The invention provides a website intercepting method and device, and relates to the technical field of network safety. According to the method and the device, whether a website with the same destination address with an acquired first target message exists in a first monitoring list is determined; if yes, messages sent by a user terminal in a first preset time period are acquired from gateway equipment and are used as second target messages, according to the second target messages, an event sequence is recorded and generated, and the event sequence comprises a plurality of interactive events; aiming at each second target message, according to the recorded event sequence, calculation is carried out to determine whether an event corresponding to the second target message is classified as a swindle event; and if yes, according to a preset intercepting strategy, an intercepting instruction is sent to the gateway equipment, so that the user terminal stops accessing a website corresponding tothe current second target message. Based on the preset intercepting strategy, malicious websites can be accurately and efficiently intercepted in multiple links in a network environment, which is helpful for promoting the experience feeling of a user.