5. A method comprising: receiving at least one URL at a computing device; conducting, by a processor, a first scan of the at least one URL by directly visiting the at least one URL; recording a first scan result based at least on the first scan; conducting, by the processor, a second scan of the at least one URL by clicking-through the at least one URL from a search results page; recording a second scan result based at least on the second scan; comparing, by the processor, the first scan result and the second scan result; and determining, based at least on the comparing, that the at least one URL is a suspect spam URL when the second scan result shows a vector associated with a redirection domain that is different from a vector associated with a redirection domain from the first scan result.
5. A method comprising: receiving at least one URL at a computing device; conducting, by a processor, a first scan of the at least one URL by directly visiting the at least one URL; recording a first scan result based at least on the first scan; conducting, by the processor, a second scan of the at least one URL by clicking-through the at least one URL from a search results page; recording a second scan result based at least on the second scan; comparing, by the processor, the first scan result and the second scan result; and determining, based at least on the comparing, that the at least one URL is a suspect spam URL when the second scan result shows a vector associated with a redirection domain that is different from a vector associated with a redirection domain from the first scan result. 12. The method of claim 5 , wherein directly visiting the at least one URL comprises entering the URL in an input window and not clicking the at least one URL.