Skip to content

Web Behavior & Structure

Site structure, redirects, link graph patterns, headless-friendly behavior. Each fires with named evidence and a 3-question analyst Q&A trail.

See 8 Web Behavior & Structure signalsSee verdicts firing these
About

What Web Behavior & Structure captures

Site structure, redirects, link graph patterns, headless-friendly behavior. Tier-1 SOC analysts use them to cut triage time on suspicious http crawling history behavior; CTI teams pivot from them to the broader campaign graph.

Browse

8 signals in Web Behavior & Structure

Each row opens a leaf page with the signal's direction, named evidence, and 3-question Q&A trail. Use them as audit anchors when a verdict surfaces this subgroup.

Web Behavior & Structure8 signals
Verdict scenarios

How Web Behavior & Structure shapes the call

Three real-world situations where Web Behavior & Structure evidence dominates the decision. Verdict and explanation are how VerdictIQ would frame the outcome to an analyst, not raw signal slugs.

High riskVERDICT · BLOCK
The situation

A site whose crawl reveals hidden redirect chains and an internal link graph designed to steer crawlers away from its real payload.

VerdictIQ explains

“Decline. The structural opacity is engineered, not accidental. Real properties don't hide their content from inspection.”

Medium riskVERDICT · REVIEW
The situation

A site with a thin internal link graph and unusually shallow content hierarchy for its claimed business.

VerdictIQ explains

“Send to analyst review. The structural thinness is a soft tell; verify operator intent before granting trust.”

Low riskVERDICT · ALLOW
The situation

A site with a deep, coherent internal structure consistent with its declared category.

VerdictIQ explains

“Allow. The structural shape matches a real property. No web-behavior reason to delay.”

See full Verdict Gallery
Sibling subgroups

Other subgroups in HTTP Crawling History

4 more subgroups in this group, each bundling signals that share a different mechanism. Tap one to inspect its signal names.

See subgroup detail
See subgroup detail
See subgroup detail
See subgroup detail

See Web Behavior & Structure signals fire on your data

Free tier: 100 IOCs/day, LLM layer included.

Start FreeBack to HTTP Crawling History