Web content today is always changing, and cyber crime has turned the web into a computing grid to expand and collect information for profit. Trusted web sites and software updates, plus scareware and social networking are often laced with hidden malware downloads. The next evolution in defenses is a community watch that unites tens of millions of users together to detect newly published web content, domains and hosts for immediate analysis. The community watch also uses more defenses and analysis than practical for one organization to detect malware, phishing, reputations, and content ratings. As a defense layer it stops web-borne malware more effectively by uniting URL and anti-malware technologies together into a real-time ecosystem always aware of new web content.