Custom Queries will soon include a new field: URL List. The new field, under Security Stack > Click Time Protection, includes list of URLs in the email body.

The new field can be used to query for emails in which users clicked on malicious links. It can be used combined with the Click Time Protection Detection field - filter results to show Malicious URL clicks, and examine the URLs in the email.

The new field usually presents the first URL and allows to show all URLs in a dialog.


The feature would become available starting Feb 8, 2021.