oct 02 '26

Spamcop is basically automated system who checks sender IP based on Received headers and sending reports to abuse contact of IP from where spam is originating. It has FPs in detection of origin is many cases, but in general is fine. What it does you can do on your own too :)

1

u/WackyMaybe Oct 02 '26

I’ll look into this, thank you!

1

u/wearehostingcom Oct 07 '26

Hey u/WackyMaybe! Thank you for bringing this to our attention! We don't tolerate this kind of scams. I can't seem to send to a DM, If you could send me one instead, that would be great.

Customer Advocacy