For "Mail Disabled" Malware tickets.
zcat -f /flywheel/base/mounts/<SITE-ID>_production/var/log/mail_headers.log* | grep -o "To:.* -- H" | sort | uniq -c | sort -nr