Docs

Docs

  • Getting Started
  • Features
  • Docs
  • API
  • FAQS

›Detections

Getting Started

  • Introduction
  • Terms

Models

  • Analysis
  • Audit
  • Detection
  • Frame
  • Record
  • Report
  • Request
  • Target

Audits

  • Dialog Events
  • Download Events
  • History Events
  • Screenshots
  • Texts
  • Vibrate Events

Detections

  • Adware
  • Auto Download
  • Auto Redirect
  • Auto Redirect App Market
  • Auto Vibrate
  • Back Button Hijack
  • Blacklist
  • Browser Locker
  • Cryptocurrency Miner
  • JavaScript Dialog On Entry
  • JavaScript Dialog On Exit
  • Landing Page Error
  • Malicious URL
  • Malware
  • NSFW
  • Phishing URL
  • Potentially Unwanted Programs
  • Ransomware
  • Scareware
  • Suspicious TLD
  • SSL Non Compliant

GraphQL

  • Interfaces
  • Enums
  • Scalars
  • Account
  • AlertRules
  • Analysis
  • Consumption
  • Device
  • Location
  • Notification
  • Organization
  • Plan
  • Project
  • Recognition
  • User
  • Viewer
  • Violation

Malicious URL

Whether an URL has been reported as malicious.

version  : 1.0.0
stability: stable

Definition


Meta

name     : "malicious-url"
category : "USER_SECURITY"
reference: "0"
condition: ">"

Record

The Malicious URL's record implements the Record's interface:

interface Record {
  url: string;
  type: string;
  data: string;
  trigger: string;
  requestId: string;
  frameId: string;
  targetVersion: string;
  timestamp: MonotonicTime;
}

Fields


url

version  : 1.0.0
stability: stable
url: string;

The URL of the page gathered when the event occurs.


type

version  : 1.0.0
stability: experimental
type: string;

When defined, the type reports the type of this detection record.


data

version  : 1.0.0
stability: experimental
data: string;

The data passed along with the event.


trigger

version  : 1.0.0
stability: experimental

When defined, the trigger reports the action that creates the Malicious URL.


requestId

version  : 1.0.0
stability: stable
requestId: string;

The unique network Request's identifier in which the event was recorded.

⚠️ Caution: In some cases such as in a redirection context, this identifier could be shared by more than one entry:

[
  {
    "requestId": "10.1",
    "status": "302"
  },
  {
    "requestId": "10.1",
    "status": "200"
  }
]

frameId

version  : 1.0.0
stability: stable
frameId: string;

The Frame identifier in which the event was recorded.


targetVersion

version  : 1.0.0
stability: stable
targetVersion: string;

The Target version during which the event was recorded.


timestamp

version  : 1.0.0
stability: stable
timestamp: MonotonicTime;

An MonotonicTime that reflects the time when the event was recorded.


Sample

{
  "name": "malicious-url",
  "category": "USER_SECURITY",
  "value": "1",
  "reference": "0",
  "condition": ">",
  "violation": true,
  "notify": true,
  "alert": true,
  "records": [
    {
      "url": "https://example.com",
      "type": "",
      "data": "",
      "trigger": "",
      "requestId": "6A84237A55993581955FEBCCBED0D402",
      "frameId": "C9FB7BD57BBC8502412B9558A97A580D",
      "targetVersion": "8",
      "timestamp": "2375.395531"
    }
  ]
}
← Landing Page ErrorMalware →
  • Definition
    • Meta
    • Record
  • Fields
    • url
    • type
    • data
    • trigger
    • requestId
    • frameId
    • targetVersion
    • timestamp
  • Sample
Copyright © 2024 AdSecure