1. A method of detecting a malicious URL, said method comprising: retrieving HTML code representing a Web page; scanning said HTML code and identifying at least one embedded URL of said HTML code; identifying layout features of said embedded URL related to the layout of said embedded URL within said HTML code, one of said layout features indicating that said embedded URL is located within the header or the footer of said HTML code; producing a numerical layout vector that indicates the presence of said layout features; processing said numerical layout vector using a classifier algorithm; and outputting a score from said classifier algorithm indicating the likelihood that said embedded URL of said HTML code is a malicious URL.