1. In a computing environment, a method comprising: processing data from at least one data source related to phishing sites; and using a predictive model to determine whether a site is likely to be a phishing site.