Patent ID: 8719934

Claim:
A non-transitory processor-readable medium storing code representing instructions to be executed by a processor, the code comprising code to cause the processor to: receive a first data associated with access by a first plurality of entities to a first website location; receive a second data associated with access by a second plurality of entities to a second website location; define a percentage of total entities in the first plurality of entities and the second plurality of entities that accessed both of the first website location and the second website location based, at least in part on the first data and the second data; define a normalization of the percentage of total entities for each of the first website location and the second website location based, at least in part, on a number of entities in the first plurality of entities and a number of entities in the second plurality of entities; define a co-visitation factor for each of the first website location and the second website location based, at least in part, on the normalization of the percentage of total entities; select at least one of the first website location or the second website location as target website locations, if the at least one of the co-visitation factor of the first website location or the co-visitation factor of the second website location is over a predefined threshold; and send a signal to set a flag associated with each target website location indicating the target website location as a suspicious website location.