Anti-phishing domain advisor and method thereof

An anti-phishing domain advisor, comprising:

• an interface configured to interface between an operating system of a client and at least one application executed over the client, wherein the interface is further configured to monitor and capture system calls sent by the at least one application to an operating system and responses to the system calls as generated by the operating system;
• a memory configured to store at least an anti-phishing blacklist;
• and
• a processor connected to the interface can configured to:
• determine if a system call's response generated in response to a system call's request of the at least one application to access an internet resource includes any one of a domain name system (DNS) error code and a fake IP address;
• check a URL extracted from the system call's request against the anti-phishing blacklist to determine if the Internet resource is a malicious website;
• perform a DNS error correction action if any one of the DNS error code and the fake IP address was detected;
• and
• perform an anti-phishing protection action if the internet resource is determined to be a malicious website.