In one general aspect, a system and method are described for generating a classification model to determine predictive user behavior. The method may include obtaining data from a mobile network provider. The data including a plurality of utilization metrics pertaining to a plurality of mobile devices carrying out a plurality of network interactions, the plurality of mobile devices being associated with a plurality of users. The method may also include categorizing the data into a plurality of Internet domains associated with the data and determining a plurality of patterns in the data. The method may further include determining an additional pattern in the data, and generating a plurality of rules based on the plurality of patterns and the additional pattern.