1. A computer-implemented method for analyzing webpages for malware, the method comprising: receiving a uniform resource locator (URL); performing static analysis on a webpage associated with the URL to determine programming languages and plug-ins used on the webpage; accessing the webpage on a web browser in an emulated environment, the emulated environment simulating a mobile device; observing and storing behaviors of the simulated mobile device after accessing the webpage; classifying the behaviors as hard signals or soft signals, each of the soft signals having a probability of maliciousness, and combining soft signals to calculate a combined probability of maliciousness; and classifying the mobile webpage as malicious or non-malicious based on the hard signals and the probability of maliciousness.