A lightweight Python-based phishing domain detection tool that analyzes URLs and detects suspicious or malicious domains using multiple detection techniques such as typo detection, suspicious TLD analysis, and phishing keyword detection.
The tool is designed for educational purposes and cybersecurity learning, helping users understand how phishing domains are identified.
- Detects typo-squatting phishing domains
- Detects suspicious Top Level Domains (TLDs)
- Detects phishing keywords in URLs
- Detects IDN homograph attacks
- Extracts root domain automatically
- Uses a custom legitimate domain database
- Clean command-line interface
- Linux-style terminal banner
- Python
- tldextract
- python-Levenshtein
- colorama
Phishing-detector/
│
├── phishscan.py
├── domains.txt
├── requirements.txt
├── README.md
├── .gitignore
└── LICENSE
Follow these steps to install and run the tool on Kali Linux, Ubuntu, Debian, or other Linux distributions.
git clone https://github.com/RishuRana2867/Phishing-detector.git
cd Phishing-detector
pip3 install -r requirements.txt --break-system-packages
Run the script with a domain or URL:
python3 phishscan.py <url>
Example:
python3 phishscan.py google.com
$ python3 phishscan.py google.com
SAFE ✅ Legitimate Website
$ python3 phishscan.py goggle.com
PHISHING 🚨 Looks like google.com
$ python3 phishscan.py paypal-login.xyz
SUSPICIOUS ⚠ Suspicious TLD detected
The tool uses a domain database (domains.txt) containing legitimate domains used for comparison.
Example:
google.com
facebook.com
amazon.com
github.com
wikipedia.org
Users can add more trusted domains to improve phishing detection accuracy.
The following Python libraries are required:
tldextract
python-Levenshtein
colorama
Install them using:
pip3 install -r requirements.txt
Planned improvements for the project include:
- Domain age detection using WHOIS
- DNS reputation checks
- Threat intelligence integration
- Machine learning phishing detection
This tool is intended for educational and cybersecurity research purposes only.
Do not use this tool for illegal activities. The author is not responsible for misuse of this software.
⚡ Learning cybersecurity by building practical tools.