> Does the c581 part also belong to the account id? I think it does.
> I might consider trying to extract this on my spamtrap and collect them > to see if there are accounts that keep sending phishing emails for long > times. Top senders in Koli-Lõks traps yesterday (n>7000): 8512936 (5%) - multiple types of phishing 9711754 (3%) - multiple types of phishing 4468541 (3%) - Uber 8807282 (2%) - multiple types of phishing 1365613 (2%) - Jockey Comfort -- Atro Tossavainen, Founder, Partner Koli-Lõks OÜ (reg. no. 12815457, VAT ID EE101811635) Tallinn, Estonia tel. +372-5883-4269, http://www.koliloks.eu/ _______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop