12. A system comprising: one or more processors; one or more memories; a link popularity feature extraction module, stored on the one or more memories and operable by the one or more processors, that extracts link popularity features; a binary classification model, stored on the one or more memories and operable by the one or more processors, that uses the link popularity features to classify a received uniform resource locator (URL) as a malicious URL or a benign URL; and a multi-label classification model, stored on the one or more memories and operable by the one or more processors, that uses the link popularity features to classify the received URL as one of a phishing URL, a spamming URL, a malware URL, or a multi-type attack URL when the received URL is a malicious URL.
12. A system comprising: one or more processors; one or more memories; a link popularity feature extraction module, stored on the one or more memories and operable by the one or more processors, that extracts link popularity features; a binary classification model, stored on the one or more memories and operable by the one or more processors, that uses the link popularity features to classify a received uniform resource locator (URL) as a malicious URL or a benign URL; and a multi-label classification model, stored on the one or more memories and operable by the one or more processors, that uses the link popularity features to classify the received URL as one of a phishing URL, a spamming URL, a malware URL, or a multi-type attack URL when the received URL is a malicious URL. 13. The system of claim 12 , further comprising: a lexicology feature extraction module, stored on the one or more memories and operable by the one or more processors, that extracts lexical features associated with the received URL; a web page feature extraction module, stored on the one or more memories and operable by the one or more processors, that extracts web page content features associated with the received URL; a network feature extraction module, stored on the one or more memories and operable by the one or more processors, that extracts network features associated with the received URL; and a domain name system (DNS) feature extraction module, stored on the one or more memories and operable by the one or more processors, that extracts DNS features and DNS fluxiness features associated with the received URLs.