Systems and methods for facilitating malicious site detection

A gateway for facilitating malicious site detection, the gateway comprising a processor and a memory, the memory storing instructions that when executed by the processor cause the gateway to:

• receive a request for data made by a device of a plurality of devices on the LAN to a website on the Internet, wherein all communications between the plurality of devices on the LAN and websites on the Internet pass through the gateway;
• check a local black list on the LAN to determine whether or not a uniform resource locator (URL) of the web site is in the local black list, the local black list including URLs of malicious websites;
• request a reputation rating server on the Internet to rate the URL of the website in response to the URL of the website not being in the local black list;
• block the request for data if a rating result from the reputation rating server indicates that the URL of the website is malicious;
• send the request for data to the website if the rating result from the reputation rating server indicates that the URL of the website is safe;
• update the local black list based at least on rating results received from the reputation rating server;
• and
• provide the local black list to the reputation rating server.