Patent ID: 8898292

Claim:
A system comprising: an unauthorized content source determination system embodied via executable instructions stored on at least one machine readable storage device; at least one device processor configured to execute at least a portion of the executable instructions stored on the machine readable storage device, the unauthorized content source determination system including: an address collection component that obtains a plurality of network addresses from a distributed client, at least a first portion of the obtained network addresses including resolved network address responses to distributed client requests for resolved network addresses corresponding to one or more network location indicators associated with a first web service, a second portion of the obtained network addresses including network addresses associated with a plurality of devices hosting the distributed client; a test content collection component that obtains test content based on one or more of the network addresses included in the first portion; an unauthorized content determination component that determines, via one or more of the at least one device processor, whether the obtained test content includes unauthorized content; and a source determination component that determines a source of the unauthorized content, based on a result of the determining whether the obtained test content includes unauthorized content, the determining the source of the unauthorized content including aggregating indicators associated with the devices hosting the distributed client that are associated with receipt of the unauthorized content.