The URL which was blocked or acted upon.

The identifier of the BrightCloud category which caused Web Threat Shield to block the respective URL (e.g. 67), or 0 if no category is associated with the URL.

You can view a list of all available BrightCloud categories by visiting this BrightCloud page.

The name of the category specified by BlockReasonId, or "Low Reputation", if BlockReasonId is 0.

The BrightCloud Reputation Index (BCRI) value that caused Web Threat Shield to block the URL. The BrightCloud Reputation Index is a security related score which is based on BrightCloud intelligence for a given URL: 80-100 is trustworthy, 60-79 is low risk, 40-59 is moderate risk, 20-39 is suspicious, and 0-19 is high risk.

Note: The BCRI value may be null, if a URL is blocked via means of advanced in-place analysis instead of its URL reputation or category, or if ActionTaken is "WHITELIST".

The date when the URL action was processed.

The action that was executed on or requested for the blocked URL. Possible values are:

• BLOCK: The user was blocked from visiting the URL.
• RECLASSIFY: The user requested a review of the category and reputation of the URL.
• WHITELIST: The user white-listed the URL.

The host name of the endpoint on which the action on the URL was triggered.

The console identifier of the endpoint.