That’s just the spam that gets through! On my ancient ISP-provided email it’s primarily distributed via compromised accounts from the same provider. And what I see targeting the corporate world tends to come from newly setup email servers or newly setup accounts on paid email providers

Look at Mr fancypants here with an ISP that actually has some form of IPv6 support