Machine learning uniform resource locator (URL) classifier

A method comprising:

• at a computing platform comprising at least one processor, a communication interface, and memory:
• receiving, from an enterprise user device, a request to evaluate a uniform resource locator (URL);
• executing one or more feature enrichment actions on the URL to identify one or more data points corresponding to the URL, wherein executing the one or more feature enrichment actions on the URL comprises crawling the URL to extract metadata for the URL and extracting information corresponding to one or more redirects of the URL, wherein the information comprises a number of URLs accessed before a crawl reaches a final URL;
• inputting, into a URL classification model, the one or more data points corresponding to the URL and the extracted information, wherein inputting the one or more data points corresponding to the URL and the extracted information causes the URL classification model to output a maliciousness score indicative of a degree to which the URL is malicious;
• and
• sending, to the enterprise user device, a malicious score notification and one or more commands directing the enterprise user device to display the malicious score notification, wherein sending the one or more commands directing the enterprise user device to display the malicious score notification causes the enterprise user device to display the malicious score notification.

One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, a communication interface, and memory, cause the computing platform to:

• receive, from an enterprise user device, a request to evaluate a uniform resource locator (URL);
• execute one or more feature enrichment actions on the URL to identify one or more data points corresponding to the URL, wherein executing the one or more feature enrichment actions on the URL comprises crawling the URL to extract metadata for the URL and extracting information corresponding to one or more redirects of the URL, wherein the information comprises a number of URLs accessed before a crawl reaches a final URL;
• input, into a URL classification model, the one or more data points corresponding to the URL and the extracted information, wherein inputting the one or more data points corresponding to the URL and the extracted information causes the URL classification model to output a maliciousness score indicative of a degree to which the URL is malicious;
• and
• send, to the enterprise user device, a malicious score notification and one or more commands directing the enterprise user device to display the malicious score notification, wherein sending the one or more commands directing the enterprise user device to display the malicious score notification causes the enterprise user device to display the malicious score notification.