1. A computer-implemented method of processing a destination address, the method comprising: receiving, within a computer hardware device, the destination address; determining that the destination address is a domain name; comparing the domain name with a database of legitimate domain names; determining that the domain name does not match an entry in the database of legitimate domain names; analyzing the domain name to determine that the domain name is a dishonest transformation of a legitimate domain name by determining a similarity value between the domain name and the legitimate domain name exceeds a predetermined value, the similarity value being based upon a longest common subsequence between the domain name and the legitimate domain name; classifying the destination address as a fraudulent address; and taking an appropriate action in response to classifying the destination address as a fraudulent address.