Uniform Resource Locator

The Uniform Resource Locator(URL) object describes the characteristics of a URL. Defined in RFC 1738 and by D3FEND d3f:URL.

Attributes

Caption	Name	Type	Description
Website Categorization	`categories`	String[]	The Website categorization names, as defined by `category_ids` enum values.
Website Categorization IDs	`category_ids`	Integer[]	The Website categorization identifiers. `0`: Unknown (`UNKNOWN`) `1`: Adult/Mature Content (`ADULT/MATURE_CONTENT`) `101`: Spam (`SPAM`) `102`: Potentially Unwanted Software (`POTENTIALLY_UNWANTED_SOFTWARE`) `103`: Dynamic DNS Host (`DYNAMIC_DNS_HOST`) `106`: E-Card/Invitations (`E-CARD/INVITATIONS`) `107`: Informational (`INFORMATIONAL`) `108`: Computer/Information Security (`COMPUTER/INFORMATION_SECURITY`) `109`: Internet Connected Devices (`INTERNET_CONNECTED_DEVICES`) `11`: Gambling (`GAMBLING`) `110`: Internet Telephony (`INTERNET_TELEPHONY`) `111`: Online Meetings (`ONLINE_MEETINGS`) `112`: Media Sharing (`MEDIA_SHARING`) `113`: Radio/Audio Streams (`RADIO/AUDIO_STREAMS`) `114`: TV/Video Streams (`TV/VIDEO_STREAMS`) `118`: Piracy/Copyright Concerns (`PIRACY/COPYRIGHT_CONCERNS`) `121`: Marijuana (`MARIJUANA`) `14`: Violence/Hate/Racism (`VIOLENCE/HATE/RACISM`) `15`: Weapons (`WEAPONS`) `16`: Abortion (`ABORTION`) `17`: Hacking (`HACKING`) `18`: Phishing (`PHISHING`) `20`: Entertainment (`ENTERTAINMENT`) `21`: Business/Economy (`BUSINESS/ECONOMY`) `22`: Alternative Spirituality/Belief (`ALTERNATIVE_SPIRITUALITY/BELIEF`) `23`: Alcohol (`ALCOHOL`) `24`: Tobacco (`TOBACCO`) `25`: Controlled Substances (`CONTROLLED_SUBSTANCES`) `26`: Child Pornography (`CHILD_PORNOGRAPHY`) `27`: Education (`EDUCATION`) `29`: Charitable Organizations (`CHARITABLE_ORGANIZATIONS`) `3`: Pornography (`PORNOGRAPHY`) `30`: Art/Culture (`ART/CULTURE`) `31`: Financial Services (`FINANCIAL_SERVICES`) `32`: Brokerage/Trading (`BROKERAGE/TRADING`) `33`: Games (`GAMES`) `34`: Government/Legal (`GOVERNMENT/LEGAL`) `35`: Military (`MILITARY`) `36`: Political/Social Advocacy (`POLITICAL/SOCIAL_ADVOCACY`) `37`: Health (`HEALTH`) `38`: Technology/Internet (`TECHNOLOGY/INTERNET`) `4`: Sex Education (`SEX_EDUCATION`) `40`: Search Engines/Portals (`SEARCH_ENGINES/PORTALS`) `43`: Malicious Sources/Malnets (`MALICIOUS_SOURCES/MALNETS`) `44`: Malicious Outbound Data/Botnets (`MALICIOUS_OUTBOUND_DATA/BOTNETS`) `45`: Job Search/Careers (`JOB_SEARCH/CAREERS`) `46`: News/Media (`NEWS/MEDIA`) `47`: Personals/Dating (`PERSONALS/DATING`) `49`: Reference (`REFERENCE`) `5`: Intimate Apparel/Swimsuit (`INTIMATE_APPAREL/SWIMSUIT`) `50`: Mixed Content/Potentially Adult (`MIXED_CONTENT/POTENTIALLY_ADULT`) `51`: Chat (IM)/SMS (`CHAT_(IM)/SMS`) `52`: Email (`EMAIL`) `53`: Newsgroups/Forums (`NEWSGROUPS/FORUMS`) `54`: Religion (`RELIGION`) `55`: Social Networking (`SOCIAL_NETWORKING`) `56`: File Storage/Sharing (`FILE_STORAGE/SHARING`) `57`: Remote Access Tools (`REMOTE_ACCESS_TOOLS`) `58`: Shopping (`SHOPPING`) `59`: Auctions (`AUCTIONS`) `6`: Nudity (`NUDITY`) `60`: Real Estate (`REAL_ESTATE`) `61`: Society/Daily Living (`SOCIETY/DAILY_LIVING`) `63`: Personal Sites (`PERSONAL_SITES`) `64`: Restaurants/Dining/Food (`RESTAURANTS/DINING/FOOD`) `65`: Sports/Recreation (`SPORTS/RECREATION`) `66`: Travel (`TRAVEL`) `67`: Vehicles (`VEHICLES`) `68`: Humor/Jokes (`HUMOR/JOKES`) `7`: Extreme (`EXTREME`) `71`: Software Downloads (`SOFTWARE_DOWNLOADS`) `83`: Peer-to-Peer (P2P) (`PEER-TO-PEER_(P2P)`) `84`: Audio/Video Clips (`AUDIO/VIDEO_CLIPS`) `85`: Office/Business Applications (`OFFICE/BUSINESS_APPLICATIONS`) `86`: Proxy Avoidance (`PROXY_AVOIDANCE`) `87`: For Kids (`FOR_KIDS`) `88`: Web Ads/Analytics (`WEB_ADS/ANALYTICS`) `89`: Web Hosting (`WEB_HOSTING`) `9`: Scam/Questionable/Illegal (`SCAM/QUESTIONABLE/ILLEGAL`) `90`: Uncategorized (`UNCATEGORIZED`) `92`: Suspicious (`SUSPICIOUS`) `93`: Sexual Expression (`SEXUAL_EXPRESSION`) `95`: Translation (`TRANSLATION`) `96`: Non-Viewable/Infrastructure (`NON-VIEWABLE/INFRASTRUCTURE`) `97`: Content Servers (`CONTENT_SERVERS`) `98`: Placeholders (`PLACEHOLDERS`) `99`: Other (`OTHER`)
Domain	`domain`	String	The domain portion of the URL. For example: `example.com` in `https://sub.example.com`.
Hostname	`hostname`	Hostname	The URL host as extracted from the URL. For example: `www.example.com` from `www.example.com/download/trouble`.
Path	`path`	Path Name	The URL path as extracted from the URL. For example: `/download/trouble` from `www.example.com/download/trouble`.
Port	`port`	Port	The URL port. For example: `80`.
HTTP Query String	`query_string`	String	The query portion of the URL. For example: the query portion of the URL `http://www.example.com/search?q=bad&sort=date` is `q=bad&sort=date`.
Raw Data	`raw_data`	JSON	The event data as received from the event source.
Record ID	`record_id`	String	Unique identifier for the object
Reputation Scores	`reputation`	Reputation[]	Contains the original and normalized reputation scores. 🚧 WARNING: DEPRECATED Reputation Scores has been deprecated since 1.1.0. Deprecated in upgrade from ocsf-0.31.1 to qdm-1.1.0
Resource Type	`resource_type`	String	The context in which a resource was retrieved in a web request.
Scheme	`scheme`	String	The scheme portion of the URL. For example: `http`, `https`, `ftp`, or `sftp`.
Subdomain	`subdomain`	String	The subdomain portion of the URL. For example: `sub` in `https://sub.example.com` or `sub2.sub1` in `https://sub2.sub1.example.com`.
URL Text	`text`	URL String	The URL. For example: `http://www.example.com/download/trouble.exe`. 🚧 WARNING: DEPRECATED URL Text has been deprecated since 1.1.0. Deprecated in upgrade from ocsf-0.31.1 to qdm-1.1.0
Unmapped Data	`unmapped`	Unmapped[]	The attributes that are not mapped to the event schema. The names and values of those attributes are specific to the event source.
URL String	`url_string`	URL String	The URL string. See RFC 1738. For example: `http://www.example.com/download/trouble.exe`. Note: The URL path should not populate the URL string.

Relationships

Inbound Relationships

These objects and events reference Uniform Resource Locator in their attributes:

Outbound Relationships

Uniform Resource Locator references the following objects and events in its attributes:

This page describes qdm-1.3.2+ocsf-1.3.0