Hahahahaha. I manage a mail server and they are never going to be able to block all the compromised accounts these scumbags use. I geo blocked the whole world and all domains except for the main top level ones and I still get regular fake phishing attempts using all manner of otherwise legitimate servers and domains. It doesn’t matter what any law says. These people don’t care and they are not going to be stopped often. I get a huge number these days from aws and google. As much as I would love to I can’t block them.