Patent ID: 8646038

Claim:
A computer-readable storage device comprising a program of instructions stored on the computer-readable storage device that, when executed by a computer, cause the computer to perform operations comprising: transmitting a download request by the computer via a network to a network host for content that contains malware; receiving, by the computer via the network in response to the transmitting, the content that contains malware from the network host or one or more other hosts; detecting, by the computer, the malware in the content; associating, by the computer, at least one indication of at least one network address from which the malware was downloaded to include a network address of the network host, and when the network host redirects the download request to the one or more other hosts, the computer receives the content that contains the malware from the one or more other hosts and the at least one network address includes a network address of each of the one or more other hosts; and providing the at least one indication of the at least one network address to a collection and storage service.