Searching and the Interactive Email Report Pages

Many of the interactive email reporting pages include a ‘Search For:’ drop-down menu at the bottom of the page.

From the drop-down menu, you can search for several types of criteria, including the following:

  • IP Address

  • Domain

  • Network Owner

  • Internal User

  • Destination Domain

  • Internal Sender Domain

  • Internal Sender IP Addres

  • Incoming TLS Domain

  • Outgoing TLS Domain

  • SHA-256

  • Batch ID

  • Incoming URL

  • Outgoing URL

  • URL Retrospection Report

On the legacy web interface, for most searches, you can choose any one of the following options:

  • Exact Match: Search for items that exactly match the search text.

  • Starts With: Search for items that start with the entered text (for example, starts with “ex” will match “example.com”).

On the new web interface, for most searches, you can choose any one of the following options:

  • Exact Match: Search for items that exactly match the search text.

  • Starts With: Search for items that start with the entered text (for example, starts with “ex” will match “example.com”).

  • Contains: Search for items that contain the entered text.

  • Does not Contain: Search for items that do not contain the entered text.

For IPv4 searches, the entered text is always interpreted as the beginning of up to four IP octets in dotted decimal format. For example, ‘17.*’ will search in the range 17.0.0.0 through 17.255.255.255, so it will match 17.0.0.1 but not 172.0.0.1. For an exact match search, enter all four octets. IP address searches also support Classless Inter-Domain Routing (CIDR) format (17.16.0.0/12).

For IPv6 searches, you can enter addresses using the formats in the following examples:

  • 2001:db8:2004:4202::0-2001:db8:2004:4202::ff
  • 2001:db8:2004:4202::
  • 2001:db8:2004:4202::23
  • 2001:db8:2004:4202::/64