URL structure
Length, redirects, subdomains, IP addresses, and prefix or suffix patterns.
Phishing Website Detection analyzes URL signals with a trained Random Forest model and turns a complex classification workflow into a clear, practical scan.
Trust can be engineered into a page. URL evidence gives users and systems another signal before sensitive information is shared.
Phishing websites imitate trusted organizations to persuade people to reveal passwords, account details, or other private information.
Financial services and online platforms process a large volume of real-time transactions, making them attractive targets for fraud and social engineering. Attackers continuously change their techniques, create convincing replicas, and distribute them through emails, messages, and misleading links.
This project explores how measurable URL characteristics can help distinguish legitimate websites from potentially phishing websites. It is designed for learning, experimentation, and responsible security research.
The model works with a compact numeric representation of URL behavior and domain information.
Length, redirects, subdomains, IP addresses, and prefix or suffix patterns.
HTTPS tokens, shortening services, DNS records, and statistical reputation signals.
Domain age and registration information that can reveal suspicious patterns.
The same documented workflow powers the Streamlit interface and the training notebooks.
Provide a complete website URL in the Streamlit scanner.
Convert URL and domain characteristics into numeric features.
Pass the feature vector to the saved Random Forest classifier.
Review the Legitimate or Phishing classification and extracted values.
The repository keeps the application, training material, and source datasets easy to inspect.