1. A computer-implemented method, comprising: partitioning landing pages associated with advertisements into training landing pages and testing landing pages; iteratively training a classification model on intrusion features of the training landing pages; iteratively testing the classification model on the intrusion features of the testing landing pages until the occurrence of a testing cessation event; and storing an association of feature weights and intrusion features in the classification model in response to the cessation event, the association of feature weights and intrusion features derived from the iterative training and testing.