---
title: Phishguard
---

[Skip to content](#_top)

[API Reference](https://developers.cloudflare.com/api/typescript)

[Email Security](https://developers.cloudflare.com/api/typescript/resources/email_security)

Copy Markdown

Open in **Claude**Open in **ChatGPT**Open in **Cursor**

---

**Copy Markdown****View as Markdown**

# Phishguard

#### PhishguardReports

##### [List PhishGuard reports](https://developers.cloudflare.com/api/typescript/resources/email_security/subresources/phishguard/subresources/reports/methods/list)

client.emailSecurity.phishguard.reports.list(ReportListParams {account\_id, end, from\_date, 4 more } params, RequestOptionsoptions?): V4PagePaginationArray< [ReportListResponse](<https://developers.cloudflare.com/api/typescript/resources/email_security#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)>) {id, content, disposition, 7 more } >

GET/accounts/{account\_id}/email-security/phishguard/reports

##### ModelsExpand Collapse

<details>

<summary>

ReportListResponse {id, content, disposition, 7 more }

</summary>

id: number

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20id">Link to this property</a>

content: string

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20content">Link to this property</a>

<details>

<summary>

disposition: "MALICIOUS"| "MALICIOUS-BEC"| "SUSPICIOUS"| 7 more

The verdict Email Security assigns to a message.

</summary>

One of the following:

"MALICIOUS"

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20disposition%20%3E%20(member)%200">Link to this property</a>

"MALICIOUS-BEC"

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20disposition%20%3E%20(member)%201">Link to this property</a>

"SUSPICIOUS"

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20disposition%20%3E%20(member)%202">Link to this property</a>

"SPOOF"

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20disposition%20%3E%20(member)%203">Link to this property</a>

"SPAM"

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20disposition%20%3E%20(member)%204">Link to this property</a>

"BULK"

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20disposition%20%3E%20(member)%205">Link to this property</a>

"ENCRYPTED"

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20disposition%20%3E%20(member)%206">Link to this property</a>

"EXTERNAL"

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20disposition%20%3E%20(member)%207">Link to this property</a>

"UNKNOWN"

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20disposition%20%3E%20(member)%208">Link to this property</a>

"NONE"

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20disposition%20%3E%20(member)%209">Link to this property</a>

</details>

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20disposition">Link to this property</a>

<details>

<summary>

fields: Fields {to, from, occurred\_at, 2 more }

</summary>

to: Array&lt;string&gt;

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20fields%20%3E%20(property)%20to">Link to this property</a>

from?: string| null

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20fields%20%3E%20(property)%20from">Link to this property</a>

occurred\_at?: string

formatdate-time

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20fields%20%3E%20(property)%20occurred_at">Link to this property</a>

postfix\_id?: string| null

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20fields%20%3E%20(property)%20postfix_id">Link to this property</a>

Deprecatedts?: string

Use <code>occurred_at</code> instead.

Deprecated, use <code>occurred_at</code> instead.

formatdate-time

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20fields%20%3E%20(property)%20ts">Link to this property</a>

</details>

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20fields">Link to this property</a>

priority: string

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20priority">Link to this property</a>

title: string

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20title">Link to this property</a>

created\_at?: string| null

formatdate-time

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20created_at">Link to this property</a>

<details>

<summary>

tags?: Array&lt;Tag&gt;| null

</summary>

category: string

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20tags%20%3E%20(items)%20%3E%20(property)%20category">Link to this property</a>

value: string

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20tags%20%3E%20(items)%20%3E%20(property)%20value">Link to this property</a>

</details>

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20tags">Link to this property</a>

Deprecatedts?: string

Use <code>created_at</code> instead.

Deprecated, use <code>created_at</code> instead.

formatdate-time

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20ts">Link to this property</a>

updated\_at?: string| null

formatdate-time

<a href="#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)%20%3E%20(property)%20updated_at">Link to this property</a>

</details>

[Link to this property](<#(resource)%20email_security.phishguard.reports%20%3E%20(model)%20report_list_response%20%3E%20(schema)>)