Skip to content
Open access

Phishing Website Detection Using A Stacked Hybrid Model With Explainable AI

Jul 2026 · International Journal for Research in Applied Science and Engineering Technology · Vol 14, pp. 2428-2437 · 0 citations

TL;DR

A Phishing Website Detection System Using a Stacked Hybrid Model With Explainable AI, designed to accurately classify websites as phishing or legitimate while providing transparent decision explanations, is presented.

Abstract

Phishing attacks have become a critical cybersecurity challenge due to the increasing use of fraudulent websites and malicious URLs to deceive users and obtain sensitive information. Conventional phishing detection approaches such as blacklist-based filtering and static rule-based techniques often fail to recognize newly generated phishing websites because they depend on previously identified threats. To overcome these limitations, this work presents a Phishing Website Detection System Using a Stacked Hybrid Model With Explainable AI, designed to accurately classify websites as phishing or legitimate while providing transparent decision explanations. The proposed framework utilizes a stacking ensemble architecture that combines multiple learning models, including Artificial Neural Network (ANN), Bagging K-Nearest Neighbors (KNN), and Support Vector Machine (SVM), to identify complex patterns from URL-based and website-related characteristics. Logistic Regression is incorporated as a meta-level classifier to combine the predictions of individual models and generate the final classification result. The system uses extracted lexical, structural, and security-related website features to improve detection reliability and enhance model generalization. Furthermore, Explainable Artificial Intelligence (XAI) is integrated through SHAP to analyze the contribution of individual features and provide meaningful explanations behind each prediction. This improves the transparency of the detection process by showing the factors that influence phishing and legitimate classifications. A useroriented detection interface is also developed, allowing users to submit website URLs and receive immediate classification results along with feature-based explanations. Performance assessment of the developed hybrid model is carried out using a publicly available phishing website dataset. Experimental results evaluated using Accuracy, Precision, Recall, and F1-score indicates that the stacked hybrid model provides reliable and consistent identification of phishing websites.

Read PDF

Similar papers

Open access Jul 2026

A Hybrid Intelligent Framework for Phishing Website Detection Using SVM and LightGBM

Phishing websites continue to pose a serious cybersecurity threat by deceiving users into revealing sensitive information such as login credentials, banking details, and personal data. Traditional blacklist-based detection techniques are ineffective against newly created phishing websites, necessitating intelligent machine learning solutions. This paper presents PhishShield, a hybrid phishing website detection framework that integrates Support Vector Machine (SVM) and Light Gradient Boosting Machine (LightGBM) to accurately classify legitimate and phishing websites. The proposed approach utilizes URL-based feature extraction and text preprocessing to generate meaningful representations for classification. SVM provides robust decision boundaries, while LightGBM enhances predictive performance through efficient gradient boosting. Experimental evaluation demonstrates that the hybrid framework achieves higher accuracy, precision, recall, and F1-score compared to conventional machine learning models. The system is implemented as a web-based application capable of real-time URL analysis, enabling users to identify malicious websites before accessing them. The proposed framework offers an efficient, scalable, and reliable solution for strengthening web security against evolving phishing attacks.

Srija Pasupunuti, Sk.Mahammadunnisa · 0 citations
Open access Jul 2026

A Hybrid Machine Learning and Rule-Based Approach for Phishing Website Detection Using URL Features

Phishing attacks are considered one of the highest risks to cybersecurity, as they exploit users by pretending to be a valid site and gaining access to sensitive data. Traditional methods of detection, including blacklist-based systems, cannot uncover newly created phishing sites (zero-day attacks), need regular updates to their databases, and can generally not offer real-time protection. The paper suggests implementing a hybrid phishing site detection system involving machine learning with rule-based analysis to improve the accuracy and reliability of detection. The model proposed employs feature extraction using URLs, such as lexical and structural features like URL length, frequency of special characters, use of IP addresses, and occurrence of suspicious keywords. Three supervised machine learning algorithms, Support Vector Machine (SVM), Random Forest (RF), and Logistic Regression, where RF was indicated to achieve the highest performance. Moreover, a rule-based system of brand impersonation detection is also implemented to make the system resistant to targeted phishing attacks. Experimental findings prove that the hybrid methodology enhances classification accuracy and lowers false negatives compared to conventional ones. The proposed hybrid model represents an accuracy of 96%, with a recall of 94% and F1 of 95% ; it can be deployed in real-time and gives interpretable results by using confidence scoring. The solution suggested is a feasible and effective method of phishing detection and can be expanded to more sophisticated intelligent cybersecurity systems.

Muna Rashid Hameed · 0 citations
Jul 2026

Improved Phishing Email Detection through Hybrid Machine Learning and AI-Based Data Augmentation

Phishing attacks continue to evolve in sophistication, making them one of the most significant cybersecurity threats affecting individuals and organizations. Traditional phishing detection techniques based on rule-based systems and standalone machine learning algorithms often struggle to identify modern phishing emails generated using artificial intelligence and advanced social engineering techniques. This study proposes an AI-driven hybrid ensemble model that integrates Support Vector Machine (SVM), Random Forest (RF), and Bidirectional Long Short-Term Memory (Bi-LSTM) to improve phishing email detection accuracy and robustness. To address dataset imbalance and the limited availability of AI-generated phishing emails, an AI-based data augmentation module was incorporated to generate realistic synthetic phishing samples during model training. The proposed methodology consists of data collection, preprocessing, feature engineering, synthetic data generation, individual model training, and ensemble classification using a soft voting mechanism. Experimental evaluation was performed using benchmark phishing email datasets and standard performance metrics, including accuracy, precision, recall, F1-score, confusion matrix, and inference latency. Results indicate that the proposed hybrid model achieved an overall detection accuracy of 98.9%, outperforming a comparable existing model, which achieved 95.2% accuracy. Furthermore, the hybrid approach demonstrated improved generalization, reduced false classifications, and faster detection latency. The findings suggest that combining classical machine learning, deep learning, and AI-driven data augmentation provides an effective framework for protecting modern email systems against both conventional and AI-generated phishing attacks.

Chikeru Ihunwo, V. Emmah, N. Nwiabu · 0 citations

Explainable Phishing Website Detection Using Comparative Machine Learning and SHAP

An integrated comparative evaluation that combines six-algorithm benchmarking, leakage-free hyperparameter optimization, and SHAP-based interpretation on a public phishing dataset, offering practical guidance for security analysts is offered.

Juni Ismail, Raja Anan Nasution, Muhammad Nasri Gea · 0 citations