View Domain Details

The domain-to-IP address relationships are a key component of the sender modeling features of Cloud Email Protection, and the Domain Details page displays much of the information about the sender model.

  1. Go to Analyze > Domains.
  2. Click a domain name.
The Domain Details page.
The Domain Details page

The Domain Details page shows the following information.

1

The domain name, the domain's volume, and the percentage of overall volume of your inbound mail stream from that domain are listed at the top of the page.

2

The domain reputation (as scored by Cloud Email Protection) is listed in the upper right. The "Domain Feedback" link allows you to send feedback if you feel the domain has been incorrectly scored. Domain reputation is scored from 0.0 to 10.0, with 0.0 representing the lowest reputation and the 10.0 representing the most reputable.

3

The graph of message volume from the sending domain is in the middle of the page. Messages are categorized as: Passed Authentication, Inauthentic, or Likely Authentic.

  • Authentic messages are those that adhere to the authentication standards as published by the domain itself: SPF, DMARC, or DKIM.
  • Inauthentic messages are messages which fail authentication and are deemed not to be within sender model for that domain.
  • Likely authentic messages are messages which do not pass authentication but are deemed to be "likely authentic" from the sending domain.

You can toggle the visibility of the Passed Authentic, Inauthentic, and Likely Authentic bars in the bar chart by clicking the key at the top of the chart. Similarly, the time range of the chart is controlled by the time range selector in the upper right of the page (7 days / 2 weeks / 30 days).

You can select a specific day by clicking on one of the bars in the bar chart. To clear your selection, select "Clear" in the Messages by IP address table header.

4

If applicable, the domain's DMARC and SPF records are presented here. Beneath that area, positive and negative factors affecting domain reputation are shown. For example, this screen shows that the domain has a "consistent sending history."

5

The "Messages by IP Address" catalogs each IP address which has sent for the domain during the time period.

  • Clicking an IP address will effectively pivot the view: instead of viewing all IPs for a given domain, you will instead be viewing all domains for which that single IP has sent messages.
  • Click the number in the "Total Messages" column of the Detail page to view the list of messages for that sender (IP or domain) in the Search Messages page.