Phishing Infrastructure Detection provides independent collection and heuristic analysis of weaponized, not-yet-weaponized, and benign websites. The solution conducts automated analysis of phishing sites using analyst-written signatures to categorize and break apart pages, enabling the tracking of threat actors and tactics, techniques, and procedures (TTPs) over the lifecycle of an attack.