1. A method of detecting a malicious URL, said method comprising: retrieving HTML code representing a Web page; scanning said HTML code and identifying at least one embedded URL of said HTML code; identifying layout features of said embedded URL related to the layout of said embedded URL within said HTML code, one of said layout features indicating that said embedded URL is located within the header or the footer of said HTML code; producing a numerical layout vector that indicates the presence of said layout features; processing said numerical layout vector using a classifier algorithm; and outputting a score from said classifier algorithm indicating the likelihood that said embedded URL of said HTML code is a malicious URL.
1. A method of detecting a malicious URL, said method comprising: retrieving HTML code representing a Web page; scanning said HTML code and identifying at least one embedded URL of said HTML code; identifying layout features of said embedded URL related to the layout of said embedded URL within said HTML code, one of said layout features indicating that said embedded URL is located within the header or the footer of said HTML code; producing a numerical layout vector that indicates the presence of said layout features; processing said numerical layout vector using a classifier algorithm; and outputting a score from said classifier algorithm indicating the likelihood that said embedded URL of said HTML code is a malicious URL. 4. A method as recited in claim 1 further comprising: intercepting a request from a browser of a computer user to download said HTML code representing said Web page; and downloading said HTML code, whereby said HTML code is retrieved.