Skip to content
Open access

Phishing Website Detection Using A Stacked Hybrid Model With Explainable AI

Jul 2026 · International Journal for Research in Applied Science and Engineering Technology · 0 citations

TL;DR

A Phishing Website Detection System Using a Stacked Hybrid Model With Explainable AI, designed to accurately classify websites as phishing or legitimate while providing transparent decision explanations, is presented.

Abstract

Phishing attacks have become a critical cybersecurity challenge due to the increasing use of fraudulent websites and malicious URLs to deceive users and obtain sensitive information. Conventional phishing detection approaches such as blacklist-based filtering and static rule-based techniques often fail to recognize newly generated phishing websites because they depend on previously identified threats. To overcome these limitations, this work presents a Phishing Website Detection System Using a Stacked Hybrid Model With Explainable AI, designed to accurately classify websites as phishing or legitimate while providing transparent decision explanations. The proposed framework utilizes a stacking ensemble architecture that combines multiple learning models, including Artificial Neural Network (ANN), Bagging K-Nearest Neighbors (KNN), and Support Vector Machine (SVM), to identify complex patterns from URL-based and website-related characteristics. Logistic Regression is incorporated as a meta-level classifier to combine the predictions of individual models and generate the final classification result. The system uses extracted lexical, structural, and security-related website features to improve detection reliability and enhance model generalization. Furthermore, Explainable Artificial Intelligence (XAI) is integrated through SHAP to analyze the contribution of individual features and provide meaningful explanations behind each prediction. This improves the transparency of the detection process by showing the factors that influence phishing and legitimate classifications. A useroriented detection interface is also developed, allowing users to submit website URLs and receive immediate classification results along with feature-based explanations. Performance assessment of the developed hybrid model is carried out using a publicly available phishing website dataset. Experimental results evaluated using Accuracy, Precision, Recall, and F1-score indicates that the stacked hybrid model provides reliable and consistent identification of phishing websites.

Read PDF

Similar papers

Open access Jul 2026

A Hybrid Intelligent Framework for Phishing Website Detection Using SVM and LightGBM

Phishing websites continue to pose a serious cybersecurity threat by deceiving users into revealing sensitive information such as login credentials, banking details, and personal data. Traditional blacklist-based detection techniques are ineffective against newly created phishing websites, necessitating intelligent machine learning solutions. This paper presents PhishShield, a hybrid phishing website detection framework that integrates Support Vector Machine (SVM) and Light Gradient Boosting Machine (LightGBM) to accurately classify legitimate and phishing websites. The proposed approach utilizes URL-based feature extraction and text preprocessing to generate meaningful representations for classification. SVM provides robust decision boundaries, while LightGBM enhances predictive performance through efficient gradient boosting. Experimental evaluation demonstrates that the hybrid framework achieves higher accuracy, precision, recall, and F1-score compared to conventional machine learning models. The system is implemented as a web-based application capable of real-time URL analysis, enabling users to identify malicious websites before accessing them. The proposed framework offers an efficient, scalable, and reliable solution for strengthening web security against evolving phishing attacks.

Srija Pasupunuti, Sk.Mahammadunnisa · 0 citations
Open access Jul 2026

A Hybrid Machine Learning and Rule-Based Approach for Phishing Website Detection Using URL Features

The model proposed employs feature extraction using URLs, such as lexical and structural features like URL length, frequency of special characters, use of IP addresses, and occurrence of suspicious keywords, to improve the accuracy and reliability of detection.

Muna Rashid Hameed · 0 citations
Jul 2026

Improved Phishing Email Detection through Hybrid Machine Learning and AI-Based Data Augmentation

Phishing attacks continue to evolve in sophistication, making them one of the most significant cybersecurity threats affecting individuals and organizations. Traditional phishing detection techniques based on rule-based systems and standalone machine learning algorithms often struggle to identify modern phishing emails generated using artificial intelligence and advanced social engineering techniques. This study proposes an AI-driven hybrid ensemble model that integrates Support Vector Machine (SVM), Random Forest (RF), and Bidirectional Long Short-Term Memory (Bi-LSTM) to improve phishing email detection accuracy and robustness. To address dataset imbalance and the limited availability of AI-generated phishing emails, an AI-based data augmentation module was incorporated to generate realistic synthetic phishing samples during model training. The proposed methodology consists of data collection, preprocessing, feature engineering, synthetic data generation, individual model training, and ensemble classification using a soft voting mechanism. Experimental evaluation was performed using benchmark phishing email datasets and standard performance metrics, including accuracy, precision, recall, F1-score, confusion matrix, and inference latency. Results indicate that the proposed hybrid model achieved an overall detection accuracy of 98.9%, outperforming a comparable existing model, which achieved 95.2% accuracy. Furthermore, the hybrid approach demonstrated improved generalization, reduced false classifications, and faster detection latency. The findings suggest that combining classical machine learning, deep learning, and AI-driven data augmentation provides an effective framework for protecting modern email systems against both conventional and AI-generated phishing attacks.

Chikeru Ihunwo, V. Emmah, N. Nwiabu · 0 citations

Explainable Phishing Website Detection Using Comparative Machine Learning and SHAP

An integrated comparative evaluation that combines six-algorithm benchmarking, leakage-free hyperparameter optimization, and SHAP-based interpretation on a public phishing dataset, offering practical guidance for security analysts is offered.

Juni Ismail, Raja Anan Nasution, Muhammad Nasri Gea · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.