classify the URL

[sprouty]

Hi,

I have a small system to find malicious URLs. At the moment I am able to tell when a website is Malicious by seeing what files are written to the disc. I would like to try and upgrade the system by trying to classify the exploit for example "Blackhole". Just wondering the best way to start going about this, and if there are any good tools to help me with this.

Many Thanks,

Sprouty