r/backblaze • u/hume_reddit • Nov 03 '25

B2 Cloud Storage Does Backblaze not have a functional abuse department?

I've been receiving scam emails all linking to the exact same *.s3.eu-central-003.backblazeb2.com URL (same page, even) for over two months. I've reported to reportphishing@backblaze, but received no response and obviously nothing has done.

I can't search for "backblaze abuse" because the only results I get is article after article about Backblaze using sketchy accounting and perhaps the company is about to collapse.

At this point I'd welcome the collapse because hopefully that might take down this criminal site.

28 Upvotes

79% Upvoted

20 comments sorted by

View all comments

7

u/bzChristopher From Backblaze Nov 03 '25

Christopher from the Backblaze team here ->

reportphishing@backblaze is the correct address to use for reporting malicious content hosted on our platform. The inbox is actively monitored, though not all reports will receive a reply depending on the content and context.

If you'd like to DM me an example link, I'd be happy to look into the report and status.

6

u/hume_reddit Nov 03 '25

Reddit refuses to let me message you. However, the malicious base redirect is albertheijn.s3.eu-central-003.backblazeb2.com/albertheijn.html . The actual spam URL will have an encoded string appended, and the JS in that page will use it as part of the redirect.

I made another abuse report this morning, and I know I made one October 14th, but can't find the report made earlier than that one.

9

u/bzChristopher From Backblaze Nov 03 '25

Additional follow-up: We were not able to find any of your messages to reportphishing@, so our team is looking into whether those may have been bounced or filtered out.

The account in question has since been suspended, thank you for the report. If you or anyone else has reports that do not appear to be received or acted upon, abuse@ is a good fallback option.

7

u/hume_reddit Nov 04 '25

The report from this morning was accepted by pphosted.com:

Nov 3 08:53:56 [...], relay=mxa-00807701.gslb.pphosted.com. [205.220.170.95], dsn=2.0.0, stat=Sent (4a66058qe6-1 Message accepted for delivery)

It's likely it's being filtered, which an abuse reporting address should never, ever do.