11. A computing device configured to associate website browsing behavior with a spam mailing list, comprising: a processor; memory in electronic communication with the processor, the memory storing computer executable instructions that when executed by the processor cause the processor to: collect a history of website browsing behavior for each of a plurality of users; identify at least one spam mailing list that includes an e-mail address for a first user and an email address for a second user of the plurality of users; determine if a level of similarity between a first email message received at the e-mail address for the first user and a second email message received at the e-mail address for the second user exceeds a threshold; upon determining that the level of similarity exceeds the threshold; determine if a common website exists between the history of website browsing behavior for the first user and the history of website browsing behavior for the second user; and upon determining that a common website exists, update reputation information for the common website, wherein the reputation information indicates a likelihood that e-mail messages sent to e-mail addresses on the at least one spam mailing list originate from the common website.
11. A computing device configured to associate website browsing behavior with a spam mailing list, comprising: a processor; memory in electronic communication with the processor, the memory storing computer executable instructions that when executed by the processor cause the processor to: collect a history of website browsing behavior for each of a plurality of users; identify at least one spam mailing list that includes an e-mail address for a first user and an email address for a second user of the plurality of users; determine if a level of similarity between a first email message received at the e-mail address for the first user and a second email message received at the e-mail address for the second user exceeds a threshold; upon determining that the level of similarity exceeds the threshold; determine if a common website exists between the history of website browsing behavior for the first user and the history of website browsing behavior for the second user; and upon determining that a common website exists, update reputation information for the common website, wherein the reputation information indicates a likelihood that e-mail messages sent to e-mail addresses on the at least one spam mailing list originate from the common website. 19. The computing device of claim 11 , wherein the processor is further configured to transmit the history of website browsing behavior to a back end computing device for processing in real time.