JStill: mostly static detection of obfuscated malicious JavaScript code
Prophiler: A fast filter for the large-scale detection of malicious web pages