Category | Description | Type |
Subject | Year | Malicious |
Subject | Month of year when email was sent | Malicious |
Subject | Day of week when email was sent | Malicious |
Subject | Hour of day when email was sent | Malicious |
Subject | Minute of hour when email was sent | Malicious |
Subject | Second of Minute when email was sent | Malicious |
Subject | From header email address domain is google.com | Malicious |
Subject | From header email address domain is aol.com | Malicious |
Subject | From header email address domain is .gov | Malicious |
Subject | From header email address domain is hotmail.com | Malicious |
Subject | From header email address domain is .mil | Malicious |
Subject | From header email address domain is yahoo.com | Malicious |
Subject | From header email contains example.com | Malicious |
Subject | Received line contains redacted | Malicious |
Subject | Message id contains redacted | Malicious |
Subject | Replay to header is defined | Malicious |
Subject | Replay to different then from | Malicious |
Subject | Replay to email address is at gmail.com | Malicious |
Subject | Replay to email address is at hotmail.com | Malicious |
Subject | Replay to email address is at yahoo.com | Malicious |
Subject | Replay to email address is at aol.com | Malicious |
Subject | Replay to email address is at .gov | Malicious |
Subject | Replay to email address is at .mil | Malicious |
Subject | To header is defined but empty | Malicious |
Subject | To email address is at gmail.com | Malicious |
Subject | To email address is at hotmail.com | Malicious |
Subject | To email address is at yahoo.com | Malicious |
Subject | To email address is at aol.com | Malicious |
Subject | To email address is at .gov | Malicious |
Subject | To email address is at .mil | Malicious |
Subject | To MSN | Malicious |
Subject | To localhost | Malicious |
Subject | To email address is at “example.com” | Malicious |
Subject | Forward-to header is defined | Malicious |
Subject | X-Mailer-Version | Malicious |