14. An apparatus for identifying domain name abuse in web-based content to secure a computer, comprising: a memory comprising a rule information module having at least one rule for replacing characters to modify a first domain name; a replacement module for: converting the first domain name into a second domain name using the at least one rule, wherein the first domain name is an imitation of the second domain name and the second domain name is associated with a brand being imitated by the first domain name; identifying the brand being imitated by the first domain name that is associated with the second domain name; and classifying web-based content as fraud based at least in part on the identified brand.
14. An apparatus for identifying domain name abuse in web-based content to secure a computer, comprising: a memory comprising a rule information module having at least one rule for replacing characters to modify a first domain name; a replacement module for: converting the first domain name into a second domain name using the at least one rule, wherein the first domain name is an imitation of the second domain name and the second domain name is associated with a brand being imitated by the first domain name; identifying the brand being imitated by the first domain name that is associated with the second domain name; and classifying web-based content as fraud based at least in part on the identified brand. 15. The apparatus of claim 14 , wherein the rule information comprises a rule for replacing a first punctuation mark in the first domain name, wherein the first punctuation mark is used to imitate the second domain name.