An Explainable Ensemble Artificial Intelligence Framework for Real-Time Phishing Website Detection

Boniface F. Jonathan; Asabe S. Ahmadu; Corresponding Author

doi:10.56201/ijcsmt.vol.12.no6.2026.pg46.55

📄 Download Paper

An Explainable Ensemble Artificial Intelligence Framework for Real-Time Phishing Website Detection

Boniface F. Jonathan, Asabe S. Ahmadu, Corresponding Author

Abstract

Phishing attacks remain a major cybersecurity threat, with the Anti-Phishing Working Group recording 989,123 attacks in the fourth quarter of 2024 alone. Existing anti-phishing solutions are constrained by high false positive rates, reliance on static blacklists that cannot detect new phishing sites, and a lack of explainability in classification decisions. This study developed and evaluated an Explainable Ensemble Artificial Intelligence Framework for Real- Time Phishing Website Detection. The proposed framework combined three base classifiers operating in parallel — a character-level 1D Convolutional Neural Network , a Random Forest (RF), and an Extreme Gradient Boost (XGBoost) — whose outputs were combined by a Logistic Regression meta-learner using a five-fold Out-of-Fold cross-validation strategy. Twenty URL features were extracted across Lexical, Character-based, Domain-based, and Binary categories. The framework was trained and evaluated on a stratified sample of 50,000 URLs from the Kaggle Phishing Site URLs dataset, split 70/15/15 for training, validation, and testing. SHapley Additive exPlanations were integrated to provide feature-level justification for every classification decision. The proposed ensemble achieved 97.48% accuracy, 98.43% precision, 96.51% recall, 97.46% F1-Score, and AUC-ROC of 0.9956, outperforming all individual base classifiers. The false positive rate of 2.43% directly addresses the primary weakness of existing systems. Suspicious Keywords Score, Special Character Ratio, and Domain Entropy Score were identified as the three most discriminating features. The framework was deployed as a real-time desktop application, correctly classifying a phishing URL at 99.7% confidence.

Keywords

ScoreSpecial Character Ratioand Domain Entropy Score were identified as the three most discriminating features. The framework was deployed as a real-time desktop applicationcorrectly classifying

References

Aljofey, A., Jiang, Q., Rasool, A., Chen, H., Liu, W., Qu, Q., & Wang, Y. (2022). An effective detection approach for phishing websites using URL and HTML features. Scientific Reports. Nature Portfolio. https://doi.org/10.1038/s41598-022-10841-5 Alqahtani, H., Alotaibi, S. S., Alrayes, F. S., Al-Turaiki, I., Alissa, K. A., Aziz, A. S. A., Maray, M., & Al-Duhayyin, M. (2022). Evolutionary Algorithm with Deep Auto Encoder Network Based Website Phishing Detection and Classification. Applied Sciences, 12(7441). https://doi.org/10.3390/app12157441 Al-Sabbagh, A., Hamze, K., Khan, S., & Elkhodr, M. (2024). An Enhanced K-Means Clustering Algorithm for Phishing Attack Detections. Electronics, 13(3677). https://doi.org/10.3390/electronics13183677 Al-Sarem, M., Saeed, F., Al-Mekhlafi, Z. G., Mohammed, B. A., Al-Hadhrami, T., Alshammari, et al. (2021). An Optimized Stacking Ensemble Model for Phishing Websites Detection. Electronics, 10(1285). https://doi.org/10.3390/electronics10111285 Asiri, S., Xiao, Y., & Li, T. (2024). PhishTransformer: A Novel Approach to Detect Phishing Attacks Using URL Collection and Transformer. Electronics, 13(30). https://doi.org/10.3390/electronics13010030 Aslam, S., Aslam, H., & Rasool, A. (2024). AntiPhishStack: LSTM-Based Stacked Generalization Model for Optimized Phishing URL Detection. Symmetry, 16(248). https://doi.org/10.3390/sym16020248 Atawneh, S., & Aljehani, H. (2023). Phishing Email Detection Model Using Deep Learning. Electronics, 12, 4261. https://doi.org/10.3390/electronics122044261 Chen, Z., Liu, S. Z., Huang, J., Xiu, Y. H., Zhang, H., & Long, H. X. (2024). Ethereum Phishing Scam Detection Based on Data Augmentation Method and Hybrid Graph Neural Network Model. Sensors, 24, 4022. https://doi.org/10.3390/s24124022 Ghalechyan, H., Israyelyan, E., Arakelyan, A., Hovhannisyan, G., & Davtyan, A. (2024). Phishing URL Detection with Neural Networks: An Empirical Study. Scientific Reports, 14, 25134. https://doi.org/10.1038/s41598-024-74725-6 Haq, Q. E. U., Faheem, M. H., & Ahmad, I. (2024). Detecting Phishing URLs Based on a Deep Learning Approach to Prevent Cyber-Attacks. Applied Sciences, 14, 10086. https://doi.org/10.3390/app142210086 Harinahalli, L. G., & Goutham, B. G. (2021). Phishing Website Detection Based on Effective Machine Learning Approach. Journal of Cyber Security Technology, 5(1), 1–14. https://doi.org/10.1080/23742917.2020.1813396 Hussain, M., Cheng, C., Xu, R., & Afzal, M. (2023). CNN-Fusion: An Effective and Lightweight Phishing Detection Method Based on Multi-Variant ConvNet. Information Sciences, 631, 328–345. https://doi.org/10.1016/j.ins.2023.02.039 Islam, R., Islam, M., Afrin, S., Antara, A., Tabassum, N., & Amin, A. (2023). PhishGuard: A Convolutional Neural Network-Based Model for Detecting Phishing URLs with Explainability Analysis. Proceedings of the 10th International Conference on Computing for Sustainable Global Development, IEEE, 1461–1465. Jacob, M., & Eda, K. (2025). Ensemble Learning. IBM Think. Retrieved from https://www.ibm.com/think/topics/ensemble-learning Kalabarige, L. R., Rao, R. S., Abraham, A., & Gabralla, L. A. (2022). Multilayer Stacked Ensemble Learning Model to Detect Phishing Websites. IEEE Access, 10, 79543–79552. https://doi.org/10.1109/ACCESS.2022.3194672 IJCSMT Said, Y., Alshekhy, A. A., Lahza, H., & Shawly, T. (2023). Detecting Phishing Websites Through Improving Convolutional Neural Networks with Self-Attention Mechanism. Ain Shams Engineering Journal, 15(4). https://doi.org/10.1016/j.asej.2024.102643 Salahdine, F., Mrabet, Z. E., & Kaabouch, N. (2020). Phishing Attacks Detection – A Machine Learning-Based Approach. Proceedings of the 2021 IEEE 12th Annual Ubiquitous Computing, Electronics & Mobile Communication Conference , 250–255. Somesha, M., Pais, A. R., Rao, R. S., & Rathour, V. S. (2020). Efficient Deep Learning Techniques for the Detection of Phishing Websites. Sadhana, 45(1), 1–18. https://doi.org/10.1007/s12046-020-01392-4 Subhashini, N., Banerjee, A., Kumar, A., Muthulakshmi, S., & Revathi, S. (2024). Deep Learning- Based Phishing Website Detection. TELKOMNIKA Telecommunication Computing Electronics and Control, 22(1), 113–121. Tang, L., & Mahmoud, Q. H. (2021). A Survey of Machine Learning-Based Solutions for Phishing Website Detection. Machine Learning and Knowledge Extraction, 3(3), 672–694. Ujah-Ogbuagu, B. C., Akande, O. N., & Ogbuju, E. (2024). A Hybrid Deep Learning Technique for Spoofing Website URL Detection in Real-Time Applications. Journal of Electrical Systems and Information Technology, 11(7). https://doi.org/10.1186/s43067-023-00128- Vigneshwaran, P., Roy, A. S., Sathvik, B. S., Nasirulla, D. M., & Chowdary, M. L. (2022). Multidimensional Features Driven Phishing Detection Based on Deep Learning. In Proceedings of the Integrated Emerging Methods of Artificial Intelligence & Cloud Computing (IEMAICLOUD), Springer. Wang, Y., Ma, W., Xu, H., Liu, Y., & Yin, P. (2023). A Lightweight Multi-View Learning Approach for Phishing Attack Detection Using Transformer with Mixture of Experts. Applied Sciences, 13, 7429. https://doi.org/10.3390/app13137429

An Explainable Ensemble Artificial Intelligence Framework for Real-Time Phishing Website Detection

Abstract

Keywords

References

More Articles from INTERNATIONAL JOURNAL OF COMPUTER SCIENCE AND MATHEMATICAL THEORY