To report a suspicious activity, I suggest reporting this directly to our Security Team. Just check out this article for the steps and details: Recognize and report suspicious emails (Phishing). Rest assured, everything will get taken care of from there.