14. A method comprising: receiving a uniform resource locator (URL) from a web browser or a search engine; extracting one or more link popularity features associated with the URL; employing one or more classification models to determine whether the URL is a malicious URL based on the one or more link popularity features; and in an event the URL is a malicious URL: employing the one or more classification models to label the malicious URL as one of a spam URL, a phishing URL, a malware URL, or a multi-type attack URL; and providing, via a computing device, a notification that the URL is malicious.
14. A method comprising: receiving a uniform resource locator (URL) from a web browser or a search engine; extracting one or more link popularity features associated with the URL; employing one or more classification models to determine whether the URL is a malicious URL based on the one or more link popularity features; and in an event the URL is a malicious URL: employing the one or more classification models to label the malicious URL as one of a spam URL, a phishing URL, a malware URL, or a multi-type attack URL; and providing, via a computing device, a notification that the URL is malicious. 17. The method as recited in claim 14 , further comprising constructing the one or more classification models using one or more learning algorithms and a set of known malicious URLs and known benign URLs.