After reverse DNS lookups, AlmaLinux Website has been being used for phishing campaigns from .ru and other websites

Title says it all. Not sure if I should dump a ton of email listings or not. let me know.

Can you provide any more context on this?