[Email Security] Clarify relationship between phish and user submissions (#24008)

* [Email Security] Clarify relationship between phish and user submissions

* Update copy

Author: Maddy-Cloudflare

src/content/docs/cloudflare-one/email-security/email-monitoring/search-email.mdx

@@ -138,6 +138,8 @@ To gain more details on a specific reclassification:
 
 User submissions are the emails your users submitted for reclassification. User submissions help enhance our detection model, but can be escalated for human review.
 
+Any email that is reported as [phish](/cloudflare-one/email-security/phish-submissions/#reclassify-an-email) will be displayed under **User submissions**.
+
 :::note
 [PhishGuard](/cloudflare-one/email-security/phish-guard/) customers can have submissions analyzed when submitting at either user or team level. Any non-PhishGuard customer can still have submissions analyzed by submitting at team level.
 :::

src/content/docs/cloudflare-one/email-security/phish-submissions.mdx

@@ -22,8 +22,9 @@ There are three routes you can use to report an email as a phish:
 1. Log in to [Zero Trust](https://one.dash.cloudflare.com/).
 2. Select **Email Security** > **Investigation**.
 3. On the **Investigation** page, under **Your matching messages**, select the message you want to reclassify. Select the three dots, then select **Request reclassification**. By selecting **Request reclassification**, you are requesting a new disposition for the message.
-4. Select the new disposition, then select **Save**.
+4. Select the new disposition, then select **Save**. 
 
+When you report an email as phish, this email will be displayed under [User submissions](/cloudflare-one/email-security/email-monitoring/search-email/#user-submissions).
 ## PhishNet M365
 
 PhishNet is an add-in button that helps users to submit directly to Email Security <GlossaryTooltip term="phishing">phish</GlossaryTooltip> samples missed by Email Security's detection.