> Does the c581 part also belong to the account id?

I think it does.

> I might consider trying to extract this on my spamtrap and collect them
> to see if there are accounts that keep sending phishing emails for long
> times.

Top senders in Koli-Lõks traps yesterday (n>7000):

8512936 (5%) - multiple types of phishing
9711754 (3%) - multiple types of phishing
4468541 (3%) - Uber
8807282 (2%) - multiple types of phishing
1365613 (2%) - Jockey Comfort

-- 
Atro Tossavainen, Founder, Partner
Koli-Lõks OÜ (reg. no. 12815457, VAT ID EE101811635)
Tallinn, Estonia
tel. +372-5883-4269, http://www.koliloks.eu/

_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Reply via email to