Copyright © 2026 Authors retain the copyright of this article. This article is an open access article distributed under the Creative Commons Attribution License which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.

@article{208519,
        author = {Sonal Kotkar and Siddhi Pawar and Tanvi Khadse and Dhanshri Pansare and Prof. Jyoti Sarwade},
        title = {Privacy-Preserving and Explainable Phishing Website Detection Using Federated Continual Learning},
        journal = {International Journal of Innovative Research in Technology},
        year = {2026},
        volume = {13},
        number = {no},
        pages = {339-344},
        issn = {2349-6002},
        url = {https://ijirt.org/article?manuscript=208519},
        abstract = {Phishing websites are continuously modified to imitate legitimate services, evade static blacklists, and exploit user trust. Machine-learning-based detection can identify previously unseen patterns, but conventional centralized training requires sensitive URL, browsing, webpage, and behavioral information to be collected at a central location. This paper proposes FedXPhish, a privacy-preserving and explainable phishing website detection framework that unifies multimodal feature analysis, federated learning, continual learning, differential privacy, secure aggregation, robust aggregation, and explainable artificial intelligence (XAI). Each participating client extracts URL lexical, domain/TLS, HTML/text, visual, and behavioral features locally. A local multimodal classifier is trained without transferring raw data. Protected updates are securely aggregated to obtain a global model. Continual learning enables adaptation to emerging phishing campaigns while replay and proximal regularization reduce catastrophic forgetting. SHAP and LIME are used to provide global and instance-level explanations. The paper defines a time-aware, non-IID evaluation protocol covering detection performance, privacy, continual adaptation, communication efficiency, explanation quality, and robustness to malicious clients. The work is positioned as a conference-ready research framework; numerical results are deliberately not fabricated and should be inserted after implementation and experimentation.},
        keywords = {phishing website detection, federated learning, continual learning, explainable AI, differential privacy, SHAP, LIME, secure aggregation, multimodal learning.},
        month = {September},
        }