Malicious code blocking system

A malicious code blocking system comprising:

• a fake website detector that repeatedly accesses a website to be monitored to detect whether or not a malicious action including a malicious code occurs, stores a detection log of a site where the malicious action is detected in a database, and provides a uniform resource locator (URL) address of the site where the malicious action is detected and a URL of a server used to distribute the malicious code;
• a malicious URL storage that temporarily stores a URL address of the site where the malicious action is detected, provided from the fake website detector, and a URL of the server used to distribute the malicious code, and stores a status flag indicating whether or not a malicious URL list containing information on malicious URLs changes;
• and
• a URL filter associated with a user terminal to monitor a network packet transmitted or received by the user terminal, check whether or not the status flag of the temporary malicious URL storage changes in a case where a domain name system (DNS) query request for visiting a specific website is generated, and update a malicious URL list containing information on a malicious URL of the user terminal based on information stored in the malicious URL storage if the status flag changes,
• wherein the fake website detector compares an existing malicious URL list with a URL of the site where the malicious action is detected and changes the status flag when the URL of the site where the malicious action is detected is sent to the malicious URL storage if the URL of the site where the malicious action is detected is a new URL not listed in the existing malicious URL list.