Jul 2026· International Journal of Emerging Multidisciplinaries: Computer Science & Artificial Intelligence· 0 citations· 25 references
TL;DR
The multi-modal approach improves accuracy, reduces mistakes, and adapts better to new phishing methods, and performs better than single-method systems and has strong potential for future improvement.
Abstract
Phishing is one of the most common online threats, and it is becoming harder to detect because attackers use AI nowadays, fake website designs, and new tricks. Traditional methods like simple rules or URL reputation checks are no longer enough to stop these modern attacks. This report introduces Phishing Shield AI, a phishing detection system that uses three types of analysis: text analysis with NLP, URL and domain checking, and computer vision to compare webpage visuals. Each part gives a risk score, and the system combines them to decide whether something is phishing. It also provides clear explanations by showing which words, links, or images look suspicious. Based on the literature review, gap analysis, system design, and evaluation, the multi-modal approach improves accuracy, reduces mistakes, and adapts better to new phishing methods. Overall, Phishing Shield AI is a practical and scalable solution that performs better than single-method systems and has strong potential for future improvement.
Phishing websites still pose a threat to internet users by using well-known domain names and confusing URL formats to trick them into divulging confidential information. This research proposes a phishing website detection system and a cyberattack prevention system based on a deep learning model designed to detect whether raw URLs are phishing or legitimate, leveraging a transformer model. The system analyzes URL sequences to identify patterns, domain name irregularities, suspicious tokens, unusual lengths, special character usage, and deceptive subdomains. A web interface enables the user to input URLs, and the Flask backend performs pre-processing, tokenization, model inference, and suspicious feature identification. The proposed method fuses the transformer-based semantic representation of the URL and lexical feature analysis to reliably detect phishing and provide explainable warning features. The system creates a prediction label, confidence score, and suspicious features in real time to support the decision-making process. This work provides a practical and scalable solution for phishing identification, user protection, and web-based cyberattack prevention.
Dr. N. Ramadevi, Dr. K. Uday, Kumar et al.· 2026 International Conferenc...· 0 citations
Phishing attacks have become a critical cybersecurity challenge due to the increasing use of fraudulent websites and
malicious URLs to deceive users and obtain sensitive information. Conventional phishing detection approaches such as
blacklist-based filtering and static rule-based techniques often fail to recognize newly generated phishing websites because they
depend on previously identified threats. To overcome these limitations, this work presents a Phishing Website Detection System
Using a Stacked Hybrid Model With Explainable AI, designed to accurately classify websites as phishing or legitimate while
providing transparent decision explanations. The proposed framework utilizes a stacking ensemble architecture that combines
multiple learning models, including Artificial Neural Network (ANN), Bagging K-Nearest Neighbors (KNN), and Support
Vector Machine (SVM), to identify complex patterns from URL-based and website-related characteristics. Logistic Regression
is incorporated as a meta-level classifier to combine the predictions of individual models and generate the final classification
result. The system uses extracted lexical, structural, and security-related website features to improve detection reliability and
enhance model generalization. Furthermore, Explainable Artificial Intelligence (XAI) is integrated through SHAP to analyze
the contribution of individual features and provide meaningful explanations behind each prediction. This improves the
transparency of the detection process by showing the factors that influence phishing and legitimate classifications. A useroriented detection interface is also developed, allowing users to submit website URLs and receive immediate classification results
along with feature-based explanations. Performance assessment of the developed hybrid model is carried out using a publicly
available phishing website dataset. Experimental results evaluated using Accuracy, Precision, Recall, and F1-score indicates
that the stacked hybrid model provides reliable and consistent identification of phishing websites.
A. Mounika, D. Ramakrishna· International Journal for Re...· 0 citations
Phishing attacks have become increasingly sophisticated, exploiting techniques such as URL manipulation, certificate authority abuse, and misleading hyperlinks to evade traditional security mechanisms. Although machine learning models have demonstrated high effectiveness in phishing detection, many rely on benchmark datasets that emphasize performance over real-world applicability and lack interpretability. This paper proposes an interpretable phishing detection model utilizing structured multi-feature representations and ensemble learning. The term "hybrid" in this study refers to the integration of multiple feature sources, including URL-based, domain-based, and behavioral features, rather than combining multiple classifiers. A Random Forest classifier was developed using the UCI Phishing Websites dataset (11,055 samples) which contains 30 structural features. The proposed model utilizes all three types of indicators: URL-based, domain-based, and webpage behavior indicators, and allows for fast feature importance analysis. The proposed model's experimental results demonstrated an accuracy of 96.9%, a recall of 97.9%, and an Area Under the Curve (AUC) of 0.99 when tested against unseen data. Feature importance analysis demonstrated that the presence or absence of Secure Sockets Layer (SSL) validation status and the structure of a hyperlink were key indicators of phishing. External validation against ten official Iraqi university websites resulted in correct classification with no false positives, demonstrating that the proposed model is reliable. Therefore, these results demonstrate that the proposed method provides a balance between model performance, interpretability, and the practicality of deployment.
Phishing attacks are one of the long-lasting problems in cybersecurity. Attackers are always changing their techniques to avoid being caught by conventional detection techniques. The techniques used currently are based on static blacklists or individual classifiers using features, but this does not completely represent the phishing attack. This project fills this critical information security gap by developing a hybrid real-time phishing detection system in the form of a Google Chrome extension. Our system uses a combination of two independent machine learning pipelines. In the first pipeline, we use thirty hand-crafted features to classify URL structure using a Gradient Boosting Classifier on 11,054 samples with 97.4% accuracy. In the second pipeline, we use raw HTML data from the webpage. We use a TF-IDF vectorizer on HTML data injected with semantic flag tokens. We use a Random Forest Classifier on 1,859 real site files with 82.80% accuracy. We combine the results using a weighted combination. We use a Retrieval Augmented Generation module, which uses a Google Gemini language model. We use a FAISS vector index to produce a risk explanation in a human-readable format. We use a trusted domain whitelist for false positives on legitimate banking and government websites. We use a pattern-based blocklist for piracy and malware domains. We use a popup interface to show users Safe or Phishing results. We use a full-screen alert overlay injected into the active tab for users. We use experimental results to show that our system performs better than any individual baseline
Kavila Moni Sushma Deep, Pavan KumarSeepana, Natasha Rayi et al.· International journal of re...· 0 citations
In the technology era, Phishing has continued to be a great challenge within the cybersecurity and web security landscape. This involves exploiting human trust on any online services and subtle technical flaws. This is to gather credentials, financial data, and sensitive information across diverse online platforms and various users. Traditional defenses like static blacklists, signature-based filters and simple detection rules are limited by slow update cycles and an inability to capture subtle syntactic and behavioral cues. To address these shortcomings, we propose a hybrid detection framework that fuses classical supervised machine-learning classifiers (e.g., Logistic Regression, SVM, Random Forest, XGBoost) with sequence-aware deep learning (LSTM) to jointly model lexical, structural, syntactic, and behavioral features extracted from URLs and webpage metadata. This combined approach leverages the interpretability and stability of ML models alongside the pattern-learning strength of LSTMs to detect both known and zero-day phishing attempts, produce calibrated confidence scores and deliver comprehensive reports via a real-time web interface resulting in a robust, transparent, and operationally useful solution for strengthening web security.
M. Yaswanth, Pathan Basheer Khan, Dhulipalla Naga Harish et al.· 2026 7th International Confe...· 0 citations
A hybrid phishing detection framework that integrates three complementary techniques: DistilBERT for semantic analysis of URL text, Graph Neural Networks for modelling structural relationships among URL components, and LightGBM for efficient metadata-based feature classification is proposed.
Ms. I. Shalini, Ms. G. Sujini· International Journal for Re...· 0 citations