A method comprising: determining, by an analysis computer, a rolling window associated with interaction data for interactions that occur over time; retrieving, by the analysis computer, interaction data for interactions occurring in the rolling window, wherein the interactions are login attempts and comprise timestamps, IP addresses, and browser types, wherein a login attempt occurs when an entity attempts to login to a secure webpage; generating, by the analysis computer, pseudo interaction data based upon historical interaction data, wherein generating the pseudo interaction data further comprises: determining, by the analysis computer, one or more data trends in the historical interaction data comprising interactions that occur within and outside of the rolling window; and generating, by the analysis computer, a plurality of pseudo interactions, which are historical interactions determined to be similar to interactions occurring within the rolling window, based on the one or more data trends, to form the pseudo interaction data; forming, by the analysis computer, a neural network model for predicting whether input login attempt data is fraudulent or not, by using the interaction data for interactions occurring within the rolling window and the pseudo interaction data; receiving, by the analysis computer, a request message comprising request data from an external computer, wherein the request data includes new interaction data that is a log-in attempt; determining, by the analysis computer, a response message to the request message, wherein the response message comprises response data output by the neural network model based on the request data, the response data at least indicating whether the input login attempt data, included in the new interaction data, is fraudulent or not; transmitting, by the analysis computer, the response message to the external computer to allow the external computer to react to the login attempt. determining, by an analysis computer, a rolling window associated with interaction data for interactions that occur over time; retrieving, by the analysis computer, interaction data for interactions occurring in the rolling window, wherein the interactions are login attempts and comprise timestamps, IP addresses, and browser types, wherein a login attempt occurs when an entity attempts to login to a secure webpage; generating, by the analysis computer, pseudo interaction data based upon historical interaction data, wherein generating the pseudo interaction data further comprises: determining, by the analysis computer, one or more data trends in the historical interaction data comprising interactions that occur within and outside of the rolling window; and generating, by the analysis computer, a plurality of pseudo interactions, which are historical interactions determined to be similar to interactions occurring within the rolling window, based on the one or more data trends, to form the pseudo interaction data; determining, by the analysis computer, one or more data trends in the historical interaction data comprising interactions that occur within and outside of the rolling window; and generating, by the analysis computer, a plurality of pseudo interactions, which are historical interactions determined to be similar to interactions occurring within the rolling window, based on the one or more data trends, to form the pseudo interaction data; forming, by the analysis computer, a neural network model for predicting whether input login attempt data is fraudulent or not, by using the interaction data for interactions occurring within the rolling window and the pseudo interaction data; receiving, by the analysis computer, a request message comprising request data from an external computer, wherein the request data includes new interaction data that is a log-in attempt; determining, by the analysis computer, a response message to the request message, wherein the response message comprises response data output by the neural network model based on the request data, the response data at least indicating whether the input login attempt data, included in the new interaction data, is fraudulent or not; transmitting, by the analysis computer, the response message to the external computer to allow the external computer to react to the login attempt.