93 Active Taxonomies for Zero-Trust Web Defense

Websites providing interactive AI chat or conversational assistants that accept user prompts and return contextual responses, including general-purpose AI assistants.

AI services primarily designed to generate, complete, review, debug, explain, or optimize source code and software development tasks.

AI services primarily used to generate, rewrite, summarize, edit, or optimize written or textual content.

AI services that generate, transform, edit, enhance, or analyze images, video, music, speech, voice, avatars, or other media.

AI services focused on meeting transcription, summaries, action items, voice assistants, call analysis, and conversation intelligence.

AI-powered search, research, answer engines, knowledge discovery, and information-retrieval services.

AI services primarily used for data analysis, data transformation, visualization, prediction, classification, or business intelligence.

AI-powered services that automate business processes, repetitive tasks, workflows, agents, or multi-step actions.

Platforms providing AI models, model APIs, model hosting, AI application development, model training, inference, or AI infrastructure.

Services providing autonomous/semi-autonomous AI agents, agent frameworks, agent marketplaces, MCP servers, or AI tools that allow models to interact with external systems.

Company, corporate, commercial, professional-services, management, entrepreneurship, and general business websites.

Banking, payments, personal finance, loans, credit, accounting services for consumers, and financial institutions.

Insurance providers, policy management, insurance comparison, claims, and insurance-related services.

Stock markets, brokerage platforms, securities trading, investment platforms, portfolio management, and trading analysis.

Accounting, enterprise resource planning, invoicing, payroll, procurement, inventory, and financial-management business applications.

Customer relationship management, customer support, helpdesk, contact-center and customer-service platforms.

Human-resource management, employee management, payroll/HR platforms, recruitment, job applicant systems, and workforce-management services.

ITSM, incident management, ticketing, asset management, service management and IT operations platforms.

Project management, task management, productivity, workflow boards, team planning and work-management platforms.

Business collaboration, shared workspaces, document collaboration, productivity suites and team-work applications.

Services primarily used to upload, store, synchronize, share or collaborate on files online.

Services primarily designed to back up, restore or archive user/device data in cloud storage.

Cloud computing platforms providing infrastructure, compute, storage, databases, containers, serverless services or application platforms.

Identity providers, SSO, authentication, authorization, privileged access, directory and identity-management platforms.

Software development, source-code repositories, CI/CD, debugging, testing, IDEs, DevOps and developer collaboration platforms.

Services and software that provide remote desktop, remote-control, remote administration or remote access to computers and networks.

Website hosting, domain hosting, CDN, content delivery, web infrastructure and hosting-provider services.

Browser-accessible email services used to send, receive, read or manage email.

Real-time text or multimedia messaging and chat services.

Internet-based voice calling, VoIP and telephone communication services.

Video conferencing, webinars, online meetings and virtual meeting platforms.

Platforms primarily designed for social interaction, user profiles, posts, followers, feeds and community networking.

Platforms primarily designed for professional profiles, career networking, recruiting and business networking.

Discussion forums, message boards, community discussions and user-generated discussion platforms.

Individually or community-created blogs, personal websites and publishing platforms.

Services whose primary purpose is searching, indexing, discovering or aggregating websites and information.

Current-events reporting, newspapers, magazines, journalism, news publishers and news aggregation.

Online learning, courses, tutoring, professional training and educational resources.

Encyclopedias, dictionaries, libraries, research databases, general reference and knowledge resources.

Informational websites focused on science, technology, engineering, computing or technical knowledge rather than providing a technology service.

Medical information, healthcare providers, medicine, fitness, nutrition and health-related services.

Government agencies, public services, government portals, public institutions and official government information.

Legal information, law firms, legal services, courts and legal resources.

Religious organizations, spiritual practices, faith communities and religious information.

Job boards, employment listings, recruitment marketplaces, career advice and job-search services.

Online stores and services whose primary purpose is purchasing products or services online.

Platforms where users buy/sell through auctions, peer-to-peer marketplaces or multi-seller marketplaces.

Property listings, property sales/rentals, real-estate agencies and property-management services.

Airlines, hotels, travel agencies, tourism, reservations, travel planning and travel-related services.

Restaurants, food delivery, recipes, dining guides and food-related services.

Sports organizations, teams, events, scores, sporting information and recreational sports content.

Museums, galleries, literature, cultural organizations, visual arts and cultural information.

Movies, television, music, video/audio streaming, celebrity entertainment and general entertainment media.

Online games, gaming platforms, game downloads, gaming communities, game reviews and related services.

Fashion, home/garden, crafts, hobbies, pets, photography, parenting and general lifestyle interests.

Dating, matchmaking, relationship services and relationship-focused communities.

Cars, motorcycles, trucks, boats, vehicle sales, reviews, parts and automotive services.

Weather forecasts, meteorological information, weather maps and weather services.

Pornography, explicit sexual content, explicit adult media and adult-oriented services.

Nudity or sexually suggestive material that does not meet the threshold for explicit pornography.

Casinos, betting, lotteries, poker, gambling platforms and gambling services.

Websites promoting, selling, distributing or instructing on illegal drugs or drug abuse.

Alcohol, tobacco, vaping/nicotine products and related sales or promotional services.

Websites primarily selling, promoting, reviewing or providing information about weapons and weapon-related products.

Content primarily depicting or promoting graphic, extreme or violent material.

Content associated with terrorist organizations, extremist movements or explicit extremist propaganda/recruitment.

Content associated with child exploitation or child-abuse material. This should be treated as a dedicated high-severity security category.

Websites and repositories primarily used to download software, packages, utilities, libraries or installers.

Online services that convert, compress, resize, merge, split or otherwise process documents, images, audio or video.

Online translation services for text, documents, URLs or webpages.

Services that create shortened URLs or redirect links to another destination.

Advertising platforms, ad-serving networks, tracking advertisements and promotional ad infrastructure.

Services primarily used for website analytics, visitor measurement, tracking, telemetry or audience measurement.

Infrastructure primarily serving images, scripts, files, media or other content to third-party websites or applications.

Domain or URL known to distribute malicious files, scripts, payloads or malware.

Site designed to steal credentials, authentication tokens, payment information or personal information through deception.

Fraudulent services or schemes designed to deceive users into transferring money, information or access.

Infrastructure used by compromised systems to receive commands, communicate with attackers or participate in botnets.

Infrastructure associated with ransomware delivery, distribution or campaigns.

A legitimate website that has been compromised or infected and is currently hosting or delivering malicious content.

Sites hosting exploits, attack tools, unauthorized-access resources or material facilitating compromise.

URLs primarily used to distribute malicious executables, scripts, documents or other payloads.

Software or websites associated with intrusive, unwanted or deceptive applications such as adware, unwanted toolbars or browser hijackers.

Domains involved in unauthorized cryptocurrency mining or browser-based cryptomining.

Domains associated with DNS-based covert communication, command-and-control or data exfiltration.

Algorithmically generated domains associated with malware or rapidly changing malicious infrastructure.

Domains designed to imitate legitimate brands or exploit misspelled/visually similar domains.

Services designed to bypass organizational web filtering, monitoring or network restrictions.

Domains associated with unsolicited campaigns, abusive traffic, malicious advertising or spam operations.

Domain recently registered and therefore having limited reputation/history.

Domain recently observed by EndDefend with insufficient historical reputation data.

Domain registered or parked for sale but not hosting meaningful legitimate content.

Websites or domains that have not yet been evaluated, lack sufficient accessible content for classification, or do not fall into standard corporate categories.