# Effective Detection of Malicious Uniform Resource Locator (URLs) Using Deep-Learning Techniques
## 3 Research Methodology
### Dataset Selection
#### 3.1.2 Malicious Dataset  
* _PhishTank dataset_  
PhishTank is a free, community-driven service that maintains a dataset of verified spoof websites. An experienced team verifies the dataset, which is assembled from user reports of dubious websites. Information found in the PhishTank dataset includes the URL of the phishing website when it was initially reported, and if it is still operational. You can download the dataset as a CSV file or access it via an API. Its planned applications include DL model training and testing, as well as research and development related to anti-phishing. Utilizing the most recent dataset is essential because it is updated every hour. These datasets have eight attributes and we only selected URL attributes [18]. Moreover, the following attributes were considered:  
* _PhishID:_ This is the special code that PhishTank uses to recognize phishing submissions. This ID functions as a link to all PhishTank data.
* _URL phishing specifics:_ By going to the PhishTank descriptive URL for the website, you may read information about a phish, including screenshots and user comments.
* _URL:_ This is always a string, even if the XDL feeds may have a CDATA part.
* _Submission time:_ PhishTank is informed of this phish at this date and time. The date is formatted using ISO8601.
* _Verified:_ This shows whether our community has validated this fraud. These datasets contain a yes string because they contain validated phishes.
* _Verification time:_ This is the day and time that our community decided the fraud was genuine. The date is formatted using ISO8601.
* _Online:_ This shows if the phish is operational and reachable online. This string is always \"yes\" since we only provide web-based PHPs in this metadata.
* _Target:_ If the firm or brand that the phish is impersonating identified, this is its name.
* Any.Run dataset.  
Any.Run is an interactive online malware analysis platform designed to help users analyze and investigate malicious intents and gather information via an automated examination of dubious files and URLs as well as user contributions. The technology runs in a protected sandbox environment after users report URLs they believe might be phishing attempts. This environment keeps an eye on how the given content behaves, recording network requests, redirection, and script executions to produce comprehensive results. Any.Run uses many verification techniques, such as tracking malicious activity like credential harvesting and mimicking real-world settings during analysis, to guarantee data accuracy and dependability. Community contributions also enable users to comment on the results, which helps with cross-verification and improves the intelligence of the platform. Any.Run efficiently validates and enhances its dataset on phishing risks by fusing user insights, automated behavioral analysis, and community comments, offering cybersecurity experts useful insights [19]. We gathered malicious datasets from the PhishTank and Any.Run websites and all pertinent facts described in the above details. It is crucial to remember that these data are updated frequently, and we chose this dataset for detecting URL links.