16. The apparatus of claim 14 , wherein the rule information comprises a rule for replacing at least one first homographic character with at least one second homographic character, wherein the at least one first homographic character is used to imitate the at least one homographic character.
14. An apparatus for identifying domain name abuse in web-based content to secure a computer, comprising: a memory comprising a rule information module having at least one rule for replacing characters to modify a first domain name; a replacement module for: converting the first domain name into a second domain name using the at least one rule, wherein the first domain name is an imitation of the second domain name and the second domain name is associated with a brand being imitated by the first domain name; identifying the brand being imitated by the first domain name that is associated with the second domain name; and classifying web-based content as fraud based at least in part on the identified brand.