Method and apparatus for identifying malicious website, and computer storage medium

An apparatus for identifying a malicious website, comprising:

• interface circuitry configured to receive a request for querying whether a first website is of a malicious website type, the request carrying first website information for the first website;
• and
• processing circuitry configured to:
• determine, based on the first website information, whether the first website is of the malicious website type to obtain a determination result for the first website;
• obtain, hyperlink information of a second website from page content of the first website based on the determination result for the first website, the hyperlink information of the second website including link address information and a link address description of the link address information;
• and
• perform an identification to determine whether the second website corresponding to the hyperlink information is of the malicious website type based on the link address information, the link address description included in the hyperlink information, and a number of previously identified malicious websites that include the link address information.

A non-transitory computer-readable storage medium storing instructions which when executed by at least one processor cause the at least one processor to perform operations of identifying a malicious website, the operations comprising:

• receiving a request for querying whether a first website is of a malicious website type, the request carrying first website information for the first website;
• determining, based on the first website information, whether the first website is of the malicious website type to obtain a determination result for the first website;
• obtaining hyperlink information of a second website from page content of the first website based on the determination result for the first website, the hyperlink information of the second website including link address information and a link address description of the link address information;
• and
• performing an identification to determine whether the second website corresponding to the hyperlink information is of the malicious website type based on the link address information, the link address description included in the hyperlink information, and a number of previously identified malicious websites that include the link address information.