Every web page is scanned across multiple dimensions to catch even the most sophisticated phishing attempts
🔗
URL Features
Link structure, domain patterns, encoding tricks, HTTPS, path depth, multi-tenant detection
📄
HTML & Content
Page structure, forms, redirects, iframes, scripts, links, media elements, copyright
🔒
Security & Trust
SSL certificate age, domain age, WHOIS records, DNS (MX, SPF, DMARC, CAA, IPv6)
A simple three-step process that keeps you safe
🌐
Feature Extraction
The page URL, HTML structure, WHOIS/DNS records, and SSL certificate are analyzed. 45 numerical features are extracted in parallel.
URL · HTML · WHOIS · SSL
⚡
XGBoost Classification
An XGBoost model trained on 2 155 samples with 5-fold cross-validation scores the page. High-confidence predictions are returned instantly.
XGBoost · 98.5% Accuracy
🎯
LLM Cascade
When XGBoost is uncertain (probability 0.1–0.9), the page HTML is sent to Gemini for content-level analysis, producing a final verdict with explanation.
Gemini 2.5 Flash · Cascade
→
→
→
→
Rigorously tested against thousands of phishing and legitimate websites
🏆
XGBoost + LLM Cascade
5-Fold Stratified CV · AUC 0.984
98.52%
Accuracy
ML Model
XGBoost
LLM Cascade
Gemini 2.5 Flash
Features
45
Samples
2,155
One-click analysis with detailed risk assessment
🔍
One-Click Scan
Click 'Analyze Page' to scan the current website across 45 phishing indicators
📊
Risk Level
Safe, Low, Medium, High, or Critical — based on XGBoost probability score
💡
LLM Explanation
When the model is uncertain, Gemini analyzes the page content and provides a human-readable explanation
Install PhishGuard and browse the web with confidence. Free, open source, and powered by machine learning.
© 2026 PhishGuard. All rights reserved.
GitHub
Privacy
Contact