{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,7]],"date-time":"2026-08-07T10:49:44Z","timestamp":1786099784148,"version":"3.56.0"},"reference-count":163,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2024]]},"DOI":"10.1109\/access.2024.3514972","type":"journal-article","created":{"date-parts":[[2024,12,11]],"date-time":"2024-12-11T02:00:53Z","timestamp":1733882453000},"page":"187976-188012","source":"Crossref","is-referenced-by-count":41,"title":["A State-of-the-Art Review on Phishing Website Detection Techniques"],"prefix":"10.1109","volume":"12","author":[{"ORCID":"https:\/\/orcid.org\/0009-0007-4342-6676","authenticated-orcid":false,"given":"Wenhao","family":"Li","sequence":"first","affiliation":[{"name":"Cybersecurity Research Centre, Universiti Sains Malaysia, George Town, Penang, Malaysia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4378-1954","authenticated-orcid":false,"given":"Selvakumar","family":"Manickam","sequence":"additional","affiliation":[{"name":"Cybersecurity Research Centre, Universiti Sains Malaysia, George Town, Penang, Malaysia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1750-7441","authenticated-orcid":false,"given":"Yung-Wey","family":"Chong","sequence":"additional","affiliation":[{"name":"School of Computer Sciences, Universiti Sains Malaysia, George Town, Penang, Malaysia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Weilan","family":"Leng","sequence":"additional","affiliation":[{"name":"Research Institute of Drilling and Production Engineering Technology, Chuanqing Drilling Engineering Company Ltd., CNPC, Guanghan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5748-155X","authenticated-orcid":false,"given":"Priyadarsi","family":"Nanda","sequence":"additional","affiliation":[{"name":"Faculty of Engineering and IT, University of Technology Sydney, Sydney, NSW, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.3389\/fcomp.2021.563060"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/B978-159749030-6\/50006-4"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2013.032213.00009"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3166474"},{"issue":"4","key":"ref5","first-page":"297","article-title":"Phishing, smishing & vishing: An assessment of threats against mobile devices","volume":"5","author":"Yeboah-Boateng","year":"2014","journal-title":"J. Emerg. Trends Comput. Inf. Sci."},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134067"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2018.03.050"},{"key":"ref8","volume-title":"Anti-Phishing Working Group (APWG)"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3247135"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2023.111899"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CCAA.2016.7813778"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.3390\/make3030034"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.101793"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ICSES60034.2023.10465358"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.3390\/s23208499"},{"key":"ref16","first-page":"793","article-title":"KnowPhish: Large language models meet multimodal knowledge graphs for enhancing reference-based phishing detection","volume-title":"Proc. 33rd USENIX Secur. Symp. (USENIX Security)","author":"Li"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484765"},{"key":"ref18","first-page":"3757","article-title":"Catching phishers by their bait: Investigating the Dutch phishing landscape through phishing kit detection","volume-title":"Proc. 30th USENIX Secur. Symp. (USENIX Security)","author":"Bijmans"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2017.2752087"},{"key":"ref20","first-page":"398","article-title":"Phishing website detection based on machine learning: A survey","volume-title":"Proc. 6th Int. Conf. Adv. Comput. Commun. Syst. (ICACCS)","author":"Singh"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/SNAMS52053.2020.9336559"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/ISCAIE51753.2021.9431794"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ICSCDS56580.2023.10104988"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/ICICCS56967.2023.10142655"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1016\/j.jksuci.2023.01.004"},{"key":"ref26","volume-title":"PhishTank","year":"2006"},{"key":"ref27","volume-title":"Alexa Top Sites","year":"2021"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3237798"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/IC457434.2024.10486561"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/comst.2024.3441752"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3205977.3205992"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2016.84"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCI48352.2020.9104161"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376298"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1007\/s12652-022-04426-3"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ICCC54389.2021.9674357"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW.2019.00027"},{"key":"ref38","first-page":"211","article-title":"Certified phishing: Taking a look at public key certificates of phishing websites","volume-title":"Proc. 15th Symp. Usable Privacy Secur. (SOUPS)","author":"Meyer"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/2975591"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-33167-1_47"},{"key":"ref41","volume-title":"What is Phishing?","year":"2024"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.3390\/sym12101681"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/TransAI54797.2022.00025"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/SANER53432.2022.00116"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978330"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/s13042-018-00906-1"},{"key":"ref47","first-page":"507","article-title":"Why do tree-based models still outperform deep learning on typical tabular data?","volume-title":"Proc. 36th Int. Conf. Neural Inf. Process. Syst.","author":"Grinsztajn"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/ICECCE52056.2021.9514261"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3151903"},{"key":"ref50","article-title":"BERT: Pre-training of deep bidirectional transformers for language understanding","author":"Devlin","year":"2018","journal-title":"arXiv:1810.04805"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3185748"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/ICACITE53722.2022.9823516"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2020.107275"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-023-00686-y"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/BDCloud.2018.00099"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2023.122156"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2022\/772"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/3535101"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/TVCG.2022.3148107"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/AFRICON55910.2023.10293675"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/SISY62279.2024.10737601"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-63787-2_11"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2024.104016"},{"key":"ref64","volume-title":"Google Safe Browsing","year":"2022"},{"key":"ref65","article-title":"Detecting phishing sites\u2014An overview","author":"Kalaharsha","year":"2021","journal-title":"arXiv:2103.12739"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.2016.44"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/3433210.3453100"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW51379.2020.00077"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363192"},{"key":"ref70","volume-title":"Cpanel Web Host","year":"2021"},{"key":"ref71","volume-title":"OpenPhish Phishing Feeds","year":"2024"},{"key":"ref72","volume-title":"Censys Search","year":"2024"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/ICADIWT.2014.6814687"},{"key":"ref74","volume-title":"VirusTotal","year":"2024"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3559334"},{"key":"ref76","volume-title":"Exposing Phishing Kits Seen From Phishunt.io","year":"2021"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1145\/3634737.3657013"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2991403"},{"key":"ref79","first-page":"1","article-title":"Deepphish: Simulating malicious ai","volume-title":"Proc. APWG Symp. Electron. Crime Res. (eCrime)","author":"Bahnsen"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1016\/j.jksuci.2017.07.005"},{"key":"ref81","volume-title":"Legitimate URL Dataset","year":"2016"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2022.118010"},{"key":"ref83","volume-title":"Phishing Index Login Websites Dataset (PILWD-134K)"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1109\/ASSIC55218.2022.10088399"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1145\/3618257.3624812"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2023.103553"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1016\/j.dib.2020.106438"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1145\/3631991.3632011"},{"key":"ref89","volume-title":"Phishing websites dataset","volume":"V1","author":"Ariyadasa","year":"2021"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1109\/ICAEEE62219.2024.10561829"},{"key":"ref91","volume-title":"Phishing Site URLs Dataset","author":"Tiwari","year":"2024"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417233"},{"key":"ref93","volume-title":"Similarweb","year":"2024"},{"key":"ref94","first-page":"3793","article-title":"Phishpedia: A hybrid deep learning based approach to visually identify phishing webpages","volume-title":"Proc. 30th USENIX Secur. Symp. (USENIX Security)","author":"Lin"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1145\/3568562.3568629"},{"key":"ref96","first-page":"1633","article-title":"Inferring phishing intention via webpage appearance and dynamics: A deep vision based approach","volume-title":"Proc. 31st USENIX Secur. Symp. (USENIX Security)","author":"Liu"},{"key":"ref97","volume-title":"Certstream\u2014Real-Time Certificate Transparency Log Updates","year":"2024"},{"key":"ref98","first-page":"4139","article-title":"Knowledge expansion and counterfactual interaction for reference-based phishing detection","volume-title":"Proc. 32nd USENIX Secur. Symp. (USENIX Security)","author":"Liu"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1109\/IMCEC59810.2024.10575293"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2024.124120"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102372"},{"key":"ref102","volume-title":"5000 BEST WEBSITES Homepage","year":"2012"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1038\/s41598-022-10841-5"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102964"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1145\/3605098.3636164"},{"key":"ref106","volume-title":"A Phishing Dataset","year":"2019"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2024.06.031"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2018.09.029"},{"key":"ref109","first-page":"265","article-title":"URL2 Vec: URL modeling with character embeddings for fast and accurate phishing website detection","volume-title":"Proc. IEEE Int. Conf Parallel Distrib. Process. Appl., Ubiquitous Comput. Commun., Big Data Cloud Comput., Social Comput. Netw., Sustain. Comput. Commun. (ISPA\/IUCC\/BDCloud\/SocialCom\/SustainCom)","author":"Yuan"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-97-6957-5_15"},{"key":"ref111","volume-title":"MTLP Dataset","author":"\u00c7olhak","year":"2024"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1109\/CompComm.2016.7924867"},{"key":"ref113","volume-title":"Open Repository of Web Crawl Data","year":"2024"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2019.01.064"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom53373.2021.00133"},{"key":"ref116","doi-asserted-by":"crossref","DOI":"10.14722\/ndss.2019.23386","article-title":"Tranco: A research-oriented top sites ranking hardened against manipulation","volume-title":"Proc. Netw. Distrib. Syst. Secur. Symp.","author":"Le Pochat"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1016\/j.jksuci.2021.11.003"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.5220\/0011328600003283"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3196018"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3043188"},{"key":"ref121","first-page":"8291","article-title":"Vision GNN: An image is worth graph of nodes","volume-title":"Proc. Adv. Neural Inf. Process. Syst. (NIPS)","author":"Han"},{"key":"ref122","volume-title":"Malicious URLs Dataset","year":"2024"},{"key":"ref123","volume-title":"ISCX-URL 2016 Dataset","year":"2024"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1109\/eCrime66200.2024.00007"},{"key":"ref125","article-title":"From ML to LLM: Evaluating the robustness of phishing webpage detection models against adversarial attacks","author":"Kulkarni","year":"2024","journal-title":"arXiv:2407.20361"},{"key":"ref126","article-title":"PhishLang: A lightweight, client-side phishing detection framework using MobileBERT for real-time, explainable threat mitigation","author":"Roy","year":"2024","journal-title":"arXiv:2408.05667"},{"key":"ref127","article-title":"Detecting phishing sites using ChatGPT","author":"Koide","year":"2023","journal-title":"arXiv:2306.05816"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1145\/3600160.3600163"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC61105.2024.00205"},{"key":"ref130","first-page":"523","article-title":"Less defined knowledge and more true alarms: Reference-based phishing detection without a pre-defined reference list","volume-title":"Proc. 33rd USENIX Secur. Symp. (USENIX Security)","author":"Liu"},{"key":"ref131","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP39728.2021.9415016"},{"key":"ref132","volume-title":"MultiPhish Phishing Dataset","author":"Zhang","year":"2020"},{"key":"ref133","doi-asserted-by":"publisher","DOI":"10.1109\/ACOMP53746.2021.00012"},{"key":"ref134","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3119323"},{"key":"ref135","volume-title":"Open Directory Project","year":"2024"},{"key":"ref136","doi-asserted-by":"publisher","DOI":"10.1109\/HPCC-DSS-SmartCity-DependSys60770.2023.00071"},{"issue":"7","key":"ref137","doi-asserted-by":"crossref","first-page":"56","DOI":"10.21833\/ijaas.2020.07.007","article-title":"Detecting phishing attacks using a combined model of LSTM and CNN","volume":"7","author":"Ariyadasa","year":"2020","journal-title":"Int. J. Adv. Appl. Sci."},{"key":"ref138","article-title":"URLNet: Learning a URL representation with deep learning for malicious URL detection","author":"Le","year":"2018","journal-title":"arXiv:1802.03162"},{"key":"ref139","volume-title":"Phishing Domain Database","year":"2024"},{"key":"ref140","doi-asserted-by":"publisher","DOI":"10.1145\/3628797.3629003"},{"key":"ref141","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-22479-0_5"},{"key":"ref142","doi-asserted-by":"publisher","DOI":"10.1145\/3375708.3380315"},{"key":"ref143","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3293063"},{"key":"ref144","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00049"},{"key":"ref145","first-page":"379","article-title":"PhishTime: Continuous longitudinal measurement of the effectiveness of anti-phishing blacklists","volume-title":"Proc. 29th USENIX Secur. Symp. (USENIX Security)","author":"Oest"},{"key":"ref146","doi-asserted-by":"publisher","DOI":"10.1109\/ECRIME.2018.8376206"},{"key":"ref147","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00021"},{"key":"ref148","first-page":"361","article-title":"Sunrise to sunset: Analyzing the end-to-end life cycle and effectiveness of phishing attacks at scale","volume-title":"Proc. 29th USENIX Secur. Symp. (USENIX Security)","author":"Oest"},{"key":"ref149","doi-asserted-by":"publisher","DOI":"10.1145\/3419394.3423632"},{"key":"ref150","doi-asserted-by":"publisher","DOI":"10.5220\/0012135600003555"},{"key":"ref151","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2024.104115"},{"key":"ref152","volume-title":"Generative AI Phishing: Why Cybersecurity Training Must Evolve","year":"2024"},{"key":"ref153","doi-asserted-by":"publisher","DOI":"10.3390\/electronics13101839"},{"key":"ref154","article-title":"Generating phishing attacks using ChatGPT","author":"Roy","year":"2023","journal-title":"arXiv:2305.05133"},{"key":"ref155","doi-asserted-by":"publisher","DOI":"10.1109\/TAI.2022.3194503"},{"key":"ref156","volume-title":"From DAN To Universal Prompts: LLM Jailbreaking","year":"2023"},{"key":"ref157","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-54827-7_8"},{"key":"ref158","doi-asserted-by":"publisher","DOI":"10.1613\/jair.301"},{"key":"ref159","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN55064.2022.9892195"},{"key":"ref160","article-title":"Online learning: A comprehensive survey","author":"Hoi","year":"2018","journal-title":"arXiv:1802.02871"},{"key":"ref161","first-page":"22895","article-title":"Contrastive language-image pre-training with knowledge graphs","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"35","author":"Pan"},{"key":"ref162","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2020.10.007"},{"key":"ref163","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2022.3160699"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6287639\/10380310\/10788671.pdf?arnumber=10788671","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,3,14]],"date-time":"2025-03-14T05:51:30Z","timestamp":1741931490000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10788671\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"references-count":163,"URL":"https:\/\/doi.org\/10.1109\/access.2024.3514972","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024]]}}}